Edit tour

Windows Analysis Report
phish_alert_iocp_v1.10.16(15).eml

Overview

General Information

Sample name:	phish_alert_iocp_v1.10.16(15).eml
Analysis ID:	1579070
MD5:	7fe29b96b1c269607270438c42e9ea71
SHA1:	679cff68089ee14541efcdb658ecacb185705940
SHA256:	3c5b3c7a79a23f9476180c097b8e9f8543eacb120ca964dfbb4fa159fba56739
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

AI detected potential phishing Email

Detected use of open redirect vulnerability

Connects to many different domains

Creates a window with clipboard capturing capabilities

Detected suspicious crossdomain redirect

HTML body contains low number of good links

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Sigma detected: Outlook Security Settings Updated - Registry

Stores files to the Windows start menu directory

Stores large binary data to the registry

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 7112 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\phish_alert_iocp_v1.10.16(15).eml" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 6392 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "1B07E646-70E7-4C5C-AE00-0E35716E40B6" "ED956F3E-79B7-4C34-B44E-FA16FFFE8145" "7112" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 3896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=2036,i,14044213915127150472,12868546578057075525,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5220 --field-trial-handle=2036,i,14044213915127150472,12868546578057075525,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

HxOutlook.exe (PID: 4324 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca MD5: 6F8EAC2C377C8F16D91CB5AC8B8DBF5F)

HxAccounts.exe (PID: 4112 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca MD5: 6FEB00C9A2C3FF66230658B3012BAB6A)

chrome.exe (PID: 6540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=1872,i,1434172226620214781,4211589301215833021,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 7112, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Sigma detected: Outlook Security Settings Updated - Registry

Source: Registry Key set

Author: frack113: Data: Details: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\3DXBZZEJ\, EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 7112, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Security\OutlookSecureTempFolder

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T19:03:22.168090+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49727	18.161.111.54	443	TCP
2024-12-20T19:03:25.061155+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49728	52.222.144.12	443	TCP
2024-12-20T19:03:40.285243+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49788	172.217.19.238	443	TCP
2024-12-20T19:03:44.360184+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49807	172.217.19.238	443	TCP
2024-12-20T19:03:53.474963+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49842	172.217.19.238	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: Email

Joe Sandbox AI: Email contains prominent button: 'click here to pay'

AI detected potential phishing Email

Source: Email

Joe Sandbox AI: Detected potential phishing email: The email contains multiple tracking/redirect URLs through protect2.fireeye.com which is suspicious for a medical bill. The email asks for sensitive information (date of birth) to access a statement, which is unusual. The sender domain 'chat.inboxhealth.com' doesn't match the claimed medical facility name

Detected use of open redirect vulnerability

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Proxy from: protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https://email.chat.inboxhealth.com/c/ejxcjsfu3cayhj8gbrscfhvsa4dgkyuqvmlv0ibpxclwe03xbgdd0s3tv2paqcp1zvtn5_q4nvxq1fxbpthnstfzm4mcgk8vtgp0rvs8lccgrztwcqwa6vxx_unmyyt7_hf663th5ydxp9zcp73_fl3b1vgmdwzfbx_u3jslffnhjl9mneuejzaudnfzztto4bmrhrhdh56ibjpzy8hedm_f20tvrgq6g8pk02qyj2hi8ykbwonx1n7lzyikhoxps37hwtscjywuieiujjgfzsnmzkjglfnbiurf_vssjlcqajkrspq_ctijyqi8wcfhq2wloywk1kgt1wigevm9ghpi9po37zreavwbua2xnomfcq7hvzqvmejfdrccy16o6arn-t_1xtbvpovwp4bmzozfjavq-1sqvmjxowaa__-ip4kt to https://email.chat.inboxhealth.com/c/ejxcjsfu3cayhj8gbrscfhvsa4dgkyuqvmlv0ibpxclwe03xbgdd0s3tv2paqcp1zvtn5_q4nvxq1fxbpthnstfzm4mcgk8vtgp0rvs8lccgrztwcqwa6vxx_unmyyt7_hf663th5ydxp9zcp73_fl3b1vgmdwzfbx_u3jslffnhjl9mneuejzaudnfzztto4bmrhrhdh56ibjpzy8hedm_f20tvrgq6g8pk02qyj2hi8ykbwonx1n7lzyikhoxps37hwtscjywuieiujjgfzsnmzkjglfnbiurf_vssjlcqajkrspq_ctijyqi8wcfhq2wloywk1kgt1wigevm9ghpi9po37zreavwbua2xnomfcq7hvzqvmejfdrccy16o6arn-t_1xtbvpovwp4bmzozfjavq-1sqvmjxowaa__-ip4kt

Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba

HTTP Parser: Number of links: 1

Source: Email

Classification: Credential Stealer

Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html#wait=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&rtl=false&componentName=cardNumber&keyMode=live&apiKey=pk_live_GMcGM4rykNbYD95nsHlwoAew&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html#wait=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&rtl=false&componentName=cardCvc&keyMode=live&apiKey=pk_live_GMcGM4rykNbYD95nsHlwoAew&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html#wait=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&rtl=false&componentName=cardExpiry&keyMode=live&apiKey=pk_live_GMcGM4rykNbYD95nsHlwoAew&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-H07SGNNMD6&gacid=697303844.1734717810&gtm=45je4cc1v9126439587za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2138611330
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&title=Inbox%20Health&referrer=&muid=NA&sid=NA&version=6&preview=false
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.html#apiKey=pk_live_GMcGM4rykNbYD95nsHlwoAew&stripeJsId=06a4d9c7-c849-409b-8db0-417a53aacb1c&controllerCount=1&isCheckout=false&stripeJsLoadTime=1734717807546&manualBrowserDeprecationRollout=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/payment-request-inner-google-pay-3e5f7756d6176660c979cc629f258eab.html#authentication[apiKey]=pk_live_GMcGM4rykNbYD95nsHlwoAew&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&origin=https%3A%2F%2Fpatient.inboxhealth.com&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/payment-request-inner-browser-57a5abf2116f0f98c3257286b4b1c74d.html#authentication[apiKey]=pk_live_GMcGM4rykNbYD95nsHlwoAew&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&origin=https%3A%2F%2Fpatient.inboxhealth.com&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html#wait=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&rtl=false&componentName=cardNumber&keyMode=live&apiKey=pk_live_GMcGM4rykNbYD95nsHlwoAew&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html#wait=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&rtl=false&componentName=cardCvc&keyMode=live&apiKey=pk_live_GMcGM4rykNbYD95nsHlwoAew&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html#wait=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&rtl=false&componentName=cardExpiry&keyMode=live&apiKey=pk_live_GMcGM4rykNbYD95nsHlwoAew&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-H07SGNNMD6&gacid=697303844.1734717810&gtm=45je4cc1v9126439587za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2138611330
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&title=Inbox%20Health&referrer=&muid=NA&sid=NA&version=6&preview=false
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.html#apiKey=pk_live_GMcGM4rykNbYD95nsHlwoAew&stripeJsId=06a4d9c7-c849-409b-8db0-417a53aacb1c&controllerCount=1&isCheckout=false&stripeJsLoadTime=1734717807546&manualBrowserDeprecationRollout=false&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/payment-request-inner-google-pay-3e5f7756d6176660c979cc629f258eab.html#authentication[apiKey]=pk_live_GMcGM4rykNbYD95nsHlwoAew&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&origin=https%3A%2F%2Fpatient.inboxhealth.com&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: Iframe src: https://js.stripe.com/v3/payment-request-inner-browser-57a5abf2116f0f98c3257286b4b1c74d.html#authentication[apiKey]=pk_live_GMcGM4rykNbYD95nsHlwoAew&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&origin=https%3A%2F%2Fpatient.inboxhealth.com&referrer=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&controllerId=__privateStripeController5591

Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No favicon

Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No <meta name="author".. found
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No <meta name="author".. found

Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No <meta name="copyright".. found
Source: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba	HTTP Parser: No <meta name="copyright".. found

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 55MB

Source: unknown

Network traffic detected: DNS query count 42

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: protect2.fireeye.com to https://email.chat.inboxhealth.com/c/ejxcjsfu3cayhj8gbrscfhvsa4dgkyuqvmlv0ibpxclwe03xbgdd0s3tv2paqcp1zvtn5_q4nvxq1fxbpthnstfzm4mcgk8vtgp0rvs8lccgrztwcqwa6vxx_unmyyt7_hf663th5ydxp9zcp73_fl3b1vgmdwzfbx_u3jslffnhjl9mneuejzaudnfzztto4bmrhrhdh56ibjpzy8hedm_f20tvrgq6g8pk02qyj2hi8ykbwonx1n7lzyikhoxps37hwtscjywuieiujjgfzsnmzkjglfnbiurf_vssjlcqajkrspq_ctijyqi8wcfhq2wloywk1kgt1wigevm9ghpi9po37zreavwbua2xnomfcq7hvzqvmejfdrccy16o6arn-t_1xtbvpovwp4bmzozfjavq-1sqvmjxowaa__-ip4kt

Source: Joe Sandbox View	IP Address: 151.101.0.176 151.101.0.176
Source: Joe Sandbox View	IP Address: 104.19.230.21 104.19.230.21
Source: Joe Sandbox View	IP Address: 108.158.75.113 108.158.75.113

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:49727 -> 18.161.111.54:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:49728 -> 52.222.144.12:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:49807 -> 172.217.19.238:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:49788 -> 172.217.19.238:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:49842 -> 172.217.19.238:443

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt HTTP/1.1Host: protect2.fireeye.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/eJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt HTTP/1.1Host: email.chat.inboxhealth.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /patient/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba HTTP/1.1Host: inboxhealth.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba HTTP/1.1Host: patient.inboxhealth.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfill/v2/polyfill.min.js?features=Intl.~locale.en-US HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ekr/snippet.js?key=a38e4305-dfd3-44f3-b64c-d15d8b98fd79 HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/vendor-7e37a236efac18346865853f791205ed.css HTTP/1.1Host: patient.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/inbox-patient-7a28dffeaad312cf15cd8597f88d1af5.css HTTP/1.1Host: patient.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/vendor-6c9826c2fc718fe6ddcdd435bffce760.js HTTP/1.1Host: patient.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/inbox-patient-716e5cc784b622116d4a9b0f962397c1.js HTTP/1.1Host: patient.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/ HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optimize.js?id=OPT-MWT7J5H HTTP/1.1Host: www.googleoptimize.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /link/v2/stable/link-initialize.js HTTP/1.1Host: cdn.plaid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ekr/snippet.js?key=a38e4305-dfd3-44f3-b64c-d15d8b98fd79 HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfill/v2/polyfill.min.js?features=Intl.~locale.en-US HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/ HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /link/v2/stable/link-initialize.js HTTP/1.1Host: cdn.plaid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/a38e4305-dfd3-44f3-b64c-d15d8b98fd79 HTTP/1.1Host: ekr.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://patient.inboxhealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optimize.js?id=OPT-MWT7J5H HTTP/1.1Host: www.googleoptimize.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/vendor-6c9826c2fc718fe6ddcdd435bffce760.js HTTP/1.1Host: patient.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/inbox-patient-716e5cc784b622116d4a9b0f962397c1.js HTTP/1.1Host: patient.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1820622.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/a38e4305-dfd3-44f3-b64c-d15d8b98fd79 HTTP/1.1Host: ekr.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-main-bcac9f6.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/1811ca2096d3867b6a5f?protocol=7&client=js&version=3.0.0&flash=false HTTP/1.1Host: ws.pusherapp.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://patient.inboxhealth.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: gttAeMEheJTqpIGYL+iYUg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1Host: patient.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://patient.inboxhealth.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://patient.inboxhealth.com/assets/inbox-patient-7a28dffeaad312cf15cd8597f88d1af5.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/patient/v1/unauthenticated_patients?confirmation_token=XHcUtg HTTP/1.1Host: rest.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/json; charset=utf-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://patient.inboxhealth.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.0.0/xhr.min.js HTTP/1.1Host: js.pusher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1820622.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-bcac9f6.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: inboxhealth.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://patient.inboxhealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.60031afbf51fb3e88a5b.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/patient/v1/enterprises/unauthenticated/info?id=7272 HTTP/1.1Host: rest.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://patient.inboxhealth.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-main-bcac9f6.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/patient/v1/unauthenticated_patients?confirmation_token=XHcUtg HTTP/1.1Host: rest.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-bcac9f6.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.0.0/xhr.min.js HTTP/1.1Host: js.pusher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: inboxhealth.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/ih-logo-white4-58cda4a1a0dab88ce4a456751874e449.png HTTP/1.1Host: patient.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/patient/v1/enterprises/unauthenticated/info?id=7272 HTTP/1.1Host: rest.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/patient/v1/enterprises/unauthenticated/logo?id=7272 HTTP/1.1Host: rest.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1
Source: global traffic	HTTP traffic detected: GET /pusher/app/1811ca2096d3867b6a5f/962/4jprl9gh/xhr?protocol=7&client=js&version=3.0.0&t=1734717814811&n=2 HTTP/1.1Host: sockjs.pusher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/1820622?s=0.25&r=0.19162409593672747 HTTP/1.1Host: vc.hotjar.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://patient.inboxhealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.60031afbf51fb3e88a5b.js HTTP/1.1Host: script.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-H07SGNNMD6&gacid=697303844.1734717810&gtm=45je4cc1v9126439587za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2138611330 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/ih-logo-white4-58cda4a1a0dab88ce4a456751874e449.png HTTP/1.1Host: patient.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717816.60.0.0
Source: global traffic	HTTP traffic detected: GET /api/patient/v1/enterprises/unauthenticated/logo?id=7272 HTTP/1.1Host: rest.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717816.60.0.0
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-chat-sdk-bcac9f6.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usage.gif?token=f102e8a423c740618a77314a75eb71a6&correlationId=894e3009-6fff-4f1a-800c-409ff42aece2&application=inbox-patient-prod&x=a8625ea0-095d-4610-bd55-752f5d684afb& HTTP/1.1Host: usage.trackjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /timeline/v2/jsonp/1?session=NDEwMTU4MjMy&bundle=MQ%3D%3D&key=MTgxMWNhMjA5NmQzODY3YjZhNWY%3D&lib=anM%3D&version=My4wLjA%3D&features=WyJ3cyJd&timeline=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 HTTP/1.1Host: stats.pusher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-chat-sdk-bcac9f6.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inner.html HTTP/1.1Host: m.stripe.networkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://js.stripe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usage.gif?token=f102e8a423c740618a77314a75eb71a6&correlationId=894e3009-6fff-4f1a-800c-409ff42aece2&application=inbox-patient-prod&x=a8625ea0-095d-4610-bd55-752f5d684afb& HTTP/1.1Host: usage.trackjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/Ov5-54Tk4fWLXRV2/c/1734717821195 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://patient.inboxhealth.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: w9NgD4kDNMpVsmRntHFU/Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /timeline/v2/jsonp/1?session=NDEwMTU4MjMy&bundle=MQ%3D%3D&key=MTgxMWNhMjA5NmQzODY3YjZhNWY%3D&lib=anM%3D&version=My4wLjA%3D&features=WyJ3cyJd&timeline=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 HTTP/1.1Host: stats.pusher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /out-4.5.44.js HTTP/1.1Host: m.stripe.networkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.stripe.network/inner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/c/1734717823807 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /out-4.5.44.js HTTP/1.1Host: m.stripe.networkConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717825724/1734717825724%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%226FQXnIYg7b7AgsCqLoSQ70bWODubjdzL%22%2C%22mID%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22fe3feadc90d3b32f24ac083c22901e0970b582ac%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Quick%20Pay%20-%20Inbox%20Health%22%2C%22url%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=pQwCjOlsMP9Y3Zr/0FQ59tQObiAevQMdCD1HRcZxFGVWRa9SyM/SrJrNx0hRjX8jbMqOjyEt+1VNBHT6uVmeeFIaqrPKE966DZ2MiCXtVVDgGYP5Mfo+XaUOM2OO
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717825725 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=pQwCjOlsMP9Y3Zr/0FQ59tQObiAevQMdCD1HRcZxFGVWRa9SyM/SrJrNx0hRjX8jbMqOjyEt+1VNBHT6uVmeeFIaqrPKE966DZ2MiCXtVVDgGYP5Mfo+XaUOM2OO
Source: global traffic	HTTP traffic detected: GET /assets/favicon.ico HTTP/1.1Host: patient.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717816.60.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/c/1734717823807 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=pQwCjOlsMP9Y3Zr/0FQ59tQObiAevQMdCD1HRcZxFGVWRa9SyM/SrJrNx0hRjX8jbMqOjyEt+1VNBHT6uVmeeFIaqrPKE966DZ2MiCXtVVDgGYP5Mfo+XaUOM2OO
Source: global traffic	HTTP traffic detected: GET /widget/xx016tyt HTTP/1.1Host: widget.intercom.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717827644 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=/80bcRDttQJQAOdNcVmv7A+of99VTAwYl1bOkv8JWxWRQDun4kXBeNXSNr+NY9lA/7gh+kd+S218XXFE6M0OeKbWgTEF3JJs+Gp5i9nnDEOIbJHT/D8DAi7Rx9Zh
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717825725 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=/80bcRDttQJQAOdNcVmv7A+of99VTAwYl1bOkv8JWxWRQDun4kXBeNXSNr+NY9lA/7gh+kd+S218XXFE6M0OeKbWgTEF3JJs+Gp5i9nnDEOIbJHT/D8DAi7Rx9Zh
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717825724/1734717825724%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%226FQXnIYg7b7AgsCqLoSQ70bWODubjdzL%22%2C%22mID%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22fe3feadc90d3b32f24ac083c22901e0970b582ac%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Quick%20Pay%20-%20Inbox%20Health%22%2C%22url%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=JVDaLfMZeCf/JhUk8EDNtatSrPqQPvPqw014huIKeBIvoxezY3LlMOuuOzTpjCvlZ2ZshtAT1EwKcVzNt7hLGWZjLv8uQXwsqllW65EAcUBlcPG8iKh16QEPWK/z
Source: global traffic	HTTP traffic detected: GET /assets/favicon.ico HTTP/1.1Host: patient.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717825.51.0.0
Source: global traffic	HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=62896bb2-7db4-4293-a3fc-9b10e71478eb8d08dc
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-bcac9f6.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/xx016tyt HTTP/1.1Host: widget.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717827644 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=9eVnyULoolePfPzEV4ReUv3CapCNRTelfMwNCvR5BZ3HAfc4t9gSsjQ+a+biIQ8vLZ6ELT2PN5kMEB3QYefhVwO6VM1WjbbfEVOmPmQz4tVtd60CVS3pGSTtsR1o; AWSALBCORS=l6nfHVrEMYVlKVgnogfQxTuo9jattv7OAVR7GyY8aI9i5ENmKWqdAj+F0EPN0H8Tnj76U2Ri3TUjWApSLrjfVstwMseDwSPSgcfITUpIYUn390QqcNkhZ6xMNOJZ
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717829613 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=l6nfHVrEMYVlKVgnogfQxTuo9jattv7OAVR7GyY8aI9i5ENmKWqdAj+F0EPN0H8Tnj76U2Ri3TUjWApSLrjfVstwMseDwSPSgcfITUpIYUn390QqcNkhZ6xMNOJZ
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717829616/1734717829616%0A-779.3196208628339%0A2%0A4%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1734717821198%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22title%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%7D%2C%22__messageID%22%3A1%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A30%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=l6nfHVrEMYVlKVgnogfQxTuo9jattv7OAVR7GyY8aI9i5ENmKWqdAj+F0EPN0H8Tnj76U2Ri3TUjWApSLrjfVstwMseDwSPSgcfITUpIYUn390QqcNkhZ6xMNOJZ
Source: global traffic	HTTP traffic detected: GET /v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frame.ac03c723.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/payment-request-inner-google-pay-3e5f7756d6176660c979cc629f258eab.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/payment-request-inner-browser-57a5abf2116f0f98c3257286b4b1c74d.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor.6349e54f.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-bcac9f6.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/css/ui-shared-57e28d4968898653fd9bd0ad9d7f138b.css HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/css/elements-inner-card-53aa57bec7f6d40d72327654fd43a92e.css HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/c/1734717831665 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=I7m5ObHT6s8C4d99ZpeSZrL5UkiV+ZJ1adS8xPBiR9bbqPwL1ZRVpVJUwKXUWttv04cPt4Ysy6sdutZ8HF6yNq1xqDkdx6lB7QdI0pkJ7TH+9o4NILXzgCsMVb95
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/controller-e1865ca26c58947a4c41ae602ceeabce.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/payment-request-inner-browser-3e2bf1135aeec036ab34eb24b61d077f.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/payment-request-inner-browser-57a5abf2116f0f98c3257286b4b1c74d.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/ui-shared-4af9c6190c1d792bdbbe4e49904ee0f6.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gp/p/js/pay.js HTTP/1.1Host: pay.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/elements-inner-card-244854405722882f318e50d94037ffbf.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/payment-request-inner-browser-3e2bf1135aeec036ab34eb24b61d077f.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717833762/1734717833762%0A-779.3196208628339%0A3%0A4%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22title%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%7D%2C%22__messageID%22%3A2%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22title%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%7D%2C%22__messageID%22%3A3%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=dxvpdg0KqIsJNk9hU37Kcs6rSpmYxT5HzjRlZpZvzN+py3gBh3OK2phoTVOE1vjNqu1ZVmYvYd14qLGnEwikxErNnGI7ZvOnJ0dcE5jE7de/vMaV4EHA9+mJ69Le
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/c/1734717831665 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=OGKf2oOD56IrKQc/BCfInG5f3fv51e2wYbY2vBaJG3gbh+JppzYHjVfjqMBJkjWZbZzzx2+r++Kn2eQJVQ5y+y+5IVw+kSTjC2RQsOsPPRSiJOEVnhOQkuf58bFZ; AWSALBCORS=dxvpdg0KqIsJNk9hU37Kcs6rSpmYxT5HzjRlZpZvzN+py3gBh3OK2phoTVOE1vjNqu1ZVmYvYd14qLGnEwikxErNnGI7ZvOnJ0dcE5jE7de/vMaV4EHA9+mJ69Le
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717833768 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=dxvpdg0KqIsJNk9hU37Kcs6rSpmYxT5HzjRlZpZvzN+py3gBh3OK2phoTVOE1vjNqu1ZVmYvYd14qLGnEwikxErNnGI7ZvOnJ0dcE5jE7de/vMaV4EHA9+mJ69Le
Source: global traffic	HTTP traffic detected: GET /assets/icons/quickpay/hipaa_compliance-e7c73a7f11cecccd5088195f38aa751e.png HTTP/1.1Host: patient.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __zlcmid=1PJnG4DSWUQIpQ8; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717830.46.0.0
Source: global traffic	HTTP traffic detected: GET /frame.ac03c723.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/link-modal-inner-3856548e7a416d6bdacb10b20db090c3.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/ui-shared-4af9c6190c1d792bdbbe4e49904ee0f6.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /api/patient/v1/unauthenticated_patients/attempted_checkout_at HTTP/1.1Host: rest.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __zlcmid=1PJnG4DSWUQIpQ8; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717830.46.0.0
Source: global traffic	HTTP traffic detected: GET /gp/p/js/pay.js HTTP/1.1Host: pay.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/controller-e1865ca26c58947a4c41ae602ceeabce.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /v3/.deploy_status_henson.json HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/elements-inner-card-244854405722882f318e50d94037ffbf.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717833768 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=NFi9H2AerJmk9MMmqOENTTutpf5e7lIjR1prDRiKDGnyK1q65SY7MUDpK8Yh2STNWgiDSmmZxHZwbolu/gx2ANi6BJKLCiVW2QAm0/gbwGTHeOZ3CGN62P5fawR9; AWSALBCORS=gC5JpJfCPqDL+7PTWjIMd6Gn5SM0gl7tPypin/nHDX6/Wxyq01Y+5EuvRFpg5/pPWFRHbRYijzcj5fb9WKKmI8naXLKvka6s+gFwBnrzH3T/h/vlxcEwF7bOi5XJ
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717835694 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=gC5JpJfCPqDL+7PTWjIMd6Gn5SM0gl7tPypin/nHDX6/Wxyq01Y+5EuvRFpg5/pPWFRHbRYijzcj5fb9WKKmI8naXLKvka6s+gFwBnrzH3T/h/vlxcEwF7bOi5XJ
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/css/link-modal-inner-bd52ba2d8aa3af905ae3d09fcce45b9b.css HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.stripe.com/v3/link-modal-inner-3856548e7a416d6bdacb10b20db090c3.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717835749/1734717835749%0A-778.1813275055503%0A4%0A3%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%226FQXnIYg7b7AgsCqLoSQ70bWODubjdzL%22%2C%22mID%22%3A%221PJnG4DSWUQIpQ8%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22zendesk2019%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22fe3feadc90d3b32f24ac083c22901e0970b582ac%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Quick%20Pay%20-%20Inbox%20Health%22%2C%22url%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=OpKzsCj8OxWGcfQUUhjm8euDKXifMJpG1E+4voOpeHhCIZ1d2jzBXDfnQgMhexbHbsxk3hny+970D9jIYTnnpzISjSTS2EcgbgNiDtndDa5Q0LA5LseqPOAKypng
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717833762/1734717833762%0A-779.3196208628339%0A3%0A4%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22title%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%7D%2C%22__messageID%22%3A2%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22title%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%7D%2C%22__messageID%22%3A3%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=NFi9H2AerJmk9MMmqOENTTutpf5e7lIjR1prDRiKDGnyK1q65SY7MUDpK8Yh2STNWgiDSmmZxHZwbolu/gx2ANi6BJKLCiVW2QAm0/gbwGTHeOZ3CGN62P5fawR9; AWSALBCORS=OpKzsCj8OxWGcfQUUhjm8euDKXifMJpG1E+4voOpeHhCIZ1d2jzBXDfnQgMhexbHbsxk3hny+970D9jIYTnnpzISjSTS2EcgbgNiDtndDa5Q0LA5LseqPOAKypng
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/payment-request-inner-google-pay-6fc983c9284c67933a5e14c4b22c32b4.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/payment-request-inner-google-pay-3e5f7756d6176660c979cc629f258eab.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/link-modal-inner-ed83c1976ac2b7b2ceab9468304dea5f.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/link-modal-inner-3856548e7a416d6bdacb10b20db090c3.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/icons/quickpay/hipaa_compliance-e7c73a7f11cecccd5088195f38aa751e.png HTTP/1.1Host: patient.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __zlcmid=1PJnG4DSWUQIpQ8; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717830.46.0.0
Source: global traffic	HTTP traffic detected: GET /v3/.deploy_status_henson.json HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "9bdbc44392db31ded05237a073d884d8"If-Modified-Since: Thu, 19 Dec 2024 21:49:29 GMT
Source: global traffic	HTTP traffic detected: GET /v3/.deploy_status_henson.json HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /assets/icons/quickpay/soc-7d610560b68610eb2dedfd7e759ddf49.png HTTP/1.1Host: patient.inboxhealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __zlcmid=1PJnG4DSWUQIpQ8; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717830.46.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717837759 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=kBvk7oMRJYPcmqCDpGbLVPkdCBbIIosas9ghQwlDXvIJAFKT2n5dO3dFTF5tx3nKLPZVIYc+ryuDMEb89mr3RWaZFwXz/X8lFdh++Nz/zqYUpj3in0yHEXnOqB9H
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717835749/1734717835749%0A-778.1813275055503%0A4%0A3%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%226FQXnIYg7b7AgsCqLoSQ70bWODubjdzL%22%2C%22mID%22%3A%221PJnG4DSWUQIpQ8%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22zendesk2019%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22fe3feadc90d3b32f24ac083c22901e0970b582ac%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Quick%20Pay%20-%20Inbox%20Health%22%2C%22url%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=9VObnfM+Ck+G1MT4e6spp3w6RyOfr6lLDFRA2Pk6Gr+moZysYlZAefKA6SzF+QiJi0ML3WZtZiB99RatJ8xCfmfBV/G4pkiuXO+adrfSMB4q7HDLtkWc1/u11l/Z; AWSALBCORS=kBvk7oMRJYPcmqCDpGbLVPkdCBbIIosas9ghQwlDXvIJAFKT2n5dO3dFTF5tx3nKLPZVIYc+ryuDMEb89mr3RWaZFwXz/X8lFdh++Nz/zqYUpj3in0yHEXnOqB9H
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717835694 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=9VObnfM+Ck+G1MT4e6spp3w6RyOfr6lLDFRA2Pk6Gr+moZysYlZAefKA6SzF+QiJi0ML3WZtZiB99RatJ8xCfmfBV/G4pkiuXO+adrfSMB4q7HDLtkWc1/u11l/Z; AWSALBCORS=kBvk7oMRJYPcmqCDpGbLVPkdCBbIIosas9ghQwlDXvIJAFKT2n5dO3dFTF5tx3nKLPZVIYc+ryuDMEb89mr3RWaZFwXz/X8lFdh++Nz/zqYUpj3in0yHEXnOqB9H
Source: global traffic	HTTP traffic detected: GET /cookie-settings/enforcement-mode HTTP/1.1Host: stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://js.stripe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://js.stripe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /elements/wallet-config HTTP/1.1Host: merchant-ui-api.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/payment-request-inner-google-pay-6fc983c9284c67933a5e14c4b22c32b4.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /gp/p/ui/payframe?origin=https%3A%2F%2Fjs.stripe.com&mid= HTTP/1.1Host: pay.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://js.stripe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA
Source: global traffic	HTTP traffic detected: GET /v3/hcaptcha-invisible-f4a7521df8551e3c92d92eb08c5b46bf.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/phone-numbers-lib-2e4b163cc1a1989623e99b9224e9eda8.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717839706 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=7+TK+GgD2HqMwpYdxzJXGzJ6B6HQ4JuHrtPxQrYFqpK6MECJuOoy9YqUuq5iRpVFlLhZdUDB6ajbYZ4EQGavgdqg9XoGuEz7MgHXmARWm+hbbCKmQvhip4NdPjPM
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717837759 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=9VObnfM+Ck+G1MT4e6spp3w6RyOfr6lLDFRA2Pk6Gr+moZysYlZAefKA6SzF+QiJi0ML3WZtZiB99RatJ8xCfmfBV/G4pkiuXO+adrfSMB4q7HDLtkWc1/u11l/Z; AWSALBCORS=7+TK+GgD2HqMwpYdxzJXGzJ6B6HQ4JuHrtPxQrYFqpK6MECJuOoy9YqUuq5iRpVFlLhZdUDB6ajbYZ4EQGavgdqg9XoGuEz7MgHXmARWm+hbbCKmQvhip4NdPjPM
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717839708/1734717839708%0A-778.5823566826314%0A5%0A5%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A33%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=7+TK+GgD2HqMwpYdxzJXGzJ6B6HQ4JuHrtPxQrYFqpK6MECJuOoy9YqUuq5iRpVFlLhZdUDB6ajbYZ4EQGavgdqg9XoGuEz7MgHXmARWm+hbbCKmQvhip4NdPjPM
Source: global traffic	HTTP traffic detected: GET /cookie-settings/enforcement-mode HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/link-modal-inner-ed83c1976ac2b7b2ceab9468304dea5f.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /elements/wallet-config HTTP/1.1Host: merchant-ui-api.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /assets/icons/quickpay/soc-7d610560b68610eb2dedfd7e759ddf49.png HTTP/1.1Host: patient.inboxhealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __zlcmid=1PJnG4DSWUQIpQ8; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717830.46.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717839708/1734717839708%0A-778.5823566826314%0A5%0A5%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A33%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=XPly8mnq3RT3OSWqTLVYNCjC2oy6VftKRttBWpD5dPbbJ1Xdwn/Y4JmkjwYWxsKAVsdTxp8tMF+bfZwooU4BOYR0TuFzZSFNkkJ7nSA6DGz8g4BswEqHBMur8/Hh; AWSALBCORS=ncPEls3I36s/nrV9x3AXQw/31j2cKagZ1grVsBuNoNoQJvf5SFtIpK2PuVqc2WynA6IcjWS2d9dGQQNtQrhiHojCFZUy6NF/SDQ1nvfQGEkyXwNGGUb7YKY1uI5L
Source: global traffic	HTTP traffic detected: GET /stripethirdparty-srv/assets/v22.3/HCaptchaInvisible.html?id=bfdbfc49-7b70-4c1f-a3e7-9b075a2ce9b2&origin=https%3A%2F%2Fjs.stripe.com HTTP/1.1Host: b.stripecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://js.stripe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/phone-numbers-lib-2e4b163cc1a1989623e99b9224e9eda8.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /gp/p/payment_method_manifest.json HTTP/1.1Host: pay.google.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/trusted-types-checker-efd8cf45ce422659c098993bfc62531b.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stripethirdparty-srv/assets/v22.3/vendors~AddressAutocomplete~AffirmInContext~AfterpayInContext~AmazonPayButton~ApplePay~Arkose~AuthMa~2e7b0cb4.98b14d8118d74a86243f.bundle.js HTTP/1.1Host: b.stripecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://b.stripecdn.com/stripethirdparty-srv/assets/v22.3/HCaptchaInvisible.html?id=bfdbfc49-7b70-4c1f-a3e7-9b075a2ce9b2&origin=https%3A%2F%2Fjs.stripe.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stripethirdparty-srv/assets/v22.3/HCaptchaInvisible.486f638f2018022c8747.bundle.js HTTP/1.1Host: b.stripecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://b.stripecdn.com/stripethirdparty-srv/assets/v22.3/HCaptchaInvisible.html?id=bfdbfc49-7b70-4c1f-a3e7-9b075a2ce9b2&origin=https%3A%2F%2Fjs.stripe.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js?onload=captchaLoad&render=explicit HTTP/1.1Host: hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://b.stripecdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /gp/p/web_manifest.json HTTP/1.1Host: pay.google.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/trusted-types-checker-efd8cf45ce422659c098993bfc62531b.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /stripethirdparty-srv/assets/v22.3/HCaptchaInvisible.486f638f2018022c8747.bundle.js HTTP/1.1Host: b.stripecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gp/p/ui/pay HTTP/1.1Host: pay.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pay.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA
Source: global traffic	HTTP traffic detected: GET /stripethirdparty-srv/assets/v22.3/vendors~AddressAutocomplete~AffirmInContext~AfterpayInContext~AmazonPayButton~ApplePay~Arkose~AuthMa~2e7b0cb4.98b14d8118d74a86243f.bundle.js HTTP/1.1Host: b.stripecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /1/api.js?onload=captchaLoad&render=explicit HTTP/1.1Host: hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/b4956db/static/hcaptcha.html HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://b.stripecdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
Source: global traffic	HTTP traffic detected: GET /v3/elements-inner-payment-request-2aa455b1e6107c243fc9903586a56ac1.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI+cDUFQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI+cDUFQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA

Source: chromecache_269.10.dr	String found in binary or memory: "https://www.facebook.com/StripeHQ", equals www.facebook.com (Facebook)
Source: chromecache_269.10.dr	String found in binary or memory: "https://www.linkedin.com/company/stripe/", equals www.linkedin.com (Linkedin)
Source: chromecache_281.10.dr, chromecache_319.10.dr, chromecache_254.10.dr, chromecache_284.10.dr	String found in binary or memory: return b}VD.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: protect2.fireeye.com
Source: global traffic	DNS traffic detected: DNS query: email.chat.inboxhealth.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: inboxhealth.com
Source: global traffic	DNS traffic detected: DNS query: patient.inboxhealth.com
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: js.stripe.com
Source: global traffic	DNS traffic detected: DNS query: cdn.plaid.com
Source: global traffic	DNS traffic detected: DNS query: static.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: ekr.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: ws.pusherapp.com
Source: global traffic	DNS traffic detected: DNS query: rest.inboxhealth.com
Source: global traffic	DNS traffic detected: DNS query: js.pusher.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: inboxhealth.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: sockjs.pusher.com
Source: global traffic	DNS traffic detected: DNS query: vc.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.pusher.com
Source: global traffic	DNS traffic detected: DNS query: usage.trackjs.com
Source: global traffic	DNS traffic detected: DNS query: m.stripe.network
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: widget-mediator.zopim.com
Source: global traffic	DNS traffic detected: DNS query: m.stripe.com
Source: global traffic	DNS traffic detected: DNS query: widget.intercom.io
Source: global traffic	DNS traffic detected: DNS query: js.intercomcdn.com
Source: global traffic	DNS traffic detected: DNS query: stripe.com
Source: global traffic	DNS traffic detected: DNS query: api.stripe.com
Source: global traffic	DNS traffic detected: DNS query: pay.google.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: merchant-ui-api.stripe.com
Source: global traffic	DNS traffic detected: DNS query: r.stripe.com
Source: global traffic	DNS traffic detected: DNS query: pay.sandbox.google.com
Source: global traffic	DNS traffic detected: DNS query: b.stripecdn.com
Source: global traffic	DNS traffic detected: DNS query: hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: newassets.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: api2.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com

Source: unknown

HTTP traffic detected: POST /pusher/app/1811ca2096d3867b6a5f/198/emh0oob8/xhr_streaming?protocol=7&client=js&version=3.0.0&t=1734717814538&n=1 HTTP/1.1Host: sockjs.pusher.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://patient.inboxhealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://patient.inboxhealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Dec 2024 18:03:52 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: AWSALB=OGKf2oOD56IrKQc/BCfInG5f3fv51e2wYbY2vBaJG3gbh+JppzYHjVfjqMBJkjWZbZzzx2+r++Kn2eQJVQ5y+y+5IVw+kSTjC2RQsOsPPRSiJOEVnhOQkuf58bFZ; Expires=Fri, 27 Dec 2024 18:03:52 GMT; Path=/Set-Cookie: AWSALBCORS=OGKf2oOD56IrKQc/BCfInG5f3fv51e2wYbY2vBaJG3gbh+JppzYHjVfjqMBJkjWZbZzzx2+r++Kn2eQJVQ5y+y+5IVw+kSTjC2RQsOsPPRSiJOEVnhOQkuf58bFZ; Expires=Fri, 27 Dec 2024 18:03:52 GMT; Path=/; SameSite=None; SecureServer: nginx
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Dec 2024 18:03:52 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: AWSALB=I7m5ObHT6s8C4d99ZpeSZrL5UkiV+ZJ1adS8xPBiR9bbqPwL1ZRVpVJUwKXUWttv04cPt4Ysy6sdutZ8HF6yNq1xqDkdx6lB7QdI0pkJ7TH+9o4NILXzgCsMVb95; Expires=Fri, 27 Dec 2024 18:03:52 GMT; Path=/Set-Cookie: AWSALBCORS=I7m5ObHT6s8C4d99ZpeSZrL5UkiV+ZJ1adS8xPBiR9bbqPwL1ZRVpVJUwKXUWttv04cPt4Ysy6sdutZ8HF6yNq1xqDkdx6lB7QdI0pkJ7TH+9o4NILXzgCsMVb95; Expires=Fri, 27 Dec 2024 18:03:52 GMT; Path=/; SameSite=None; SecureServer: nginx
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 20 Dec 2024 18:04:04 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 20 Dec 2024 18:04:06 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 20 Dec 2024 18:04:08 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 20 Dec 2024 18:04:10 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close

Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: chromecache_341.10.dr, chromecache_244.10.dr	String found in binary or memory: http://pusher.com/
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/c
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/ehttp://test-exp-s2s.msedge.net/ab/gehttp://test-exp-s2s.msedge.ne
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/gehttp://test-exp-s2s.msedge.net/ab/cacheFileFullNotificationPerce
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/gehttps://config.edge.skype.com/config/v1/https://config.edge.skyp
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: chromecache_335.10.dr	String found in binary or memory: https://accounts.google.com/AccountChooser
Source: chromecache_335.10.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: chromecache_254.10.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_291.10.dr, chromecache_237.10.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.aadrm.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.aadrm.com/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.cortana.ai
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.office.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.onedrive.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://api.scheduler.
Source: chromecache_322.10.dr, chromecache_299.10.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp, CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: chromecache_269.10.dr	String found in binary or memory: https://assets.stripeassets.com
Source: chromecache_269.10.dr	String found in binary or memory: https://assets.stripeassets.com/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://augloop.office.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://augloop.office.com/v2
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: HxAccounts.exe, 00000015.00000002.2231801155.000001C45DA00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/
Source: HxAccounts.exe, 00000015.00000002.2231801155.000001C45DA00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/f
Source: HxAccounts.exe, 00000015.00000002.2231801155.000001C45DA00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az815563.vo.msecnd.net/
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/1a930247.woff2)
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedCodeEditor-86776e0635434fc49715.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedIcon-0b7478e1f9234aae8838.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AtlasDashboardGraphic-042f01c5c5f7a5d7ca1a.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BackgroundGlobe-64953aedea5f231d07b7.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Bootstrapper-BOTW2RVE.js
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModal-77aed9e8900fc44f1554.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModalGraphic-e9e1fc8f4c2bf8a9bd44.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CardField-b5eed93d40ea8f24d704.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CaseStudyCard-bfd1dd9dc828a57a4622.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CheckoutFormGraphic-b2509d821651cbc82709.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditor-6eacb8e42c7465ddd557.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAsciiLoader-c1a350cb85f7a989f599.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorCursor-517911b19e66c94dafbb.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorLineNumbers-0eded1c84476ec649145.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeSyntax-e0768ef33503219c518d.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeTerminal-ca23848effb056969042.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CopyTitle-c641e014b3946628bc95.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardBackground-853f685776c80eaa0089
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardOverlay-09e527d11b6471566771.cs
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarousel-6ad3f0dce85838a77d8b.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavGroup-41fa77c08914b1b778
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DomGraphic-5a317684eb2b9d1f76d2.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/EnterpriseCarouselAside-b05102a0b81de0c11406.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Flag-0530f6f8a0ae1e011860.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Form-401d42df82b6e8482f06.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Frontdoor-4513faa7ba2dd8949ee2.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingAnimation-fa25c03988d3d1f36a35.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphic-c9e3aeda05ab14a454b1.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicLogo-2cee099c6b840fb58d86.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectAnimation-f4ce77b995975fa55335.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagram-bcf0320e44c152e1ca03.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagramOrderNotification-12b17d16
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectGraphic-30f9ea68cfc29ae65dd5.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectGraphicCell-18f4786ec794a3671860.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnection-192c60d5ff4ac27dec4f.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphic-ab42746a2bb65d850037.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicImage-ff4d221174ca6cab4402.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicOutline-cbb29a27650befdb3913.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIcon-f22f360dadf72ca61a47.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconGrid-f5ddeb3e7d94044a9646.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconOutline-2c0929473dcd28db2e99.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingAnimation-ba03e22ccfea12d68c6c.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingCard-b80b51aa94acdc8a688e.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsGraphic-45fe2caceea82c749c40.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStandaloneAnimation-5aefb3912ae346b5293e.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Global-f1eeffae1de3242fcca9.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Globe-b2159f87180df559d2e8.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GradientLegend-f1cabc70fbf82f3e9c05.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicForm-7d75b8ba72e0304da82c.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormField-33f78921d62dc714d424.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-6bd45b6e20fedc7f948a.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInputGrid-255377d9b46fdf089db8.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldList-5317148749a9268ec04d.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-decb2efdf862023c83af.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Icon-646136cd9e336d8c18d7.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/InvoicingFeatureGraphic-db95f6cbfa638cca151e.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/List-f0dd86d0ff490fdd7e75.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LocaleControl-09ce62c550a15bb456e5.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LowCodeNoCode-de32a3423ce25c839d82.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/MobileStickyNav-5c229e49df6b7e5315d7.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/PaymentLinksFeatureGraphic-6c9382201d4ede7c851a.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Picture-3f0067e6b392244c9bda.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductBadge-aa2497ab8abdcc6a3d34.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductFeatureCard-4476eb8c383446c052aa.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/RowLayout-9272a8ee72d3dac4a6ef.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSection-1c0a8e1d30b69be4ef69.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSectionSupportLinkList-US-bf39e598e6b8dad8c
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StartUp-889f28d89767c8a9d60f.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsed-448c2bc0913c408517f4.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsedList-3eb79b6a74348271bdad.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Track-2f2fce741fc3d8fc8450.css
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ac6713d5.woff)
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2)
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/imt-d954432923e883505581a4c4f476e8ba.js
Source: chromecache_269.10.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/store-936f0d847a16164e7f6b15d74659c4a9.html
Source: chromecache_269.10.dr, chromecache_286.10.dr	String found in binary or memory: https://b.stripecdn.com/stripethirdparty-srv/assets/
Source: chromecache_335.10.dr	String found in binary or memory: https://bunpay.app
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://canary.designerapp.
Source: chromecache_281.10.dr, chromecache_319.10.dr, chromecache_254.10.dr, chromecache_284.10.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/create-module
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://cdn.entity.
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://clients.config.office.net/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: chromecache_324.10.dr, chromecache_348.10.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_324.10.dr, chromecache_348.10.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/advancedprotectionshttps://config.edge.skype.net/config/v1/
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/codeintegrityguardarbitrarycodeguardhttps://config.edge.skyp
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: HxAccounts.exe, 00000015.00000002.2231896533.000001C45DA2C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.net/config/v1/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://cortana.ai
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://cortana.ai/api
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://cr.office.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://d.docs.live.net
Source: chromecache_269.10.dr	String found in binary or memory: https://dashboard.stripe.com/
Source: chromecache_269.10.dr	String found in binary or memory: https://dashboard.stripe.com/register
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://dev.cortana.ai
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: chromecache_326.10.dr, chromecache_352.10.dr, chromecache_259.10.dr, chromecache_314.10.dr	String found in binary or memory: https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal
Source: chromecache_324.10.dr, chromecache_348.10.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_324.10.dr, chromecache_348.10.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_324.10.dr, chromecache_348.10.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://directory.services.
Source: chromecache_335.10.dr	String found in binary or memory: https://dmengelt.github.io
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/api
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/billing
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/connect
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/development
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/invoicing/hosted-invoice-page
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/libraries
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/no-code
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/no-code/payment-links
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/no-code/tap-to-pay
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/payments
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/payments/checkout
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/stripe-apps
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/terminal
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/upgrades#api-changelog
Source: chromecache_269.10.dr	String found in binary or memory: https://docs.stripe.com/upgrades#api-versions
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://ecs.office.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://email.chat.inboxhealth.com/o/eJxMzDtOwzAYAODT1GMUv93BS8WAkJCCWlHKEvnxRzYkdnDslvb0rFzg89pOChM
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://email.chat.inboxhealth.com/u/eJxMzD1OwzAUAODT1GPknzROBy8VA0JCCmpFKUvkvPcqGxI7-KelPT0rF_jQTJd
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://fonts.googleapis.com
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://fonts.gstatic.com
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshRTM.ttf
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6V1s.ttf
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrFJA.ttf
Source: chromecache_335.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2)format(
Source: chromecache_335.10.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVGdeOcEg.woff2)format(
Source: 26433847794.ttf.0.dr	String found in binary or memory: https://github.com/itfoundry/Poppins)PoppinsBoldITFO;
Source: chromecache_269.10.dr	String found in binary or memory: https://github.com/stripe-samples
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://graph.windows.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://graph.windows.net/
Source: chromecache_309.10.dr	String found in binary or memory: https://hcaptcha.com/1/api.js?onload=captchaLoad&render=explicit
Source: chromecache_253.10.dr, chromecache_282.10.dr, chromecache_280.10.dr	String found in binary or memory: https://hcaptcha.com/license
Source: chromecache_306.10.dr, chromecache_256.10.dr	String found in binary or memory: https://helpcenter.affirm.ca
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/1ctgMwd2p9euFW9pPSM7jR/451d5e987ca7fa14060526e6b1766a8b
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/1lCtk48IB26AGgXdHsrLrt/ad2816d6a744d5249c19ba66be22b0a6
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/2EOOpI2mMZgHYBlbO44zWV/5a6c5d37402652c80567ec942c733a43
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/3AGidihOJl4nH9D1vDjM84/9540155d584be52fc54c443b6efa4ae6
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/4jq1Wguyus7CA7yc2kxMgn/cf7b01aadf305daef40ac8acab654510
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/4zeFefnpB8yh7U3qSQRktP/d583ee93dd3d8910fa27296748699a0f
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5C5LvT3YZvRTGYn7uabXGj/7da8063dc77c67b7f66a1479f47409c8
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5DaqGgXeMbxSIqQj9WSqSF/8142c0c6e15b27a8bb6c8a0f8a5d4dfb
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5epSdhifMhjZWOkOxK9xG8/05715737a672f2069c17903d2acae585
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5hEVwGQfvUQhsMjfASiuA/db4e12749695dbf5735787879ae56e96/
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5k7VeoAQQDK7032fIF6PEU/25f3670f5f4508103ee77afd92b7e074
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/6c56LuWUxcACbVkv4fqszI/d0a88e48d11a88b97daf896246ac40da
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/7C4ROeiaqUa0HwwBU9EL9l/f9c57cccfc64de8869be7e7a9556fec9
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/7jjWJlm9NHgLI7SV98B0Dg/ea1ae753f3764897fa4333311e41f496
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/7szA8TJHWKDIEuCbu6Yblm/4548db61648d063fb7e7dddfca04ab79
Source: chromecache_269.10.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/wEsTNDVgdEqaPAKkFdqnL/c69e1649432f1b772d86d81e423b7e3e/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 26433847794.ttf.0.dr	String found in binary or memory: https://indiantypefoundry.comThis
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://invites.office.com/
Source: chromecache_335.10.dr	String found in binary or memory: https://js.stripe.com
Source: chromecache_335.10.dr	String found in binary or memory: https://js.stripe.com"
Source: chromecache_228.10.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/payment-request-inner-browser-3e2bf1135aeec036ab34eb24b61d
Source: chromecache_228.10.dr, chromecache_252.10.dr, chromecache_235.10.dr, chromecache_328.10.dr, chromecache_320.10.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://lifecycle.office.com
Source: HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp, CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://login.windows.local
Source: HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.local/
Source: HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net
Source: HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://make.powerautomate.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://management.azure.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://management.azure.com/
Source: chromecache_269.10.dr	String found in binary or memory: https://marketplace.stripe.com
Source: chromecache_269.10.dr	String found in binary or memory: https://marketplace.stripe.com/
Source: chromecache_269.10.dr	String found in binary or memory: https://marketplace.stripe.com/collections/enterprise
Source: HxAccounts.exe, 00000015.00000002.2231839766.000001C45DA13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexus.officeapps.live.com
Source: HxAccounts.exe, 00000015.00000002.2231839766.000001C45DA13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexusrules.officeapps.live.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://onedrive.live.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: chromecache_254.10.dr, chromecache_284.10.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_281.10.dr, chromecache_319.10.dr, chromecache_254.10.dr, chromecache_284.10.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: chromecache_275.10.dr, chromecache_304.10.dr	String found in binary or memory: https://patient.inboxhealth.com/guestLogin?test
Source: chromecache_275.10.dr, chromecache_304.10.dr	String found in binary or memory: https://patient.inboxhealth.com/guestLogin?wordpress
Source: chromecache_335.10.dr	String found in binary or memory: https://pay.google.com
Source: chromecache_335.10.dr	String found in binary or memory: https://pay.google.com/gp/p/
Source: chromecache_335.10.dr	String found in binary or memory: https://pay.google.com/payments/v4/js/integrator.js?ss
Source: chromecache_335.10.dr	String found in binary or memory: https://pay.google.com/ui/payframe
Source: chromecache_335.10.dr	String found in binary or memory: https://pay.sandbox.google.com
Source: chromecache_335.10.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js?ss
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://planner.cloud.microsoft
Source: chromecache_348.10.dr, chromecache_292.10.dr, chromecache_274.10.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://powerlift.acompli.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: chromecache_269.10.dr	String found in binary or memory: https://press.stripe.com/
Source: chromecache_269.10.dr	String found in binary or memory: https://privacy.stripe.com/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-047d42c05b5228b2&q
Source: phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-047d42c05b5228b2&q=1&e
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q
Source: phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-3d7e39dd473a4e5a&q
Source: phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-3d7e39dd473a4e5a&q=1&e
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-43b22cc641e6376e&q
Source: phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-43b22cc641e6376e&q=1&e
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-694355a267dabf82&q
Source: phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-694355a267dabf82&q=1&e
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-83714a30ad5c5124&q
Source: phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-83714a30ad5c5124&q=1&e
Source: phish_alert_iocp_v1.10.16(15).eml	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-a2c1fd8d5b9e7fa1&q
Source: phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-a2c1fd8d5b9e7fa1&q=1&e
Source: chromecache_269.10.dr	String found in binary or memory: https://q.stripe.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://rest.inboxhealth.com/assets/email_footer_ih_logo-cfdf81f499b93fbba9198df6990021a14dd0120a60b
Source: ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://rest.inboxhealth.com/assets/facebook-dd3bc01e829a8692505bb3596a7657c4962ac0fed067434d39de84f
Source: ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://rest.inboxhealth.com/assets/linkedIn-4e4cd02240d32f7a684ff873c195f3f3bcd17934321ffde1da69f81
Source: ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	String found in binary or memory: https://rest.inboxhealth.com/assets/x-0808a44b4f34b8f90bb8581df8d920a3d08fa98b9b004f01ea17945ef92760
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: chromecache_269.10.dr	String found in binary or memory: https://schema.org
Source: 26433847794.ttf.0.dr	String found in binary or memory: https://scripts.sil.org/OFLhttps://scripts.sil.org/OFL
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://settings.outlook.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://staging.cortana.ai
Source: chromecache_319.10.dr, chromecache_254.10.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_237.10.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_269.10.dr	String found in binary or memory: https://status.stripe.com/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/#organization
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/ae
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/at
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/au
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/br
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/contact/sales
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/de
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/de-be
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/de-ch
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/de-li
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/de-lu
Source: chromecache_306.10.dr, chromecache_256.10.dr	String found in binary or memory: https://stripe.com/docs/testing.
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-at
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-be
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-bg
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-br
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-ca
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-ch
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-cy
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-cz
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-de
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-dk
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-ee
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-es
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-fi
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-fr
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-gi
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-gr
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-hk
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-hr
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-hu
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-it
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-jp
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-li
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-lt
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-lu
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-lv
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-mt
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-mx
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-my
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-nl
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-no
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-pl
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-pt
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-ro
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-se
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-sg
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-si
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-sk
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/en-th
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/es
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/es-us
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/fr
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/fr-be
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/fr-ca
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/fr-ch
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/fr-lu
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/gb
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/guides
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/ie
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/in
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/issuing
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/it
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/it-ch
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/it-hr
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/it-si
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/jp
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/mx
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/nl
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/nl-be
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/nz
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/pricing
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/privacy
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/pt-pt
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/radar
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/se
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/sigma
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/spc/licenses
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/sv-fi
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/th
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/us
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/use-cases/global-businesses
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/zh-hk
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/zh-my
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/zh-sg
Source: chromecache_269.10.dr	String found in binary or memory: https://stripe.com/zh-us
Source: chromecache_269.10.dr	String found in binary or memory: https://stripesessions.com/?utm_medium=owned-surfaces&utm_source=45e0&utm_campaign=US%2FCA_40cb&utm_
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: chromecache_348.10.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_324.10.dr, chromecache_348.10.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_324.10.dr, chromecache_348.10.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_324.10.dr, chromecache_348.10.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_269.10.dr	String found in binary or memory: https://support.stripe.com/?referrerLocale=en-us
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: chromecache_291.10.dr, chromecache_237.10.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_281.10.dr, chromecache_319.10.dr, chromecache_254.10.dr, chromecache_284.10.dr	String found in binary or memory: https://td.doubleclick.net
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://teams.cloud.microsoft/ups/global/
Source: chromecache_269.10.dr	String found in binary or memory: https://twitter.com/stripe
Source: chromecache_322.10.dr, chromecache_299.10.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://webshell.suite.office.com
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: chromecache_291.10.dr, chromecache_237.10.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_291.10.dr, chromecache_237.10.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_291.10.dr, chromecache_237.10.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_254.10.dr, chromecache_284.10.dr	String found in binary or memory: https://www.google.com
Source: chromecache_291.10.dr, chromecache_237.10.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_324.10.dr, chromecache_348.10.dr, chromecache_261.10.dr, chromecache_236.10.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_281.10.dr, chromecache_319.10.dr, chromecache_254.10.dr, chromecache_284.10.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_254.10.dr, chromecache_284.10.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_291.10.dr, chromecache_237.10.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_324.10.dr, chromecache_348.10.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.
Source: chromecache_335.10.dr	String found in binary or memory: https://www.gstatic.com/_/boq-payments-consumer/_/r/
Source: chromecache_335.10.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendB
Source: chromecache_335.10.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-payments-consumer/_/ss/k=boq-payments-consumer.InstantbuyFrontendB
Source: chromecache_261.10.dr, chromecache_236.10.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Source: chromecache_269.10.dr	String found in binary or memory: https://www.linkedin.com/company/stripe/
Source: chromecache_319.10.dr, chromecache_254.10.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com
Source: HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com/P
Source: HxAccounts.exe, 00000015.00000002.2234757953.000001C464CDC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.comm
Source: chromecache_269.10.dr	String found in binary or memory: https://youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window created: window name: CLIPBRDWNDCLASS

Jump to behavior

Source: classification engine

Classification label: mal52.phis.winEML@44/256@148/52

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241220T1302560545-7112.etl

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\phish_alert_iocp_v1.10.16(15).eml"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "1B07E646-70E7-4C5C-AE00-0E35716E40B6" "ED956F3E-79B7-4C34-B44E-FA16FFFE8145" "7112" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=2036,i,14044213915127150472,12868546578057075525,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5220 --field-trial-handle=2036,i,14044213915127150472,12868546578057075525,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=1872,i,1434172226620214781,4211589301215833021,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "1B07E646-70E7-4C5C-AE00-0E35716E40B6" "ED956F3E-79B7-4C34-B44E-FA16FFFE8145" "7112" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=2036,i,14044213915127150472,12868546578057075525,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5220 --field-trial-handle=2036,i,14044213915127150472,12868546578057075525,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=1872,i,1434172226620214781,4211589301215833021,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msoimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso40uiimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.word.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso50imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.view.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxshared.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.viewmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: clipc.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hx.mail.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxcalendar.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.remotedesktop.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.systemid.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.retailinfo.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msxml6.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: photometadatahandler.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ploptin.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataaccountapis.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataplatformhelperutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: accountsrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: aphostclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: webservices.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: office.ui.xaml.hxaccounts.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.security.authentication.web.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wuceffects.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: ninput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.phone.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: twinapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: execmodelclient.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe

File opened: C:\Windows\SYSTEM32\msftedit.dll

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\outlook\ConfigContextData 1

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe TID: 4856

Thread sleep count: 120 > 30

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File Volume queried: C:\Windows\SysWOW64 FullSizeInformation

Jump to behavior

Source: settings.dat.LOG1.16.dr

Binary or memory string: VMware, Inc. VMware20,1?O

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	21 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Clipboard Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Modify Registry	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Web Protocols	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	1 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Process Injection	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	14 System Information Discovery	SSH	Keylogging	5 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
d1tcqh4bio8cty.cloudfront.net	108.158.75.118	true	false	high
vc-live-cf.hotjar.io	3.160.212.126	true	false	high
pay.sandbox.google.com	173.194.73.81	true	false	high
inboxhealth.zendesk.com	216.198.53.1	true	false	high
inboxhealth.com	18.161.111.54	true	true	unknown
stats.g.doubleclick.net	66.102.1.156	true	false	high
patient.inboxhealth.com	52.222.144.12	true	false	high
static.zdassets.com	216.198.54.3	true	false	high
script.hotjar.com	13.227.8.2	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
ekr.zdassets.com	216.198.53.3	true	false	high
stripe.com	34.252.74.21	true	false	high
www.google.com	142.250.181.132	true	false	high
d3dy5gmtp8yhk7.cloudfront.net	108.158.81.56	true	false	unknown
api2.hcaptcha.com	104.19.229.21	true	false	high
static-cdn.hotjar.com	108.158.75.120	true	false	high
usage.trackjs.com	148.113.163.217	true	false	high
js.intercomcdn.com	108.158.75.52	true	false	high
rest.inboxhealth.com	13.59.75.255	true	false	high
clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com	54.225.146.64	true	false	high
google.com	172.217.17.78	true	false	high
plus.l.google.com	142.250.181.46	true	false	high
cdn.plaid.com	52.222.144.109	true	false	high
widget.intercom.io	108.158.75.116	true	false	high
socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com	52.4.95.4	true	false	high
mailgun.org	34.110.180.34	true	false	high
www.googleoptimize.com	142.250.181.78	true	false	high
stripecdn.map.fastly.net	151.101.0.176	true	false	high
r.stripe.com	54.187.119.242	true	false	high
hcaptcha.com	104.19.229.21	true	false	high
play.google.com	142.250.181.142	true	false	high
m.stripe.com	34.215.94.176	true	false	high
protect2.fireeye.com	162.159.246.125	true	false	high
widget-mediator.zopim.com	18.184.10.197	true	false	high
pay.google.com	108.177.14.92	true	false	high
analytics.google.com	172.217.19.238	true	false	high
td.doubleclick.net	142.250.181.130	true	false	high
merchant-ui-api.stripe.com	52.210.46.219	true	false	high
newassets.hcaptcha.com	104.19.229.21	true	false	high
ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com	44.217.82.191	true	false	high
api.stripe.com	34.250.29.31	true	false	high
b.stripecdn.com	unknown	unknown	false	high
m.stripe.network	unknown	unknown	false	high
stats.pusher.com	unknown	unknown	false	high
ws.pusherapp.com	unknown	unknown	false	high
vc.hotjar.io	unknown	unknown	false	high
email.chat.inboxhealth.com	unknown	unknown	true	unknown
sockjs.pusher.com	unknown	unknown	false	high
static.hotjar.com	unknown	unknown	false	high
js.pusher.com	unknown	unknown	false	high
js.stripe.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://js.stripe.com/v3/fingerprinted/js/elements-inner-card-244854405722882f318e50d94037ffbf.js	false	high
https://widget-mediator.zopim.com/s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717829613	false	high
https://widget-mediator.zopim.com/s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717825724/1734717825724%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%226FQXnIYg7b7AgsCqLoSQ70bWODubjdzL%22%2C%22mID%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22fe3feadc90d3b32f24ac083c22901e0970b582ac%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Quick%20Pay%20-%20Inbox%20Health%22%2C%22url%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22ref%22%3A%22%22%7D	false	high
https://js.intercomcdn.com/frame.ac03c723.js	false	high
https://pay.google.com/gp/p/js/pay.js	false	high
https://widget-mediator.zopim.com/s/W/ws/Ov5-54Tk4fWLXRV2/c/1734717821195	false	high
https://js.stripe.com/v3/fingerprinted/js/controller-e1865ca26c58947a4c41ae602ceeabce.js	false	high
https://cdn.plaid.com/link/v2/stable/link-initialize.js	false	high
https://js.stripe.com/v3/fingerprinted/js/phone-numbers-lib-2e4b163cc1a1989623e99b9224e9eda8.js	false	high
https://pay.google.com/gp/p/ui/payframe?origin=https%3A%2F%2Fjs.stripe.com&mid=	false	high
https://pay.google.com/gp/p/payment_method_manifest.json	false	high
https://widget.intercom.io/widget/xx016tyt	false	high
https://static.zdassets.com/web_widget/classic/latest/web-widget-main-bcac9f6.js	false	high
https://patient.inboxhealth.com/assets/ih-logo-white4-58cda4a1a0dab88ce4a456751874e449.png	false	unknown
https://js.intercomcdn.com/vendor.6349e54f.js	false	high
https://sockjs.pusher.com/pusher/app/1811ca2096d3867b6a5f/962/4jprl9gh/xhr?protocol=7&client=js&version=3.0.0&t=1734717814811&n=2	false	high
https://js.stripe.com/v3/payment-request-inner-browser-57a5abf2116f0f98c3257286b4b1c74d.html	false	high
https://m.stripe.network/inner.html	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://b.stripecdn.com/mkt-statics-srv/assets/Bootstrapper-BOTW2RVE.js	chromecache_269.10.dr	false	high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css	chromecache_269.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3	chromecache_269.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css	chromecache_269.10.dr	false	high
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://docs.stripe.com	chromecache_269.10.dr	false	high
https://rpsticket.partnerservices.getmicrosoftkey.com	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_291.10.dr, chromecache_237.10.dr	false	high
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css	chromecache_269.10.dr	false	high
https://pay.google.com	chromecache_335.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css	chromecache_269.10.dr	false	high
https://stripe.com/docs/testing.	chromecache_306.10.dr, chromecache_256.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css	chromecache_269.10.dr	false	high
https://support.google.com/recaptcha/#6175971	chromecache_324.10.dr, chromecache_348.10.dr	false	high
https://stripe.com/ie	chromecache_269.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e	chromecache_269.10.dr	false	high
https://docs.stripe.com/stripe-apps	chromecache_269.10.dr	false	high
https://res.getmicrosoftkey.com/api/redemptionevents	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://support.google.com/recaptcha	chromecache_348.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css	chromecache_269.10.dr	false	high
https://apis.google.com/js/api.js	chromecache_322.10.dr, chromecache_299.10.dr	false	high
https://www.odwebp.svc.ms	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://docs.stripe.com/development	chromecache_269.10.dr	false	high
https://docs.stripe.com/no-code/payment-links	chromecache_269.10.dr	false	high
https://stripe.com/in	chromecache_269.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2	chromecache_269.10.dr	false	high
https://graph.windows.net	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://stripe.com/it	chromecache_269.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectGraphicCell-18f4786ec794a3671860.css	chromecache_269.10.dr	false	high
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://bunpay.app	chromecache_335.10.dr	false	unknown
https://d.docs.live.net	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://stripe.com/#organization	chromecache_269.10.dr	false	high
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
http://weather.service.msn.com/data.aspx	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-3d7e39dd473a4e5a&q=1&e	phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	false	high
https://images.stripeassets.com/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0	chromecache_269.10.dr	false	high
https://stripe.com/jp	chromecache_269.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css	chromecache_269.10.dr	false	high
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://dashboard.stripe.com/	chromecache_269.10.dr	false	high
https://docs.stripe.com/no-code/tap-to-pay	chromecache_269.10.dr	false	high
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css	chromecache_269.10.dr	false	high
https://email.chat.inboxhealth.com/o/eJxMzDtOwzAYAODT1GMUv93BS8WAkJCCWlHKEvnxRzYkdnDslvb0rFzg89pOChM	phish_alert_iocp_v1.10.16(15).eml	false	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css	chromecache_269.10.dr	false	high
https://xsts.auth.xboxlive.com	HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://outlook.office365.com/api/v1.0/me/Activities	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://stripe.com/sv-fi	chromecache_269.10.dr	false	high
https://clients.config.office.net/user/v1.0/android/policies	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://support.stripe.com/?referrerLocale=en-us	chromecache_269.10.dr	false	high
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css	chromecache_269.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css	chromecache_269.10.dr	false	high
https://cloud.google.com/contact	chromecache_324.10.dr, chromecache_348.10.dr	false	high
https://substrate.office.com/search/api/v1/SearchHistory	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://stripesessions.com/?utm_medium=owned-surfaces&utm_source=45e0&utm_campaign=US%2FCA_40cb&utm_	chromecache_269.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css	chromecache_269.10.dr	false	high
https://stripe.com/de	chromecache_269.10.dr	false	high
https://pay.sandbox.google.com	chromecache_335.10.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css	chromecache_269.10.dr	false	high
https://docs.stripe.com/payments/checkout	chromecache_269.10.dr	false	high
https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-a2c1fd8d5b9e7fa1&q=1&e	phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	false	high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://skyapi.live.net/Activity/	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://patient.inboxhealth.com/guestLogin?test	chromecache_275.10.dr, chromecache_304.10.dr	false	unknown
https://teams.cloud.microsoft/ups/global/	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://api.cortana.ai	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://visio.uservoice.com/forums/368202-visio-on-devices	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://dashboard.stripe.com/register	chromecache_269.10.dr	false	high
https://assets.stripeassets.com/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7	chromecache_269.10.dr	false	high
https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-047d42c05b5228b2&q=1&e	phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	false	high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_324.10.dr, chromecache_348.10.dr	false	high
https://augloop.office.com	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditor-6eacb8e42c7465ddd557.css	chromecache_269.10.dr	false	high
https://stripe.com/zh-hk	chromecache_269.10.dr	false	high
https://api.diagnosticssdf.office.com/v2/file	CCF9A13A-2F68-4F48-A7FE-BB25510A585D.16.dr	false	high
https://login.windows.local/	HxAccounts.exe, 00000015.00000002.2234653126.000001C464C8F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e	phish_alert_iocp_v1.10.16(15).eml, ~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp.0.dr	false	high
https://stripe.com/contact/sales	chromecache_269.10.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.110.180.34	mailgun.org	United States	15169	GOOGLEUS	false
172.217.19.228	unknown	United States	15169	GOOGLEUS	false
151.101.0.176	stripecdn.map.fastly.net	United States	54113	FASTLYUS	false
54.91.56.182	unknown	United States	14618	AMAZON-AESUS	false
142.250.181.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
18.184.10.197	widget-mediator.zopim.com	United States	16509	AMAZON-02US	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
66.102.1.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
173.194.73.81	pay.sandbox.google.com	United States	15169	GOOGLEUS	false
104.19.230.21	unknown	United States	13335	CLOUDFLARENETUS	false
3.132.245.25	unknown	United States	16509	AMAZON-02US	false
108.158.75.118	d1tcqh4bio8cty.cloudfront.net	United States	16509	AMAZON-02US	false
108.158.75.116	widget.intercom.io	United States	16509	AMAZON-02US	false
108.158.75.113	unknown	United States	16509	AMAZON-02US	false
3.160.212.126	vc-live-cf.hotjar.io	United States	16509	AMAZON-02US	false
18.161.111.54	inboxhealth.com	United States	3	MIT-GATEWAYSUS	true
52.210.46.219	merchant-ui-api.stripe.com	United States	16509	AMAZON-02US	false
209.85.233.92	unknown	United States	15169	GOOGLEUS	false
54.170.183.1	unknown	United States	16509	AMAZON-02US	false
52.222.144.10	unknown	United States	16509	AMAZON-02US	false
52.222.144.12	patient.inboxhealth.com	United States	16509	AMAZON-02US	false
52.4.95.4	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.215.94.176	m.stripe.com	United States	16509	AMAZON-02US	false
108.158.75.33	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.222.144.109	cdn.plaid.com	United States	16509	AMAZON-02US	false
13.227.8.2	script.hotjar.com	United States	16509	AMAZON-02US	false
216.198.54.3	static.zdassets.com	United States	7321	LNET-ASNUS	false
216.198.54.1	unknown	United States	7321	LNET-ASNUS	false
142.250.181.78	www.googleoptimize.com	United States	15169	GOOGLEUS	false
34.250.29.31	api.stripe.com	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.192.176	unknown	United States	54113	FASTLYUS	false
13.59.75.255	rest.inboxhealth.com	United States	16509	AMAZON-02US	false
108.158.75.52	js.intercomcdn.com	United States	16509	AMAZON-02US	false
54.187.119.242	r.stripe.com	United States	16509	AMAZON-02US	false
34.252.74.21	stripe.com	United States	16509	AMAZON-02US	false
162.159.246.125	protect2.fireeye.com	United States	13335	CLOUDFLARENETUS	false
108.158.75.120	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.19.238	analytics.google.com	United States	15169	GOOGLEUS	false
108.177.14.92	pay.google.com	United States	15169	GOOGLEUS	false
52.215.231.162	unknown	United States	16509	AMAZON-02US	false
54.187.159.182	unknown	United States	16509	AMAZON-02US	false
148.113.163.217	usage.trackjs.com	United States	396982	GOOGLE-PRIVATE-CLOUDUS	false
104.19.229.21	api2.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
54.225.146.64	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
216.198.53.3	ekr.zdassets.com	United States	7321	LNET-ASNUS	false
44.217.82.191	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
216.198.53.1	inboxhealth.zendesk.com	United States	7321	LNET-ASNUS	false
108.158.81.56	d3dy5gmtp8yhk7.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579070
Start date and time:	2024-12-20 19:02:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	25
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	phish_alert_iocp_v1.10.16(15).eml
Detection:	MAL
Classification:	mal52.phis.winEML@44/256@148/52
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .eml

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, HxTsr.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.90.27, 217.20.58.98, 52.109.32.97, 52.113.194.132, 52.109.89.19, 2.19.126.151, 2.19.126.160, 20.189.173.24, 216.58.208.227, 172.217.17.78, 64.233.164.84, 142.250.181.142, 172.217.17.42, 142.250.181.99, 142.250.181.14, 172.217.17.67, 51.104.15.252, 216.58.208.232, 13.89.178.26, 172.217.19.202, 142.250.181.74, 142.250.181.10, 172.217.19.170, 142.250.181.106, 172.217.17.74, 172.217.21.42, 172.217.19.234, 172.217.19.10, 142.250.181.138, 216.58.208.234, 13.89.179.11, 13.71.55.58, 13.107.42.16, 172.217.19.206, 64.233.162.84, 142.250.181.3, 23.212.88.34, 142.250.181.42, 52.149.20.212, 40.126.53.19, 13.107.5.88
Excluded domains from analysis (whitelisted): e1324.dscd.akamaiedge.net, slscr.update.microsoft.com, weu-azsc-000.roaming.officeapps.live.com, clientservices.googleapis.com, onedscolprdcus00.centralus.cloudapp.azure.com, fs-wildcard.microsoft.com.edgekey.net, clients2.google.com, atm-settingsfe-prod-geo2.trafficmanager.net, login.live.com, config-edge-skype.l-0007.l-msedge.net, e16604.g.akamaiedge.net, officeclient.microsoft.com, www.gstatic.com, ukw-azsc-config.officeapps.live.com, l-0007.l-msedge.net, a1864.dscd.akamai.net, www.google-analytics.com, ecs.office.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, onedscolprdcus15.centralus.cloudapp.azure.com, uci.cdn.office.net, ogads-pa.googleapis.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, outlookmobile-office365-tas.msedge.net, s-0005.s-msedge.net, ecs.office.trafficmanager.net, clients.l.google.com, settings.data.microsoft.com, europe.configsvc1.live.com.akadns.net, omex.cdn.office.net, config.edge.sky
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: phish_alert_iocp_v1.10.16(15).eml

Input	Output
URL: email Model: Joe Sandbox AI	{ "explanation": [ "The email contains multiple tracking/redirect URLs through protect2.fireeye.com which is suspicious for a medical bill", "The email asks for sensitive information (date of birth) to access a statement, which is unusual", "The sender domain 'chat.inboxhealth.com' doesn't match the claimed medical facility name" ], "phishing": true, "confidence": 8, "generated_by_ai": false }
{ "date": "Fri, 20 Dec 2024 16:11:16 +0000", "subject": "Hi John, please let us know if you have any questions on your statement from Foot & Ankle Center of Cache Valley and the Wind Clinic.", "communications": [ " \n\nYour statement from Foot & Ankle Center of Cache Valley and the Wind Clinic\n\n\nHi John, \n\nYour statement from Foot & Ankle Center of Cache Valley and the Wind Clinic is ready for review. \n\nClick the button below to view your statement and make payments. In order to access your statement details, you'll need to verify your date of birth. \n\nAccount number: 36304491 \nAccess code: XHcUtg \nChart ID: 8243 \n\n\nYour current balance is $60\n\n\nReply to this email and our billing support team will assist you.\n\nClick here to pay <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt> \n\n\nThis email was sent via Inbox Health on behalf of your provider.\n\n <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-047d42c05b5228b2&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxczE9PgzAUAPBPQ4-kf2CFwzu4mMWYmGC2OOeFlL5HWgWKpQy3T-_VeP_lh9D1lZCMQGhVaCG41syB0rwWXaGrXVkKwppsTVgSr5BzQt4zD6_NZf-y8fePx3vTSOsuWJ73p7g0z7fjPIZvVan57el8xLvNCu6nLvw4MkNyuQ0jG8ClNC-ZesjkIZOHbdvy_2YKyffemuTD1HoEXSipK7FjET6Dm_KNzJViVvAFh3xd1pxwZQlmkzxNqV3WcTTx1v5tWIrGfpluIDjFldgV5G8AAAD__-32Vng> \n <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-43b22cc641e6376e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxMzLtuqzAcgPGnsUfkW2IYPJzoCKWVKlElapouyJc_shvA1JjQ5OmrdOr-_T6nTFdShkFRyYWklEiJvXKUGCrB0spuO9iIkpZcGCoJrypNiMVBvTbn3ctK3j_-35uGWX92m9PumObm-XaYhvjFSz697U8Hd7dIkDCa-O1B99kXNg64Vz7naUb8H2I1YvW6rkWnLZgYL48AsfrpQfa_BI8xhy5YnUMc2-CUFJzJkm5xUp_Rj8UK-goJCTK7vljmpQC34KwmnQOMuZ2XYdDp1v7d4Jy0vWjTgzqmBfBVsZ8AAAD__y65WZ0> <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-694355a267dabf82&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxMzEFPwyAYgOFfA8emQFfYgYOLaYyJSc0W57wsX-FrwLVQKV3dfr3xtvv7PlZ3vWKcomZSVJKxUkrqtOorhr3ZbmuUdW_LWgEKsF2NisNGdtTr9_a0e1vLz6_ne9ty4052c9wd0ty-3vbTGH-EEtPHy3Fv74ZUpQ9d_HUIQ3aFiSMdtMt5mol4IrwhvFnXtRh8uKD14T8gvDFxnCDcCG8eZhpi9r03kH0MZ2-1rASXitU06e_oQrEiXDGRqpztUCzzUqBdaNYTZI8hn-dlHCHdzo8MzQnMBboB9SEtSK-a_wUAAP__2Odekw> <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-3d7e39dd473a4e5a&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxMzE9rwyAYgPFPo8eQqI1ePKyM0A0GGS3rukt482rRLYmZ0f779KM79frw4zG6P6qKUasryYWsqlJK6jQwRLVCxWo0XAk0vQQQNUhZggTDqdfv7WH9di4_v55vbcvQHcxqv97FpX29bucx_HLF54_NfmtuSETppz5cnIUhuQLDSAftUpoXwp8IawhrLvdKWPNyd5t_R6eQ_NEjJB-mzhstBWdSVTWN-ju4qThbONlIRLmYochLLqzJNOkZkrdT6pY8jhCv3eOGpgj4A_1g9S5mS0-a_QUAAP__DTZWOQ> \n\nQuestions about this statement?\nReply to this email and our billing support team will assist you.\n\nFoot & Ankle Center of Cache Valley and the Wind Clinic \n\n435 N Gateway Dr Ste. 801 Providence, UT 843329004 \n\nPrivacy Policy <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-83714a30ad5c5124&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxczMFOwyAYAOCngWMDlA564OBiGmNiUrPFOS8NhX8BbUultNg9vVfj_ctnVX-TlGFQVJRcUEqEwE5Vh0rXouZAelmL2mhTSS6JPYAkVU177NVrez2-ZPL-8XhvW2bc1VaX4zku7fN-msfwXcpyfnu6nOzdIE781IcfB3pIrjBhxINyKc0LKh8QaxBrcs7FP4NYM0e_abPjKSR_80YnH6bOWyV4yYSkBxzVZ3BTkUFvEBEnix2KdVkLsCtOatbJw5S6ZR1HHffub4NT1OZL9wOoc1wBb4r9BgAA___0RFmW> \| Contact Support <mailto:team@inboxhealth.com> \n\nInbox Health \n\n470 James St. Unit 001 New Haven, CT 06513 \n\n 2024 Inbox Health, Corp. \n\n\nunsubscribe <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-a2c1fd8d5b9e7fa1&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fu%2FeJwEwLFOwzAQANCvicfocg5NlhuoGBASUlArSlnQ2WfLhjQujt1Cv75PyPixQxXIa8YBBLUfgEEMd9YyoEfQG-gNqkhv03H7eoWPz6fbNKENR3k4bPd5nV7-d-dT-tWjPr8_H3Zys00PcTHpLzieS2htOqklleij5RLT8hWFhl7jMHYblek7haW9Or643PSwytzWtbZOqirU4KMqme0Pm9nRPlenLoT3AAAA___x4jwI> \n\n <https://email.chat.inboxhealth.com/o/eJxMzDtOwzAYAODT1GMUv93BS8WAkJCCWlHKEvnxRzYkdnDslvb0rFzg89pOChMEGkvKJMa9lChoBWSSgnAQjE4cU9jv7Z4L4RS30jCLon4bLofXW__x-fQYBuLCxfPz4VS24eV-XJf8QxVd35_PR_9wO9bHZPNvADPX0Lm8oJRrnKIzNeY0Rq8lo0QqLFDRXzmk7gbmCmXH-s3PXdtaB76hqldTI6Q6bm1ZTLmP_xlUi3Hfxs6gT6UBumryFwAA___DNkm_> " ], "from": "Foot Ankle Center of Cache Valley and the Wind Clinic <customerservice@chat.inboxhealth.com>", "to": "john.weaver@sdl.usu.edu", "attachements": [ "enterprise_logo.png" ] }
URL: https://inboxhealth.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://inboxhealth.com
URL: https://patient.inboxhealth.com/quickPay?confirmat... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This script appears to be a legitimate Hotjar analytics script, which is a common third-party tracking and analytics service. While it uses the `window` and `document` objects to interact with the page, it does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The script is also loaded from a known, reputable domain (Hotjar). Overall, this script is likely benign and used for standard web analytics purposes." }
(function(h,o,t,j,a,r){ h.hj=h.hj\|\|function(){(h.hj.q=h.hj.q\|\|[]).push(arguments)}; h._hjSettings={hjid:1820622,hjsv:6}; a=o.getElementsByTagName('head')[0]; r=o.createElement('script');r.async=1; r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv; a.appendChild(r); })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');
URL: Email Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click the button below to view your statement and make payments. In order to access your statement details, you'll need to verify your date of birth.", "prominent_button_name": "Click here to pay", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/assets/inbox-patie... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script primarily involves defining Ember.js adapters and services for an application, with no high-risk behaviors like dynamic code execution or data exfiltration. It includes some tracking behavior with TrackJS for error reporting, which is a low-risk indicator. The script interacts with potentially trusted domains, as it is part of a structured application framework, suggesting legitimate use." }
"use strict" define("inbox-patient/adapters/application",["exports","ember","ember-simple-auth/mixins/data-adapter-mixin","active-model-adapter","inbox-patient/mixins/adapter-helpers","inbox-patient/config/environment"],(function(e,t,n,a,l,r){e.default=a.default.extend(l.default,n.default,{session:t.default.inject.service("session"),namespace:r.default.namespace,authorize:function(e,t){this.get("session.isAuthenticated")&&this.get("session.data.authenticated.token")&&e.setRequestHeader("Authorization",this.get("session.data.authenticated.token"))}})})),define("inbox-patient/adapters/dispute",["exports","inbox-patient/adapters/application","ember-cli-form-data/mixins/form-data-adapter"],(function(e,t,n){e.default=t.default.extend(n.default,{})})),define("inbox-patient/adapters/mass-message",["exports","ember","inbox-patient/adapters/application"],(function(e,t,n){e.default=n.default.extend({findRecord:function(e,n,a,l){var r=t.default.get(l,"adapterOptions.checkForActualPatientCount"),i=t.default.get(l,"adapterOptions.checkForPotentialPatientCount"),o=this.buildURL(n.modelName,a,l,"findRecord") return this.ajax(o,"GET",{data:{check_for_actual_patient_count:r,check_for_potential_patient_count:i}})}})})),define("inbox-patient/adapters/medicare-eligibility-response",["exports","inbox-patient/adapters/application"],(function(e,t){e.default=t.default.extend({pathForType:function(e){return"eligibility_responses"}})})),define("inbox-patient/adapters/patient",["exports","ember","inbox-patient/adapters/application"],(function(e,t,n){e.default=n.default.extend({routing:t.default.inject.service("-routing"),findRecord:function(e,t,n,a){var l=this.get("routing.currentRouteName"),r=l.includes("patients-beta.show"),i=r\|\|l.includes("patients.show"),o={fetch_time_bucket:r,check_for_unsynced_payments:i,check_for_api_integration:i} if(i){var d=this.buildURL(t.modelName,n,a,"findRecord") return this.ajax(d,"GET",{data:o})}return this._super.apply(this,arguments)}})})),define("inbox-patient/adapters/payment",["exports","ember","inbox-patient/adapters/application"],(function(e,t,n){e.default=n.default.extend({findRecord:function(e,n,a,l){var r=this.buildURL(n.modelName,a,"","findRecord") return this.ajax(r,"GET",{data:t.default.get(l,"adapterOptions")})}})})),define("inbox-patient/adapters/practice-user",["exports","inbox-patient/adapters/application"],(function(e,t){e.default=t.default.extend({shouldBackgroundReloadRecord:function(e,t){return!1}})})),define("inbox-patient/adapters/precertification",["exports","inbox-patient/adapters/application","ember-data"],(function(e,t,n){e.default=t.default.extend({handleResponse:function(e,t,a){return this.isInvalid(e,t,a)?a.errors?new n.default.InvalidError(a.errors):a:this._super.apply(this,arguments)}})})),define("inbox-patient/adapters/regular-eligibility-response",["exports","inbox-patient/adapters/application"],(function(e,t){e.default=t.default.extend({pathForType:function(e){return"eligibility_responses"}})})),define("inbox-patient/app",["exports","ember","inbox-patient/resolver","ember-load-initializers","inbox-patient/config/environment","lodash"],(function(e,t,n,a,l,r){t.default.MODEL_FACTORY_INJECTIONS=!0,t.default.$.support.cors=!0,Chart.defaults.global.responsive=!0,accounting.settings.currency.rounding_type="gaussian",accounting.settings.number.rounding_type="gaussian" var i=t.default.Application.extend({modulePrefix:l.default.modulePrefix,podModulePrefix:l.default.podModulePrefix,Resolver:n.default,rootElement:r.default.endsWith(l.default.environment.underscore(),"omp")?"#ember-app-body":"body"}) t.default.LinkComponent.reopen({attributeBindings:["data-toggle","data-placement","data-id"]}),t.default.TextSupport.reopen({classNames:["form-control"]}),String.prototype.titleize=function(){return this.underscore().split("_").join(" ").capitalize()},l.default.enableTrackJs&&window.TrackJS&&TrackJS.install({token:"f102e8a423c740618a77314a75eb71a6",application:l.default.trackJsKey,onError:function(e){retu
URL: https://www.gstatic.com/_/mss/boq-payments-consume... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The script appears to be part of a legitimate library, likely related to Google's Closure Library, as indicated by the copyright notices. It does not exhibit any high-risk behaviors such as dynamic code execution or data exfiltration. The script primarily involves variable declarations and function definitions without any suspicious external interactions or obfuscation." }
"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this; try{ _._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1e01830, 0x0, ]); /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright 2024 Google, Inc SPDX-License-Identifier: MIT */ var ha,za,Ea,Ga,La,Oa,Za,ib,tb,ub,xb,zb,Ab,Bb,Cb,Db,Gb,Hb,Ib,Kb,Mb,Pb,Sb,Ub,Zb,$b,bc,cc,ic,nc,oc,zc,Cc,Ec,Hc,Ic,Dc,Kc,Lc,Mc,Sc,Yc,ad,bd,cd,md,ld,pd,rd,sd,ud,yd,zd,Cd,Id,Vd,qe,me,se,B,De,Ue,Ye,$e,bf,ff,of,sf,vf,wf,Ff,Hf,Wf,ig,kg,pg,Eg,yg,Jg,Kg,Lg,Og,Pg,$g,lh,dh,uh,vh,wh,yh,zh,Ah,Eh,Fh,Nh,Ph,Qh,Rh,Sh,Th,Uh,Vh,$h,ai,di,li,oi,aa,pi,qi,ri,ti,Ai,Ci,Ei,Fi,Li,Oi,Mi,Ni,Pi,Qi;_.ba=function(a){return function(){return aa[a].apply(this,arguments)}};_.ca=function(a,b){return aa[a]=b}; _.da=function(a){_.n.setTimeout(function(){throw a;},0)};_.ea=function(a){a&&typeof a.dispose=="function"&&a.dispose()};ha=function(a){for(var b=0,c=arguments.length;b<c;++b){var d=arguments[b];_.fa(d)?ha.apply(null,d):_.ea(d)}};_.ia=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.ia);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b);this.j=!0};_.ja=function(a){return a[a.length-1]}; _.ka=function(a,b,c){for(var d=typeof a==="string"?a.split(""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[e],e,a)};_.ma=function(a,b,c){b=_.la(a,b,c);return b<0?null:typeof a==="string"?a.charAt(b):a[b]};_.la=function(a,b,c){for(var d=a.length,e=typeof a==="string"?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,e[f],f,a))return f;return-1};_.oa=function(a,b){return(0,_.na)(a,b)>=0};_.qa=function(a,b){_.oa(a,b)\|\|a.push(b)};_.sa=function(a,b){b=(0,_.na)(a,b);var c;(c=b>=0)&&_.ra(a,b);return c}; _.ra=function(a,b){return Array.prototype.splice.call(a,b,1).length==1};_.ta=function(a){var b=a.length;if(b>0){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};_.ua=function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(_.fa(d)){var e=a.length\|\|0,f=d.length\|\|0;a.length=e+f;for(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}};_.va=function(a,b,c){return arguments.length<=2?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)}; _.ya=function(a,b){b=b\|\|a;for(var c=0,d=0,e={};d<a.length;){var f=a[d++],g=_.wa(f)?"o"+_.xa(f):(typeof f).charAt(0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.Aa=function(a,b){if(!_.fa(a)\|\|!_.fa(b)\|\|a.length!=b.length)return!1;for(var c=a.length,d=za,e=0;e<c;e++)if(!d(a[e],b[e]))return!1;return!0};_.Ba=function(a,b){return a>b?1:a<b?-1:0};za=function(a,b){return a===b};_.Ca=function(a,b){var c={};(0,_.r)(a,function(d,e){c[b.call(void 0,d,e,a)]=d});return c}; Ea=function(){var a=null;if(!Da)return a;try{var b=function(c){return c};a=Da.createPolicy("InstantbuyFrontendBuyflowPayframeUi#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};Ga=function(){Fa===void 0&&(Fa=Ea());return Fa};_.Ia=function(a){var b=Ga();return new _.Ha(b?b.createHTML(a):a)};_.Ja=function(a){if(a instanceof _.Ha)return a.j;throw Error("A");};La=function(a){var b=Ga();return new _.Ka(b?b.createScriptURL(a):a)}; _.Ma=function(a){if(a instanceof _.Ka)return a.j;throw Error("A");};Oa=function(a){return new Na(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.Ra=function(a,b){b=b===void 0?_.Pa:b;if(a instanceof _.Qa)return a;for(var c=0;c<b.length;++c){var d=b[c];if(d instanceof Na&&d.qe(a))return new _.Qa(a)}};_.Ta=function(a){if(Sa.test(a))return a};_.Ua=function(a){if(a instanceof _.Qa)if(a instanceof _.Qa)a=a.j;else throw Error("A");else a=_.Ta(a);return a}; _.Wa=function(a){var b=_.Va.apply(1,arguments);if(b.length===0)return La(a[0]);for(var c=a[0],d=0;d<b.length;d++)c+=encodeURIC
URL: Email Model: Joe Sandbox AI	{ "brands": [ "Foot & Ankle Center of Cache Valley", "Wind Clinic" ] }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Your bills are ready for payment. You have 1 bill due from Foot & Ankle Center of Cache Valley and the Wind Clinic.", "prominent_button_name": "Pay now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Your bills are ready for payment. You have 1 bill due from Foot & Ankle Center of Cache Valley and the Wind Clinic.", "prominent_button_name": "Pay now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Your bills are ready for payment. You have 1 bill due from Foot & Ankle Center of Cache Valley and the Wind Clinic.", "prominent_button_name": "Pay now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": [ "Foot & Ankle Center of Cache Valley", "The Wind Clinic" ] }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": [ "Card number:", "CVC:", "Expiration date:", "Name on card:", "Billing address" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": [ "Enter payment amount", "Card number:", "CVC:", "Expiration date:", "Name on card:", "Billing address" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Validate card", "text_input_field_labels": [ "Name on card:", "Address line 1:", "Address line 2:", "Zip Code (Required):" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Validate card", "prominent_button_name": "Validate card", "text_input_field_labels": [ "Country:", "City:", "State:", "Zip Code (Required):" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": [ "Card number:", "CVC:", "Expiration date:", "Name on card:", "Address line 1:", "Address line 2:", "Country:", "City:", "State:", "Zip Code (Required):" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Validate card", "text_input_field_labels": [ "CVC", "Name on card", "Address line 1", "Address line 2", "City", "State", "Zip Code (Required)" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": [ "Inbox Health" ] }
	{ "brands": [ "Inbox Health" ] }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": [ "Enter payment amount", "Card number:", "CVC:", "Expiration date:", "Name on card:", "Billing address" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": [ "Card number:", "CVC:", "Expiration date:", "Name on card:", "Address line 1:", "Address line 2:", "Country:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": [ "Enter payment amount", "Card number:", "CVC:", "Expiration date:", "Name on card:", "Billing address" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": [ "Card number:", "CVC:", "Expiration date:", "Name on card:", "Address line 1:", "Address line 2:", "Country:", "City:", "State:", "Zip Code (Required):" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
	{ "brands": [ "Foot & Ankle Center of Cache Valley" ] }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "To view the full details of your bills, click below:", "prominent_button_name": "Validate card", "text_input_field_labels": [ "Country:", "City:", "State:", "Zip Code (Required):" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	{ "brands": [ "HIPAA", "AICPA SOC" ] }
	{ "brands": [ "HIPAA", "AICPA SOC" ] }
URL: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Model: Joe Sandbox AI	```json{ "legit_domain": "inboxhealth.com", "classification": "known", "reasons": [ "The domain 'inboxhealth.com' is a legitimate domain associated with Inbox Health, a company known for healthcare communication solutions.", "The brand 'HIPAA' is not a company but a regulation, so it does not have an associated domain. However, HIPAA compliance is often mentioned in healthcare-related services.", "The URL 'patient.inboxhealth.com' is a subdomain of 'inboxhealth.com', which is a legitimate domain.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The input fields are typical for a healthcare-related service, which aligns with the domain's purpose." ], "riskscore": 2}
URL: patient.inboxhealth.com Brands: HIPAA Input Fields: Country:, City:, State:, Zip Code (Required):
URL: Email Model: Joe Sandbox AI	{"classification":"Credential Stealer"}
Email: Detected potential phishing email: The email contains multiple tracking/redirect URLs through protect2.fireeye.com which is suspicious for a medical bill. The email asks for sensitive information (date of birth) to access a statement, which is unusual. The sender domain 'chat.inboxhealth.com' doesn't match the claimed medical facility name	{"classification":"Credential Stealer"}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
151.101.0.176	https://click.pstmrk.it/3s/veed.io%2Fshare-video-link%3Ftoken%3DeyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MzQ2MzE2NDgsImlhdCI6MTczNDYzMDc0OCwic3ViIjoiZmY0NTdiM2MtYjI3MC00YzA0LWEwOTEtYjY3ZDJkOGQ3ZTU1Iiwicm9sZXMiOltdLCJraWQiOiJwcm9qZWN0cy92ZWVkLXByb2Qtc2VydmVyL2xvY2F0aW9ucy9ldXJvcGUtd2VzdDEva2V5UmluZ3MvdmVlZC1wcm9kLWtleXJpbmcvY3J5cHRvS2V5cy92ZWVkLXByb2QtandrLWtleS9jcnlwdG9LZXlWZXJzaW9ucy8xIiwiZmVhdHVyZXMiOnt9LCJzY29wZXMiOltdfQ.f-EtSCYYeQiR4cEb8w5ABF3koXpbxl8QeFIarADkLP6q32DzsnFZl76Y98Uad7M8RBPPuOQOV9SUbCY1hRa4IbqV9_4cTm0v7DuBTCKOZbHN1NiATZOGw2BzdEMqIEfnNo5A_H2_DLVQZLtd6sZzcRoNBzbmcq2_xlzWgmqIErGV0VYXIb-Vac1b-3wmAgIyE-VS7Cd5aHYtVyiV9T5HfrpjPl7-M6dLIaQqm6103z7gO_qoKow1qbFmNgGaUsQED1CHbqo-hCgXzib7NToyu0Qq4kSl-2NEzgLMKy1zFR2J0E0vr9FHirjR9fmmDF2nk76Ht8L2WbV-dRyXZBZaUikfojo56vYWI9cfSQrG_awuFNR0M1s6dpPwumDM8sXlMZYt4u5WZaNcRZynPHXeqNZcdwKhlZrFN0U3B3U7B69avz_FlMxw6Or_0aeJkUP5YZP3wH-IIbwwa6es37u8G7gWYINEfp-pJlKV7klV1CcskLf_53iNx7MtxgvAXLMNZJ2tnuxY8W6w_E-pchjpNP2I5NV2Ui2_bNSgl3kBuX3oWsX0m_wL3MZ39pE3paPp2FAIgQPpZ5a0BhmPYsMk2IPPel2dll8j1IYBwHsZ5a1IHsHA6gTMWkJl-uhAjN4mnXo7Om0NWRZvfFvatgA4YCoTXdntM31GIZxAyWF9a14%26postLoginUrl%3D%252Fview%252F3ab9b7be-178c-4289-b29e-75921856f7f5%252F/oMlP/0SC6AQ/AQ/15f5e010-d260-490a-9e5d-79f5643b5481/1/HSOO9aL291	Get hash	malicious	Unknown	Browse
	https://www.grapevine.org/join/next-gen-giving-circle-dc	Get hash	malicious	Unknown	Browse
	https://atc-secure.com/nocod/wetransdnyd.html#k.muench@muenchundmuench.com	Get hash	malicious	Unknown	Browse
	https://dashboard.sizle.io/p/f7c9cdf19	Get hash	malicious	HTMLPhisher	Browse
	https://prezi.com/i/wuualyitwcxt/	Get hash	malicious	HTMLPhisher	Browse
	https://0azeevmdi7.codedesign.app/	Get hash	malicious	Unknown	Browse
	https://nischatalks.lt.acemlna.com/Prod/link-tracker?redirectUrl=aHR0cHMlM0ElMkYlMkZkZmwwLnVzJTJGcyUyRmM0MTJmMDEzJTNGZW0lM0RkaWxpcC5tYXRoZXclNDBjYXNhLmdvdi5hdQ==&sig=F28J3VAL72g8YRkFLWUvhqFSBag5sKdkQKwMeDdTvDbT&iat=1732885424&a=%7C%7C226329423%7C%7C&account=nischatalks.activehosted.com&email=4Tp4HabxiWO4pvz6roguRO3SDqvOBrDfqzRC3S4QX3U%3D&s=075f541518f72bd1137bd07bd6bf86a5&i=444A374A1A2736	Get hash	malicious	Unknown	Browse
	http://comgeotetra.sytes.net	Get hash	malicious	HTMLPhisher	Browse
	http://www.thecrownstate.co.uk/	Get hash	malicious	Unknown	Browse
	http://t.ly/YSjhI	Get hash	malicious	Unknown	Browse
104.19.230.21	https://alphaarchitect.com/2024/12/long-term-expected-returns/	Get hash	malicious	Unknown	Browse
	https://us-west-2.protection.sophos.com/?d=microsoft.com&u=aHR0cHM6Ly9jdXN0b21lcnZvaWNlLm1pY3Jvc29mdC5jb20vUGFnZXMvUmVzcG9uc2VQYWdlLmFzcHg_aWQ9R1V1LXNGcV9vVWVfanViX1RzNWNzTjJ3cmI2cGNXbEJ2Vm9kQTg3OVBVbFVNRGMyUXpNd00wdENVVFJWT1ZGUFRWYzNPRWM1V0ZsRE1DNHU=&i=NThlN2NjYzYyOTljZjkxNGY4YmM0YmNh&t=YzVvY0ZoOHFRSGdCNnRncDc0ajJVNDZ2OTFMQXU1d0o3eU5tbk9LTnRwdz0=&h=fb80ac6ee6b9415ab2e67948974a6ac6&s=AVNPUEhUT0NFTkNSWVBUSVYEA8vQ82X9oDKen41DcCmWhkUnMNiRIUMWwszf4nzAf5AOW4BqwHD-tdThtGIGLos	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse
	http://xn--gmq700hb9ir4byxw.shop/bnBkL2ViZml0c2JwY0F7Zm1mdy9idWp0cHMkbHYvcGQvem1xanVtYnNmZC9xbmJ3MDA7dHF1dWk	Get hash	malicious	ReCaptcha Phish	Browse
	https://verification.com/omid_error?	Get hash	malicious	Unknown	Browse
	https://login.officeteam.didgim.com/factpath/resources/patch/047620476204762098/?tpj=PlKRhyZP6wwT3cO_YX5-vBD5GuXYTvvU?SehS24G3uU3qw64njI8IZH7gQJoi5rbp7C2uDZbPGel89LOXSbLkxzcBkcMiAnricyOgDlVZzgK16brTMbOGyuYoLIN4U0HH714J	Get hash	malicious	ReCaptcha Phish	Browse
	https://m0g9861wc1.execute-api.us-east-1.amazonaws.com/uyt/#alissa.bessette@eastwesttea.com	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse
	https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6	Get hash	malicious	Unknown	Browse
	https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Ffileshareinfoviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6	Get hash	malicious	Unknown	Browse
	https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Fmandedmskhd.s3-website-us-west-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3b518&linkid=6	Get hash	malicious	HTMLPhisher	Browse
	https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBemf3zEg5VOxgJRxd3H%26fg%3DSSndprYXntqQtLjEHziw%26url%3Damp%252Fdocumentsviewnow.s3-website.us-east-2.amazonaws.com&user_id=1719536768&uniqid=76018695-412152-662ef280-88c3	Get hash	malicious	Unknown	Browse
108.158.75.118	https://www.aarp.org/money/scams-fraud/info-2024/title-theft-real-estate-fraud.html	Get hash	malicious	HTMLPhisher	Browse
	https://verification.com/omid_error?	Get hash	malicious	Unknown	Browse
	https://0azeevmdi7.codedesign.app/	Get hash	malicious	Unknown	Browse
108.158.75.116	Welcome To Raise.eml	Get hash	malicious	Unknown	Browse
	http://svchorst.com	Get hash	malicious	Unknown	Browse
	https://docsend.com/view/ygpcsdciay42c22x	Get hash	malicious	Unknown	Browse
	https://safelinks.mygo1.com/ls/click?upn=u001.1mDt7ytPYCJSVG-2BhF04Stdj4cHPTtKuY-2FmURzzu8QTldxw-2FzpyQYTJMxn3CPFnnsIuOY-2F5ruiOS6FLjm58JljkOmonXKnT8iwwYmA30I9bsERP5vx05gL85c3Lc-2F9WrpUfyNz12kcqjd3wt6WtaxLWxoHc5J3Zua9xQUurCc2AIjJtnP8Xu6Otzn8DBWsS0QPl2WC-2FCyrpDHulFvP0eEWn9IDo-2BqFc1GmD1SsVw5lRKY6yWeuyFQhUWIqZ4VCAeEroA6Ndqh9iaNvFz0XzERrEFYNTxkPirSQWkw6YqX5uo-3DaVWv_h5yw3DykLZfOpXzx776oAcLdVv6tuK-2FE7nfoR01CbnMOUH4fGhxn3KVtBew-2BRfJoKGgpvyhjBTXBTw1J6hN0wi-2FkZpowy1W9-2BTe-2Bf57Ts50FCXINRnefXkQ-2FFO3hKPeSa4hJKnd-2Bpj-2F7GS6r3Uq0ucRRb6izhExkinWfndIosIP-2Ff06hq3eO6ged-2F-2FYA1ldX-2BK4wuZipA-2BXRgTIkXvTbKj74iEMllOxCNkgoQZE3mKkIMM6o0L-2FNgq5TR8KcWZzS-2BEoZ1Oyop5AmC8zRE1SSKfnZ-2F0g1qg2dir-2F788Fq8CtpqmRpkFaF34nQcSYSfbixDSj0B5gj0fuY43UiPKR2D9s0w8lZaDR5dDYOswzPttauCIiIjiyfK20I-2BA4JjKFg	Get hash	malicious	Unknown	Browse
108.158.75.113	http://annavirgili.com	Get hash	malicious	CAPTCHA Scam ClickFix	Browse
	https://docsend.com/view/nw5cttresp36nsvc	Get hash	malicious	Unknown	Browse
	https://wakelet.com/wake/VbMFlGJpfAHdaeAVj5Ic0	Get hash	malicious	Unknown	Browse
	http://surl.li/oycpee	Get hash	malicious	Unknown	Browse
	https://dhl_sharing0documentspreview.wesendit.com/dl/lijHBW9lFmPpZFiGk/amFja0B0cnVuZGxleS5jb20	Get hash	malicious	Unknown	Browse
	http://christians-google-sh-97m2.glide.page/dl/d0a5f4	Get hash	malicious	Unknown	Browse
	https://safelinks.mygo1.com/ls/click?upn=u001.1mDt7ytPYCJSVG-2BhF04Stdj4cHPTtKuY-2FmURzzu8QTldxw-2FzpyQYTJMxn3CPFnnsIuOY-2F5ruiOS6FLjm58JljkOmonXKnT8iwwYmA30I9bsERP5vx05gL85c3Lc-2F9WrpUfyNz12kcqjd3wt6WtaxLWxoHc5J3Zua9xQUurCc2AIjJtnP8Xu6Otzn8DBWsS0QPl2WC-2FCyrpDHulFvP0eEWn9IDo-2BqFc1GmD1SsVw5lRKY6yWeuyFQhUWIqZ4VCAeEroA6Ndqh9iaNvFz0XzERrEFYNTxkPirSQWkw6YqX5uo-3DaVWv_h5yw3DykLZfOpXzx776oAcLdVv6tuK-2FE7nfoR01CbnMOUH4fGhxn3KVtBew-2BRfJoKGgpvyhjBTXBTw1J6hN0wi-2FkZpowy1W9-2BTe-2Bf57Ts50FCXINRnefXkQ-2FFO3hKPeSa4hJKnd-2Bpj-2F7GS6r3Uq0ucRRb6izhExkinWfndIosIP-2Ff06hq3eO6ged-2F-2FYA1ldX-2BK4wuZipA-2BXRgTIkXvTbKj74iEMllOxCNkgoQZE3mKkIMM6o0L-2FNgq5TR8KcWZzS-2BEoZ1Oyop5AmC8zRE1SSKfnZ-2F0g1qg2dir-2F788Fq8CtpqmRpkFaF34nQcSYSfbixDSj0B5gj0fuY43UiPKR2D9s0w8lZaDR5dDYOswzPttauCIiIjiyfK20I-2BA4JjKFg	Get hash	malicious	Unknown	Browse
	https://vendor.ziphq.com/magic-link/b47e3e5c-c77a-4377-b922-4ceee97070f7	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
d1tcqh4bio8cty.cloudfront.net	https://districtwharfoffices.com/l/home	Get hash	malicious	Unknown	Browse	108.158.75.47
	https://verification.com/omid_error?	Get hash	malicious	Unknown	Browse	108.158.75.118
	https://www.scribd.com/document/801519291/Advice-Notification#fullscreen&from_embed	Get hash	malicious	HTMLPhisher	Browse	52.222.144.58
	https://sendgb.com/Aw8gObHpGVR?utm_medium=dZJEAfc2MGnvjBD	Get hash	malicious	HTMLPhisher	Browse	108.158.75.14
	https://0azeevmdi7.codedesign.app/	Get hash	malicious	Unknown	Browse	108.158.75.118
	http://comgeotetra.sytes.net	Get hash	malicious	HTMLPhisher	Browse	108.158.75.47
	https://qrcodeveloper.com/code/87JgljWuQCR6Oeir	Get hash	malicious	Unknown	Browse	108.158.75.14
	http://r.srvtrck.com/v1/redirect?url=http://www.ritual.com&api_key=2787b73d6d1c026b48687320e239182a&site_id=e5c21d0795544b439bdb70bae77167c9&type=url&yk_tag=973511c5431487e8a29276d8e592449d	Get hash	malicious	Unknown	Browse	18.173.205.62
	https://www.chambersschool.org/programs/early-childhood	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	18.239.94.73
	https://mlbmajorlossbuilders.hbportal.co/flow/66fdd3a6c031cc001f728831/view?hash=54079a777636a614d8d961b5b9a96a5f	Get hash	malicious	Unknown	Browse	18.173.205.12
script.hotjar.com	https://click.pstmrk.it/3s/veed.io%2Fshare-video-link%3Ftoken%3DeyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MzQ2MzE2NDgsImlhdCI6MTczNDYzMDc0OCwic3ViIjoiZmY0NTdiM2MtYjI3MC00YzA0LWEwOTEtYjY3ZDJkOGQ3ZTU1Iiwicm9sZXMiOltdLCJraWQiOiJwcm9qZWN0cy92ZWVkLXByb2Qtc2VydmVyL2xvY2F0aW9ucy9ldXJvcGUtd2VzdDEva2V5UmluZ3MvdmVlZC1wcm9kLWtleXJpbmcvY3J5cHRvS2V5cy92ZWVkLXByb2QtandrLWtleS9jcnlwdG9LZXlWZXJzaW9ucy8xIiwiZmVhdHVyZXMiOnt9LCJzY29wZXMiOltdfQ.f-EtSCYYeQiR4cEb8w5ABF3koXpbxl8QeFIarADkLP6q32DzsnFZl76Y98Uad7M8RBPPuOQOV9SUbCY1hRa4IbqV9_4cTm0v7DuBTCKOZbHN1NiATZOGw2BzdEMqIEfnNo5A_H2_DLVQZLtd6sZzcRoNBzbmcq2_xlzWgmqIErGV0VYXIb-Vac1b-3wmAgIyE-VS7Cd5aHYtVyiV9T5HfrpjPl7-M6dLIaQqm6103z7gO_qoKow1qbFmNgGaUsQED1CHbqo-hCgXzib7NToyu0Qq4kSl-2NEzgLMKy1zFR2J0E0vr9FHirjR9fmmDF2nk76Ht8L2WbV-dRyXZBZaUikfojo56vYWI9cfSQrG_awuFNR0M1s6dpPwumDM8sXlMZYt4u5WZaNcRZynPHXeqNZcdwKhlZrFN0U3B3U7B69avz_FlMxw6Or_0aeJkUP5YZP3wH-IIbwwa6es37u8G7gWYINEfp-pJlKV7klV1CcskLf_53iNx7MtxgvAXLMNZJ2tnuxY8W6w_E-pchjpNP2I5NV2Ui2_bNSgl3kBuX3oWsX0m_wL3MZ39pE3paPp2FAIgQPpZ5a0BhmPYsMk2IPPel2dll8j1IYBwHsZ5a1IHsHA6gTMWkJl-uhAjN4mnXo7Om0NWRZvfFvatgA4YCoTXdntM31GIZxAyWF9a14%26postLoginUrl%3D%252Fview%252F3ab9b7be-178c-4289-b29e-75921856f7f5%252F/oMlP/0SC6AQ/AQ/15f5e010-d260-490a-9e5d-79f5643b5481/1/HSOO9aL291	Get hash	malicious	Unknown	Browse	13.227.8.16
	http://johnlewisfinance.qa.uinsure.co.uk	Get hash	malicious	Unknown	Browse	3.164.85.104
	https://www.grapevine.org/join/next-gen-giving-circle-dc	Get hash	malicious	Unknown	Browse	3.164.85.104
	http://inspirafinancial.com	Get hash	malicious	Unknown	Browse	108.139.60.69
	https://www.cadbury.com@nmlr.xyz/christmas-hamper	Get hash	malicious	Unknown	Browse	13.227.8.4
	http://inspirafinancial.com	Get hash	malicious	Unknown	Browse	3.164.85.124
	http://ebaumsworld.com	Get hash	malicious	Unknown	Browse	13.227.8.2
	http://annavirgili.com	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	3.164.85.124
	http://annavirgili.com	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	3.164.85.124
	http://annavirgili.com	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	13.227.8.16
vc-live-cf.hotjar.io	https://www.grapevine.org/join/next-gen-giving-circle-dc	Get hash	malicious	Unknown	Browse	18.66.161.106
	http://annavirgili.com	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	3.164.182.78
	http://annavirgili.com	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	3.164.182.78
	http://annavirgili.com	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	18.66.161.61
	http://get-derila.com	Get hash	malicious	Unknown	Browse	18.66.161.34
	https://1wbapm.life	Get hash	malicious	Unknown	Browse	18.66.161.34
	https://multikultural.az/web/v2/index.php?query=bWVubmVuQHNlbmlvcnNvbHV0aW9uc3Z0Lm9yZw==	Get hash	malicious	Unknown	Browse	18.66.161.106
	https://developmentltd.online/	Get hash	malicious	Captcha Phish	Browse	18.66.112.19
	https://www.pumpproducts.com/goulds-lb0735te-centrifugal-booster-pump-3-4-hp-208-230-460-volts-3-phase-1-1-4-npt-suction-1-npt-discharge-18-gpm-max-176-ft-max-head-5-impeller-tefc-stainless-steel-pump-end-casing.html	Get hash	malicious	Unknown	Browse	18.66.112.110
	rfc[1].html	Get hash	malicious	Unknown	Browse	3.168.122.109
static.zdassets.com	http://trackmail.info/QLTRG66TP4/offer/00248/811/iuk7x/b4q/41/32	Get hash	malicious	Unknown	Browse	216.198.53.3
	https://grizzled-overjoyed-bag.glitch.me/#comercial.portugal@eurofred.com	Get hash	malicious	HTMLPhisher	Browse	216.198.53.3
	https://computeroids.com/hp-printer-driver?utm_source=Google&utm_medium=Click&utm_campaign=HP&utm_term=%7Bkeywords%7D&utm_content=%7Bmedium%7D&tm=tt&ap=gads&aaid=adaHxflMmgPq7&camp_id=12260099411&ad_g_id=118845692873&keyword=install%20hp%20printer%20to%20computer&device=c&network=searchAd&adposition=&gad_source=5&gclid=EAIaIQobChMI0JDUvuabigMV_Uf_AR2MuQCMEAAYASAAEgKQMPD_BwE	Get hash	malicious	PureLog Stealer	Browse	216.198.53.3
	https://allgen.vercel.app/?web=brian@cbfloorsinc.com	Get hash	malicious	Unknown	Browse	216.198.54.3
	https://hdtodayz.to/movie/watch-the-shawshank-redemption-hd-19679	Get hash	malicious	HTMLPhisher	Browse	216.198.54.3
	https://kitces.emlnk1.com/	Get hash	malicious	Unknown	Browse	216.198.53.3
	http://kitces.emlnk1.com	Get hash	malicious	Unknown	Browse	216.198.54.3
	http://kitces.emlnk1.com	Get hash	malicious	Unknown	Browse	216.198.54.3
	http://kitces.emlnk1.com	Get hash	malicious	Unknown	Browse	216.198.53.3
	http://taerendil.free.fr/Kzf20FukxrNV0r0Xw3	Get hash	malicious	Unknown	Browse	216.198.53.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://lvxsystem.info/	Get hash	malicious	Unknown	Browse	151.101.194.137
	nM0h824cc3.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	nM0h824cc3.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	http://www.eventcreate.com/e/you-have-received-a-new-doc	Get hash	malicious	HTMLPhisher	Browse	151.101.1.137
	gTU8ed4669.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	gTU8ed4669.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	https://dnearymedahealthstaffing.wordpress.com/medahealthstaffing-proposal/	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	http://northwesthousingservices.discussripped.com	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	mniscreenthinkinggoodforentiretimegoodfotbusubessthings.hta	Get hash	malicious	Cobalt Strike	Browse	151.101.1.137
	58VSNPxrI4.exe	Get hash	malicious	Unknown	Browse	185.199.108.133
CLOUDFLARENETUS	https://lvxsystem.info/	Get hash	malicious	Unknown	Browse	172.67.183.243
	Set-up.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.84.113
	Ziraat_Bankasi_Swift_Mesaji_TXB04958T.scr.exe	Get hash	malicious	MassLogger RAT	Browse	172.67.177.134
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRAT	Browse	172.67.197.170
	Statement_3029_from_Cross_Traders_and_Logistics_ltd.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.67.152
	Fortexternal.exe	Get hash	malicious	Unknown	Browse	172.67.75.163
	Loader.exe	Get hash	malicious	LummaC	Browse	104.21.90.135
	Sentinelled.vbs	Get hash	malicious	Unknown	Browse	104.21.86.72
	nshkarm.elf	Get hash	malicious	Mirai	Browse	104.25.87.101
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
AMAZON-AESUS	nshkarm5.elf	Get hash	malicious	Mirai	Browse	54.24.234.33
	nshkmips.elf	Get hash	malicious	Mirai	Browse	54.134.19.128
	nshkarm.elf	Get hash	malicious	Mirai	Browse	54.236.222.80
	KNkr78hyig.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	Tsy9P2T9yF.exe	Get hash	malicious	Unknown	Browse	34.226.108.155
	nshkppc.elf	Get hash	malicious	Mirai	Browse	54.136.161.117
	kGxQbLOG7s.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	ppc.elf	Get hash	malicious	Mirai	Browse	3.221.94.196
	HHFgVU1HGu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	GxSEtDSBuK.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
AMAZON-02US	arm6.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	nshkmpsl.elf	Get hash	malicious	Mirai	Browse	184.169.138.16
	INVOICE_2279_from_RealEyes Digital LLC (1).pdf	Get hash	malicious	Unknown	Browse	108.158.75.109
	nshkmips.elf	Get hash	malicious	Mirai	Browse	52.68.87.223
	nshmips.elf	Get hash	malicious	Mirai	Browse	18.176.7.234
	nshkarm.elf	Get hash	malicious	Mirai	Browse	54.168.12.140
	nshkppc.elf	Get hash	malicious	Mirai	Browse	18.157.142.187
	nsharm7.elf	Get hash	malicious	Mirai	Browse	54.98.64.96
	https://cv01zl.s3.amazonaws.com/index.html?AWSAccessKeyId=AKIAWPPO57XS4BTHJAEO&Signature=bBChlGCf3qnCt%2B4WchKJjXtb09k%3D&Expires=1734874865#stewart.thomas@cambridgeshire.gov.uk	Get hash	malicious	Fake Captcha	Browse	52.217.128.241
	nshmpsl.elf	Get hash	malicious	Mirai	Browse	54.70.192.56

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	231348
Entropy (8bit):	4.382087144981948
Encrypted:	false
SSDEEP:	1536:eZYLk/gs1yTPsjNa8gsNnNcAz79ysQqt2d20JqoQ70rcm0FvLPEyAlnxdES0kgk3:tsg/4LgemiGu2BqoQ4rt0FvT+A+PVq2h
MD5:	FADF46F054F72F5CA75E127D3C26B8F7
SHA1:	3848476A16482CE8793E97F01E7E01304E548137
SHA-256:	0CFD49FADACE505024526C0060E2F610297ADF4D1996C26E997DAA86E766BCC0
SHA-512:	C9FF765E0F6A28C23168EB8B02B2B3B1BF9BF097C78C9D5592F2538CE2B25B1E7EDB89DA893E9F70CD6B34BB0B4C60599B6F4388D984B3BCE963439B1F2C5B8E
Malicious:	false
Reputation:	low
Preview:	TH02...... .0n.X.S......SM01X...,...P..X.S..........IPM.Activity...........h...............h............H..h........A1.....h.........<#.H..h\cal ...pDat...hX.#.0...x......hI4..."........h........_`Pk...h.3.@...I.lw...h....H...8.Uk...0....T...............d.........2h...............k;.1.....6.2...!h.............. h.[:...........#h....8.........$h.<#.....8....."h..'.....`.'...'h..............1hI4.<.........0h....4....Uk../h....h.....UkH..hxK".p.........-h .............+h.5......................... ..............F7..............FIPM.Activity....Form....Standard....Journal Entry...IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1122110020000000....Microsoft...This form is used to create journal entries.........kf...... ..........&...........(.......(... ...@.....................................................................................................................fffffffff........wwwwwwww.p....pp..............p...............pw..............pw..DDDDO..

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with very long lines (2149), with no line terminators
Category:	dropped
Size (bytes):	2149
Entropy (8bit):	5.085635809663426
Encrypted:	false
SSDEEP:	48:cGgdyUdyjdSyrudnzyZSyrenzyMJdyBkSyrdnzyr1nzyvASy/dyFtHylHyO:YEUEjdbqd2Zb622Embx2R2vAb/ETScO
MD5:	8D29C8B102B648F27496ECD073CE9701
SHA1:	2AC036DE2DE47E6E40A134CECB23F82764CB7DD9
SHA-256:	6C2DB76FCA8DB30DE743F03AA271C7D43468F69A7A5B6A07ED30875E9B06F18B
SHA-512:	17AC784533A260DF37CADC0621A7CB755C1D8A1343157243A74CECDACB3A4F26884F3CCC2A97ADECB39FE13EFB135AF1AAB55FEA97150CA7F24BF3B26822E299
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?><root><version>1</version><Count>14</Count><Resource><Id>Aptos_26215680</Id><LAT>2023-10-06T09:25:29Z</LAT><key>29939506207.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos_45876480</Id><LAT>2023-10-06T09:25:29Z</LAT><key>27160079615.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_26215424</Id><LAT>2023-10-06T09:25:29Z</LAT><key>31558910439.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Display_26215680</Id><LAT>2023-10-06T09:25:29Z</LAT><key>23001069669.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_45876224</Id><LAT>2023-10-06T09:25:29Z</LAT><key>24153076628.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Display_45876480</Id><LAT>2023-10-06T09:25:29Z</LAT><key>30264859306.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos_

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Nunito\24226543661.ttf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 13 names, Microsoft, language 0x409, Copyright 2014 The Nunito Project Authors (https://github.com/googlefonts/nunito)NunitoRegular3.
Category:	dropped
Size (bytes):	154312
Entropy (8bit):	5.986103952957403
Encrypted:	false
SSDEEP:	3072:0G9JjGe7a38VGbVjL+4TgbKDS3oUB7q+IoH:04Jes85P+4TgbKDS3o6q8
MD5:	04BA025B0C09479276C42D4913D0AD41
SHA1:	7DE7803187D02B13F851D23E949522A2F3393201
SHA-256:	880EAD818AF373B0DA8C2A3E493F7D0A9C1DB149A67A867B04F0952C475D667A
SHA-512:	8FBED7A356E2B50466C53C056188B86A9B278F19A7F3BB0E4B3703813143078787141D262105BE911E040819FF6200FB2404631D4FFD0765B9837C9476E392DF
Malicious:	false
Preview:	........... DSIG......Z.....GDEF..........4GPOSG.H.........GSUB%>^...M.....OS/2.:fQ.......`cmap1...........cvt ............fpgm.......x....gasp...........glyf......7D..a^head.......,...6hhea...Y...d...$hmtx..g........loca2o..........maxp........... name_.'........post.u<.......&.prep.....-(..............._.<.....................x............................./.x.x.........................O.T...b.....$.Z.....v.........F.........X...K...X...^.$.$................P. K........NONE.............5., .............. .....2.......................................................................................................................W. .....=...=...=...=...=...=...=...W.$.W.......W.......W.c.....W...W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.G.W.$.W...=...=...=...=...=...=...=...W.......W...W...W...W.D.W...W.......................O...O.......!...........!.....D...D...q.W.q.W...W...W...W...W...W...W...W...W...W.....W.Y.W.Y...W.'.W...W

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Poppins\26433847794.ttf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	TrueType Font data, digitally signed, 14 tables, 1st "DSIG", 17 names, Microsoft, language 0x409, Copyright 2020 The Poppins Project Authors (https://github.com/itfoundry/Poppins)PoppinsBoldITFO
Category:	dropped
Size (bytes):	155996
Entropy (8bit):	6.7071573562950295
Encrypted:	false
SSDEEP:	1536:YnWOJOJdR5JR15emIOl5VDG3a4rYq+yhyp0Zrg58OyzJpPXn95jaZ0Vu9c60OZWN:ROsXJIBOl5F4rYY9zfX9qW6QRGf85Rv
MD5:	92934D92F57E49FC6F61075C2AEB7689
SHA1:	45E4D582CBB4DAB2BBAD3F624FAD9AE567C66547
SHA-256:	983676516167748B74DE6F4771FB384C664FD913ACB8B471122ECACF5DA5EA6C
SHA-512:	07245C22FC1187FFBDD8826CF3E55313AA67056FC2989632526AAEAE62E19E1F2B2E14FB317B2C437ABF956047F2DB157D9A10C8703042B1788B48925666D083
Malicious:	false
Preview:	...........`DSIG......aT....GDEF......$\...@GPOS%.#...$.....GSUB......9...'.OS/2.$z....h...`cmap.....X....glyf.4.[.......head.Q$q.......6hhea...{...$...$hmtx............loca.~,....P...Jmaxp...%...H... name.......@...ppost.........".........< .._.<..................6........T.....................d.........................#.....$.....t.............d.........i.........X...K...X...^.2.N............................ITFO...........d.o.s .............. ...................G.<...<.B...B...5...U.............................<...<.....K.<...<.?...?...?.....)...............3...3...'.....@.g.?.T...i.@.........../...............8...\...e...C...........6.................7.d.....?.7...............U.7.K...................X.C.....<...I.......].:.K...............\...6......................."...............8...&...1...............6.......H.........7.c.....?.....a.............7.................g...).C.........I......./.:.!..........."...&.............i...0.U.9...........-.x...;.%.].*...1...T.}.>.......6

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	322260
Entropy (8bit):	4.000299760592446
Encrypted:	false
SSDEEP:	6144:dztCFLNyoAHq5Rv2SCtUTnRe4N2+A/3oKBL37GZbTSB+pMZIrh:HMLgvKz9CtgRemO3oUHi3SBSMZIl
MD5:	CC90D669144261B198DEAD45AA266572
SHA1:	EF164048A8BC8BD3A015CF63E78BDAC720071305
SHA-256:	89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899
SHA-512:	16F8A8A6DCBAEAEFB88C7CFF910BCCC71B76A723CF808B810F500E28E543112C2FAE2491D4D209569BD810490EDFF564A2B084709B02963BCAF6FDF1AEEC59AC
Malicious:	false
Preview:	51253fe60063c31af0d295afb42228b0:v2:2:1:1590:2:8479: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

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with no line terminators
Category:	modified
Size (bytes):	10
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:LtSSn:xfn
MD5:	163683B4538CB163ADD068A70EC11C91
SHA1:	F6DC3B24B3151CD93BEA15872A627BCDEFB8D9B8
SHA-256:	B40E24B765952C3F421DF0FC8B8528039DEA3EB5C7735A34A5DF1C3968A735A8
SHA-512:	73D709ABB2B1B7BD33366BDC766B39E7BBE6D4445978773D6B6E90A72A6FD1B17F908D36A4CFBEAB9D752FAF124EBAFD1847BF17B80BE9F058341AB5DC7A48D2
Malicious:	false
Preview:	1734717785

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite 3.x database, last written using SQLite version 3023002, writer version 2, read version 2, file counter 2, database pages 1, cookie 0, schema 0, largest root page 1, unknown 0 encoding, version-valid-for 2
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	0.09216609452072291
Encrypted:	false
SSDEEP:	3:lSWFN3l/klslpF/4llfll:l9F8E0/
MD5:	F138A66469C10D5761C6CBB36F2163C3
SHA1:	EEA136206474280549586923B7A4A3C6D5DB1E25
SHA-256:	C712D6C7A60F170A0C6C5EC768D962C58B1F59A2D417E98C7C528A037C427AB6
SHA-512:	9D25F943B6137DD2981EE75D57BAF3A9E0EE27EEA2DF19591D580F02EC8520D837B8E419A8B1EB7197614A3C6D8793C56EBC848C38295ADA23C31273DAA302D9
Malicious:	false
Preview:	SQLite format 3......@ .......................................................................... .....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	4616
Entropy (8bit):	0.13760166725504608
Encrypted:	false
SSDEEP:	3:7FEG2l+jNg/FllkpMRgSWbNFl/sl+ltlslVlllfllGSn:7+/lpg9bNFlEs1EP/2S
MD5:	44548B6F28B95E6B06CABD3C3E97200A
SHA1:	B7A9D7706CFBC8C7379E80BB5F5204F855C04CC9
SHA-256:	6D0EE1D190C623F1C6238E388D8A6C765A3ADB950E8552F3CDCC690B4DC057F6
SHA-512:	2303601A1BB5D72B4A187F4A65771369911AC06FE0685BE127BB3C34CE8721524301CE7217C23472945F785C1B6BDE08F76C7E198789CE93DC393ED6B06E06D6
Malicious:	false
Preview:	.... .c......(.7....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................SQLite format 3......@ .......................................................................... .................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04462234229792196
Encrypted:	false
SSDEEP:	6:G4l2iAP7xHutwl2iAP7xHutO0L9XXPH4l942U:l2iADxQQ2iADxQX5A0
MD5:	EB90E6F19355F12DDB7FD3966485E559
SHA1:	30492A3A9696B9C41C4DC5D6116CC9268594F017
SHA-256:	CC58A27C6AE14D96C0B04CF2D5F5CA7B3805333B0D8A0758275511C3D1901E9E
SHA-512:	29D87BEA44015FDC6622AF47F2F538A5E198002B51A034C656900CEB1D16AFA3E898B824D891FA8D0F79A3171A916D10E57217FAE977F64FABAB33035FD9BD12
Malicious:	false
Preview:	..-...................../.i..;@....`T.u........-...................../.i..;@....`T.u..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	45352
Entropy (8bit):	0.39393718646609366
Encrypted:	false
SSDEEP:	24:KKP7Q3zRDnyUAXUll7DBtDi4kZERDEl57zqt8VtbDBtDi4kZERD:bDQ1CUll7DYMwlJzO8VFDYM
MD5:	CAFF678CFAA586785DE93EDDB4835038
SHA1:	D735ABD926654EA787C85296A150541C24ED9C08
SHA-256:	886EB8B85115E2900958670C2D17EB0C5C00EA00926A1205CF47683674152E37
SHA-512:	0C610EFCADC2DF2AF06BA696AB2CAAC7D2165A11A87F2662C2998173155377A7F1192915259030D5695B4A153005BCD9501667B3B82E06FA6C5ACBB88592BA56
Malicious:	false
Preview:	7....-..............`T...-.u.er............`T.5\|.V6.r.SQLite format 3......@ .......................................................................... .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.847801930381172
Encrypted:	false
SSDEEP:	48:uiTrlKxsxxpxl9Il8ueQ5+7n5hrpOJTZUuPqaeUR8VBDo/d1rc:v9YYd7nlOlIS8v
MD5:	F14772AD1284028033C26BBCFE4E4883
SHA1:	CCFBCB576A601598E541E752F9F927431509F0B5
SHA-256:	77E61DA1AC8B573F1657233EC71B72E7602A1FE3AB6082CC78C847C0F7D6431A
SHA-512:	20EAA3B5444F166780AE28FB2BB80FFA1D2E0001E74BE7CB3097256F908A85F445103AAF532153119751FC609D4DE40F525D1756FA57ACF347A5FF02AFBAE6A5
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".C.J.1.m.u.g.S.o.z.s.S.9.x.S.Z./.Q.v.O.c.+.E.J.4.u.2.c.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.M.q.i.y.R.F.T.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.w.J.A.7.d.L.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.9020461940017483
Encrypted:	false
SSDEEP:	48:uiTrlKxJxMyxl9Il8uF0ssWsK4lPz2+rTIUrb94Af/RN9xQmmYd/vc:GYT0ssO472STjn94YRvxs
MD5:	EED0AA3D4402CCF8E258DC3C3BE0F95B
SHA1:	02A62EE92741E521CFF10ED131B9F660D34C8B88
SHA-256:	C7339414467E84B989749BD91CC4D6AFE5AD171F6F59AE561586AB4D9E0267E2
SHA-512:	421245E17056ED2DEAF096810FF7D9209C1BDA48205C61D14F650691A310338C575140E611BE55A5D59841342C81E2A99F8642ED7B28713A72D66C2388645CAF
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".V.H.X.L.G.R.5.H.j.D.k.3.C.i.F.b.L.a.m.K.N.+.n.c.g.T.0.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".4.t.x.L.4.d.p.x.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.w.J.A.7.d.L.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	4542
Entropy (8bit):	3.9997480517258275
Encrypted:	false
SSDEEP:	48:uiTrlKxxx4xD9Il8u/kif+S8OoD/sQqCeLrnwL9NngoHTeCqXpqhN7Aq6dNycCdf:7YJTfZLrwB1PHV7C/ycCq1zjuP8SX
MD5:	E20DB26788E6AA2248F3B96348965F99
SHA1:	9682CDA907880C50F8853F68738C7F3E05B50713
SHA-256:	7C30BB53D88CB98A3A235205821992C0A2D617918986CBF37753B5BFED81D9C8
SHA-512:	6A8322BBC9291D0347338F0A39B81EC9A539C7024BA41E23AD6A06C0A01316FE1F66A9D32D1CAEC1A237DC9C0FEBF6A6830E7638298EDC811ED8CDE13C948E02
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".V.q.Y.a.6.3.X.Y.9.b.4.Y.b.C.Z.g.f.0.u.y.E.6.v.n.x.e.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".e.W.j.C.r.w.l.T.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.w.J.A.7.d.L.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\3DXBZZEJ\enterprise_logo.png

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 1038 x 720, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	57284
Entropy (8bit):	7.924545838094971
Encrypted:	false
SSDEEP:	1536:EdmET0edUcK/5i8xABitlcf41yfRj9qxtqIn3/AMvcQy:gm00eKP5i8xoitlGj9Etqq34r
MD5:	E80B4482AC243D45B180CAD44AE89B46
SHA1:	CFB3BD6D8A02C90D4CDA925E7D0DE073323EEBF8
SHA-256:	08FE136E3CF736A032EF3EAA188068DD078A135D78C998A72045B362F168333F
SHA-512:	6A74ED2D676570EA31F349DC07812612B7EBA9580E31D364887EED6579E46C267F2D70DA682CD6A7F5DC843756A93F9B2089402283A21EC6DA5A3AA90352E9D1
Malicious:	false
Preview:	.PNG........IHDR..............X.r...IDATx....tT..6..L\..!@.. @p.R...-....UX.-...)V.R.Bqw.."....3..w(..[...s....[.w...d....a?.........x..........................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(...i....S.~.H..../(.TL..zalQe.HB...j............G_.\|0...E........[T+$] ......Q.....i..nF\|w!.ph..........q..B.7..u..{.!9%b..t....Qt".s.T8....S.W. .K......?..L..1d....2..j.....e..."W(..gSI......s..R."2.\|g@...W.rer..o.Tv(4../&.P9../.(..v?n..p?.S.....h.Q.C.....:..)Qy.@(......jhRI5.....NH....H....ka7S.+...........ye.....j2..nXs;.HX..y...../_v-<O...Z..K=.J.l....h...'$.T.\|. lm.NK...R...m....!9

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\3DXBZZEJ\enterprise_logo.png:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:gAWY3n:qY3n
MD5:	FBCCF14D504B7B2DBCB5A5BDA75BD93B
SHA1:	D59FC84CDD5217C6CF74785703655F78DA6B582B
SHA-256:	EACD09517CE90D34BA562171D15AC40D302F0E691B439F91BE1B6406E25F5913
SHA-512:	AA1D2B1EA3C9DE3CCADB319D4E3E3276A2F27DD1A5244FE72DE2B6F94083DDDC762480482C5C2E53F803CD9E3973DDEFC68966F974E124307B5043E654443B98
Malicious:	false
Preview:	[ZoneTransfer]..ZoneId=3..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	25008
Entropy (8bit):	4.235366259613952
Encrypted:	false
SSDEEP:	384:3HJoNtObQtbNkLYTTTuTTTDsZ0GMZjNOlTLZz9vSeadXtnAO:3FYTTTuTTTD7duvvS1dXtnF
MD5:	51374B09F0C07964CBE1C23D792D15EF
SHA1:	F3FF547A7BF6052D0816C3974FE94FAB6A7C009A
SHA-256:	9AF49DC60F3EF7A8CCCA13955D0B727C0DFDE1AFFCE852AB848BD7FDBFAE26C9
SHA-512:	613F884AAA69BC9D2A8E6DF7B35657437A9742074E7AE32B2A1674F36D6CBD6429395313D1EF629AC07993AB375898B34CA4ADE3A5F26549ECFE5790D3B1871A
Malicious:	false
Preview:	....I.N.C.L.U.D.E.P.I.C.T.U.R.E. .".c.i.d.:.6.7.6.5.9.7.1.d.9.3.c.b._.1.1.1.a.3.0.1.1.6.1.d.e.@.s.i.d.e.k.i.q.-.b.i.l.l.i.n.g.-.e.v.e.n.t.s.-.9.c.7.4.8.5.6.8.c.-.h.q.k.h.s...m.a.i.l.". .\.*. .M.E.R.G.E.F.O.R.M.A.T.I.N.E.T... . .............................................................................................................................................................................................................................................................................................................H...\... ...N...................j....#..TP...Q...Q...Q..hZ.........................................................................................................................................................................................................................................................d................[$.\$.............[$.\$.....d....-D..M................d....-D..M................d..........h.-D..M............[$.\$............-D..M............[$.\

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\CCF9A13A-2F68-4F48-A7FE-BB25510A585D

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	179784
Entropy (8bit):	5.29662645028493
Encrypted:	false
SSDEEP:	1536:drVwPRAqJbz4wglE0Le7HWKQjj/hMOcAZl1p5ihs7gXXcEIJnaKBIY5YdGVF8S7B:zne7HWKQjj/CXxMLB
MD5:	0ED4CA5BC926B6496685FB59C9E8119F
SHA1:	790BA595D843B63E17561D5A4E17E234F54FF932
SHA-256:	DE1DEDA07643450E6724457007789EF24D5A34FAEEAB6F92EFF9D1F97C7BB1C8
SHA-512:	223D4F177E0EFC2C9C0380807D459AF71D9E10350E61BFFBC5C3C54652C686B80B197B75FA5865663F852CE7AEFBCA3D5DAAEC5144424B8AFF3A7ECFB77C2A2F
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-12-20T18:04:22">.. Build: 16.0.18406.40129-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results?fullframe=yes</o:url>.. <o:ticket o:policy="DELEGATION" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Bearer {}" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[MAX.Resourc

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxAccountsAlwaysOnLog.etl

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.20315522341195716
Encrypted:	false
SSDEEP:	48:doGSIE4BKmZXAIhINz/fmZXcIh/aPmZalwx7I1/K:I58xIt/f8MIh/C817I1/K
MD5:	9BACEF3D3C0A3E87A21659DB5B187B14
SHA1:	7C541B0BDFFC07FEE52F8005668B308CBCA2F98A
SHA-256:	87CE2048C1318D92CFEF368C90044D69000EE9CAF0F85622DC15FBA3F8A614FD
SHA-512:	BE49806826FC1F8890F47D5FF4016A546CBE1EED6DFCFC74E4B093CF099E13F4EB0766238556905F56FF0F15A52EE47B6FA00CA53722CCA148C7C9A5D5796188
Malicious:	false
Preview:	............................................................................b...<......."_......................eJ..............Zb..............................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1..............................................................Y...........PS..S..........H.x.A.c.c.o.u.n.t.s.A.l.w.a.y.s.O.n.L.o.g.g.e.r...C.:.\.U.s.e.r.s.\.c.a.l.i.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.P.a.c.k.a.g.e.s.\.m.i.c.r.o.s.o.f.t...w.i.n.d.o.w.s.c.o.m.m.u.n.i.c.a.t.i.o.n.s.a.p.p.s._.8.w.e.k.y.b.3.d.8.b.b.w.e.\.L.o.c.a.l.S.t.a.t.e.\.H.x.A.c.c.o.u.n.t.s.A.l.w.a.y.s.O.n.L.o.g...e.t.l.............P.P.<.......e.......................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxmAlwaysOnLog.etl

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.11988587469843986
Encrypted:	false
SSDEEP:	12:9GfPqF69Fq5Dcix8CeuQ1UMCl2M+aqc2EOCTP:MH1MxfOSMClCaoEFTP
MD5:	E092478E575352D8F5516C9000665997
SHA1:	45EA3AFEF9B65F7514C74E90B8F9E762984D0E5B
SHA-256:	3BDF56B275E928B56A12DB2F5F71F5CC64F553F3FDDA068E947EF65E95F965F0
SHA-512:	82F485332DF63A5F55D6E475ED6B7A5EB6A35CE8AC690925C881C865F4192061CAE223FE8E74B156904DBFF3229E854BE1A5ECC8EBB8E927EB4A2B50746C90D1
Malicious:	false
Preview:	............................................................................@...........Fh.....................eJ..............Zb..............................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1..............................................................Y...........L...S..........H.x.M.A.l.w.a.y.s.O.n.L.o.g...C.:.\.U.s.e.r.s.\.c.a.l.i.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.P.a.c.k.a.g.e.s.\.m.i.c.r.o.s.o.f.t...w.i.n.d.o.w.s.c.o.m.m.u.n.i.c.a.t.i.o.n.s.a.p.p.s._.8.w.e.k.y.b.3.d.8.b.b.w.e.\.L.o.c.a.l.S.t.a.t.e.\.H.x.m.A.l.w.a.y.s.O.n.L.o.g...e.t.l.......P.P........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	3.689869427744717
Encrypted:	false
SSDEEP:	768:0XTz7277ANVM/E7Tc6LSMtCgirjRNKuPLwgBEjKOOuy:UoANVM/E7Tc6ftCg89NKuLwgBEjKO
MD5:	BB321ECC67995ACFF51290ED3CF6119A
SHA1:	FCBE95B1724B03984DCC61C52C22AC037E863B6D
SHA-256:	AD49A663B945D9178CBC8A610285F8B2E6AE8D7614A628C7879DA493494A5B86
SHA-512:	D6086CFE1D72777F7AF4A17B396BAB12A08682B8A92C16440882351AFAF9446B2CFD5B8BDA25B51718810F9B468FA1B5E93AAF874C552E2D561DB50BF8647D4E
Malicious:	false
Preview:	regf........b.Q.7.................. ....p......y.b.3.d.8.b.b.w.e.\.S.e.t.t.i.n.g.s.\.s.e.t.t.i.n.g.s...d.a.t...y..j.....J.....y..j.....J.........z..j.....J.....rmtm.\...S................................................................................................................................................................................................................................................................................................................................................L.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat.LOG1

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	3.6975388670421427
Encrypted:	false
SSDEEP:	768:ZXTz7277ANVM/E7Tc6LSMtCgirjRNKuPLwgBEjKOOuy:poANVM/E7Tc6ftCg89NKuLwgBEjKO
MD5:	DF3296B8517F0BD91B4F132964449A8D
SHA1:	3F81E4719B52BCD29F14C2EBA13279E8FC0F63B6
SHA-256:	868B9DD2A913FF963F0CDF140B9E61BE6806B1FA27D2747D94CE6C0D4BE9CA2E
SHA-512:	8D1CEB11A83E84003DF704F9F47EEE59AD6898E5394BCA74390BF9E674BCCD19128C840E58D2A1B7223A4738EF2E8EF1420F9C4AA11D5F5AB519890C1727B804
Malicious:	false
Preview:	regf........b.Q.7.................. ....p......y.b.3.d.8.b.b.w.e.\.S.e.t.t.i.n.g.s.\.s.e.t.t.i.n.g.s...d.a.t...y..j.....J.....y..j.....J.........z..j.....J.....rmtm.\...S................................................................................................................................................................................................................................................................................................................................................L.HvLE.~...........p........p..p.._.5>..q.....p..hbin................b.Q.7..........nk,.T...7..................................x...............................Test....p...sk..h...h.......t.......H...X.............4.........?.......................?....................... ... ...............YQ..fr]%dc;.............nk ...>..S..................................h...............8...............ConfigSettings..p...sk..x...x...=...t.......H...X.............4.........?.......................

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1734717776751030100_AFDC0BCB-5ECD-4DAC-B0A0-77F0743A051B.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.014655077507078196
Encrypted:	false
SSDEEP:	1536:H8YNTXhGN/CxA+/FjZLHmKdIxRFJ10MqjKngvB:cg
MD5:	7E1E1B306CDF99FCA7EEE672A5873C7D
SHA1:	D70806CBD55D1B9D04D51AABF8C422826CDF7064
SHA-256:	4B149559D1BD2E74E967E4889D5D217A788AD58EF1D250FDB12022826B07DC4F
SHA-512:	45796CDAC8A6BE2FCEC28A1C1A4641A106ACFCE17B1EC9314C25E669AA782187D0A3E0117A94B6CD7F1EA61B98A9F3E86D9D1B418F67DE8EFA18BFE37F1F1292
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..12/20/2024 18:02:56.784.OUTLOOK (0x1BC8).0x1BCC.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.System.GracefulExit.GracefulAppExitDesktop","Flags":33777014402039809,"InternalSequenceNumber":17,"Time":"2024-12-20T18:02:56.784Z","Data.PreviousAppMajor":16,"Data.PreviousAppMinor":0,"Data.PreviousAppBuild":16827,"Data.PreviousAppRevision":20130,"Data.PreviousSessionId":"63204EAB-733F-449A-B99C-88A39594027C","Data.PreviousSessionInitTime":"2024-12-20T18:02:32.553Z","Data.PreviousSessionUninitTime":"2024-12-20T18:02:35.663Z","Data.SessionFlags":2147483652,"Data.InstallMethod":0,"Data.OfficeUILang":1033,"Data.PreviousBuild":"Unknown","Data.EcsETag":"\"\"","Data.ProcessorArchitecture":"x64"}...12/20/2024 18:02:56.800.OUTLOOK (0x1BC8).0x1720.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Telemetry.LoadXmlRules","Flags":33777014401990913,"InternalSequenceNumber":22

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1734717776751913000_AFDC0BCB-5ECD-4DAC-B0A0-77F0743A051B.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241220T1302560545-7112.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	208896
Entropy (8bit):	4.868312436056919
Encrypted:	false
SSDEEP:	1536:c4reOk9yyiFme5C1LRN7QL3hR2FHHYcL07vjni98yPkPKnXf1gd8OV:c4rerYyfsRkdH7XfWd8OV
MD5:	CCF51AC6FB4ABED656A6C2253FC0F9BA
SHA1:	46EE781C656FB9B3F8E6F1E10B08249A9B86E624
SHA-256:	40B9D1F63708CF4DA86D1A61894C13DBE3A33633EBA176B8B67B77A25629CBFF
SHA-512:	C65194B5476A8108CF779FB9F9A65EB8CA746EAF06F71C0D823DF2F28C10DF2EE7DAD1E91C5BD64EE5A1C4C63927E2BF6600F56E37EDFB7FF8A5AB75741F4D23
Malicious:	false
Preview:	............................................................................`...........TK.e.S..................eJ..............Zb..2...................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1..............................................................Y..........TK.e.S..........v.2._.O.U.T.L.O.O.K.:.1.b.c.8.:.7.1.d.f.b.d.e.c.4.7.c.6.4.4.9.e.a.0.a.4.1.e.a.4.6.9.6.5.2.2.1.6...C.:.\.U.s.e.r.s.\.c.a.l.i.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.1.2.2.0.T.1.3.0.2.5.6.0.5.4.5.-.7.1.1.2...e.t.l.......P.P.........TK.e.S..........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:hvlh/t:
MD5:	56BEF7734D1CA8D7342B43B7EE6A1EA8
SHA1:	E41285B1AB9D9933F03953A712340383C6D64DB5
SHA-256:	F1D448763C51D83685CD8B983B46F0377869909ECD57A78355520A6FCCD0EFF2
SHA-512:	56F71DB879910EE051027F98964017019C71561A9EF6D37B984DBC25627822B965871E1F64A1A0BF9C7DCA35496028C84E5D448DA61A52A154B34F8029CE4C81
Malicious:	false
Preview:	....V.........................

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.6698026103486764
Encrypted:	false
SSDEEP:	12:rl3baFlCqLKeTy2MyheC8T23BMyhe+S7wzQP9zNMyhe+S7xMyheCYEWz:rymnq1Py961dWz
MD5:	DD8740E58FFFBC736E49A1D06A46C52E
SHA1:	FD56507C4EBA820395F786998661C2E89327A6F4
SHA-256:	8F4D1549F163E663DACB4A8C97E10C535FA032BCC6DA9750BCFCC538AE8A2116
SHA-512:	EEC76A82FBC8B2D660C41952CC797EA1D0D2CA00F0C4F8B74A8BC1FB24D4762FA9BCA0BDECB43530B9F89AB0B48860DC569F4E7B70DE0A0DDD9EC54911CDBCF3
Malicious:	true
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 17:03:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.985817900647705
Encrypted:	false
SSDEEP:	48:8QdHTfkoHkidAKZdA1FehwiZUklqehJy+3:8IoHCy
MD5:	951ADA51BF0EA3A89FF8856B1CDC37E1
SHA1:	D37F00F89E0A0CEB1588F26AF5FAB455C2E238A0
SHA-256:	28AD0DF36BBB4B6D700BD11AA38697486DAE85FF3ACC0F1CCF49335547C6066E
SHA-512:	855E41C30EA151E8F63E3727E39B739F6B4DF910B4121F29C90B36D34D61FA3C66A7539EC5FC7693FBF7D4EA643EF7413228BD2EBDA44452DD602F4C8A7DF89F
Malicious:	false
Preview:	L..................F.@.. ...$+.,......\|q.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yg.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yg.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yf............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........-........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 17:03:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.997296069362667
Encrypted:	false
SSDEEP:	48:8bdHTfkoHkidAKZdA1seh/iZUkAQkqehyy+2:8hox9Qjy
MD5:	67EA302371DD58CC0E8F99944969BCFD
SHA1:	8B6CD88ADD7F2461D338717A2DD9C3C0AD3C9632
SHA-256:	DFE921AD2412930CC1E67E4AF51811CFB09D2743E4F258152D8E3BA86C9D5D4F
SHA-512:	07C3A9F56DEFE11E4D712BB2984E798C2271D5DBA76495EB02A59835B6C5BE5587D8BD046A56B200A0514A5EF95A61CC07FEEEF448178D1BF24915EE684D3B2E
Malicious:	false
Preview:	L..................F.@.. ...$+.,....T.oq.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yg.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yg.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yf............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........-........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0092214862927165
Encrypted:	false
SSDEEP:	48:8fdHTfkAHkidAKZdA14meh7sFiZUkmgqeh7sky+BX:8FoVnmy
MD5:	43FD46B58EEB6CD9AF04EDB7BCCD9A88
SHA1:	BF6893D42E5D93FC6FF6C3FC687C49A334F44E79
SHA-256:	D03F498CA7CB8B28FB4C8DAAEF49442DF00F1FEBF25866AD0366987F8697393E
SHA-512:	51B268AFCEDCFBDCAD2CDCF5767D379CB76D8425A98A04260B1559F6F32960476E96CA49FF41149E9C73C4214A64D90C597A15583FFB8642B8E5264101360B72
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yg.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yg.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yf............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........-........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 17:03:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.99486411756302
Encrypted:	false
SSDEEP:	48:8rdHTfkoHkidAKZdA1TehDiZUkwqeh+y+R:8RoC8y
MD5:	F31AD25B19E3AAA616A45104990559B6
SHA1:	A16DAF4240271E5414A2EA10E07468E920FCBBFB
SHA-256:	AC6369FA6D2B6978F8C0539E16F974C09B749E35DE168310A8ED453C2F03EC9F
SHA-512:	CAC53F45D8859DA2B816851B3EA857F71CA8795F7A4735A292B52041FD023B3B209D5BB3D26E3FE2FD2A51D1533A30B87FC546098CA577A4FFA37A767FAF7FA2
Malicious:	false
Preview:	L..................F.@.. ...$+.,....G.gq.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yg.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yg.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yf............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........-........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 17:03:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.985191440801637
Encrypted:	false
SSDEEP:	48:82b3dHTfkoHkidAKZdA1dehBiZUk1W1qeh4y+C:8adoS9Yy
MD5:	7F14D92AE7C4801B7EE82917EB5A91CE
SHA1:	38CCB39A27138E868BA41B22BDC7DF3E4AA36613
SHA-256:	2133C8C7D13D9DF349B13484CE76625FB1A46654A209A9A146CC2BF624876AE1
SHA-512:	A0D5EEA9E3268B7FC33767A27596692FE0723E6D3C5188FABD0B06306544F959C5AC003461859C3F0B5E5801DB569C7A80E4F349BBB57D80072323857B632475
Malicious:	false
Preview:	L..................F.@.. ...$+.,....-:vq.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yg.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yg.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yf............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........-........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 17:03:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.992428526415058
Encrypted:	false
SSDEEP:	48:8FdHTfkoHkidAKZdA1duTeehOuTbbiZUk5OjqehOuTbmy+yT+:8foITfTbxWOvTbmy7T
MD5:	8C4E3EA3017C6A969D53A21ED7432B28
SHA1:	282426706549DCF6BD3E594705E262FB9E19F86C
SHA-256:	39D42433ABB27C299682FF56C7234F571C010D3D1888EF3031CD812C8DAE3FA3
SHA-512:	22B6C3A0868D874195D2576605C62FF5F863135790BF52B27C7D939EFCC73072AA66C013995F4AEACE8D996D6E68BC9648755F8C9D5E2B5D60860C998A2F4BA0
Malicious:	false
Preview:	L..................F.@.. ...$+.,......\q.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yg.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yg.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yf............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........-........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	4.725948049272367
Encrypted:	false
SSDEEP:	3072:+ndwEWQLJ4mAaK2MS/o0Hs0qfN1IpjZeNQpj:2WdQd4maLH0M0qISNQ
MD5:	2D563CA6B257E897DD23BFEC11869887
SHA1:	9ABD397921E0F74B08298778030E53AA286752F1
SHA-256:	178BFCBBF0C2F69EB78E5AD4A4F7F3D63E7BB0AB36A450119182BCB65188194A
SHA-512:	5E9AAC0E620482F43A6F8A54FB2526AE8627CA380F8B7211A4B77C44A8C8F39F9289DB9953C775F32C0F1BB8796FAE39165882602E95F422AE3D4ACA7C1EE453
Malicious:	true
Preview:	!BDN.{.JSM......\...\...........Z.......c................@...........@...@...................................@...........................................................................$.......D......................J...............X...........................................................................................................................................................................................................................................................................................\|..........3........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	6.676384392004891
Encrypted:	false
SSDEEP:	1536:JwLfKvQXsfYIUf0tg6chW8IvCE7IvRjqfaKXmRuSPZ3o0nbDynn05THVrCu5J6W4:JaPfsEWFL74mfaK2MSVo0inBhpj8Oo2
MD5:	FF91978377C97991382E28985EDC43F2
SHA1:	5A455CA35B0DB0D33168289E8FEC852227419BFF
SHA-256:	50C364E348BD6333E39A136B7BC8EE281355525DFBEF1CFD72EEBCFA10F8307C
SHA-512:	4DADF8C07E1A8C564F2B9D5CE1D7F5BEEF6925307CBCB2F82FF3C90DF6B24EFA452DA71B1316EBB91EE6B07321B41EAC2EE149DE19FDE83D4817A2F7835C950D
Malicious:	true
Preview:	D\.C...z............e.S....................#.!BDN.{.JSM......\...\...........Z.......c................@...........@...@...................................@...........................................................................$.......D......................J...............X...........................................................................................................................................................................................................................................................................................\|..........3.....e.S.......B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
URL:	https://usage.trackjs.com/usage.gif?token=f102e8a423c740618a77314a75eb71a6&correlationId=894e3009-6fff-4f1a-800c-409ff42aece2&application=inbox-patient-prod&x=a8625ea0-095d-4610-bd55-752f5d684afb&
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	15
Entropy (8bit):	3.1068905956085184
Encrypted:	false
SSDEEP:	3:YIa8HOIY:YIa8M
MD5:	F0D91A73ACE48D2443AADD9A52A781D3
SHA1:	637D557CD3B0516D7B0822B7E036251F455245FF
SHA-256:	CF47D3A034EB704DBC6A1B479427AB513892062349AE526C3B96A4BA6465E3D4
SHA-512:	C2D22AE5697D55DD5008B3D7E6A7B579A88A0EC7009666F5E06F390F99A8E198B7CFBC7DEBBAC5544C7600E4FEC0E874548A5841BC15C55AF35F106DD5405191
Malicious:	false
URL:	https://stripe.com/cookie-settings/enforcement-mode
Preview:	{"mode":"open"}

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (344), with no line terminators
Category:	downloaded
Size (bytes):	344
Entropy (8bit):	4.969233402725208
Encrypted:	false
SSDEEP:	6:qTjxVgYkYv3J/15+aS15FqVfev3J/182A4pXEf6WRAH+uVuB965:qTjxVVvn55S15FqVWvn82AQXy6WRi+uH
MD5:	57A5ABF2116F0F98C3257286B4B1C74D
SHA1:	D586ABEC738B0E1B00FA4DF77EF271544D531FB2
SHA-256:	EFAFC8EBDCF53A1CD290A8477C48D60064A6FDC5FBC06BA3D878B8AB87F8A795
SHA-512:	792D80760E17F41F9D140750003F51857B4FA1DBD3E1ACC40113F211ED03B82FF1EC8A9B45008D37C8BDA93FE330E038027B8CCAFAB9065CF1F398539FD2F625
Malicious:	false
URL:	https://js.stripe.com/v3/payment-request-inner-browser-57a5abf2116f0f98c3257286b4b1c74d.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/payment-request-inner-browser-3e2bf1135aeec036ab34eb24b61d077f.js"></script></head><body></body></html>

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	820148
Entropy (8bit):	5.5596427868827325
Encrypted:	false
SSDEEP:	12288:QMJXB8rmutNLaCxpfDEYVZ9fxBqoO9eg4RLZ:QUBCmurLOk9fxBqoOj4RLZ
MD5:	15652D8DB6EFED067703B4B5415DB938
SHA1:	66976B6D0E1DF64BD3B09D85D2B29C6F1C025F87
SHA-256:	9F1CA438068DA2D4B854164EC4C263F1576398458A0D5EC9DA1D1C9E095D131A
SHA-512:	17EDFA3E1E1F7B0020FB3373133C6B4F3A47530A4CF7C98B5178734AC55B706A0A08EBB1531780F2C1C56B073D2523079E52D18981352894E79291BCB1486586
Malicious:	false
Preview:	!function(){function e(t){var n=c[t];if(void 0!==n)return n.exports;var r=c[t]={id:t,loaded:!1,exports:{}};return s[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,i,a,o,u,s={58594:function(e,t,n){"use strict";n.d(t,{Z:function(){return i}});var r=/^((children\|dangerouslySetInnerHTML\|key\|ref\|autoFocus\|defaultValue\|defaultChecked\|innerHTML\|suppressContentEditableWarning\|suppressHydrationWarning\|valueLink\|accept\|acceptCharset\|accessKey\|action\|allow\|allowUserMedia\|allowPaymentRequest\|allowFullScreen\|allowTransparency\|alt\|async\|autoComplete\|autoPlay\|capture\|cellPadding\|cellSpacing\|challenge\|charSet\|checked\|cite\|classID\|className\|cols\|colSpan\|content\|contentEditable\|contextMenu\|controls\|controlsList\|coords\|crossOrigin\|data\|dateTime\|decoding\|default\|defer\|dir\|disabled\|disablePictureInPicture\|download\|draggable\|encType\|form\|formAction\|formEncType\|formMethod\|formNoValidate\|formTarget\|frameBorder\|headers\|height\|hidden\|high\|href\|hrefLang\|htmlFor\|httpEquiv\|id\|inputMode\|integrity\|is\|keyParams\|ke

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	5.297989837031435
Encrypted:	false
SSDEEP:	6:oMjYzi6Ac1MjYzi6A7crq3Z0j9HOvGRFVVe2Nxd2pn:XDbDkqJ0ZBRF/e2Nb2p
MD5:	E9D8B92096016DFD74D2F2500556464E
SHA1:	0DB4E74B955611B21791405AF062346F34AC2EEE
SHA-256:	EB2902FF32366DE00D3AFA351AECEB1357D5A468EACBB2FD92CF115276D626CB
SHA-512:	BC78CA4E3B2706A5B054504E3534689FD85F66E118A47BCF68C9E2457B1F7152930B21B81945EE2F4E84EE50A5664E11C68841D5C11A62B3D926246E6AA58456
Malicious:	false
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-chat-incoming-message-notification-bcac9f6.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9084],{33279:(e,s,d)=>{d.r(s),d.d(s,{default:()=>c});const c=d.p+"fda6cd35495c75f83508d9d2e77ee33d.mp3"}}]);

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo
Category:	downloaded
Size (bytes):	19698
Entropy (8bit):	6.207687719996166
Encrypted:	false
SSDEEP:	384:2kWVjAhqGJp3T9RYGJWbv9+5OQHPIoyOgos:23MJJ0Gwb2uOvs
MD5:	F11CE9E8F40A392830217253FE75D6DE
SHA1:	89BA57FCC360DA34756C127ACBA15A8B23267FC6
SHA-256:	05069CC62B394B6ECC2DAF3C51B4B2BA7F6CC8735988E8234487234AF47ECEEE
SHA-512:	00AAEE50939AD1D95B52F4A51FA3E357BB561AAA19817AD24AC174D699080539A75D84BA6EE26D59BDAF45C201EE4D41BD4683A9484C78575D76B67CE65037BA
Malicious:	false
URL:	https://static.zdassets.com/web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3:2f884dc121970c:0
Preview:	ID3.....3iPRIV......XMP.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:xmpDM="http://ns.adobe.com/xmp/1.0/DynamicMedia/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmp:MetadataDate="2013-04-04T11:02:01+08:00". xmp:ModifyDate="2013-04-04T11:02:01+08:00". xmpMM:InstanceID="xmp.iid:078011740720681192B0A0F504EAEAA8". xmpMM:DocumentID="xmp.did:078011740720681192B0A0F504EAEAA8". xmpMM:OriginalDocumentID="xmp.did:018011740720681192B0A0F504EAEAA8". dc:format="audio/mpeg">. <xmpMM:History>. <rdf:Seq>. <rdf:li. stEvt:ac

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1652)
Category:	downloaded
Size (bytes):	171461
Entropy (8bit):	5.5921938676981195
Encrypted:	false
SSDEEP:	3072:kKwyMy1SDJLWSZ4uhStqHVA/t8zUrnOI/mkJYv5oRtlwVU1cFZVPL1W:kKwyMy1SDJLWSZ4uhSH/t8oYlv5oRt6W
MD5:	EFF9AB7EA07D8F3A66505C4DDB5C0F89
SHA1:	49BDCC223B6FE4A7E2266C73EE8AB4FE21D0C77B
SHA-256:	D79BB88F8991067CF95124262F920D04905C08785B5E4A99131B35674C8FF2B0
SHA-512:	CD8CB8ABFF9F03A328B4213D0CB04D1A5B56BD8F8D870B7DC28DEBAC671D5AB6796224B74020BF8FC94AF1043B3A0F0AC3D51955A06DF99A9B9EFCF82CCB0D33
Malicious:	false
URL:	https://pay.google.com/gp/p/js/pay.js
Preview:	(function(){window['denylistedDomainsHashedValueListForGpayButtonWithCardInfo'] = [-718583466,-651407173,1501053020,1270931793,1878965203,1359979311,-1556396599,-929820290,-1993966558,969369487,813004726];}).call(this);(function(){window['whitelistedDomainsHashedValueListForGpayButtonWithCardInfo'] = [1432838318];}).call(this);(function(){window['denylistedMerchentIdsHashedValueListForGpayButtonWithCardInfo'] = [1260893,211376492,-383338062,621213554,-1574521140,318272649,-1021013306];}).call(this);(function(){window['denylistedMerchantIdsHashedValueListForGpayButtonVariant'] = [];}).call(this);(function(){window['allowlistedMerchantDomainsForBnplDynamicButton'] = [1605359444,1058617217,-1952496552,1475577307,-266458566,-1100178842,82073654,1871160076,1512037837,-324377671,-1836633316,1257306572,-490810357,914948972,1312509109,1456172824,1359979311,2119319518,1000705814,-557041780,217951089,-733157279,545927057,-1637503934,587727802,439938499,-82521450,1010792251,-1600155240,501105821,

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 647137
Category:	downloaded
Size (bytes):	99111
Entropy (8bit):	7.996840314346232
Encrypted:	true
SSDEEP:	3072:TWbskvS3/4ULFOMkYMKC/QbN3C5Uh8ThVOx:y4sSvVLFvh6ox
MD5:	49940B490149F5D0228B665061570C5E
SHA1:	A8213174146493AAD3EC4041B0310B4794DDF047
SHA-256:	437C21BF39DF0C3D9743B9D7F9460B04A5700A33223119C898DD4DECF1661159
SHA-512:	32C24308DB3800E229AC896AA5DEF9086B71B17E1FFF44CB562315FD0DFEDDD44F47D84F7B622412443CF9AE3F4AACABDF5E49B7C9085D1CD7918FAD888B2868
Malicious:	false
URL:	https://patient.inboxhealth.com/assets/inbox-patient-7a28dffeaad312cf15cd8597f88d1af5.css
Preview:	............+.. .>_..4..IfDp?4.QWuuw.u.<...R.m...!.....:}.[.[...k..wl.TV...)o.pw....pw...v..........O..7..~.w...w..?......>M..b...~.....ks..qu>~...p.\|.._w.A.....g>......\...:Uc.._.Us.5..q........R..w.........C[....y....R?..............H=....X...m...F+..'...(.../.............r......Uy.T.......n..cC...~.....Ss...0"....Myk..S.>......e...........e.=...4g.?...^.7..............<.F...G....\|!........v...7...f......n.fX.H].us/...p.....}.>....nIuH.....^.}.r.....cx?.oM.0n..~}......B.........(cF....\|..G...\|.....=.O.z.P.z......9.4.7G.}o4...mSV?.:...........v)....^......^vg.[o..V.....;o,......3/x.e.....n....e.'.\...7....e<_4.A.N~..T....6[.\|..:Bf.-.M/..o.........,~.6.......~.....Hi.m....H....?...+.3.n....H...+...t.7........}w%....Qa.=AX6"I.........t.ld...:nND..\..d.x\|.....I&.F...r'.P..d..DO.....~~...P].XVu&B...R.[yT...o......ty..d.w4y/.O;2..kJ..!:........\|......3m..k..p}!...............$.2....c~.......=O.i.$.....B....&.~y.4%!_5/..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	474
Entropy (8bit):	4.435295901095557
Encrypted:	false
SSDEEP:	6:YGELOs2qDAfKBCE/TEPCGnN7hHc0Rgmc5Jw13H7PTfgV8TMTrlkVNxBzWQdILsp9:YGPMBCE4Ll3drPzHTMgb6QycnGZLbkn
MD5:	9BDBC44392DB31DED05237A073D884D8
SHA1:	0DF528202534C34A6FF7875AA03CB6C98A76B178
SHA-256:	C01630A110E52645AA9771F1AC75DBCED93648487603F1F7AC3CF54F64D9D48F
SHA-512:	D8CE3AB31140174D8DA568A6FFB6C8F8C561A0067C778A7187A36F494F141198F220A49D7D9866E1476DCC3BB731EB295F2221A5098515FD3E1320E00EE2843D
Malicious:	false
URL:	https://js.stripe.com/v3/.deploy_status_henson.json
Preview:	{"canaryPercentage":0,"deployedRevisions":["4b9a5a2ae33c52af3f7c93bb2ee9a461aa4a1c8c","04c13ab290f73533d3e9919307bd8ff46067660a","796a7b92dfbb920cceb8b4b9098b99cd513a500f","e25a5a3ec486d5727aa81ab74ea2f6667311d1f0","3f095d067774d297e1e25a51d95058e60ea983c3","9522289a77d970b418612405c419595528920642","5a8597112fd1433af4f877a275b05ecb8773270b","ce98fca02b96347697893fd4cb8d9ad2ddb3d04a","d7f2cc0ba151ba33f6059eed7b217624bfd1b44d","553bf605c2aaee3a16ee2f4f8391c41a0b85c60c"]}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (408), with no line terminators
Category:	downloaded
Size (bytes):	408
Entropy (8bit):	4.967996617602088
Encrypted:	false
SSDEEP:	6:qTjxVgYklvLpRkVVHCVfev3J/15+aS15FqVfev3J/18JOHac0bx+VuB965:qTjxVOzpRsCVWvn55S15FqVWvn87+VP5
MD5:	3E5F7756D6176660C979CC629F258EAB
SHA1:	EB191AD90914262D9A82FC7333D31E5785864ED4
SHA-256:	41023D538BE4712448308B03A678A41191E6971D0E3C2A40594E86B7A7EF53DD
SHA-512:	5B5221E13B3EBD76788739C06DB7DB4F55EA6B923BA40E9592DA80EE994B3C381DBF095F5EB395B10BC2D9FB7EEB6A09B71B065C45DD97CFF7DF46DEC50643AD
Malicious:	false
URL:	https://js.stripe.com/v3/payment-request-inner-google-pay-3e5f7756d6176660c979cc629f258eab.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><script src="https://pay.google.com/gp/p/js/pay.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/payment-request-inner-google-pay-6fc983c9284c67933a5e14c4b22c32b4.js"></script></head><body></body></html>

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1436), with no line terminators
Category:	downloaded
Size (bytes):	1436
Entropy (8bit):	5.765135622700701
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxsQ:VKEcixKo7LmvtUjPKtX7ftD1INOLrwUG
MD5:	8DCF92FD011F60C80E211A6B7950F311
SHA1:	AD0DAE42A982147C8587A8196E91039BD79B3A8B
SHA-256:	850C547C29D0D82F24882EC0E5B7A87D8F9A328D11C1266A2298B9103F8DDA47
SHA-512:	B2EDA33240FCB80DC467A4D63C0AA86241C23AB854080A8F59B65412A577EA89FD67F0026CBA472B7535F3BB4D30C0E6CD422235F3B2BC1952C8D3A4129385BB
Malicious:	false
URL:	https://www.google.com/recaptcha/api.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1038 x 720, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	57284
Entropy (8bit):	7.924545838094971
Encrypted:	false
SSDEEP:	1536:EdmET0edUcK/5i8xABitlcf41yfRj9qxtqIn3/AMvcQy:gm00eKP5i8xoitlGj9Etqq34r
MD5:	E80B4482AC243D45B180CAD44AE89B46
SHA1:	CFB3BD6D8A02C90D4CDA925E7D0DE073323EEBF8
SHA-256:	08FE136E3CF736A032EF3EAA188068DD078A135D78C998A72045B362F168333F
SHA-512:	6A74ED2D676570EA31F349DC07812612B7EBA9580E31D364887EED6579E46C267F2D70DA682CD6A7F5DC843756A93F9B2089402283A21EC6DA5A3AA90352E9D1
Malicious:	false
URL:	https://rest.inboxhealth.com/api/patient/v1/enterprises/unauthenticated/logo?id=7272
Preview:	.PNG........IHDR..............X.r...IDATx....tT..6..L\..!@.. @p.R...-....UX.-...)V.R.Bqw.."....3..w(..[...s....[.w...d....a?.........x..........................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(...i....S.~.H..../(.TL..zalQe.HB...j............G_.\|0...E........[T+$] ......Q.....i..nF\|w!.ph..........q..B.7..u..{.!9%b..t....Qt".s.T8....S.W. .K......?..L..1d....2..j.....e..."W(..gSI......s..R."2.\|g@...W.rer..o.Tv(4../&.P9../.(..v?n..p?.S.....h.Q.C.....:..)Qy.@(......jhRI5.....NH....H....ka7S.+...........ye.....j2..nXs;.HX..y...../_v-<O...Z..K=.J.l....h...'$.T.\|. lm.NK...R...m....!9

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	228108
Entropy (8bit):	5.3784027540572374
Encrypted:	false
SSDEEP:	1536:9wovhwvwV3sMwH+0G+ZBTr9ix6HeTX0XLDDDbGw5wyPGbFkKvyraIG+UNM3VBYG3:RhwvwV8Mw9ZXixontAFkqoRUytxYScY7
MD5:	51F0735CF6390AF81E4CB97C3CDE2CB7
SHA1:	1AC0468686527BE09E1A93E684DA7CC13FA179AE
SHA-256:	E38338484D969872E570A554C807DAB4A79233B82D64A7CB7028FB459123D44A
SHA-512:	850579DFD382F8C7071E614682CFC35EE38BBEA3A6515337B8A01D21C2AA23E36801CBF1F52F8701C15214D59CF18FE6C19880FC8517F52158F37A5A95AC848A
Malicious:	false
URL:	https://script.hotjar.com/modules.60031afbf51fb3e88a5b.js
Preview:	/! For license information please see modules.60031afbf51fb3e88a5b.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 146973
Category:	downloaded
Size (bytes):	123155
Entropy (8bit):	7.997536971438157
Encrypted:	true
SSDEEP:	3072:ItDM4DB4O8nN6o+2XzqHrqlh7qnEeXa+uyGcgcLN:ItH94Bco+2XzqHGOnEeq+LGcgi
MD5:	406812922DECFB2E52314C5F2B01279E
SHA1:	7A6AF5AF24051145E881DB06B83F7B699F0E64E9
SHA-256:	9A7E7FF595DE49EF49F037633C1F9E9C29215BF22E18AEAF6604CA5A25D1F8B5
SHA-512:	3507127925720AD6E3EAAEFD2FE23E8FCA347849F9808BA86534CCC78D195342A480C29C0FFFBA187663D1A647E74F3B47BFB8064FCE16B310002667C6597D3F
Malicious:	false
URL:	https://patient.inboxhealth.com/assets/icons/quickpay/hipaa_compliance-e7c73a7f11cecccd5088195f38aa751e.png
Preview:	............[TI.>..."f..Q.@..De..q."I$I@.Q."(..3..H..DrN.Y...2d.%g..}.u?./...<...:.tWW.u.].g...Km.zp+...v...hh................+......_..b%.hh.....Sv.........g.L>~.f..b..m....>m....._...7.4.......U.vK).......{....3J.w....?.3..8....>....l.W...O{t..77]b\|.n........\|....u...;&.J4...&.6..._.......v.......a._.......c.[...?%\|n'...........>..._".?..g...m.M....6..&.?6)....a_,.............."...XLR.6.3G.rawj>z..qU.N..'.z.\.T.A.a.......Hv.v....._.2..".crB..?.e..{.....e.D...?Z^....,.q.#I!...^..?uFM.o..J..i.{.y..\..F_.".x.V....m...]0.p.0..Q..9I...S.2j7]3.;........[)4..zWG..x\|1K..a.f2...4...nd6.....q9..u.`.Ru..U.p..C...Ou...9.R..Wv.7.s...N$....P....s4'J../.i.4.g.hMw.....E.I.J.8.v.f..N....\|...x.W)..PrB.J~_<......i'...y.....Q.#.CO...i8I.7.....9..h}.....3./O....}...4.==.._......B.....!I..t...#=.;...Jp...X.&.c...k...ic..-...4.%[Pp\|b.......2.'.t..#..U...q......97.9...2..`oW........4.C6.n.....?...j%O\....Y..f.)k.b_.u.{B..hFA.T....8..M.N.I.%.l....=(=.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1143
Entropy (8bit):	4.913553660073119
Encrypted:	false
SSDEEP:	24:Yb1MMigTaLXTEUATHrc6mLnFCQLnFF+gzBg8NgcgT+KE9qAhX:Yb1MMHaLjEU+Hrv8zOCBHNFy+KgfX
MD5:	2066096621E28ABC68FDD15669E519C8
SHA1:	3C1A62A53F6B8889034633611C3C29239EBDCF10
SHA-256:	E6244B60AE07B59D955F81BED86A05CBD447802B2349421DFEE855186F87803A
SHA-512:	4F421500F7BA4FD4E8A3E4DD1570655A6925BD5A3545819A506DD8884B5465660CD38E3CA92BE280CDC63B8D926F829A9B883A146B9AFFA978A59D18E2609430
Malicious:	false
Preview:	{"unauthenticated_patient":{"id":36304491,"user_id":null,"first_name":"JOHN","first_name_legal":"JOHN","middle_name":"I","last_name":"WEAVER","balance_cents":6000,"cached_balance_cents":6000,"enterprise_id":7272,"allow_self_directed_payment_plan":false,"enterprise":{"id":7272,"name":"Foot \u0026 Ankle Center of Cache Valley and the Wind Clinic","support_phone_number":"(844) 900-4909","payment_phone_number":"(844) 900-4909","enable_checkin":false,"has_logo_base64":true,"logo_background_color":null,"post_checkin_message":null,"enable_simplified_account_view":false,"patient_support_email":null,"portal_accepts_ach":true,"portal_accepts_credit_card":true,"payment_plan_minimums":[{"months":3,"minimum_balance_cents":15000},{"months":6,"minimum_balance_cents":30000},{"months":12,"minimum_balance_cents":60000}],"patient_welcome_message":"Your account is ready for your review and payment. Thank you!","patient_welcome_message_zero_balance":"Your account has been fully paid!","enable_live_chat":tr

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1010
Entropy (8bit):	5.136766802272771
Encrypted:	false
SSDEEP:	24:Y+pFqNx+Ac12ZIy0XyxT3vKLD1+szdsGZktwW2:Y2J12ZI3XyByL5Fztkc
MD5:	ECD9DFA9902BE2FABF60F819F335B2F3
SHA1:	C24357BA5E438666682585EC84493CF61AECD09E
SHA-256:	83209B9D63727B674C1A95E5FE72B79FA278D4B5708FDC48E3BE78C39CF666A6
SHA-512:	0BC51FF42BF608423016E6CABC919FFA0B710F7C15976401342D8248CD7D8E53D354FDB115B9D40C28A01370BC78192BBB1959B087F81193E32D0F77D83934C4
Malicious:	false
Preview:	{"products":[{"name":"web_widget","id":"inboxhealth.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#78A300","brand":"Inbox Health","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"color":"#78A300","nameFieldEnabled":true}},"chat":{"embed":"chat","props":{"badge":{"layout":"image_right","text":"Chat with us","color":"#eeeeee","enabled":true,"imagePath":""},"color":"#78A300","mediatorHost":"widget-mediator.zopim.com","forms":{"preChatEnabled":true,"offlineEnabled":true},"zopimId":"6FQXnIYg7b7AgsCqLoSQ70bWODubjdzL"}},"launcher":{"embed":"launcher","props":{"color":"#78A300"}}},"brandCount":1.0}},"features":["ticket_submission","chat"],"url":"https://ekr.zendesk.com/compose_product/web_widget/bcac9f6b9b5b005862f6744f84d0005a8bde8187?features%5B%5D=ticket_submission\u0026features%5B%5D=chat","assets":{"scripts":[{"src":"https://static.zdassets.com/web_widget/classic/latest/web-widget-main-bcac9f6

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	88793
Entropy (8bit):	5.413865382969959
Encrypted:	false
SSDEEP:	1536:2sHx8vawlWXGzbS1iSc6q1jboAmKum7EqIZ7d+/:2sHx8vzWX8O1iSg1jboAmKum7EqCp+/
MD5:	FD35981A337052CD3CCD82DC674FF76D
SHA1:	E11E8DF31D4748D5348ECEC37C01C4DA1549F321
SHA-256:	BD6E71E0A8F18B3DD4BBEB6FD673015FEC896BD92E17C11F3DC8FE96A06DE1F4
SHA-512:	9D7A20899C255FC008683F2DCAFDA6332B19B56CA88850661F25245DC4844059404D7D2FEE7C4249775ABA92A61F4870393FCCBAE8A74B12463CF903F05143E3
Malicious:	false
URL:	https://m.stripe.network/out-4.5.44.js
Preview:	var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var _ in e)n.d(r,_,function(t){return e[t]}.bind(null,_));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=30)}([function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){retur

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	dropped
Size (bytes):	4929
Entropy (8bit):	5.22906801638596
Encrypted:	false
SSDEEP:	96:Qy7own//2LPNuNkvyBaIQHgHVUT0T/V3Ejo85y8BI6H:N7oEWrNuNkvyBkgYU3Ko85JBHH
MD5:	761E2756BA190AE948CDCB431D1FAF03
SHA1:	171C31E1DC6E28953234FD5FE88BFA1AE6D21952
SHA-256:	F40B18BFAE3D5A5EDA04C7C61B0CB78E0F721E9834311ADAB8471CF01EFD644B
SHA-512:	0F0352E2BE7273E27F7E1B5322C5EF95BAAEA25CC4F380A0974FA2FE1B1D8798A5DDECC13B35FFEABEAB225471FE9D4A3A002BE156F1AF4FA05821BBA3589BB3
Malicious:	false
Preview:	/!. Pusher JavaScript Library v3.0.0. * http://pusher.com/. . Copyright 2014, Pusher. * Released under the MIT licence.. */..(function(){function c(b,a,c){Pusher.EventsDispatcher.call(this);this.hooks=b;this.method=a;this.url=c}var a=c.prototype;Pusher.Util.extend(a,Pusher.EventsDispatcher.prototype);a.start=function(a){var d=this;d.position=0;d.xhr=d.hooks.getRequest(d);d.unloader=function(){d.close()};Pusher.Util.addWindowListener("unload",d.unloader);d.xhr.open(d.method,d.url,!0);d.xhr.send(a)};a.close=function(){this.unloader&&(Pusher.Util.removeWindowListener("unload",this.unloader),this.unloader=null);this.xhr&&(this.hooks.abortRequest(this.xhr),.this.xhr=null)};a.onChunk=function(a,d){for(;;){var c=this.advanceBuffer(d);if(c)this.emit("chunk",{status:a,data:c});else break}this.isBufferTooLong(d)&&this.emit("buffer_too_long")};a.advanceBuffer=function(a){a=a.slice(this.position);var d=a.indexOf("\n");return-1!==d?(this.position+=d+1,a.slice(0,d)):null};a.isBufferTooLong=fun

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15
Entropy (8bit):	3.1068905956085184
Encrypted:	false
SSDEEP:	3:YIa8HOIY:YIa8M
MD5:	F0D91A73ACE48D2443AADD9A52A781D3
SHA1:	637D557CD3B0516D7B0822B7E036251F455245FF
SHA-256:	CF47D3A034EB704DBC6A1B479427AB513892062349AE526C3B96A4BA6465E3D4
SHA-512:	C2D22AE5697D55DD5008B3D7E6A7B579A88A0EC7009666F5E06F390F99A8E198B7CFBC7DEBBAC5544C7600E4FEC0E874548A5841BC15C55AF35F106DD5405191
Malicious:	false
Preview:	{"mode":"open"}

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (526), with no line terminators
Category:	dropped
Size (bytes):	526
Entropy (8bit):	4.844995662196588
Encrypted:	false
SSDEEP:	12:c4GJ0k2lvgyT6d1uOMXUZsCxYADLsdfPw3CgrR5jddeU7nu:c5D2BtT67uOMXUZjxYOLsOCgrN80u
MD5:	D96C709017743C0759CF3853D1806BA5
SHA1:	72E21587610C49C8305A55E71F73FA88ED618205
SHA-256:	BA2338AA6670580269C762F51C4291DAEF913201AA8F4D4FD166C1A878262652
SHA-512:	974E260ED8BD1D99628FC3248F07179F6EA228E37A6B9D3EF906DBA57571F2DF54D73F93D1F3460902D28A90BD4793BCA35477B2EF8FBF424B9112147F04BCCF
Malicious:	false
Preview:	!function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){var t=window.opener\|\|window.parent\|\|window;if(!t)return;t.postMessage(n.data,"")}else o.contentWindow.postMessage(n.data,"")};window.addEventListener?window.addEventListener("message",i,!1):window.attachEvent("onMessage",i),document.body&&document.body.appendChild(o)}();

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 10101237
Category:	downloaded
Size (bytes):	1219235
Entropy (8bit):	7.999003070873174
Encrypted:	true
SSDEEP:	24576:8IHgypwvi9+SA9BIZN7O2rO0pNT9Silq47Sj2opW82IIS2:8IAvK9+SAPeN7O2LBSilYj2ox29
MD5:	85ABF41A7743C724ECDAF10F017C9140
SHA1:	FD0C07CE51BA23E8F636BB95CFAC85FEAD1BBE50
SHA-256:	3E6B8A743D697D3154D4618E67D4DF52E0163E775E33AF1028A5E701FF3B3399
SHA-512:	D983692C17CF1A81B455F5AFED0C0371C83F2EAFBFADA0300D3A777A46D228FA4E97C2C3B87D193A014E08488F6C03AF602451E787CE97F6C75A0D07E94799C5
Malicious:	false
URL:	https://patient.inboxhealth.com/assets/inbox-patient-716e5cc784b622116d4a9b0f962397c1.js
Preview:	...........k{.8.(..B..f..J..\.Q\|.'=..$...{v... ...T......... ...(....9g;..K.(...uqV.h%i.ORgkf~(...G..K/.E.n{So..8......@i.:.#>/.8M....s......X............K...KeP..........G(6.....s.,..R.I....m.^.q....9s.U8Ah..M......;....VA:.._=.9.....7...ND.@'.4...........z..N....H..D..vV..D.....u.....D....}......S.s.~...j..............H...7.q.........M..q.`..O..T.....$.L..;..E.!Q{..dHR.Z}S..j[.h../I..e.w!.x.`F. .E.....{1.......K/n..p..8?<...k'..\L>.....t.....A....q.....w..C4"\|9_.....o`U......Sp:[.HWq.&.?....u.....^.F..i.1...#p.r1...n..y....P.G.l..b.................yo.....E.k.i....j....5....4V.%N.Y...C.h...E.....,vt&.....r.#..&.8.h..O.h.........H..N.=.@..y.0;...VKU.F.3.N..._...j.Q......p".._Wxs$C_..-.....".e....gm..1-..T;.xx....q(".v..8Y.]..=.jc....+..!......X..q.u.....9...a.#+2.]...oK..'W...7.x.h.s.".vT...7h:.1.q.....W0.........x/..y.=5..G?9./....{^O.q.'{....qJ.z...Ng..~7G#......w\..e.#..E...#.u.......fl.....K...u>.G.^.............................

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	176
Entropy (8bit):	5.0830039192559076
Encrypted:	false
SSDEEP:	3:jTqN/AS3OYNR2XU4sDOYNR2XU4HcRNqUBQEfDebYs1DdLM1BG/YfQRcJT6R7Yme:O33jaEDjaPcrqUmZZdLM1k/IH+R2
MD5:	96F5B26D366F47393B3FF36FE7471474
SHA1:	6CAA14FF7E3692BEB752734C28CBEA160C113B7A
SHA-256:	07B6B3D899DD69C0E9EB463E23E10E30E82588EDDF95D15D45BB505C6703A813
SHA-512:	970801461D6E12D7C14752B7844F1C0347650897A8C9C1540BD0CE49CABCFBF760A9B6B891DA828537F6AD49099608F205E5D47149CB71043DC9915E215E8574
Malicious:	false
Preview:	"use strict";(window.webpackChunkStripeJSouter=window.webpackChunkStripeJSouter\|\|[]).push([[913],{9554:function(e,n,r){r.r(n),r.d(n,{loaded:function(){return t}});var t=!0}}]);

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (938)
Category:	downloaded
Size (bytes):	9061
Entropy (8bit):	5.48282754819382
Encrypted:	false
SSDEEP:	192:C7+3t+kNbwSz/B2tCE229/h47y56RFlckkEAu:C7+d+kxRzYtCE22/hMjUkkEh
MD5:	313373D03A8B73929CBD8AF9170FEB40
SHA1:	8529A455CC93301C768A77B3D0D655FC9C6D6863
SHA-256:	D5AFEBBBE0D2DBFFA1AFC048531B19EA91325487C7410405081E4AE313218D77
SHA-512:	0969E7B89A1BB76C30F7F14BA46D870CB43E7D7A5389BDCEE01C8AF6F1433C5530798F507FF70D61F7E0EA680ED5E893C7426C23BEA498248FD55C192DCD2485
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.BY62uICrLh0.es5.O/ck=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.K7foVd5ynzo.L.B1.O/am=MBjgAQ/d=1/exm=Das5Le,_b,_tp/excm=_b,_tp,payframeview/ed=1/wt=2/ujg=1/rs=AMitfrj6NKNhlSiYEG3DcDC56PlMDd90PA/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:siKnQd;yEQyxe:p8L0ob;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._.Yu=function(a){if(a.jb&&typeof a.jb=="function")return a.jb();if(typeof Map!=="undefined"&&a instanceof Map\|\|typeof Set!=="undefined"&&a instanceof Set)return Array.from(a.values());if(typeof a==="string")return a.split("");if(_.fa(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.nb(a)};._.Zu=function(a){if(a.Yb&&typeof a.Yb=="function")return a.Yb();if(!a.jb\|\|typeof a.jb!="function"){if(typeof Map!=="undefined"&&a instanceof Map)return Array.from(a.keys());if(!(typeof Set!=="undefined"&&a instanceof Set)){if(_.fa(a)\|\|typeof a==="string"){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.ob(a)}}};.var hv,jv,rv,kv,mv,lv,pv,nv,sv;_.$u=function(a){for(var b in a)return a[b]};_.av=function(a){try{return a.j?a.j.responseText:""}catch(b){return""}};_.bv=function(a,b,c,d){d=d?d(b):b;return Object.prototy

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (845)
Category:	downloaded
Size (bytes):	850
Entropy (8bit):	5.221562011637097
Encrypted:	false
SSDEEP:	24:PoMmX+hF6x6EBHslgT9lCuABATRuFA7F7HHHHHHHYqmffffffo:EXQFBEKlgZ01BA1uFYFEqmffffffo
MD5:	AAB43B4A511BCBE370B21033D3F7BA0C
SHA1:	1ED27849F9D8EA12E21737833DA9F42DAE49CB80
SHA-256:	E6E9D9119591780ACAB67E89229FC5A4992B5A0A9168D2CE02A830D0BB422A72
SHA-512:	E743F9618E336496FF0DF5F135B97C43C53899D5158EC754BB9AC70A3A41BDC19062ABF3611E9EACF1EB8DD91C899976D50AA93B963E7D69D2A073B4C3A6DD74
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["woman missing grand canyon","fortnite winterfest","ben johnson caleb williams","pokemon scarlet shiny rayquaza raid","green lantern guy gardner nathan fillion","$3600 child tax credit","why is the stock market down","tottenham carabao cup semi final"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":-8293725957901949607,"google:suggestrelevance":[1251,1250,601,600,553,552,551,550],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 78912
Category:	downloaded
Size (bytes):	13264
Entropy (8bit):	7.983564506476684
Encrypted:	false
SSDEEP:	192:1Gk/aXcS31PlLu0eemNzjxIKBS34pGBh6+SooW22L5ZWwQKMLI4Z5/iPvGhbgOnB:JaXcS31Zu6mNzikWBrUbT8eDH2y
MD5:	0931E5C1446C16DD29401301CD165D95
SHA1:	1294E66CE78A731BE489FB43B30D4F0DFD1A70D6
SHA-256:	6D020B4CDC900157EFA715C3A5121D090D860CD9580942D27170A9B582B5D74C
SHA-512:	7A3ED9F9E99E9B1505342575AB06E8F4EA028BD9CD8A2D8C166EDDCF2AE763DE5A61424B35D4293D0222D9B8FB115F24A0290E90A678D84439328F0EFDCF16B6
Malicious:	false
URL:	https://patient.inboxhealth.com/assets/vendor-7e37a236efac18346865853f791205ed.css
Preview:	...........}...6....+.N.v.'..).k.u..]......mU.uE..kJT..'...... Ai....xfD..F...n4.o....M..,..Jp.:x..y....O%hv....j...%..b...X...=.....Z1,......6...,x.g...].......q...#....(....%8.....zL........o...`..h....h.....uU..1....U........Z......_{.P..i.&w.lA........K..g.........)~...........:.G..9/.c.=..CY..x]V.O..\......q.....db/9..5. lmO;..]./.Dl..f7..WV'...N..h...t..n.=..+.1.4`.l/.fW.........xL.l...AH...VT.U..w-..3.[..l[.?...)k......,y.4>..kP.j..Y.]#....,....$W.Dl..\g...2=d.gB.v.. .{62^..C.S..cu..l/.X..[.k.\....,g....^}..7...6....rV\|....zC.....\}..p.-.!.,...).....Vp.....v..gu>......N...^l..".!..O...M......g.y.P#h....-}G....jW.98.a....E..z.Cu....?..W#.e......w6...\e[.y.c..x.....A...Y.%....lD.P.\..{.G......;..;!..(z}.V..x.Z......~8d.r^..n.Q...W....b...= a...Po. q..T....Fb ......0.......+.X...F...W.Q..zT...>.Bh...>.k.....>.....s$..,9fy... ....:z.9.....`..Za............1..6..L...l.,\M....*...".R.._.........j..ey..y..6B2r.-.....%..C

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (807), with no line terminators
Category:	downloaded
Size (bytes):	807
Entropy (8bit):	5.5888344843219055
Encrypted:	false
SSDEEP:	24:0jHrRIw1ZzGgF456jpf55SbFqVWfY3VpXMRD/a:046jpf552fu6DS
MD5:	3856548E7A416D6BDACB10B20DB090C3
SHA1:	E466D4E25770863E2DA6DF9A985108333B45F944
SHA-256:	D2439151F3448381C1B412C310BDCE5A690988A56AFC827863533614B8DBF877
SHA-512:	A7228E073CAF9956478AE3B551813D5C1705374324207A44D7B66A71DEFC57042656890D47A3A9652CEBA8881150F2CAC01B05E3526ED6796BB1445F89A1CA38
Malicious:	false
URL:	https://js.stripe.com/v3/link-modal-inner-3856548e7a416d6bdacb10b20db090c3.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta http-equiv="origin-trial" content="AtD0WrnMwAPI4nWWCvreE+vpgPVz45SO/1fG1IZRNpBsdWZOZN6SKr0ynC11KuzrvT903WrEU+N9Ik/RpiCRTAEAAABbeyJvcmlnaW4iOiJodHRwczovL3N0cmlwZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ=="/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/link-modal-inner-ed83c1976ac2b7b2ceab9468304dea5f.js"></script><link href="https://js.stripe.com/v3/fingerprinted/css/link-modal-inner-bd52ba2d8aa3af905ae3d09fcce45b9b.css" rel="stylesheet"></head><body><div id="root"></div></body></html>

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (39933)
Category:	downloaded
Size (bytes):	359668
Entropy (8bit):	5.522856819864976
Encrypted:	false
SSDEEP:	6144:1wGXADTn26XNaYxulxrgBEiSaxP64ckAju:VUaYSa
MD5:	9C36B5CFA8304790D1226699C41364B7
SHA1:	2B5E6899842E31944A69AD26EBEBE97CAD24A0B4
SHA-256:	76FC942FBC84AC375CA62B62107746983DB236C885498697AEE68A6FB3E7D0D1
SHA-512:	4913168EC446191305A7A4EF0839883C2E3FC17993309B12843FAE7CEF122787F3966DE3E60D05E9D558564D81F1DA741839323E3E8018C655345FA0A3E0DAF7
Malicious:	false
URL:	https://newassets.hcaptcha.com/captcha/v1/b4956db/static/hcaptcha.html
Preview:	<!DOCTYPE html>.<html lang="en" data-id="hcaptcha-frame-b4956db">.<head>. <title>hCaptcha</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Security-Policy" content="object-src 'none'; base-uri 'self'; worker-src blob:; script-src 'self' 'unsafe-eval' 'sha256-ZqThWN4ha5azD3p/ChDw3zo0I3AT/L2tlIsbICnHj9I=';">. <style type="text/css">*{-webkit-tap-highlight-color:transparent;-webkit-font-smoothing:antialiased}body,html{margin:0;padding:0;font-family:-apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen,Ubuntu,"Helvetica Neue",Arial,sans-serif;overflow:hidden;height:100%;width:100%;background-color:rgba(255,255,255,0);background-color:transparent}fieldset{margin:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:non

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9487)
Category:	downloaded
Size (bytes):	305609
Entropy (8bit):	5.587059749747399
Encrypted:	false
SSDEEP:	6144:5dCPKDYnsmQ88LZ1HcRCriua0Mf3/Vmf9uT+bsKG:5dCynm98L7Hc8t5G
MD5:	AA6FD8D798F91A82082BE88B6A74E549
SHA1:	1C65B2F5BDF40322CD72CDE1AF7029E5179193E6
SHA-256:	252A7A80DF838DCA5CB2C10F45FCC772C67B865BE2E1E7EE9F0B863D2DB1E383
SHA-512:	11C6B9021CD7584EBA0829F120EA6792B2DF652F1C1BB5F32FEEC56B4827AD8B23E3AE83FE0E34DE19A3BBB378EA59354F79DCCFE38F26461D80FDC93A27604E
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-H07SGNNMD6&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":14,"vtp_value":true,"tag_id":11},{"function":"__ogt_ip_mark","priority":14,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":13},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","inboxhealth\\.com"],"tag_id":14},{"function":"__ogt_session_timeout","priority":14,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_city

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (930), with no line terminators
Category:	downloaded
Size (bytes):	930
Entropy (8bit):	5.118473677411452
Encrypted:	false
SSDEEP:	24:0jHQfOuHh1YiLY3WL3QquM32EhEcx+Ps2P2pCgrsLHOII:0EWpNqycBxWACgrsDOt
MD5:	F5EADDB4DFC7E121ABA2112E1CA3EF2D
SHA1:	4C8617E748F288236BA239FE3EB2EE39DA929AA1
SHA-256:	34A85E78B5402C253C2BC4CF64426C2B6B18601602E8A9A71568139FB3EE6599
SHA-512:	A05791E2B1CEE4945B41F4504EC83DD846995AE70EC9A1882D650A745B13AE8389A8A423ECA56372C216D20029CED76FC76E841CEAE0E1A0B8BB9FD8F364769A
Malicious:	false
URL:	https://m.stripe.network/inner.html
Preview:	<!doctype html><html><head><meta charset="utf-8"><title>StripeM-Inner</title></head><body><script>!function(){var e=document.createElement("script");e.defer=!0,e.src="out-4.5.44.js",e.onload=function(){var e;window.StripeM&&(e=window.location.hash,/ping=false/.test(e)\|\|(e=(e=e.match(/version=(4\|6)/))?e[1]:"4",window.StripeM.p({t:!0,v:e})),e=function(e){if(window.opener\|\|window.parent\|\|window)try{var i=((t=JSON.parse(e.data)).message\|\|t).action,t=t.message?t.message.payload:t;switch(i){case"ping":window.StripeM.p({t:!0,o:{muid:t.muid,sid:t.sid,referrer:t.referrer,url:t.url,title:t.title,v2:t.v2},v:t.version\|\|"4"});break;case"track":if(!t.source\|\|!t.data)return;window.StripeM.b({muid:t.muid,sid:t.sid,url:t.url,source:t.source,data:t.data},t.version\|\|"4")}}catch(e){}},window.addEventListener?window.addEventListener("message",e,!1):window.attachEvent("onMessage",e))},document.body.appendChild(e)}()</script></body></html>

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	692436
Entropy (8bit):	5.575206841608777
Encrypted:	false
SSDEEP:	12288:3Hv2xkMCs+ezNi/DmHjrtAhMMBsUPMOVSymMqFr/7UjRGggh8jYa:3vlM7WDmHjrqjYa
MD5:	6D16910AEB4B18A9B40ADEAECCB60A40
SHA1:	903AE7E1085856362B9C53BC8D418681D87994BD
SHA-256:	E0FC34FBBF9A8C2AA6B0D4DE4080210A64507C56D362808B585963E99367A59E
SHA-512:	BEA101520CB06A1845AE564A2F27A3B94F9568DDF8397CC17E28B3DC2C5AE3BAD51B6912E9C508799319F7B70DDF36497F09E4B5DB46A39CA28AD9F295F0619E
Malicious:	false
Preview:	(window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[3712],{10723:function(e,t,n){"use strict";function a(e){c.length\|\|(i(),!0),c[c.length]=e}function o(){for(;p<c.length;){var e=p;if(p+=1,c[e].call(),p>1024){for(var t=0,n=c.length-p;t<n;t++)c[t]=c[t+p];c.length-=p,p=0}}c.length=0,p=0,!1}function r(e){return function(){function t(){clearTimeout(n),clearInterval(a),e()}var n=setTimeout(t,0),a=setInterval(t,50)}}e.exports=a;var i,s,u,l,c=[],p=0,d=void 0!==n.g?n.g:self,m=d.MutationObserver\|\|d.WebKitMutationObserver;"function"==typeof m?(s=1,u=new m(o),l=document.createTextNode(""),u.observe(l,{characterData:!0}),i=function(){s=-s,l.data=s}):i=r(o),a.requestFlush=i,a.makeRequestCallFromTimer=r},64198:function(e,t,n){var a=n(12897);e.exports=a},14771:function(e,t,n){n(80290);var a=n(5379);e.exports=a("Array","fill")},9554:function(e,t,n){var a=n(64198);e.exports=a},24883:function(e,t,n){var a=n(57475),o=n(69826),r=TypeError;e.exports=function(e){if(a(e))return e;th

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	160097
Entropy (8bit):	5.467349585486806
Encrypted:	false
SSDEEP:	3072:DML5rPwSpJngYscqapdBUXBbsKlaEg/BDcY3YsfGsbn:MwSJngYscqapd0BbsKlaESdcY3YsfvT
MD5:	38B93694C8EBEB57F06089EFFC54E980
SHA1:	3AF579DEE39DEB0657C3893BBD3B88E9BE3DC6CF
SHA-256:	CDB1D2F479B539F533157B46FE83E15BF4C68A3B978C8B738C11F653332B9CA6
SHA-512:	0FAD7A724AB1570BCC0DB4E97920B802FE504E74B33A5341A1231FAD238B5682E41576D968A6A756B959C6B9A00E6E2F0961296AC5939E4E92087A4BA6B8728E
Malicious:	false
Preview:	var Plaid=function(t){function webpackJsonpCallback(r){for(var i,a,u=r[0],l=r[1],d=0,p=[];d<u.length;d++)a=u[d],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(i in l)Object.prototype.hasOwnProperty.call(l,i)&&(t[i]=l[i]);for(c&&c(r);p.length;)p.shift()()}var r={},o={18:0};function __webpack_require__(o){if(r[o])return r[o].exports;var i=r[o]={i:o,l:!1,exports:{}};return t[o].call(i.exports,i,i.exports,__webpack_require__),i.l=!0,i.exports}__webpack_require__.e=function requireEnsure(t){var r=[],i=o[t];if(0!==i)if(i)r.push(i[2]);else{var a=new Promise((function(r,a){i=o[t]=[r,a]}));r.push(i[2]=a);var u,c=document.createElement("script");c.charset="utf-8",c.timeout=120,__webpack_require__.nc&&c.setAttribute("nonce",__webpack_require__.nc),c.src=function jsonpScriptSrc(t){return __webpack_require__.p+""+({6:"vendors~WCV2Web3~WCWeb3",8:"CBWalletWeb3",9:"CBWalletWeb3Storage",10:"WCV2Web3",11:"WCWeb3",13:"chainUtilities",15:"ethers",25:"vendors~CBWalletWeb3",26:"

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	485590
Entropy (8bit):	5.343744004704319
Encrypted:	false
SSDEEP:	6144:X3hDqNgI6i/2AT7MxJ0+UofYoRVffcK+2lrRlUisA7ut1I:X3MMATO2ofYoRVffcK7l1lUL1I
MD5:	FC04FEB50D7C22254C1CA4114D570BDE
SHA1:	75FF255A3B74233B1B70D28A1AD2CECD6EA97E99
SHA-256:	7B941CC85F154EC31670A048A0A5A23E3DE36C81472D868D3411327913C04147
SHA-512:	418241C1B187964C5718740AFB249CB6207B92DCEB2A0634E59DC7994F185EB499DD67C167023F42FC247620DF8CCBB68CC65A2EF8391E4C9B7DAE757D324513
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/ui-shared-4af9c6190c1d792bdbbe4e49904ee0f6.js
Preview:	(window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[7035],{94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var i=typeof n;if("string"===i\|\|"number"===i)e.push(n);else if(Array.isArray(n)&&n.length){var o=r.apply(null,n);o&&e.push(o)}else if("object"===i)for(var s in n)a.call(n,s)&&n[s]&&e.push(s)}}return e.join(" ")}var a={}.hasOwnProperty;e.exports?(r.default=r,e.exports=r):void 0===(n=function(){return r}.apply(t,[]))\|\|(e.exports=n)}()},42402:function(e,t){!function(n){if("object"==typeof t&&void 0!==e)e.exports=n();else if("function"==typeof define&&define.amd)define([],n);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).cssFontFaceSrc=n()}}((function(){return function e(t,n,r){function a(o,s){if(!n[o]){if(!t[o]){var l="function"==typeof require&&require;if(!s&&l)return l(o,!0);if(i)return i(o,!0);var u=new Error("C

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	dropped
Size (bytes):	849701
Entropy (8bit):	5.526139221924176
Encrypted:	false
SSDEEP:	12288:5ZDQvnm8OEmirdmJkjm+fjV2XhssAQ44/:PDa2EmicqjnjahssAQ44/
MD5:	419802576603F417F149FC475B138E7E
SHA1:	6F70F476831013C2634822D9127B48F9EEA9CE73
SHA-256:	B80BAE0B2A8345FDF150C81F164F47195DFBD217B84E4DC3382409D4D3AE768C
SHA-512:	DA9962F9ABE1B6877AF8188982E85F4B0EB64847CA7E5CA7308FC9EF8E6C27EA2AA08E651B39878E455CD4A5EC0691D5B2FF8B173B8BD4FA053941A1AC47D4C9
Malicious:	false
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(()=>{var e,t,n,r,o={6470:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(null,arguments)}const i=({title:e,titleId:t,...n})=>o.createElement("svg",a({xmlns:"http://www.w3.org/2000/svg",width:12,height:12,focusable:"false",viewBox:"0 0 12 12","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:1.25,d:"M3 6l2 2 4-4"})))},96689:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){retu

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1436), with no line terminators
Category:	dropped
Size (bytes):	1436
Entropy (8bit):	5.765135622700701
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxsQ:VKEcixKo7LmvtUjPKtX7ftD1INOLrwUG
MD5:	8DCF92FD011F60C80E211A6B7950F311
SHA1:	AD0DAE42A982147C8587A8196E91039BD79B3A8B
SHA-256:	850C547C29D0D82F24882EC0E5B7A87D8F9A328D11C1266A2298B9103F8DDA47
SHA-512:	B2EDA33240FCB80DC467A4D63C0AA86241C23AB854080A8F59B65412A577EA89FD67F0026CBA472B7535F3BB4D30C0E6CD422235F3B2BC1952C8D3A4129385BB
Malicious:	false
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8090
Entropy (8bit):	5.4269976657952546
Encrypted:	false
SSDEEP:	192:mOw2O/bOkO6MOdQ+7pgjU6Qb7wZjdCO8oOBAQeBJP:mF2cbBAxsFPZQR
MD5:	91EA06DD4520A22BC6BD108F518DCF42
SHA1:	EFE58485EF07ADE912A3AFF0669FF045CD14AE12
SHA-256:	73BBA8FBB48FAAF846B6070230AB249499FF2731DA206BBC3B43BFF20A7A09C8
SHA-512:	61017F76D838E96309E0DF7BB8B0DD41FC72ABD9F8D388AB7344E700DF24E62E892D7050B793970C22AE605C25B635980FC666BECEDC5D07F7085BD639BFB6C1
Malicious:	false
URL:	"https://fonts.googleapis.com/css?family=Nunito:400,400i,700\|Poppins:400,400i,700&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Nunito';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXK3I6Li01BKofIMPyPbj8d7IEAGXNirXAHgKbabWk.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Nunito';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXK3I6Li01BKofIMPyPbj8d7IEAGXNirXAHiababWk.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Nunito';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXK3I6Li01BKofIMPyPbj8d7IEAGXNirXAHgqbabWk.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	103
Entropy (8bit):	4.579731907667913
Encrypted:	false
SSDEEP:	3:UKJJFHTWWiWEAjR3uuIIE0pAspn:UKJjTWWi0F8IE0bpn
MD5:	2D0E8863B56F6989DC4652EC2626A656
SHA1:	6B24B46C3D5BF35454A727ECBB34E81AF85D98E0
SHA-256:	126C5F0C8C4CD0135B5E9FFB1C113A6F229DE3F89BCE9E099B3C85BEA641BD7C
SHA-512:	59298F94BFA67A6EC9D15A940D07A587CF467849D723F9959765B8FACA5DA5FA0C1EBA17B6F1864D314F3930A9BB2116D994F1F02C9F7DD5E48BDE1D7C5CF681
Malicious:	false
Preview:	/. Polyfill service v3.25.1. * Disable minification (remove `.min` from URL path) for more info.*/..

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2771208
Category:	dropped
Size (bytes):	706567
Entropy (8bit):	7.999188625113332
Encrypted:	true
SSDEEP:	12288:4UMbTZjEjTgViNSg+sCF1FYTR1rDwL2A/X8eQ1p0Jr5A4se/FUkB1gRRBbcsD1kx:4UM3ZCgiNmsTNRhKMei0rAhVkB6RRBbE
MD5:	C9E43FFDA512D60AD518789CF211BEC2
SHA1:	6CF010BD4DF87E658813C6D3A5BF58C6F51FB3AA
SHA-256:	1110BC29CC569D3D5E1B5CBC650001630B755C6EF9AAB9B427A41CAF39DD421E
SHA-512:	B3FB148D512E8DEC7AB6449C0CE7F52A14578927E11EA5F8E9D8BAA9A50094D913CC642B9843E0A88F206D745C934DBB02520B81F07DD191F9B5EA9802163A11
Malicious:	false
Preview:	...........}._.H.....%.]....V..pST.((...v.H.`.......s..$3i....6s..9.93s.....?b...........v._n......'.6v.^5'.....X{............[.v!.f...z..e..e.~..}...k..A/......A..'.,Nbw.yh...N../. f.8..NbL.RbZ_.".n.}d.....03..z.D.A..X.......R...c.. ..`......Z.,jt.....4S..D.t....q.N....mJ...;p;&..S$..;...M=..$.....[}.MO[.~tPa..a..f...d..{.~..08..X6...>...O`3....k%.S/.....E..YSSAQ...................[e....QkR......&~.V6...Hr.....]....exAi..s,.uK..../.....%....D./.2}.............0i...(...%/:..Y..$....a....!&..1......Y.c............~.l.....A.M.T.j....e._Dm..oxD.......p?....x)^e.vDe.R....7b......R.yW........k@.q....K,......d......}7.g..!....@...8x.OM..Y.-L...%CG.R.?.f....(@...^...I..+..9.~_..q..14.P.S.....s.t.........@(.......~..!...rW....[...Hty;.c.`nV.z.RbV-K"..9J.D..=?1......[.a.2.jO;.@...J y.?...P.5..*..&...nH.W......7/.A.:...s/........0L.@%....nX/f.OT~'..?.0L...Z77.wQ.c...lTN.nx.Is.AcjjR...&..Ga.&W.2./2<)1..F$..@...c...A....

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	4.942373347667344
Encrypted:	false
SSDEEP:	3:qTkIDZxVsJYkup3XyHFeTrAyTKTWKMrBKblbJ4ZNDpVbz2USrGXI9kBbZ6iF4:qTjxVgYkYv3J/14QpcUAVuB965
MD5:	3437AADDCDF6922D623E172C2D6F9278
SHA1:	F69066CF20141AC93418102D3EEE7C0225B8A623
SHA-256:	35DCC382EB69D00369D708708CDC545F3968B68FA5BBE3E728D11FEDD04F93BB
SHA-512:	2DAE5C5C30C6A0E763D8128F2CE1D467EAD432E582AB4EBB68E23991DB08F57490ABC0EED805FD33FAB5503C1737D9D47D4CC1090AE15D7391593FBB295D66E7
Malicious:	false
URL:	https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js"></script></head><body></body></html>

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1010
Entropy (8bit):	5.136766802272771
Encrypted:	false
SSDEEP:	24:Y+pFqNx+Ac12ZIy0XyxT3vKLD1+szdsGZktwW2:Y2J12ZI3XyByL5Fztkc
MD5:	ECD9DFA9902BE2FABF60F819F335B2F3
SHA1:	C24357BA5E438666682585EC84493CF61AECD09E
SHA-256:	83209B9D63727B674C1A95E5FE72B79FA278D4B5708FDC48E3BE78C39CF666A6
SHA-512:	0BC51FF42BF608423016E6CABC919FFA0B710F7C15976401342D8248CD7D8E53D354FDB115B9D40C28A01370BC78192BBB1959B087F81193E32D0F77D83934C4
Malicious:	false
URL:	https://ekr.zdassets.com/compose/a38e4305-dfd3-44f3-b64c-d15d8b98fd79
Preview:	{"products":[{"name":"web_widget","id":"inboxhealth.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#78A300","brand":"Inbox Health","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"color":"#78A300","nameFieldEnabled":true}},"chat":{"embed":"chat","props":{"badge":{"layout":"image_right","text":"Chat with us","color":"#eeeeee","enabled":true,"imagePath":""},"color":"#78A300","mediatorHost":"widget-mediator.zopim.com","forms":{"preChatEnabled":true,"offlineEnabled":true},"zopimId":"6FQXnIYg7b7AgsCqLoSQ70bWODubjdzL"}},"launcher":{"embed":"launcher","props":{"color":"#78A300"}}},"brandCount":1.0}},"features":["ticket_submission","chat"],"url":"https://ekr.zendesk.com/compose_product/web_widget/bcac9f6b9b5b005862f6744f84d0005a8bde8187?features%5B%5D=ticket_submission\u0026features%5B%5D=chat","assets":{"scripts":[{"src":"https://static.zdassets.com/web_widget/classic/latest/web-widget-main-bcac9f6

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2771208
Category:	downloaded
Size (bytes):	706567
Entropy (8bit):	7.999188625113332
Encrypted:	true
SSDEEP:	12288:4UMbTZjEjTgViNSg+sCF1FYTR1rDwL2A/X8eQ1p0Jr5A4se/FUkB1gRRBbcsD1kx:4UM3ZCgiNmsTNRhKMei0rAhVkB6RRBbE
MD5:	C9E43FFDA512D60AD518789CF211BEC2
SHA1:	6CF010BD4DF87E658813C6D3A5BF58C6F51FB3AA
SHA-256:	1110BC29CC569D3D5E1B5CBC650001630B755C6EF9AAB9B427A41CAF39DD421E
SHA-512:	B3FB148D512E8DEC7AB6449C0CE7F52A14578927E11EA5F8E9D8BAA9A50094D913CC642B9843E0A88F206D745C934DBB02520B81F07DD191F9B5EA9802163A11
Malicious:	false
URL:	https://patient.inboxhealth.com/assets/vendor-6c9826c2fc718fe6ddcdd435bffce760.js
Preview:	...........}._.H.....%.]....V..pST.((...v.H.`.......s..$3i....6s..9.93s.....?b...........v._n......'.6v.^5'.....X{............[.v!.f...z..e..e.~..}...k..A/......A..'.,Nbw.yh...N../. f.8..NbL.RbZ_.".n.}d.....03..z.D.A..X.......R...c.. ..`......Z.,jt.....4S..D.t....q.N....mJ...;p;&..S$..;...M=..$.....[}.MO[.~tPa..a..f...d..{.~..08..X6...>...O`3....k%.S/.....E..YSSAQ...................[e....QkR......&~.V6...Hr.....]....exAi..s,.uK..../.....%....D./.2}.............0i...(...%/:..Y..$....a....!&..1......Y.c............~.l.....A.M.T.j....e._Dm..oxD.......p?....x)^e.vDe.R....7b......R.yW........k@.q....K,......d......}7.g..!....@...8x.OM..Y.-L...%CG.R.?.f....(@...^...I..+..9.~_..q..14.P.S.....s.t.........@(.......~..!...rW....[...Hty;.c.`nV.z.RbV-K"..9J.D..=?1......[.a.2.jO;.@...J y.?...P.5..*..&...nH.W......7/.A.:...s/........0L.@%....nX/f.OT~'..?.0L...Z77.wQ.c...lTN.nx.Is.AcjjR...&..Ga.&W.2./2<)1..F$..@...c...A....

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	237
Entropy (8bit):	4.933525546272954
Encrypted:	false
SSDEEP:	6:YAa+W8ebZ5iJC17Tg0ZgjlX/QyQLdg8F57/9Amrm/SGKvr/Au:YfiWowrZgjVQLdBFrfm/1Grou
MD5:	2664F0A923C2A52EAC273130929AD9DA
SHA1:	BD73858F52D3CFFDAB45CEA88DE51A8F1EFF25C4
SHA-256:	C7A729206CB54757F2AB5FDDB3A83CB4B15CB96A9F96A2E6139B03E3B8327AAD
SHA-512:	4597AAFCED5C5947309A53A25A4224226FED3ECA790FE015883EA629E4E4C3BE7C0D25155902400E2ECA910B1DDDE9D77B828F2E49371140A7F0E7F0821EFBDF
Malicious:	false
Preview:	{"enterprise":{"id":7272,"name":"Foot \u0026 Ankle Center of Cache Valley and the Wind Clinic","support_phone_number":"(844) 900-4909","has_logo_base64":true,"logo_background_color":null,"post_checkin_message":null,"friendly_name":null}}

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7785)
Category:	dropped
Size (bytes):	2061706
Entropy (8bit):	5.180624388622866
Encrypted:	false
SSDEEP:	6144:SkttEmfZZUX0SvHaXnvkhyJ8FoyJJZJXjyJ8dIyJP9x3qKskVA8lEgY2PwUgDf47:ptEXOnvkhyJ+oyJpyJKIyJf3
MD5:	88A2AA08654CD2C0B9F3786245AA51F9
SHA1:	EED2755253D3A5D424BE0AA4A3D7D6591C6CFCDC
SHA-256:	EBAE50771782449DF7CEBD16FBFC770E73C87B16279D46BE09EA559EDCD5709C
SHA-512:	C4D791052C829F43E6DB9D4E5870DC054A34E81FF3525E51148C0738200AC324FE241392BBB09D4B05F6A78B052F9A2165492E653A7E4B8E6517F642F43209D3
Malicious:	false
Preview:	<!DOCTYPE html>.<html. class="MktRoot". lang="en-US". data-js-controller="Page". data-page-id="Home". data-page-title="Stripe \| Financial Infrastructure to Grow Your Revenue". data-loading.>. <head>. <script>window.__capturedErrors = [];.window.onerror = function (message, url, line, column, error) { __capturedErrors.push(error); };.window.onunhandledrejection = function(evt) { __capturedErrors.push(evt.reason); }.</script>.<meta. name="sentry-config". data-js-dsn="https://7cd38b0eb2b348b39a6002cc768f91c7@errors.stripe.com/376". data-js-release="4cdfb883b2acf78d9eaa4e85f10795840e8ce377". data-js-environment="production". data-js-project="mkt".>.. <meta name="experiment-treatments" content="acquisition_top_cta_change.control.ursula.d0823f97-101f-4fdf-851d-56704e0e6f62.a,wpp_homepage_title_copy.control.ursula.b567783d-25ab-4717-8024-cf189b4a38bc.a,acquisition_jp_homepage_holdback.treatment.ursula.b679a1fd-54a5-4f3b-86b7-789d1ba0ac72.a,acquisition_text_suserng_with_viewp

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23553)
Category:	downloaded
Size (bytes):	26244
Entropy (8bit):	5.14133047276266
Encrypted:	false
SSDEEP:	768:HW+XCDlmhBw5d0bqwNQ8dNsuwqt1kFpbf6KjRg:O0bqwNQ8dNsuwqtWFpGwRg
MD5:	F9B783F2E57F825DC7742ECF27119F84
SHA1:	B221CA2315836C5B6D4AB65B19BEE904C898FAAC
SHA-256:	6DD2B3BC419DF37222B86A1D48D8781A4DD26283EC1700CC990269CC91242DE4
SHA-512:	CD688FD01848F9AFB3C16C7A2E036415C4EB3164D11CB7EEF948B0B052B0D9D8F5217C079BF7B2DBA235FD9FC09C4E9062BD42AE3FBD86D45A8FFE604CBDD100
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/css/ui-shared-57e28d4968898653fd9bd0ad9d7f138b.css
Preview:	.LightboxModalContainer{color-scheme:normal;height:100%;left:0;position:absolute;top:0;width:100%}.LightboxModalHeader{-ms-flex-align:center;-ms-flex-pack:end;-webkit-align-items:center;align-items:center;display:-webkit-flex;display:-ms-flexbox;display:flex;height:40px;-webkit-justify-content:flex-end;justify-content:flex-end;text-shadow:1px 1px 5px rgba(0,0,0,.5);width:100%}.LightboxModalBody{background:white;box-shadow:0 7px 32px rgba(0,0,0,.15),0 3px 6px rgba(0,0,0,.2);height:calc(100% - 60px);overflow:hidden;width:100%}.LightboxModalBody-noscroll{height:auto;min-height:calc(100% - 60px);overflow:auto}.LightboxModal:not(.LightboxModal-noNestedTargeting) .LightboxModalContent ,.LightboxModalBody,.LightboxModalContent{border-radius:4px}.LightboxModal-fullScreen .LightboxModalBody{height:100%}.LightboxModal-fullScreen .LightboxModalBody,.LightboxModal-fullScreen .LightboxModalContent,.LightboxModal.LightboxModal-fullScreen:not(.LightboxModal-noNestedTargeting) .LightboxModalContent

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12253), with no line terminators
Category:	downloaded
Size (bytes):	12253
Entropy (8bit):	5.347330622366456
Encrypted:	false
SSDEEP:	192:ZM+C8lHprSjfFwgsnqqtzmasMs4nkQxCOMzN:yZ3qpbBsOkQxCOa
MD5:	26C21664AB90A0616B393EDA4422F672
SHA1:	86E758E29330F245B8F0328CD589F8C4D0355F3F
SHA-256:	E9262DBAB0CC3A0F62D97B0902BE9821D217AA7F1741AA1B2380AF4C5FA96D06
SHA-512:	48F885F423D41F4B97136095FA7912398E60F2B1A22A814BD4DD365D32F38A8D2B43D160BD83C1796C6CE58029AD728392A6995FC1D5CB09D4DADEAF82F781DE
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/payment-request-inner-google-pay-6fc983c9284c67933a5e14c4b22c32b4.js
Preview:	!function(){"use strict";function e(t){var n=r[t];if(void 0!==n)return n.exports;var a=r[t]={id:t,loaded:!1,exports:{}};return i[t](a,a.exports,e),a.loaded=!0,a.exports}var t,n,a,i={31506:function(e,t,n){var a,i=n(93324),r=n(1413),o=n(45987),s=n(39581),p=n(36617),l=n(63630),c=n(15671),u=n(43144),d=n(12024),h=n(69620),_=n(91493),y=n(89062),m=n(71873),f=n(17948),v=n(39294),g=function(e){return{country:e.countryCode\|\|"",region:e.administrativeArea\|\|"",city:e.louserty\|\|"",postalCode:e.postalCode\|\|"",recipient:e.name\|\|"",phone:e.phoneNumber\|\|"",sortingCode:e.sortingCode\|\|"",addressLine:[e.address1\|\|null,e.address2\|\|null,e.address3\|\|null].reduce((function(e,t){return null!=t?[].concat((0,y.Z)(e),[t]):e}),[]),dependentLouserty:"",organization:""}},O=function(e,t){var n=e.id;return t.filter((function(e){return n===e.id}))[0]},P=function(e,t,n){var a=e.paymentMethodData.info.billingAddress;return(0,r.Z)((0,r.Z)({complete:n,token:JSON.parse(e.paymentMethodData.tokenizationData.token.trim()),ship

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	126455
Entropy (8bit):	5.270671759129053
Encrypted:	false
SSDEEP:	1536:CkbE8AdeECtvtiImiHJyx/Q/w5CMdtVJGWRE7kgyz3:FQ8ceECa8Jyx/Q/4/do7s
MD5:	93A1603DA3C8CC1EB7686ADFCC8F6D73
SHA1:	4E0C91887A23368ED1F32628FDAA759FD4AEC69F
SHA-256:	51440A84317F6B19787DE828B46E1B5EA73B6B4E3CF40033FC409EEE2DA17847
SHA-512:	D607F449CDED2606BD645B1CD17D9A5D90DC3F22DED57AAC4C6C98CBBD768AA1F36682E152302CDAE0739C6F77378A614EB751901B9BDF2B2D49FC1D7559D250
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{10:function(t,e,n){var r=n(9),o=n(42),i=n(196);r({target:"Object",stat:!0,forced:n(15)((function(){i(1)}))},{keys:function(t){return i(o(t))}})},102:function(t,e,n){var r=n(112),o=n(66);t.exports=function(t){return r(o(t))}},103:function(t,e,n){var r=n(178);t.exports=Array.isArray\|\|function(t){return"Array"==r(t)}},106:function(t,e,n){var r=n(29),o=n(103),i=n(45)("species");t.exports=function(t,e){var n;return o(t)&&("function"!=typeof(n=t.constructor)\|\|n!==Array&&!o(n.prototype)?r(n)&&null===(n=n[i])&&(n=void 0):n=void 0),new(void 0===n?Array:n)(0===e?0:e)}},107:function(t,e,n){var r,o,i=n(39),a=n(555),c=i.process,s=c&&c.versions,u=s&&s.v8;u?o=(r=u.split("."))[0]+r[1]:a&&(!(r=a.match(/Edge\/(\d+)/))\|\|r[1]>=74)&&(r=a.match(/Chrome\/(\d+)/))&&(o=r[1]),t.exports=o&&+o},108:function(t,e,n){"use strict";var r=n(15);t.exports=function(t,e){var n=[][t];return!!n&&r((function(){n.call(null,e\|\|function(){throw 1},1)}))}},11:function(t,e,

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1652)
Category:	dropped
Size (bytes):	171461
Entropy (8bit):	5.5921938676981195
Encrypted:	false
SSDEEP:	3072:kKwyMy1SDJLWSZ4uhStqHVA/t8zUrnOI/mkJYv5oRtlwVU1cFZVPL1W:kKwyMy1SDJLWSZ4uhSH/t8oYlv5oRt6W
MD5:	EFF9AB7EA07D8F3A66505C4DDB5C0F89
SHA1:	49BDCC223B6FE4A7E2266C73EE8AB4FE21D0C77B
SHA-256:	D79BB88F8991067CF95124262F920D04905C08785B5E4A99131B35674C8FF2B0
SHA-512:	CD8CB8ABFF9F03A328B4213D0CB04D1A5B56BD8F8D870B7DC28DEBAC671D5AB6796224B74020BF8FC94AF1043B3A0F0AC3D51955A06DF99A9B9EFCF82CCB0D33
Malicious:	false
Preview:	(function(){window['denylistedDomainsHashedValueListForGpayButtonWithCardInfo'] = [-718583466,-651407173,1501053020,1270931793,1878965203,1359979311,-1556396599,-929820290,-1993966558,969369487,813004726];}).call(this);(function(){window['whitelistedDomainsHashedValueListForGpayButtonWithCardInfo'] = [1432838318];}).call(this);(function(){window['denylistedMerchentIdsHashedValueListForGpayButtonWithCardInfo'] = [1260893,211376492,-383338062,621213554,-1574521140,318272649,-1021013306];}).call(this);(function(){window['denylistedMerchantIdsHashedValueListForGpayButtonVariant'] = [];}).call(this);(function(){window['allowlistedMerchantDomainsForBnplDynamicButton'] = [1605359444,1058617217,-1952496552,1475577307,-266458566,-1100178842,82073654,1871160076,1512037837,-324377671,-1836633316,1257306572,-490810357,914948972,1312509109,1456172824,1359979311,2119319518,1000705814,-557041780,217951089,-733157279,545927057,-1637503934,587727802,439938499,-82521450,1010792251,-1600155240,501105821,

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1343)
Category:	downloaded
Size (bytes):	83514
Entropy (8bit):	5.5829680085982325
Encrypted:	false
SSDEEP:	768:rCbeNwBwLgIx0clzH3FO12LmH/RFRbLIzaDZj75A06LL52AA0YpQItK81/LksjB/:EPe6R8LZilDoXlpAlH2F/bzREk2Lf
MD5:	FD00B97F9721BFF9FD3DFFBB356F131C
SHA1:	9FFCE3A27ACC8590ABA8DCF438E161C06EF3164E
SHA-256:	1759F27D95194F2FFD7136EF41F1BA99B7FD4CC159F5F33EA2F409B77BBC6EC9
SHA-512:	0B13768A020D2C7B1FAEFE8FD8CBE51DCA8C603B061DE8369BC4305A099DD69AF36AED1C5CA93D18FE9452BEE407947269F3703CB96D76245B3CD64D6742021C
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.BY62uICrLh0.es5.O/ck=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.K7foVd5ynzo.L.B1.O/am=MBjgAQ/d=1/exm=_b,_tp/excm=_b,_tp,payframeview/ed=1/wt=2/ujg=1/rs=AMitfrj6NKNhlSiYEG3DcDC56PlMDd90PA/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:siKnQd;yEQyxe:p8L0ob;yxTchf:KUM7Z/m=Das5Le"
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._.UB=function(a){_.Wo.call(this);this.o=a\|\|window;this.B=_.Lo(this.o,"resize",this.C,!1,this);this.j=_.Bm(this.o\|\|window)};_.K(_.UB,_.Wo);_.UB.prototype.getSize=function(){return this.j?this.j.clone():null};_.UB.prototype.ca=function(){_.UB.Ia.ca.call(this);this.B&&(_.Uo(this.B),this.B=null);this.j=this.o=null};_.UB.prototype.C=function(){var a=_.Bm(this.o\|\|window);_.ym(a,this.j)\|\|(this.j=a,_.Yo(this,"resize"))};._.w("n73qwf");.var VB=function(a){_.Wo.call(this);this.B=a?a.j.defaultView:window;this.G=this.B.devicePixelRatio>=1.5?2:1;this.o=(0,_.F)(this.F,this);this.C=null;(this.j=this.B.matchMedia?this.B.matchMedia("(min-resolution: 1.5dppx), (-webkit-min-device-pixel-ratio: 1.5)"):null)&&typeof this.j.addListener!=="function"&&typeof this.j.addEventListener!=="function"&&(this.j=null)};_.K(VB,_.Wo);.VB.prototype.start=function(){var a=th

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11813)
Category:	dropped
Size (bytes):	16426
Entropy (8bit):	5.374536936749559
Encrypted:	false
SSDEEP:	384:NY6p5cz5QYq+bnLfjURHjXo2BtcCvOby0J3NSO:NYs7Y5KHbo2BWCv50jSO
MD5:	C7ABFF525EAC4DB1EBD9E008E334D340
SHA1:	BBBF4F6049A12A6C134B2781973269F33491F53C
SHA-256:	0046AA554A93FF7C003F5BD9E8A063D5D156E9CDFB35E54BAA7304C265553549
SHA-512:	B1936FAD6BC99C5F5C704A6DE05B97DF7E782BC6E04C9FF4551FC497482C4D202A0BD582439F20CD64AB24C9254DF8FD49661C5B475EDF104E9A58BE0C9F72D1
Malicious:	false
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1820622,"rec_value":9.999999994736442e-10,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":true,"suppress_all_on_specific_pages":[],"suppress_text":true,"suppress_location":true,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[{"id":520260,"created_epoch_time":1594228157,"skin":"light","background":"#EAEAEA","effective_show_branding":true,"position":"left","content":{"version":2,"questions":[{"next":"thankYou","required":true,"text":"How can we improve your experience of this page?","type":"single-open-ended-multiple-line","uuid":"37d04b78-fcdb-4eff-9c0a-c0df3d80a43d"}],"thankyou":"Thank you for answering this poll. Your feedb

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1824
Entropy (8bit):	4.366970038285919
Encrypted:	false
SSDEEP:	48:61bBrEvWFaHM5y4bHtzrOf1NPycREROSfzsKOW5h:8bBrngEZO1sqSzsKvh
MD5:	34A4438D65DE8B75B2E2B38081B37625
SHA1:	C40C0EB631E267E06A4B48FD1FF072B300C7457D
SHA-256:	C76F766ED128FF1C05CBAB4F53E470751B475152992A770D42273047BC1708C5
SHA-512:	67CF35910DB0970AC3C00D57A8CDBC90FCFBA9A8B95D0039EBE73E2D16AF418FAB82DE712E5DB8CC2F5A76849FC5E03F741433C8F8B96E81B9F4A0C78398D3EF
Malicious:	false
URL:	https://www.gstatic.com/instantbuy/svg/light_square_gpay.svg
Preview:	<svg width="41" height="41" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M19.526 14.635v4.083h2.518c.6 0 1.096-.202 1.488-.605.403-.402.605-.882.605-1.437 0-.544-.202-1.018-.605-1.422-.392-.413-.888-.62-1.488-.62h-2.518zm0 5.52v4.736h-1.504V13.198h3.99c1.013 0 1.873.337 2.582 1.012.72.675 1.08 1.497 1.08 2.466 0 .991-.36 1.819-1.08 2.482-.697.665-1.559.996-2.583.996h-2.485v.001zm7.668 2.287c0 .392.166.718.499.98.332.26.722.391 1.168.391.633 0 1.196-.234 1.692-.701.497-.469.744-1.019.744-1.65-.469-.37-1.123-.555-1.962-.555-.61 0-1.12.148-1.528.442-.409.294-.613.657-.613 1.093m1.946-5.815c1.112 0 1.989.297 2.633.89.642.594.964 1.408.964 2.442v4.932h-1.439v-1.11h-.065c-.622.914-1.45 1.372-2.486 1.372-.882 0-1.621-.262-2.215-.784-.594-.523-.891-1.176-.891-1.96 0-.828.313-1.486.94-1.976s1.463-.735 2.51-.735c.892 0 1.629.163 2.206.49v-.344c0-.522-.207-.966-.621-1.33a2.132 2.132 0 00-1.455-.547c-.84 0-1.504.353-1.995 1.062l-1.324-.834c.73-1.045 1.81-1.568 3.2

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 32520
Category:	downloaded
Size (bytes):	30857
Entropy (8bit):	7.992955710460929
Encrypted:	true
SSDEEP:	384:jGmjB7+CExyBXb+fTau9l2hFCWQDq4qFuqpzBL6x9Im4C/iPO/ozvTaIhuW7vwJC:jxjBzExyBXCfN2htJe9IRG43hDv4n+D
MD5:	0701ABC12C3B92C3BA42C9CFECE5A744
SHA1:	DABB6EC5E6D9575F983565F96A96AB5671E87DF2
SHA-256:	2D48C59C44BBB07279B885536621B52877AA1CADC932B4BD87671BC64059A7FF
SHA-512:	F9189985FFF95038FE47875524980841D24147367434A46D8B02E290B6329BFD7E715C3BE69FD8B1804E3B54F71B18DC6863F0B017E2164FC52FBA43A9BCCC2D
Malicious:	false
URL:	https://patient.inboxhealth.com/assets/ih-logo-white4-58cda4a1a0dab88ce4a456751874e449.png
Preview:	............gTS[.0.......@...z..".I.J.HIh.C""A...7..(.@z..@...t....)"M...9..}..w..n...Zs.5{.k..cCm...A .....).D..\|.9E.\|.r...tl.A Q..78.T...Q.......+. }E.\..n...(..KQ%....................k%c n.Rw.....p3.74w..v.w.UQ.Q.U.....9.........W..~2,....H..........1.:2..GFTV.EBZ.GN^TBVJZ^^.GR\..&.......U..W.......-..].TC.{...x=..P.bb!!!.!R....1.yyy1qI1II..B$0./.)T./..o..n...^. /....o'gdp../..,.............:..$D....h`.?........D.....a(71S.@dp...&../.........\|....E.........K.....B.z".?..3.....z..S.2.....[Q.....(F...........r...J.'.".2"..........".......5....).....t.r.....(....9....j(..#.^^..n....2"2.nn".rNr".p)y...............5...'2<Y...uE..8..IA.M\FR..ID\.E\..YZV..I\J..)')+-.$+....Q...>N>..zB.+.QZNR...]B...s.....K..8I..II;...9..(.#.\|..c..u.p.C.y...C.:....H.....u.....^>.D....................@..@@.a...37..~.....D..\N<C.../...w...E..;...>............A!N.n.....w.(...A.......g&.......N~.n@....#...#..kN...c...../.2..OXw..P..A.W`. ..Z...j...c&...b.a...\|.m.J.eM.U..+.E..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6373), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	9946
Entropy (8bit):	5.3236737156310765
Encrypted:	false
SSDEEP:	192:/Qyy98giNY1GWNUu9JHe45QUCWHbn2nBnenr0DEJjvjgj2Z0fwKzMvp5xSczLoxH:ui9uEpcTbU8xh+8L683rRRyucEh2kIV
MD5:	BC95DC71758EA24509AEB7531B105DB3
SHA1:	3BA8A5C5F506FC83592D5C67E4BDF26087B1D4A4
SHA-256:	5853ECA5C6A7D6A785B8675FB0C1CDF8DEB347BCC7BD52CC3B724E75473DE6E4
SHA-512:	E32C0C9F20AF74CDCE8287B05868CE601474EFB6C89B7BAFE05541CA8F05EB0321D18DF2909FAFB64CDC5E9CD15DB96C01B44A5B483B8065854E297C919E1561
Malicious:	false
URL:	https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba
Preview:	<!DOCTYPE html>. [if lt IE 8 ]><html class="unsupported"><![endif]-->. [if IE 8 ]><html class="old polyfill"><![endif]-->. [if IE 9 ]><html class="old"><![endif]-->. [if (gt IE 8)\|!(IE)]> > <html class=""> <![endif]-->. <head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <title>Inbox Health</title>. <meta name="description" content="">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no shrink-to-fit=no" />. <base href="/" />.<meta name="inbox-patient/config/environment" content="%7B%22baseURL%22%3A%22/%22%2C%22modulePrefix%22%3A%22inbox-patient%22%2C%22environment%22%3A%22production%22%2C%22locationType%22%3A%22auto%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22ENABLE_DS_FILTER%22%3Atrue%2C%22_ENABLE_LEGACY_VIEW_SUPPORT%22%3Atrue%7D%2C%22featureFlags%22%3A%7B%22enable-preauth%22%3Atrue%2C%22enable-estimates%22%3Atrue%2C%22enable-billing%22%3Atrue%2C%2

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	603
Entropy (8bit):	4.927711849844272
Encrypted:	false
SSDEEP:	12:YwUyzOrWfcx+AcdMKQMva1acdMVxTJlyBK0LGONAEvKdMwb:YvNx+Ac5aZSxTby3H5vKh
MD5:	FCA524A3CEAF08CE68AE047A0582F109
SHA1:	BD94EAA3B137A7B65DD36F8A831949B1ED193640
SHA-256:	C58A3620C177FEFA35B62EC53A7C64247A599B103BCAE67CAB389BFEBFFC2020
SHA-512:	20A7E03DABE73DE6767A35631077C794C642BAF67449D9AD355BCA3EAD0C79E5F90332FAA0A3DF85DAF6CEABD0154830A9A88171E286D918311571172046CC56
Malicious:	false
Preview:	{"brand":"Inbox Health","brandCount":1,"color":"#78A300","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#78A300","attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled":true}},"chat":{"embed":"chat","props":{"color":"#78A300","zopimId":"6FQXnIYg7b7AgsCqLoSQ70bWODubjdzL","badge":{"color":"#eeeeee","enabled":true,"imagePath":"","layout":"image_right","text":"Chat with us"},"forms":{"offlineEnabled":true,"preChatEnabled":true},"mediatorHost":"widget-mediator.zopim.com"}},"launcher":{"embed":"launcher","props":{"color":"#78A300"}}},"features":{"fastLoad":true}}

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41625)
Category:	downloaded
Size (bytes):	150639
Entropy (8bit):	5.404735182175262
Encrypted:	false
SSDEEP:	3072:AwlL47MnAPaiA2UudRCe/fX2MkdF5kpjmgL1ZVplqpU:AwlgMgaiA2UuZ/P2MkdF5WL1/plqpU
MD5:	B20559412B1D0DC2412931B628AA8163
SHA1:	6EEE080D6EE3D588BC608CDA70D1B10CE75AA120
SHA-256:	35E9BDBAC24332F0DFEDB88D94AC1354C59B1B939A2FCA39991796517FCB74B1
SHA-512:	6BC184C8A14988D970A19994D4C1FCB83D191014DA2174E897CD85E27F53B9E513CF858D0B48264F6A7BA867D5112E240232CF14445CDB47CADE34B6DD7A3AD1
Malicious:	false
URL:	https://hcaptcha.com/1/api.js?onload=captchaLoad&render=explicit
Preview:	/* https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	dropped
Size (bytes):	197123
Entropy (8bit):	5.522888047760914
Encrypted:	false
SSDEEP:	3072:oiFitgcnsmIjppD04OmYasxzuZ1IwPcRCrvPdka0Mf3/k7mJVM1:7YnsmQbZ1HcRCrya0Mf3/kt
MD5:	E3692E3E8D54B972CA12AC5945285C6B
SHA1:	1AF75CC30FE8152BFE9BB08A6386972D45E4EA66
SHA-256:	18519215310BB84FCC04C40BF95F80371827CD0BD518F42A7292FED8CDAFBD9D
SHA-512:	CD140949D4EC49E8C11B369D5746E72403DDB54251781DB4756F9D74E9CDE2E9B622E089CB82D7BB4B1E9490AC70DAEBC4953799418404A3F3F794112ED3466C
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"21",. . "macros":[{"function":"__e"},{"function":"__dee"}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":13},{"function":"__asprv","tag_id":14}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__e":{"2":true,"4":true}...}.,"blob":{"1":"21"}.,"permissions":{."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41625)
Category:	dropped
Size (bytes):	150639
Entropy (8bit):	5.404735182175262
Encrypted:	false
SSDEEP:	3072:AwlL47MnAPaiA2UudRCe/fX2MkdF5kpjmgL1ZVplqpU:AwlgMgaiA2UuZ/P2MkdF5WL1/plqpU
MD5:	B20559412B1D0DC2412931B628AA8163
SHA1:	6EEE080D6EE3D588BC608CDA70D1B10CE75AA120
SHA-256:	35E9BDBAC24332F0DFEDB88D94AC1354C59B1B939A2FCA39991796517FCB74B1
SHA-512:	6BC184C8A14988D970A19994D4C1FCB83D191014DA2174E897CD85E27F53B9E513CF858D0B48264F6A7BA867D5112E240232CF14445CDB47CADE34B6DD7A3AD1
Malicious:	false
Preview:	/* https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	4.927711849844272
Encrypted:	false
SSDEEP:	12:YwUyzOrWfcx+AcdMKQMva1acdMVxTJlyBK0LGONAEvKdMwb:YvNx+Ac5aZSxTby3H5vKh
MD5:	FCA524A3CEAF08CE68AE047A0582F109
SHA1:	BD94EAA3B137A7B65DD36F8A831949B1ED193640
SHA-256:	C58A3620C177FEFA35B62EC53A7C64247A599B103BCAE67CAB389BFEBFFC2020
SHA-512:	20A7E03DABE73DE6767A35631077C794C642BAF67449D9AD355BCA3EAD0C79E5F90332FAA0A3DF85DAF6CEABD0154830A9A88171E286D918311571172046CC56
Malicious:	false
URL:	https://inboxhealth.zendesk.com/embeddable/config
Preview:	{"brand":"Inbox Health","brandCount":1,"color":"#78A300","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#78A300","attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled":true}},"chat":{"embed":"chat","props":{"color":"#78A300","zopimId":"6FQXnIYg7b7AgsCqLoSQ70bWODubjdzL","badge":{"color":"#eeeeee","enabled":true,"imagePath":"","layout":"image_right","text":"Chat with us"},"forms":{"offlineEnabled":true,"preChatEnabled":true},"mediatorHost":"widget-mediator.zopim.com"}},"launcher":{"embed":"launcher","props":{"color":"#78A300"}}},"features":{"fastLoad":true}}

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	downloaded
Size (bytes):	197123
Entropy (8bit):	5.522888047760914
Encrypted:	false
SSDEEP:	3072:oiFitgcnsmIjppD04OmYasxzuZ1IwPcRCrvPdka0Mf3/k7mJVM1:7YnsmQbZ1HcRCrya0Mf3/kt
MD5:	E3692E3E8D54B972CA12AC5945285C6B
SHA1:	1AF75CC30FE8152BFE9BB08A6386972D45E4EA66
SHA-256:	18519215310BB84FCC04C40BF95F80371827CD0BD518F42A7292FED8CDAFBD9D
SHA-512:	CD140949D4EC49E8C11B369D5746E72403DDB54251781DB4756F9D74E9CDE2E9B622E089CB82D7BB4B1E9490AC70DAEBC4953799418404A3F3F794112ED3466C
Malicious:	false
URL:	https://www.googleoptimize.com/optimize.js?id=OPT-MWT7J5H
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"21",. . "macros":[{"function":"__e"},{"function":"__dee"}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":13},{"function":"__asprv","tag_id":14}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__e":{"2":true,"4":true}...}.,"blob":{"1":"21"}.,"permissions":{."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52061)
Category:	downloaded
Size (bytes):	83638
Entropy (8bit):	5.2486459642961885
Encrypted:	false
SSDEEP:	1536:iBg9KnSjZfFW6POIoN52vGyM9gQXbheRIlJcnnCHuVv:iBg9KnSjZq52vW9iOJcnn/Vv
MD5:	495AFF2D817FC4FD6C39DBA39DCDD268
SHA1:	F9E1536AB9DC6B70065D9E80FA2D5A93852FF1D7
SHA-256:	FC687A87B951ADB5BD2E67056A391ADD2DCEA3961A43E6420ADCE2282E3E86AE
SHA-512:	B1099222D941C10DDCF61765E9CC9CF60702B136B0E3B60CEF6511CCBC242FB7A50BD0D5856E34317428ED9CC515221AF25414B10E4A32EB64766911F0021DFD
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/css/link-modal-inner-bd52ba2d8aa3af905ae3d09fcce45b9b.css
Preview:	._4vwYq__z__Indicator,.xa4wtwG___Indicators{--louserndicatorColor:var(--indicatorColor);pointer-events:none}._6M25hKyv__Indicator--sm{--louserndicatorSize:var(--indicatorSizeSm);--louserndicatorStroke:var(--indicatorStrokeSm)}.gnAjS2vg__Indicator--md{--louserndicatorSize:var(--indicatorSize);--louserndicatorStroke:var(--indicatorStroke)}.iuNTJPgD__Indicator--lg{--louserndicatorSize:var(--indicatorSizeLg);--louserndicatorStroke:var(--indicatorStrokeLg)}.m5IzsSkR__Indicator--xl{--louserndicatorSize:var(--indicatorSizeXl);--louserndicatorStroke:var(--indicatorStrokeXl)}.xa4wtwG___Indicators{position:relative}._4vwYq__z__Indicator,.xa4wtwG___Indicators{display:inline-block;height:var(--louserndicatorSize);width:var(--louserndicatorSize)}._4vwYq__z__Indicator{vertical-align:middle}.xa4wtwG___Indicators ._4vwYq__z__Indicator{left:0;position:absolute;top:0}.T_WemvUL__LoadingIndicator{-webkit-animation:irDvMRC7__rotate .8s linear infinite;animation:irDvMRC7__rotate .8s linear infinite;opacity:

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65439)
Category:	downloaded
Size (bytes):	75895
Entropy (8bit):	5.298689041962249
Encrypted:	false
SSDEEP:	768:AczfpHTM8XkbDNubsX0E6bB+CZn3oyRoZ6CnCFkeCtyZGl//cSvyf5gR55nizlKa:AczflrkApPbcuYTZYCtyZGrvTv6
MD5:	F66911B4EE0DE422DFCFF9736464B88F
SHA1:	BC7061B8979DFDC4D9569602000F905B49E98D0A
SHA-256:	3E2F764D68AB9D7B06630A40CB0B007A1DFAD4837075B39BF29E67618C6B45DD
SHA-512:	AD09C64078A295B2E28C6E60B2ED61B21520311CE0149283100C0679988B227519AB7B1EDAB20D5DF7A3A7E9B1F29899B6DEC8152A21A652029D2CCA3C9D1817
Malicious:	false
URL:	https://js.stripe.com/v3/hcaptcha-invisible-f4a7521df8551e3c92d92eb08c5b46bf.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/></head><body></body>. prettier-ignore -->.<script>!function(){function t(r){var o=n[r];if(void 0!==o)return o.exports;var i=n[r]={exports:{}};return e[r](i,i.exports,t),i.exports}var e={29317:function(t,e,n){var r=n(56274).Promise;!function(t,e){for(var n in e)t[n]=e[n]}(e,function(t){function e(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var n={};return e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)e.d(r,o,

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12824), with no line terminators
Category:	downloaded
Size (bytes):	12826
Entropy (8bit):	5.317091744189567
Encrypted:	false
SSDEEP:	192:TjdCBk9y24Qjg6/OZjd2NWbEs5MKMfg4nkqZW1kdem:Tmk9F4nYm0IR5OkqZWaX
MD5:	C702392565913C8105713DC87E945059
SHA1:	879A6FD7F3ED27AD4DFF4061360C7F92D2735F27
SHA-256:	BD7B10CFEFBECC3A5D846A4B061F4FC8A5F203A6D58674E4CBFF7512B0DCAEA2
SHA-512:	D56AD3ABD6E581560E2E40B6EAB00C01E55195DEB2B55A56371352437E674CD4310A1AA24838B40D7BA85E62845583DF0B8E1E9865050D57C4D372106E65BC3E
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/payment-request-inner-browser-3e2bf1135aeec036ab34eb24b61d077f.js
Preview:	!function(){"use strict";function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return o[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,o={87729:function(e,t,n){var r,o=n(45987),i=n(93324),a=n(1413),s=n(15671),u=n(43144),l=n(71873),c=n(24245),p=n(18812),d=n(63630),h=n(89062),f=n(36617),m=n(66680),y=n(81743),_={authentication:(0,l.mC)({apiKey:l.Z_,accountId:(0,l.jt)(l.Z_)}),mids:(0,l.jt)(m.pt),origin:l.Z_,controllerId:l.Z_,referrer:(0,l.jt)(l.Z_)},g=(l.kw.apply(void 0,(0,h.Z)(Object.keys(y.qp))),n(939)),v=n(39294),w=n(56274).Promise,b=function(){if(!window.PaymentRequest)return null;if(/CriOS\/59/.test(navigator.userAgent))return null;if(/.$.; wv$.Chrome\/(?:53\|54)\.\d./g.test(navigator.userAgent))return null;if(v.xz)return null;var e=window.PaymentRequest;return e.prototype.canMakePayment\|\|(e.prototype.canMakePayment=function(){return w.resolve(!1)}),e}(),O=n(56241),P=n(69620),E=n(12024),q=n(40939),Z=n(35918),k=n(47934),R=["error","shipp

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-H07SGNNMD6&gacid=697303844.1734717810&gtm=45je4cc1v9126439587za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2138611330
Preview:	<html></html>

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (848), with no line terminators
Category:	downloaded
Size (bytes):	848
Entropy (8bit):	5.233164585333237
Encrypted:	false
SSDEEP:	24:NAlW31AQCZ5ojW3JtmSsbZ9g+dJVpAQPqk12L:NukbjKmSsV91HVp5ML
MD5:	6D1EDA16E71F637C7EFF0C166631178C
SHA1:	85FD72735DF4EF39FF2A4BAA3977BED5250CBBE9
SHA-256:	5EA25DF9491F3531AAC8869490D5649CB6DAB08BA37F777997BA9A5558ADD9B3
SHA-512:	A0977B76F4F1B9D825FA9EFFA42E23DCEEB53FF535863D1DC8B488950CF3986EAE0B7E8F795B9F1F32F0BD3700EC7CD50EBF4A63F9CA697D9AA67BCC14878498
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISsQEJ_wrDbHUzOwYSBQ0gIiIdEgUNlJCS-hIFDU8IXVMSBQ1IqWunEgUNgWKwehIFDWrIIzYSBQ0gIiIdEgUNkWGVThIFDSAiIh0SBQ09XxGpEgUNICIiHRIFDZFhlU4SBQ0gIiIdEgUNzPF0TxIFDU8IXVMSBQ0gIiIdEgUNkWGVThIFDclpLy4SBQ3ZV-r1EgUNgr71XBIFDaB52aYSBQ1GZxV9EgUNVbv1bxIFDWOu7SESOgm2fWrUuAA8wBIFDSAiIh0SBQ2UkJL6EgUNTwhdUxIFDUipa6cSBQ2BYrB6EgUNasgjNhIFDSAiIh0STwkh5IOa7GvRvRIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDclpLy4SBQ3ZV-r1EgUNgr71XBIFDaB52aYSBQ1GZxV9EgUNVbv1bxIFDWOu7SESHglBmYdk0ypaRRIFDSAiIh0SBQ09XxGpEgUNICIiHRIlCYcdCUfN9_IEEgUNICIiHRIFDczxdE8SBQ1PCF1TEgUNICIiHRIQCYgHX9bsecQ5EgUNl8RY7w==?alt=proto
Preview:	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

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.172182052648483
Encrypted:	false
SSDEEP:	3:Wc8dYkpLLQBuL3asgjHrY1JUNa89CaszcuVO5LL/icsNfFvAw3sRBStd5Rn:p8dJpYuDpgz8JcaVaspO5/XsNdsmthn
MD5:	CDD80DF4EDC44C53EAACF0B780C54634
SHA1:	64BD2F7961D2049302B7D01CD99F6C97C2583CA2
SHA-256:	20B348B22C6D73FB2155C12440770D5955A8A1DD9A5243763ACBA4727E3BE256
SHA-512:	8D56221C3990491E8FDECD6E5C238F6629B100BD4BFE172A9D166A0E5C8BCE5C6DF24BE74124D9A0B232F425C81E9F7154413D7C755183F9AB5E1281A8032CC2
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwkh5IOa7GvRvRIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDclpLy4SBQ3ZV-r1EgUNgr71XBIFDaB52aYSBQ1GZxV9EgUNVbv1bxIFDWOu7SESEAmIB1_W7HnEORIFDZfEWO8=?alt=proto
Preview:	CoQBCgsNkWGVThoECDkYAQoLDZFhlU4aBAg5GAEKCw2RYZVOGgQIORgBCgsNyWkvLhoECAcYAQoLDdlX6vUaBAgeGAEKCw2CvvVcGgQIHxgBCgsNoHnZphoECCQYAQoLDUZnFX0aBAghGAEKDQ1Vu/VvGgQIIhgBIAEKCw1jru0hGgQIIxgBCgkKBw2XxFjvGgA=

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1343)
Category:	dropped
Size (bytes):	48058
Entropy (8bit):	5.500757872606288
Encrypted:	false
SSDEEP:	768:rCbeNwBwLgIx0clzH3FO12LmH/RFRbLIzaDZj75A06LL52AA0YpQItK81/LksjB0:EPe6R8LZilDi
MD5:	93E631F67FBE9B572A49AEC23B3CCA01
SHA1:	F251B82E0756E5341A337D1A7594D865B5A54097
SHA-256:	B5DD186229238D81444B1BB3BCE219F49F5EEC5418000F0351A90578C2D79A94
SHA-512:	9D1AFF317CC6F7EACC979BFF55A037AE19A8A9B23ADC98D41D4D0359811B9E5FFEA6781243765E9A04801FD319309B33944CEA69458AF577A022DD7324FB31D8
Malicious:	false
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._.UB=function(a){_.Wo.call(this);this.o=a\|\|window;this.B=_.Lo(this.o,"resize",this.C,!1,this);this.j=_.Bm(this.o\|\|window)};_.K(_.UB,_.Wo);_.UB.prototype.getSize=function(){return this.j?this.j.clone():null};_.UB.prototype.ca=function(){_.UB.Ia.ca.call(this);this.B&&(_.Uo(this.B),this.B=null);this.j=this.o=null};_.UB.prototype.C=function(){var a=_.Bm(this.o\|\|window);_.ym(a,this.j)\|\|(this.j=a,_.Yo(this,"resize"))};._.w("n73qwf");.var VB=function(a){_.Wo.call(this);this.B=a?a.j.defaultView:window;this.G=this.B.devicePixelRatio>=1.5?2:1;this.o=(0,_.F)(this.F,this);this.C=null;(this.j=this.B.matchMedia?this.B.matchMedia("(min-resolution: 1.5dppx), (-webkit-min-device-pixel-ratio: 1.5)"):null)&&typeof this.j.addListener!=="function"&&typeof this.j.addEventListener!=="function"&&(this.j=null)};_.K(VB,_.Wo);.VB.prototype.start=function(){var a=th

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25701), with no line terminators
Category:	downloaded
Size (bytes):	25703
Entropy (8bit):	4.76132914733528
Encrypted:	false
SSDEEP:	384:rdq2te24z8VEB4yCSVYC+tQ52PX2NT91z:pe24z8V24R+3z52PXyz
MD5:	EF48436BF7997A9FED0856CD3DF28C0F
SHA1:	413D809A8680F59BC72EE16FB46DF88350055C67
SHA-256:	B87B92CD9B2943BCC97A64011EB833EF4205009327EAFFE17DB1CD001AE9ECC8
SHA-512:	2D6E1AB2EDCDE2B0CC74C0CB9FAE9D115E01561A4F7B17939E8B40C0260F6B00D8A14CBD90C38AC0ECD13A4E8BDBA63AB88ED42B0E1A61C9A8B215B57979A063
Malicious:	false
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-bcac9f6.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9393],{46933:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_framework.answerBot.article.feedback.no.reason.title":"Please tell us why.","embeddable_framework.answerBot.article.feedback.no.reason.unrelated":"It\'s not related to my question","embeddable_framework.answerBot.article.feedback.title":"Does this article answer your question?","embeddable_framework.answerBot.article.feedback.yes":"Yes","embeddable_framework.answerBot.bot.name":"Answer Bot","embeddable_framework.answerBot.button.get_in_touch":"Get in touch","embeddable_framework.answerBot.contextualResults.intro.many_articles":"Here are some top suggestions f

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133131
Entropy (8bit):	5.439277592362131
Encrypted:	false
SSDEEP:	3072:fwkJQ7O4N5dTm+syHEt4W3XdQ4Q6iuSr/nUW2i6o:fVQ7HTt/sHdQ4Q6iDfUW8o
MD5:	61041EAA8FC90CE92857F06A721BAE81
SHA1:	4DFB5070451EEB688F800137397A8971280F7A39
SHA-256:	02CA4A294DC6297F962FB7D8BFD7C33FBE804BB2611570064AB60D9CF6336CF7
SHA-512:	5B38323CF212DDC4BC877DAB2950CFD616106DAA49EAD8DAC427A0A077B72D1091B5E93FEC3179C6CBF5CAD39BA33F820EF301E8F8798245B96A1570B6091B13
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (612), with no line terminators
Category:	downloaded
Size (bytes):	612
Entropy (8bit):	5.190703631519006
Encrypted:	false
SSDEEP:	12:PtCtzXTCdxCPpCd3BluZEvHW87C3CpMn+dJek1kWpMznVWk7:PwFedEPsd3BluZEvHZ9g+dJVpAQk
MD5:	66FDBE2CF3E743267373DF1A987690A4
SHA1:	9A62958996CDABD5BC1C6B1D7C521A94849B2711
SHA-256:	3492412C3D033E092661B747F90A2672186653BDBD2523D1E5944E46C37DBF7D
SHA-512:	5F0043AF4464F2B4AB0AAF6A75B047317E0FD88829B41D3D104EA69A435D9DB65632E3EC81ECECC9715B2088C7ED87618B72E34DB365D331FCF08B40E774D7D4
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISlQEJXzsS2_6ecTcSBQ0gIiIdEgUNlJCS-hIFDU8IXVMSBQ1IqWunEgUNgWKwehIFDWrIIzYSBQ0gIiIdEgUNkWGVThIFDSAiIh0SBQ09XxGpEgUNICIiHRIFDZFhlU4SBQ2RYZVOEgUNyWkvLhIFDdlX6vUSBQ2CvvVcEgUNoHnZphIFDUZnFX0SBQ1Vu_VvEgUNY67tIRI6CbZ9atS4ADzAEgUNICIiHRIFDZSQkvoSBQ1PCF1TEgUNSKlrpxIFDYFisHoSBQ1qyCM2EgUNICIiHRJPCSHkg5rsa9G9EgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNyWkvLhIFDdlX6vUSBQ2CvvVcEgUNoHnZphIFDUZnFX0SBQ1Vu_VvEgUNY67tIRIeCUGZh2TTKlpFEgUNICIiHRIFDT1fEakSBQ0gIiId?alt=proto
Preview:	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

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	103
Entropy (8bit):	4.579731907667913
Encrypted:	false
SSDEEP:	3:UKJJFHTWWiWEAjR3uuIIE0pAspn:UKJjTWWi0F8IE0bpn
MD5:	2D0E8863B56F6989DC4652EC2626A656
SHA1:	6B24B46C3D5BF35454A727ECBB34E81AF85D98E0
SHA-256:	126C5F0C8C4CD0135B5E9FFB1C113A6F229DE3F89BCE9E099B3C85BEA641BD7C
SHA-512:	59298F94BFA67A6EC9D15A940D07A587CF467849D723F9959765B8FACA5DA5FA0C1EBA17B6F1864D314F3930A9BB2116D994F1F02C9F7DD5E48BDE1D7C5CF681
Malicious:	false
URL:	https://cdnjs.cloudflare.com/polyfill/v2/polyfill.min.js?features=Intl.~locale.en-US
Preview:	/. Polyfill service v3.25.1. * Disable minification (remove `.min` from URL path) for more info.*/..

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18220)
Category:	dropped
Size (bytes):	18294
Entropy (8bit):	5.298344979924938
Encrypted:	false
SSDEEP:	384:w/bFujnfasSo7f72n+qjapG3TO9ODFt8wexInk/Lg0aV:wbFujnfFXfaEp6T/5t8wexInk8LV
MD5:	68040DA5D85F8655D3CD96C616195788
SHA1:	48BD88232FB00176C791C0ACEC948CF6E4CB05C3
SHA-256:	B64E479BDB1E969606F1D8398649CEF8A9C2ACD4178D8A3414557127DEDC3186
SHA-512:	DC0BCF7571957CAF4969A0DE9BCED63978C079939BE54343D13C76F8E8D811E19425397450F662A16DFBED317DD51367DFF9A28B2FAA977D5C6D37DAF0CF0B11
Malicious:	false
Preview:	!function(t){function e(e){for(var n,a,c=e[0],u=e[1],s=e[2],l=0,p=[];l<c.length;l++)a=c[l],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in u)Object.prototype.hasOwnProperty.call(u,n)&&(t[n]=u[n]);for(f&&f(e);p.length;)p.shift()();return i.push.apply(i,s\|\|[]),r()}function r(){for(var t,e=0;e<i.length;e++){for(var r=i[e],n=!0,c=1;c<r.length;c++){var u=r[c];0!==o[u]&&(n=!1)}n&&(i.splice(e--,1),t=a(a.s=r[0]))}return t}var n={},o={23:0},i=[];function a(e){if(n[e])return n[e].exports;var r=n[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,a),r.l=!0,r.exports}a.m=t,a.c=n,a.d=function(t,e,r){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},a.t=function(t,e){if(1&e&&(t=a(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10215), with no line terminators
Category:	downloaded
Size (bytes):	10215
Entropy (8bit):	5.196370762379201
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCtsAoLlHn:KFSk/OROk5u4QK0kTOkcISh2DjkotshN
MD5:	C88D625098DDB649CF216DBA2E52435C
SHA1:	1385FD033122892210B8BBE0970B723BC873D38D
SHA-256:	C7631939BBC2C74FC9A5FB1EE9565250A15BF95CC0E364DA7FC5F15E3DB41427
SHA-512:	0897EF72E744B5EAE67368BBA6CA566210998AFEB12BFBDA6260F245B108ACA1003CBFB77810BC06E0A34BD004012AF70F3586846DF235A9C166E5509AE03998
Malicious:	false
URL:	https://static.zdassets.com/ekr/snippet.js?key=a38e4305-dfd3-44f3-b64c-d15d8b98fd79
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1827)
Category:	dropped
Size (bytes):	172479
Entropy (8bit):	5.469555055720402
Encrypted:	false
SSDEEP:	3072:M63eheP5kXRkKmUB2e9mxHETARgAj/qAcayDt6TXOR:Me5gbyxHjqXWOR
MD5:	9899EC4E82BD08AFF23ECEE67B6F4798
SHA1:	82C2E28BDCD5F7CBB6313387B315464FBAB9EDF3
SHA-256:	20F47C47A01F048B539900A053427E30B2C111F5A834FFA8FEB4F3E0D33C948A
SHA-512:	3001C5C4E97E506A4E9D82C083210B17B8558598B285926D4758FD06366C722705C3D6AFD023676C4D883B57E590E3EE1CF415A83AE654D13387298F7FD1ACB9
Malicious:	false
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1e01830, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var ha,za,Ea,Ga,La,Oa,Za,ib,tb,ub,xb,zb,Ab,Bb,Cb,Db,Gb,Hb,Ib,Kb,Mb,Pb,Sb,Ub,Zb,$b,bc,cc,ic,nc,oc,zc,Cc,Ec,Hc,Ic,Dc,Kc,Lc,Mc,Sc,Yc,ad,bd,cd,md,ld,pd,rd,sd,ud,yd,zd,Cd,Id,Vd,qe,me,se,B,De,Ue,Ye,$e,bf,ff,of,sf,vf,wf,Ff,Hf,Wf,ig,kg,pg,Eg,yg,Jg,Kg,Lg,Og,Pg,$g,lh,dh,uh,vh,wh,yh,zh,Ah,Eh,Fh,Nh,Ph,Qh,Rh,Sh,Th,Uh,Vh,$h,ai,di,li,oi,aa,pi,qi,ri,ti,Ai,Ci,Ei,Fi,Li,Oi,Mi,Ni,Pi,Qi;_.ba=function(a){return function(){return aa[a].apply(this,arguments)}};_.ca=funct

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	236
Entropy (8bit):	5.297989837031435
Encrypted:	false
SSDEEP:	6:oMjYzi6Ac1MjYzi6A7crq3Z0j9HOvGRFVVe2Nxd2pn:XDbDkqJ0ZBRF/e2Nb2p
MD5:	E9D8B92096016DFD74D2F2500556464E
SHA1:	0DB4E74B955611B21791405AF062346F34AC2EEE
SHA-256:	EB2902FF32366DE00D3AFA351AECEB1357D5A468EACBB2FD92CF115276D626CB
SHA-512:	BC78CA4E3B2706A5B054504E3534689FD85F66E118A47BCF68C9E2457B1F7152930B21B81945EE2F4E84EE50A5664E11C68841D5C11A62B3D926246E6AA58456
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9084],{33279:(e,s,d)=>{d.r(s),d.d(s,{default:()=>c});const c=d.p+"fda6cd35495c75f83508d9d2e77ee33d.mp3"}}]);

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	160097
Entropy (8bit):	5.467349585486806
Encrypted:	false
SSDEEP:	3072:DML5rPwSpJngYscqapdBUXBbsKlaEg/BDcY3YsfGsbn:MwSJngYscqapd0BbsKlaESdcY3YsfvT
MD5:	38B93694C8EBEB57F06089EFFC54E980
SHA1:	3AF579DEE39DEB0657C3893BBD3B88E9BE3DC6CF
SHA-256:	CDB1D2F479B539F533157B46FE83E15BF4C68A3B978C8B738C11F653332B9CA6
SHA-512:	0FAD7A724AB1570BCC0DB4E97920B802FE504E74B33A5341A1231FAD238B5682E41576D968A6A756B959C6B9A00E6E2F0961296AC5939E4E92087A4BA6B8728E
Malicious:	false
URL:	https://cdn.plaid.com/link/v2/stable/link-initialize.js
Preview:	var Plaid=function(t){function webpackJsonpCallback(r){for(var i,a,u=r[0],l=r[1],d=0,p=[];d<u.length;d++)a=u[d],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(i in l)Object.prototype.hasOwnProperty.call(l,i)&&(t[i]=l[i]);for(c&&c(r);p.length;)p.shift()()}var r={},o={18:0};function __webpack_require__(o){if(r[o])return r[o].exports;var i=r[o]={i:o,l:!1,exports:{}};return t[o].call(i.exports,i,i.exports,__webpack_require__),i.l=!0,i.exports}__webpack_require__.e=function requireEnsure(t){var r=[],i=o[t];if(0!==i)if(i)r.push(i[2]);else{var a=new Promise((function(r,a){i=o[t]=[r,a]}));r.push(i[2]=a);var u,c=document.createElement("script");c.charset="utf-8",c.timeout=120,__webpack_require__.nc&&c.setAttribute("nonce",__webpack_require__.nc),c.src=function jsonpScriptSrc(t){return __webpack_require__.p+""+({6:"vendors~WCV2Web3~WCWeb3",8:"CBWalletWeb3",9:"CBWalletWeb3Storage",10:"WCV2Web3",11:"WCWeb3",13:"chainUtilities",15:"ethers",25:"vendors~CBWalletWeb3",26:"

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12824), with no line terminators
Category:	dropped
Size (bytes):	12826
Entropy (8bit):	5.317091744189567
Encrypted:	false
SSDEEP:	192:TjdCBk9y24Qjg6/OZjd2NWbEs5MKMfg4nkqZW1kdem:Tmk9F4nYm0IR5OkqZWaX
MD5:	C702392565913C8105713DC87E945059
SHA1:	879A6FD7F3ED27AD4DFF4061360C7F92D2735F27
SHA-256:	BD7B10CFEFBECC3A5D846A4B061F4FC8A5F203A6D58674E4CBFF7512B0DCAEA2
SHA-512:	D56AD3ABD6E581560E2E40B6EAB00C01E55195DEB2B55A56371352437E674CD4310A1AA24838B40D7BA85E62845583DF0B8E1E9865050D57C4D372106E65BC3E
Malicious:	false
Preview:	!function(){"use strict";function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return o[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,o={87729:function(e,t,n){var r,o=n(45987),i=n(93324),a=n(1413),s=n(15671),u=n(43144),l=n(71873),c=n(24245),p=n(18812),d=n(63630),h=n(89062),f=n(36617),m=n(66680),y=n(81743),_={authentication:(0,l.mC)({apiKey:l.Z_,accountId:(0,l.jt)(l.Z_)}),mids:(0,l.jt)(m.pt),origin:l.Z_,controllerId:l.Z_,referrer:(0,l.jt)(l.Z_)},g=(l.kw.apply(void 0,(0,h.Z)(Object.keys(y.qp))),n(939)),v=n(39294),w=n(56274).Promise,b=function(){if(!window.PaymentRequest)return null;if(/CriOS\/59/.test(navigator.userAgent))return null;if(/.$.; wv$.Chrome\/(?:53\|54)\.\d./g.test(navigator.userAgent))return null;if(v.xz)return null;var e=window.PaymentRequest;return e.prototype.canMakePayment\|\|(e.prototype.canMakePayment=function(){return w.resolve(!1)}),e}(),O=n(56241),P=n(69620),E=n(12024),q=n(40939),Z=n(35918),k=n(47934),R=["error","shipp

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1150
Category:	dropped
Size (bytes):	498
Entropy (8bit):	7.563145123794761
Encrypted:	false
SSDEEP:	12:XfaSgXKETXMdiZbX5543a862EDR9isaBjMqKFE/S8gFyDdkfJ:XfnE3bXb4K8REDRgs3q9S8gFTfJ
MD5:	5DE40A04A3B2E1CAD1D5660DC283FC15
SHA1:	3AB4A92770517576FEFECE26D0763C8F24E51879
SHA-256:	1EF92460D7BA571DEFA39879451E7A49F8CF4E96A3F7243436972F3FBC4B4C97
SHA-512:	218393653A12B0778079484C1593C1A20B4443CE0D1D0AD87708136D3733812D2B7F2BC00CA3DB6DB26AFB8F0DA472EA3D838AE9EA5FDF7CDAC09E2527377E07
Malicious:	false
Preview:	............MO.A...!`.R.-...0....0. ..AC..m..ALL.o Gn\..B....\|......n..p..V8.nY......?.......;3.3..}.+.(........X#`.#.....Y....0..pH2p.....c~...&iN8......LQ....g...^....o...).>.....$....O..XG%7..<.p..t.......)._F...M.y.N...Z.<..K.Y.?........$.....W......:.z.k... B.........W.7.+.6.....2..i.....ci....h.k(>.56$....z......5w.=.....#...}.s...?...?P....4..4....O....]!3.&l.-.Q.S.....i_..t..6r...B.....mr.U.........\.....\|...YC6../...<...'kn...#=.8'......WE}.....u8G..O..~...

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11813)
Category:	downloaded
Size (bytes):	16426
Entropy (8bit):	5.374536936749559
Encrypted:	false
SSDEEP:	384:NY6p5cz5QYq+bnLfjURHjXo2BtcCvOby0J3NSO:NYs7Y5KHbo2BWCv50jSO
MD5:	C7ABFF525EAC4DB1EBD9E008E334D340
SHA1:	BBBF4F6049A12A6C134B2781973269F33491F53C
SHA-256:	0046AA554A93FF7C003F5BD9E8A063D5D156E9CDFB35E54BAA7304C265553549
SHA-512:	B1936FAD6BC99C5F5C704A6DE05B97DF7E782BC6E04C9FF4551FC497482C4D202A0BD582439F20CD64AB24C9254DF8FD49661C5B475EDF104E9A58BE0C9F72D1
Malicious:	false
URL:	https://static.hotjar.com/c/hotjar-1820622.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1820622,"rec_value":9.999999994736442e-10,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":true,"suppress_all_on_specific_pages":[],"suppress_text":true,"suppress_location":true,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[{"id":520260,"created_epoch_time":1594228157,"skin":"light","background":"#EAEAEA","effective_show_branding":true,"position":"left","content":{"version":2,"questions":[{"next":"thankYou","required":true,"text":"How can we improve your experience of this page?","type":"single-open-ended-multiple-line","uuid":"37d04b78-fcdb-4eff-9c0a-c0df3d80a43d"}],"thankyou":"Thank you for answering this poll. Your feedb

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	dropped
Size (bytes):	88793
Entropy (8bit):	5.413865382969959
Encrypted:	false
SSDEEP:	1536:2sHx8vawlWXGzbS1iSc6q1jboAmKum7EqIZ7d+/:2sHx8vzWX8O1iSg1jboAmKum7EqCp+/
MD5:	FD35981A337052CD3CCD82DC674FF76D
SHA1:	E11E8DF31D4748D5348ECEC37C01C4DA1549F321
SHA-256:	BD6E71E0A8F18B3DD4BBEB6FD673015FEC896BD92E17C11F3DC8FE96A06DE1F4
SHA-512:	9D7A20899C255FC008683F2DCAFDA6332B19B56CA88850661F25245DC4844059404D7D2FEE7C4249775ABA92A61F4870393FCCBAE8A74B12463CF903F05143E3
Malicious:	false
Preview:	var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var _ in e)n.d(r,_,function(t){return e[t]}.bind(null,_));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=30)}([function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){retur

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	692436
Entropy (8bit):	5.575206841608777
Encrypted:	false
SSDEEP:	12288:3Hv2xkMCs+ezNi/DmHjrtAhMMBsUPMOVSymMqFr/7UjRGggh8jYa:3vlM7WDmHjrqjYa
MD5:	6D16910AEB4B18A9B40ADEAECCB60A40
SHA1:	903AE7E1085856362B9C53BC8D418681D87994BD
SHA-256:	E0FC34FBBF9A8C2AA6B0D4DE4080210A64507C56D362808B585963E99367A59E
SHA-512:	BEA101520CB06A1845AE564A2F27A3B94F9568DDF8397CC17E28B3DC2C5AE3BAD51B6912E9C508799319F7B70DDF36497F09E4B5DB46A39CA28AD9F295F0619E
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js
Preview:	(window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[3712],{10723:function(e,t,n){"use strict";function a(e){c.length\|\|(i(),!0),c[c.length]=e}function o(){for(;p<c.length;){var e=p;if(p+=1,c[e].call(),p>1024){for(var t=0,n=c.length-p;t<n;t++)c[t]=c[t+p];c.length-=p,p=0}}c.length=0,p=0,!1}function r(e){return function(){function t(){clearTimeout(n),clearInterval(a),e()}var n=setTimeout(t,0),a=setInterval(t,50)}}e.exports=a;var i,s,u,l,c=[],p=0,d=void 0!==n.g?n.g:self,m=d.MutationObserver\|\|d.WebKitMutationObserver;"function"==typeof m?(s=1,u=new m(o),l=document.createTextNode(""),u.observe(l,{characterData:!0}),i=function(){s=-s,l.data=s}):i=r(o),a.requestFlush=i,a.makeRequestCallFromTimer=r},64198:function(e,t,n){var a=n(12897);e.exports=a},14771:function(e,t,n){n(80290);var a=n(5379);e.exports=a("Array","fill")},9554:function(e,t,n){var a=n(64198);e.exports=a},24883:function(e,t,n){var a=n(57475),o=n(69826),r=TypeError;e.exports=function(e){if(a(e))return e;th

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10215), with no line terminators
Category:	dropped
Size (bytes):	10215
Entropy (8bit):	5.196370762379201
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCtsAoLlHn:KFSk/OROk5u4QK0kTOkcISh2DjkotshN
MD5:	C88D625098DDB649CF216DBA2E52435C
SHA1:	1385FD033122892210B8BBE0970B723BC873D38D
SHA-256:	C7631939BBC2C74FC9A5FB1EE9565250A15BF95CC0E364DA7FC5F15E3DB41427
SHA-512:	0897EF72E744B5EAE67368BBA6CA566210998AFEB12BFBDA6260F245B108ACA1003CBFB77810BC06E0A34BD004012AF70F3586846DF235A9C166E5509AE03998
Malicious:	false
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6697
Category:	dropped
Size (bytes):	2668
Entropy (8bit):	7.917681335407175
Encrypted:	false
SSDEEP:	48:XO2dFtAJWHO2LJJXVag31Jce0dHRZSlL17vs2c/4tl+k/dQhJ3I/JqCNf+xx:+cFtlH7V1Vag31JdoHRZSlhjs12l+isp
MD5:	FB9DD20D50E77901DB8C1F0C55DEC795
SHA1:	5C12304176D7A72A2F631DDEBEF4F2FEC886F1DE
SHA-256:	99DD0D0356DE716CBDE17BA38194CD60B4E00B8ADF9E43ED5418B45FB4D55C29
SHA-512:	9E7258AAFCF8A1619959C8E9D2A53868A8FFF0237F52361121C6539389E9E3A4E6D0F15ABC0A88A997822E9FABA44BBC662EE33CF5810EFA269392B98DBDCFD5
Malicious:	false
Preview:	...........Y.s.8..+.wC.1..6.n/M...5.N...M.c.-@.....a..~...l ............x.....\|$....Y...+..]R.>%B.4X.b&C:...gOX.Q..H-.l.$l0$).RI.k.Ai12..WT.......0f. !j.....La.}.j.^:.T..D........x.@...+..+<..Kk-I....g:...G...il{.....`"...d.7.+.F).p..;..=;.IxvB^.........s..G.?..1\7.......i.N.9.....pUy.$M....=...EL...L.#.W..AJ..'.)...S9....zG.<.....G3..^.....".,..,.D......9..EV....T.$.D.}.....`..z..."g.Xp...~....u....,.V.$..}..}.%...%$......$.Y.c...R).+.PI.).l..T.YL..{..7....D...B0Z1.....We...$S....K...0.%P..F.B.....Vj?l.+u."...h......-.n..F..[....>.Q.8F.U..(..~...K....>tl.S.D...>..kt.5<.'...z].(......pC.V..pj.NH^.Q..V.......2.F.}.$1..f..-....[..k..r7..nYl.<.1Q......he...!.....g....\.,......,..m..$%....k..G.9.....8.. }~A.b..H.....-:t...w.....]N.w!{.A..pxu.}...C...G.=.j........J>...,0=..#..{....rB._'.?Kt......~......m...L.f.35....D1..z..U.X{0.I.$....>k..o..F.5.}.....tZc..?...j4...5..J"......jC.r..(.Y..EL.1..D$...a.Cd...1.o.M..].@.A....1Y\|]$0.E...../

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (419), with no line terminators
Category:	downloaded
Size (bytes):	419
Entropy (8bit):	5.191735891056458
Encrypted:	false
SSDEEP:	12:qTjx/XbRD888RI8PN0TPBva1KwdNd+SPvVzQzqXwDvVI:0jLd8e5v+UmvVZXwDvVI
MD5:	10D353DDAF4B83E6CA6A03A9401D6C87
SHA1:	EA5C16AC1B05250261329F6ECF4E49644AF0D990
SHA-256:	1427E3BEA7926253608DF022C6C8935269213B6C12B499C70E77684B05B0F560
SHA-512:	C33A68169042828C0D649F340107B22FED54411FE34E43613D56DB05CBD6EC25FDAFF5F8E9F5D03AE02A06D312DF6F1065D7D5D1D9681EDB0D3CB4E6AFC52A76
Malicious:	false
URL:	https://b.stripecdn.com/stripethirdparty-srv/assets/v22.3/HCaptchaInvisible.html?id=bfdbfc49-7b70-4c1f-a3e7-9b075a2ce9b2&origin=https%3A%2F%2Fjs.stripe.com
Preview:	<!doctype html><html><head><script src="https://hcaptcha.com/1/api.js?onload=captchaLoad&render=explicit" async defer="defer"></script></head><body><div id="root"></div><script src="vendors~AddressAutocomplete~AffirmInContext~AfterpayInContext~AmazonPayButton~ApplePay~Arkose~AuthMa~2e7b0cb4.98b14d8118d74a86243f.bundle.js"></script><script src="HCaptchaInvisible.486f638f2018022c8747.bundle.js"></script></body></html>

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	126455
Entropy (8bit):	5.270671759129053
Encrypted:	false
SSDEEP:	1536:CkbE8AdeECtvtiImiHJyx/Q/w5CMdtVJGWRE7kgyz3:FQ8ceECa8Jyx/Q/4/do7s
MD5:	93A1603DA3C8CC1EB7686ADFCC8F6D73
SHA1:	4E0C91887A23368ED1F32628FDAA759FD4AEC69F
SHA-256:	51440A84317F6B19787DE828B46E1B5EA73B6B4E3CF40033FC409EEE2DA17847
SHA-512:	D607F449CDED2606BD645B1CD17D9A5D90DC3F22DED57AAC4C6C98CBBD768AA1F36682E152302CDAE0739C6F77378A614EB751901B9BDF2B2D49FC1D7559D250
Malicious:	false
URL:	https://b.stripecdn.com/stripethirdparty-srv/assets/v22.3/vendors~AddressAutocomplete~AffirmInContext~AfterpayInContext~AmazonPayButton~ApplePay~Arkose~AuthMa~2e7b0cb4.98b14d8118d74a86243f.bundle.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{10:function(t,e,n){var r=n(9),o=n(42),i=n(196);r({target:"Object",stat:!0,forced:n(15)((function(){i(1)}))},{keys:function(t){return i(o(t))}})},102:function(t,e,n){var r=n(112),o=n(66);t.exports=function(t){return r(o(t))}},103:function(t,e,n){var r=n(178);t.exports=Array.isArray\|\|function(t){return"Array"==r(t)}},106:function(t,e,n){var r=n(29),o=n(103),i=n(45)("species");t.exports=function(t,e){var n;return o(t)&&("function"!=typeof(n=t.constructor)\|\|n!==Array&&!o(n.prototype)?r(n)&&null===(n=n[i])&&(n=void 0):n=void 0),new(void 0===n?Array:n)(0===e?0:e)}},107:function(t,e,n){var r,o,i=n(39),a=n(555),c=i.process,s=c&&c.versions,u=s&&s.v8;u?o=(r=u.split("."))[0]+r[1]:a&&(!(r=a.match(/Edge\/(\d+)/))\|\|r[1]>=74)&&(r=a.match(/Chrome\/(\d+)/))&&(o=r[1]),t.exports=o&&+o},108:function(t,e,n){"use strict";var r=n(15);t.exports=function(t,e){var n=[][t];return!!n&&r((function(){n.call(null,e\|\|function(){throw 1},1)}))}},11:function(t,e,

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1150
Category:	downloaded
Size (bytes):	498
Entropy (8bit):	7.563145123794761
Encrypted:	false
SSDEEP:	12:XfaSgXKETXMdiZbX5543a862EDR9isaBjMqKFE/S8gFyDdkfJ:XfnE3bXb4K8REDRgs3q9S8gFTfJ
MD5:	5DE40A04A3B2E1CAD1D5660DC283FC15
SHA1:	3AB4A92770517576FEFECE26D0763C8F24E51879
SHA-256:	1EF92460D7BA571DEFA39879451E7A49F8CF4E96A3F7243436972F3FBC4B4C97
SHA-512:	218393653A12B0778079484C1593C1A20B4443CE0D1D0AD87708136D3733812D2B7F2BC00CA3DB6DB26AFB8F0DA472EA3D838AE9EA5FDF7CDAC09E2527377E07
Malicious:	false
URL:	https://patient.inboxhealth.com/assets/favicon.ico
Preview:	............MO.A...!`.R.-...0....0. ..AC..m..ALL.o Gn\..B....\|......n..p..V8.nY......?.......;3.3..}.+.(........X#`.#.....Y....0..pH2p.....c~...&iN8......LQ....g...^....o...).>.....$....O..XG%7..<.p..t.......)._F...M.y.N...Z.<..K.Y.?........$.....W......:.z.k... B.........W.7.+.6.....2..i.....ci....h.k(>.56$....z......5w.=.....#...}.s...?...?P....4..4....O....]!3.&l.-.Q.S.....i_..t..6r...B.....mr.U.........\.....\|...YC6../...<...'kn...#=.8'......WE}.....u8G..O..~...

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (526), with no line terminators
Category:	downloaded
Size (bytes):	526
Entropy (8bit):	4.844995662196588
Encrypted:	false
SSDEEP:	12:c4GJ0k2lvgyT6d1uOMXUZsCxYADLsdfPw3CgrR5jddeU7nu:c5D2BtT67uOMXUZjxYOLsOCgrN80u
MD5:	D96C709017743C0759CF3853D1806BA5
SHA1:	72E21587610C49C8305A55E71F73FA88ED618205
SHA-256:	BA2338AA6670580269C762F51C4291DAEF913201AA8F4D4FD166C1A878262652
SHA-512:	974E260ED8BD1D99628FC3248F07179F6EA228E37A6B9D3EF906DBA57571F2DF54D73F93D1F3460902D28A90BD4793BCA35477B2EF8FBF424B9112147F04BCCF
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Preview:	!function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){var t=window.opener\|\|window.parent\|\|window;if(!t)return;t.postMessage(n.data,"")}else o.contentWindow.postMessage(n.data,"")};window.addEventListener?window.addEventListener("message",i,!1):window.attachEvent("onMessage",i),document.body&&document.body.appendChild(o)}();

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	14321
Entropy (8bit):	5.459455870897767
Encrypted:	false
SSDEEP:	384:Rw37hUpgrrXn3PxG7eTJfSnOPsc7cy0Clv8NgFgjQ0h5VJGS9gzUPP:K2pkX3PxG7eTJfSnOPscHNSgFgc0PjGK
MD5:	BED8929A9B4DE53C93F13E7A14CF2FC7
SHA1:	2909F5351EBB171466126B7D27595F42C7F89D2E
SHA-256:	800EC156F723FFD568B3B93BD28B468CC4D0C16B401434A9E24F4611308247A7
SHA-512:	782258E61BCA1DF34AB987DA9EF40F2075AE08E51C944F39E1C580746957379AAF5EC42A601AFE3A4BC1D2E92B7D2FAE5E5017AB6B5615950CDDCB291E80BEC5
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.BY62uICrLh0.es5.O/ck=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.K7foVd5ynzo.L.B1.O/am=MBjgAQ/d=1/exm=Das5Le,FCpbqb,WhJNk,Wt6vjf,_b,_tp,hhhU8/excm=_b,_tp,payframeview/ed=1/wt=2/ujg=1/rs=AMitfrj6NKNhlSiYEG3DcDC56PlMDd90PA/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:siKnQd;yEQyxe:p8L0ob;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe,lwddkf,EFQ78c"
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._.Cx=function(a){var b=0,c;for(c in a)b++;return b};._.Dx=function(a){var b=Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^_.fj()).toString(36);a.j.set("zx",b)};var Ex=function(a,b){this.o=a;this.v=b;if(!c){var c=new _.dv("//www.google.com/images/cleardot.gif");_.Dx(c)}this.B=c};_.l=Ex.prototype;_.l.ik=1E4;_.l.Le=!1;_.l.mi=0;_.l.Ag=null;_.l.jj=null;_.l.setTimeout=function(a){this.ik=a};_.l.start=function(){if(this.Le)throw Error("zb");this.Le=!0;this.mi=0;Fx(this)};_.l.stop=function(){Gx(this);this.Le=!1};.var Fx=function(a){a.mi++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Zo((0,_.F)(a.fg,a,!1),0):(a.j=new Image,a.j.onload=(0,_.F)(a.Kr,a),a.j.onerror=(0,_.F)(a.Jr,a),a.j.onabort=(0,_.F)(a.Ir,a),a.Ag=_.Zo(a.Lr,a.ik,a),a.j.src=String(a.B))};_.l=Ex.prototype;_.l.Kr=function(){

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	222450
Entropy (8bit):	5.372939863161049
Encrypted:	false
SSDEEP:	3072:cU6aSVVQMvSzBtSamlYBxeUE6uHhLQFiRYjbgl:cU6zVQMvStINYBxeUaBUFeYjbgl
MD5:	08A68A7308737A004B2991AA3DD00688
SHA1:	40FE1DDF2616C7017F645C08BC6CAB484D082A4B
SHA-256:	F33C7BD75E8107B0E2C531D98AF84D90780D913F9246E796EA633D948D91F709
SHA-512:	0260828F2D4264750136818334D8B4D890F2D43ECE9844AED118667E8C8B999D83060A6BB0DA7D24554A6E98A751CE007ADE294C81B528C982662234EB027AFD
Malicious:	false
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-chat-sdk-bcac9f6.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9758],{47154:e=>{var t;window,t=function(){return function(e){var t={};function r(o){if(t[o])return t[o].exports;var n=t[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,r),n.l=!0,n.exports}return r.m=e,r.c=t,r.d=function(e,t,o){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(r.r(o),Object.defineProperty(o,"default",{enume

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1038 x 720, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	57284
Entropy (8bit):	7.924545838094971
Encrypted:	false
SSDEEP:	1536:EdmET0edUcK/5i8xABitlcf41yfRj9qxtqIn3/AMvcQy:gm00eKP5i8xoitlGj9Etqq34r
MD5:	E80B4482AC243D45B180CAD44AE89B46
SHA1:	CFB3BD6D8A02C90D4CDA925E7D0DE073323EEBF8
SHA-256:	08FE136E3CF736A032EF3EAA188068DD078A135D78C998A72045B362F168333F
SHA-512:	6A74ED2D676570EA31F349DC07812612B7EBA9580E31D364887EED6579E46C267F2D70DA682CD6A7F5DC843756A93F9B2089402283A21EC6DA5A3AA90352E9D1
Malicious:	false
Preview:	.PNG........IHDR..............X.r...IDATx....tT..6..L\..!@.. @p.R...-....UX.-...)V.R.Bqw.."....3..w(..[...s....[.w...d....a?.........x..........................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(........J .......................(...i....S.~.H..../(.TL..zalQe.HB...j............G_.\|0...E........[T+$] ......Q.....i..nF\|w!.ph..........q..B.7..u..{.!9%b..t....Qt".s.T8....S.W. .K......?..L..1d....2..j.....e..."W(..gSI......s..R."2.\|g@...W.rer..o.Tv(4../&.P9../.(..v?n..p?.S.....h.Q.C.....:..)Qy.@(......jhRI5.....NH....H....ka7S.+...........ye.....j2..nXs;.HX..y...../_v-<O...Z..K=.J.l....h...'$.T.\|. lm.NK...R...m....!9

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 529411
Category:	dropped
Size (bytes):	522462
Entropy (8bit):	7.996208789182543
Encrypted:	true
SSDEEP:	12288:xJLy0dRIO97g+7wa/3y+zRTdwB0rqUCYIpo3pdoJw1Wl:vz9X7wavhlmBEqUCYIp6Su1M
MD5:	5E40ECD8EB1C13375C5E8066DB6823A7
SHA1:	A9A08C34A9C6641D12D90F98E125FD843A2A7FDA
SHA-256:	2171B22500BA66837A9611E54546F9111C5183CFDDBBD20E5ADC9CFC4DFA9273
SHA-512:	8B30916A1BBCD3C39AA650A28F1B213D49F72E135C25A4C1925142FF644E4BC14E4E5CD94781B1F2709D4B1F62E4B39BEDEE54C141A0B0C1CCEC55D625E6185F
Malicious:	false
Preview:	............TS[...C.M...,(....."..Az..!....@. ......."....;.......<........x{.J.k.f..7..}....l...P_.T....a.O'..n$.A'....^Y[....Q........................0.h.O.G.?.eV....V..\|....@x..>...{....1(..ER.fd...i..2@...9..Wa...i.mh&..=..>.wcm.`.f...a.O.-.......'@Z/LNf.;NG..s-..Is..L7..dO.....>....CP1. ......Z.OB.t/.......a.....\|.4...\|b.J...R.O...._...Q..........c,.p.G.......i.#P........44.i.J.A.."..N.........5..U..0.U...`).@..L.!..a...~...V.....v$j..2V<.fC....iry..c.DgG...2.........T.....x,...0.mz.n.ec.%..y..Q..>y\.....1b977H.l..x.;..#....=s.Q.4..n.h..C%..t.Or.....k..k....'.........Q.M.n.......07."..6".a.........K=3bo.0E}7._...n...{.......R..w.#..hj. \..f...6...u.A4.q.....%....!@g/&........A@Gb.,..,...~.r.#....._.Q&.jd,h.y..Y..B.#QS.:. G.B...A...\|.Af..}.![.}.4]i.......Y.....5...&..H......L$.u.0....y,...)....^.d..i..E.....\....;.t...~..'.H.aT.......<._s.E}L..A..c.2.{.J..1e.9=Z..( *...#Lc..+..A...}c....6s....m8.%....R`.d...1gV.,..5....k..0V}}~......<..

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	237
Entropy (8bit):	4.933525546272954
Encrypted:	false
SSDEEP:	6:YAa+W8ebZ5iJC17Tg0ZgjlX/QyQLdg8F57/9Amrm/SGKvr/Au:YfiWowrZgjVQLdBFrfm/1Grou
MD5:	2664F0A923C2A52EAC273130929AD9DA
SHA1:	BD73858F52D3CFFDAB45CEA88DE51A8F1EFF25C4
SHA-256:	C7A729206CB54757F2AB5FDDB3A83CB4B15CB96A9F96A2E6139B03E3B8327AAD
SHA-512:	4597AAFCED5C5947309A53A25A4224226FED3ECA790FE015883EA629E4E4C3BE7C0D25155902400E2ECA910B1DDDE9D77B828F2E49371140A7F0E7F0821EFBDF
Malicious:	false
URL:	https://rest.inboxhealth.com/api/patient/v1/enterprises/unauthenticated/info?id=7272
Preview:	{"enterprise":{"id":7272,"name":"Foot \u0026 Ankle Center of Cache Valley and the Wind Clinic","support_phone_number":"(844) 900-4909","has_logo_base64":true,"logo_background_color":null,"post_checkin_message":null,"friendly_name":null}}

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:HhCkuDjn:HUkuf
MD5:	89BE93E81169A3478F5B92F3C91AF580
SHA1:	C62E2852B394952919463742831CB4C66CCA1C8B
SHA-256:	77C5F518D3925E0083F47A20572ADB178B2204D07FAA396A2E3B0AFD803155B9
SHA-512:	0F837CB5A3E3C67CFE10B21FB4965A1B39E4C10CEA9137D03A9D5B743B6F36A02CDE5348752D59C0BF28F9CFA0163D99A7767CCE9255500E5C3E15EA1F74C173
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmkSDdfu27_mxIFDVNaR8USBQ2_JFKQ?alt=proto
Preview:	ChIKBw1TWkfFGgAKBw2/JFKQGgA=

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9487)
Category:	dropped
Size (bytes):	305609
Entropy (8bit):	5.587091018767403
Encrypted:	false
SSDEEP:	6144:5dCPKDYnsmQ88+Z1HcRCriua0Mf3/Vmf9uT+bsKG:5dCynm98+7Hc8t5G
MD5:	BFAE304DC8A1A7EB14D09F85DEBC5BE6
SHA1:	8889204393B99F35A738D865934179A193415DE6
SHA-256:	1AD167926F2D393F4C6B9442349C95D7B97D7DF3CE8C5918CCA3ED57422E8520
SHA-512:	020D95634C4C1F25A986DAF26A4AA30675CCC15EDE4B9EDD3854BEEE31ED073FD8F1A0D6B7207EC69C39D6A2B21915B210B45C7EDADEE7CBD1A3987935A5618B
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":14,"vtp_value":true,"tag_id":11},{"function":"__ogt_ip_mark","priority":14,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":13},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","inboxhealth\\.com"],"tag_id":14},{"function":"__ogt_session_timeout","priority":14,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_city

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (651), with no line terminators
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	5.636887080240491
Encrypted:	false
SSDEEP:	12:qTjx8N/EPAvWj1ZzyzZ5gF49fR/yJWapvn55S15FqVWvnETDRoSVP5:0jWN/EPKw1ZzGgF456jpf55SbFqVWfc9
MD5:	AAB8B94FC04611F86646AE67152ACDCE
SHA1:	F39C559B0565C770CFE77EEAD82BC43934BB46FF
SHA-256:	EA3E376EF573B986C1E8FA2F610680D8C1964680E602515F96AC458FBB2DF6EC
SHA-512:	77E0016CFEA92952B461ACFA4629911ACEC98A2D230CC314330100437D257C2CE64FAF419E93D8F0B89B03AF5096FA35877D9AA0F35702DEB289FA0FBE7C1C58
Malicious:	false
URL:	https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.html
Preview:	<!doctype html><html><head><link rel="preconnect" href="https://api.stripe.com" crossorigin/><meta charset="utf-8"/><meta http-equiv="origin-trial" content="AtD0WrnMwAPI4nWWCvreE+vpgPVz45SO/1fG1IZRNpBsdWZOZN6SKr0ynC11KuzrvT903WrEU+N9Ik/RpiCRTAEAAABbeyJvcmlnaW4iOiJodHRwczovL3N0cmlwZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ=="/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/controller-e1865ca26c58947a4c41ae602ceeabce.js"></script></head><body></body></html>

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 529411
Category:	downloaded
Size (bytes):	522462
Entropy (8bit):	7.996208789182543
Encrypted:	true
SSDEEP:	12288:xJLy0dRIO97g+7wa/3y+zRTdwB0rqUCYIpo3pdoJw1Wl:vz9X7wavhlmBEqUCYIp6Su1M
MD5:	5E40ECD8EB1C13375C5E8066DB6823A7
SHA1:	A9A08C34A9C6641D12D90F98E125FD843A2A7FDA
SHA-256:	2171B22500BA66837A9611E54546F9111C5183CFDDBBD20E5ADC9CFC4DFA9273
SHA-512:	8B30916A1BBCD3C39AA650A28F1B213D49F72E135C25A4C1925142FF644E4BC14E4E5CD94781B1F2709D4B1F62E4B39BEDEE54C141A0B0C1CCEC55D625E6185F
Malicious:	false
URL:	https://patient.inboxhealth.com/assets/icons/quickpay/soc-7d610560b68610eb2dedfd7e759ddf49.png
Preview:	............TS[...C.M...,(....."..Az..!....@. ......."....;.......<........x{.J.k.f..7..}....l...P_.T....a.O'..n$.A'....^Y[....Q........................0.h.O.G.?.eV....V..\|....@x..>...{....1(..ER.fd...i..2@...9..Wa...i.mh&..=..>.wcm.`.f...a.O.-.......'@Z/LNf.;NG..s-..Is..L7..dO.....>....CP1. ......Z.OB.t/.......a.....\|.4...\|b.J...R.O...._...Q..........c,.p.G.......i.#P........44.i.J.A.."..N.........5..U..0.U...`).@..L.!..a...~...V.....v$j..2V<.fC....iry..c.DgG...2.........T.....x,...0.mz.n.ec.%..y..Q..>y\.....1b977H.l..x.;..#....=s.Q.4..n.h..C%..t.Or.....k..k....'.........Q.M.n.......07."..6".a.........K=3bo.0E}7._...n...{.......R..w.#..hj. \..f...6...u.A4.q.....%....!@g/&........A@Gb.,..,...~.r.#....._.Q&.jd,h.y..Y..B.#QS.:. G.B...A...\|.Af..}.![.}.4]i.......Y.....5...&..H......L$.u.0....y,...)....^.d..i..E.....\....;.t...~..'.H.aT.......<._s.E}L..A..c.2.{.J..1e.9=Z..( *...#Lc..+..A...}c....6s....m8.%....R`.d...1gV.,..5....k..0V}}~......<..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1827)
Category:	downloaded
Size (bytes):	172479
Entropy (8bit):	5.469555055720402
Encrypted:	false
SSDEEP:	3072:M63eheP5kXRkKmUB2e9mxHETARgAj/qAcayDt6TXOR:Me5gbyxHjqXWOR
MD5:	9899EC4E82BD08AFF23ECEE67B6F4798
SHA1:	82C2E28BDCD5F7CBB6313387B315464FBAB9EDF3
SHA-256:	20F47C47A01F048B539900A053427E30B2C111F5A834FFA8FEB4F3E0D33C948A
SHA-512:	3001C5C4E97E506A4E9D82C083210B17B8558598B285926D4758FD06366C722705C3D6AFD023676C4D883B57E590E3EE1CF415A83AE654D13387298F7FD1ACB9
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.BY62uICrLh0.es5.O/am=MBjgAQ/d=1/excm=_b,_tp,payframeview/ed=1/dg=0/wt=2/ujg=1/rs=AMitfri_p_ajHk2L_hb9pCkj42BamZOpng/m=_b,_tp"
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1e01830, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var ha,za,Ea,Ga,La,Oa,Za,ib,tb,ub,xb,zb,Ab,Bb,Cb,Db,Gb,Hb,Ib,Kb,Mb,Pb,Sb,Ub,Zb,$b,bc,cc,ic,nc,oc,zc,Cc,Ec,Hc,Ic,Dc,Kc,Lc,Mc,Sc,Yc,ad,bd,cd,md,ld,pd,rd,sd,ud,yd,zd,Cd,Id,Vd,qe,me,se,B,De,Ue,Ye,$e,bf,ff,of,sf,vf,wf,Ff,Hf,Wf,ig,kg,pg,Eg,yg,Jg,Kg,Lg,Og,Pg,$g,lh,dh,uh,vh,wh,yh,zh,Ah,Eh,Fh,Nh,Ph,Qh,Rh,Sh,Th,Uh,Vh,$h,ai,di,li,oi,aa,pi,qi,ri,ti,Ai,Ci,Ei,Fi,Li,Oi,Mi,Ni,Pi,Qi;_.ba=function(a){return function(){return aa[a].apply(this,arguments)}};_.ca=funct

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H0d5Rn:Uhn
MD5:	033EB13921ABBCDB28F1B859597CA27A
SHA1:	4E9D20F0F0B07DA5E9A47D8EBA7A5FBE7ED0B603
SHA-256:	E2F6C7F65140E0F3D90DF3C4264DECA0E9FC8C83497A1452A491DB7B40414775
SHA-512:	90B9E4F2FA4D31D8FC15D50E7A943E99829AF7A08E17F06B42C70B874A81376BB05DA4F20409A5359FE8EF3EE6162E2BA46D0A7C59980A3A9931561213411C0E
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmIB1_W7HnEORIFDZfEWO8=?alt=proto
Preview:	CgkKBw2XxFjvGgA=

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	dropped
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	941993
Entropy (8bit):	5.570139547356164
Encrypted:	false
SSDEEP:	12288:C9mD6xlBlj8IRPCjUYp/BvfNwtjBCuEU+7cUMR:Coe382AvfO6uH+yR
MD5:	EBBF36FC6D459BB3AD1F2AD4904B7DDF
SHA1:	47842B85940F6CD7CD8DF2E4192DE1257B49A8DB
SHA-256:	D57EF58A6FBE42287AE7ADD28A3F9F4768DC79BDED20640D4A7DFD7DF8E7F2B2
SHA-512:	5DFF8B311BB08B2D7B6EB7BFAA625BC3922804DC93C5825E1CCA7F7EA33FF09D668A971CAD86424D925EB5D99F57581405702C12360E817761AB1013E7DAECCC
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/controller-e1865ca26c58947a4c41ae602ceeabce.js
Preview:	!function(){function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return a[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var i=typeof n;if("string"===i\|\|"number"===i)e.push(n);else if(Array.isArray(n)&&n.length){var o=r.apply(null,n);o&&e.push(o)}else if("object"===i)for(var s in n)a.call(n,s)&&n[s]&&e.push(s)}}return e.join(" ")}var a={}.hasOwnProperty;e.exports?(r.default=r,e.exports=r):void 0===(n=function(){return r}.apply(t,[]))\|\|(e.exports=n)}()},62322:function(e,t,n){e.exports=n.p+"fingerprinted/data/countryRanges-da252f255fed0fefce3e3b3c60707e3d.json"},8464:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_ar-7995ee218dfd37546f754bd73b67e2cc.json"},90342:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_bg-c9f7496faecf6cafdeb3cf831b179cc8.json"},32726:function(e,t,n){e.exports=n.p+"f

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	849701
Entropy (8bit):	5.526139221924176
Encrypted:	false
SSDEEP:	12288:5ZDQvnm8OEmirdmJkjm+fjV2XhssAQ44/:PDa2EmicqjnjahssAQ44/
MD5:	419802576603F417F149FC475B138E7E
SHA1:	6F70F476831013C2634822D9127B48F9EEA9CE73
SHA-256:	B80BAE0B2A8345FDF150C81F164F47195DFBD217B84E4DC3382409D4D3AE768C
SHA-512:	DA9962F9ABE1B6877AF8188982E85F4B0EB64847CA7E5CA7308FC9EF8E6C27EA2AA08E651B39878E455CD4A5EC0691D5B2FF8B173B8BD4FA053941A1AC47D4C9
Malicious:	false
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-main-bcac9f6.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(()=>{var e,t,n,r,o={6470:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(null,arguments)}const i=({title:e,titleId:t,...n})=>o.createElement("svg",a({xmlns:"http://www.w3.org/2000/svg",width:12,height:12,focusable:"false",viewBox:"0 0 12 12","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:1.25,d:"M3 6l2 2 4-4"})))},96689:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){retu

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12253), with no line terminators
Category:	dropped
Size (bytes):	12253
Entropy (8bit):	5.347330622366456
Encrypted:	false
SSDEEP:	192:ZM+C8lHprSjfFwgsnqqtzmasMs4nkQxCOMzN:yZ3qpbBsOkQxCOa
MD5:	26C21664AB90A0616B393EDA4422F672
SHA1:	86E758E29330F245B8F0328CD589F8C4D0355F3F
SHA-256:	E9262DBAB0CC3A0F62D97B0902BE9821D217AA7F1741AA1B2380AF4C5FA96D06
SHA-512:	48F885F423D41F4B97136095FA7912398E60F2B1A22A814BD4DD365D32F38A8D2B43D160BD83C1796C6CE58029AD728392A6995FC1D5CB09D4DADEAF82F781DE
Malicious:	false
Preview:	!function(){"use strict";function e(t){var n=r[t];if(void 0!==n)return n.exports;var a=r[t]={id:t,loaded:!1,exports:{}};return i[t](a,a.exports,e),a.loaded=!0,a.exports}var t,n,a,i={31506:function(e,t,n){var a,i=n(93324),r=n(1413),o=n(45987),s=n(39581),p=n(36617),l=n(63630),c=n(15671),u=n(43144),d=n(12024),h=n(69620),_=n(91493),y=n(89062),m=n(71873),f=n(17948),v=n(39294),g=function(e){return{country:e.countryCode\|\|"",region:e.administrativeArea\|\|"",city:e.louserty\|\|"",postalCode:e.postalCode\|\|"",recipient:e.name\|\|"",phone:e.phoneNumber\|\|"",sortingCode:e.sortingCode\|\|"",addressLine:[e.address1\|\|null,e.address2\|\|null,e.address3\|\|null].reduce((function(e,t){return null!=t?[].concat((0,y.Z)(e),[t]):e}),[]),dependentLouserty:"",organization:""}},O=function(e,t){var n=e.id;return t.filter((function(e){return n===e.id}))[0]},P=function(e,t,n){var a=e.paymentMethodData.info.billingAddress;return(0,r.Z)((0,r.Z)({complete:n,token:JSON.parse(e.paymentMethodData.tokenizationData.token.trim()),ship

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1058), with no line terminators
Category:	downloaded
Size (bytes):	1058
Entropy (8bit):	5.513112176903521
Encrypted:	false
SSDEEP:	24:0jHrRIw1ZzGgF456jpf55SbFqVWfUHLpMVWfdbWtcVpXUguelXdG/a:046jpf552fUrp3fdbWOUMddGS
MD5:	82B73398E11598B9AD92559CAE1C986B
SHA1:	87B1241D19034FFC78A85534D891427BA91136F7
SHA-256:	324129C21768C275751C4485B90FB21349D5E043326FA681D82C4A6A93065806
SHA-512:	13278E5270119210F53A55BA16302F68BCD6EF78E5C6087B98F2652E65A724371036981D63804EDAD60C12820F8805FB5C7EA16D0C3E8830AD12C1CBF31305C3
Malicious:	false
URL:	https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta http-equiv="origin-trial" content="AtD0WrnMwAPI4nWWCvreE+vpgPVz45SO/1fG1IZRNpBsdWZOZN6SKr0ynC11KuzrvT903WrEU+N9Ik/RpiCRTAEAAABbeyJvcmlnaW4iOiJodHRwczovL3N0cmlwZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ=="/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/ui-shared-4af9c6190c1d792bdbbe4e49904ee0f6.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/elements-inner-card-244854405722882f318e50d94037ffbf.js"></script><link href="https://js.stripe.com/v3/fingerprinted/css/ui-shared-57e28d4968898653fd9bd0ad9d7f138b.css" rel="stylesheet"><link href="https://js.stripe.com/v3/fingerprinted/css/elements-inner-card-53aa57bec7f6d40d72327654fd43a92e.css" rel="st

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56584), with no line terminators
Category:	downloaded
Size (bytes):	56584
Entropy (8bit):	5.506263349301995
Encrypted:	false
SSDEEP:	768:PyoDElkLZEdp5lAgswCqlRMEGC0M1oX7F3yOl1jl19lgOR:qoDElkOdhmyRGC4/Blt
MD5:	16553965860C27FAF04865C26BD8D33F
SHA1:	2544D28F31F4387D8EC1EBB38C066C49B97CBD59
SHA-256:	98DC72A0432F0E1A6AC3F4C8FD6D9E5800E094BF7659DAC65AD6A405A7B8A4AE
SHA-512:	D59D220F6D833DE31F2DEFE685241792129EBDC05A44C4BD9F6C0FDD941691D6B0F56ED858BFF509415D9C3785DB4CD1A46A4D4CA4AE27B76DAC80B64D40442D
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/elements-inner-card-244854405722882f318e50d94037ffbf.js
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var r=o[t]={id:t,loaded:!1,exports:{}};return a[t].call(r.exports,r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={14657:function(e,t,n){e.exports=n.p+"fingerprinted/img/amex-a49b82f46c5cd6a96a6e418a6ca1717c.svg"},86520:function(e,t,n){e.exports=n.p+"fingerprinted/img/cartes_bancaires-4f58478f31a1195d2dee740e3a2d632a.svg"},5167:function(e,t,n){e.exports=n.p+"fingerprinted/img/diners-fbcbd3360f8e3f629cdaa80e93abdb8b.svg"},15972:function(e,t,n){e.exports=n.p+"fingerprinted/img/discover-ac52cd46f89fa40a29a0bfb954e33173.svg"},54504:function(e,t,n){e.exports=n.p+"fingerprinted/img/elo-efe873e884e6c9eb817f23a120caaa3e.svg"},75979:function(e,t,n){e.exports=n.p+"fingerprinted/img/jcb-271fd06e6e7a2c52692ffa91a95fb64f.svg"},53022:function(e,t,n){e.exports=n.p+"fingerprinted/img/mastercard-4d8844094130711885b5e41b28c9848f.svg"},2919:function(e,t,n){e.exports=n.p+"fingerprinted/img/unionpay-8a10aefc7295216c338ba4e1224627a1.svg"},

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6697
Category:	downloaded
Size (bytes):	2668
Entropy (8bit):	7.917681335407175
Encrypted:	false
SSDEEP:	48:XO2dFtAJWHO2LJJXVag31Jce0dHRZSlL17vs2c/4tl+k/dQhJ3I/JqCNf+xx:+cFtlH7V1Vag31JdoHRZSlhjs12l+isp
MD5:	FB9DD20D50E77901DB8C1F0C55DEC795
SHA1:	5C12304176D7A72A2F631DDEBEF4F2FEC886F1DE
SHA-256:	99DD0D0356DE716CBDE17BA38194CD60B4E00B8ADF9E43ED5418B45FB4D55C29
SHA-512:	9E7258AAFCF8A1619959C8E9D2A53868A8FFF0237F52361121C6539389E9E3A4E6D0F15ABC0A88A997822E9FABA44BBC662EE33CF5810EFA269392B98DBDCFD5
Malicious:	false
URL:	https://widget.intercom.io/widget/xx016tyt
Preview:	...........Y.s.8..+.wC.1..6.n/M...5.N...M.c.-@.....a..~...l ............x.....\|$....Y...+..]R.>%B.4X.b&C:...gOX.Q..H-.l.$l0$).RI.k.Ai12..WT.......0f. !j.....La.}.j.^:.T..D........x.@...+..+<..Kk-I....g:...G...il{.....`"...d.7.+.F).p..;..=;.IxvB^.........s..G.?..1\7.......i.N.9.....pUy.$M....=...EL...L.#.W..AJ..'.)...S9....zG.<.....G3..^.....".,..,.D......9..EV....T.$.D.}.....`..z..."g.Xp...~....u....,.V.$..}..}.%...%$......$.Y.c...R).+.PI.).l..T.YL..{..7....D...B0Z1.....We...$S....K...0.%P..F.B.....Vj?l.+u."...h......-.n..F..[....>.Q.8F.U..(..~...K....>tl.S.D...>..kt.5<.'...z].(......pC.V..pj.NH^.Q..V.......2.F.}.$1..f..-....[..k..r7..nYl.<.1Q......he...!.....g....\.,......,..m..$%....k..G.9.....8.. }~A.b..H.....-:t...w.....]N.w!{.A..pxu.}...C...G.=.j........J>...,0=..#..{....rB._'.?Kt......~......m...L.f.35....D1..z..U.X{0.I.$....>k..o..F.5.}.....tZc..?...j4...5..J"......jC.r..(.Y..EL.1..D$...a.Cd...1.o.M..].@.A....1Y\|]$0.E...../

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18220)
Category:	downloaded
Size (bytes):	18294
Entropy (8bit):	5.298344979924938
Encrypted:	false
SSDEEP:	384:w/bFujnfasSo7f72n+qjapG3TO9ODFt8wexInk/Lg0aV:wbFujnfFXfaEp6T/5t8wexInk8LV
MD5:	68040DA5D85F8655D3CD96C616195788
SHA1:	48BD88232FB00176C791C0ACEC948CF6E4CB05C3
SHA-256:	B64E479BDB1E969606F1D8398649CEF8A9C2ACD4178D8A3414557127DEDC3186
SHA-512:	DC0BCF7571957CAF4969A0DE9BCED63978C079939BE54343D13C76F8E8D811E19425397450F662A16DFBED317DD51367DFF9A28B2FAA977D5C6D37DAF0CF0B11
Malicious:	false
URL:	https://b.stripecdn.com/stripethirdparty-srv/assets/v22.3/HCaptchaInvisible.486f638f2018022c8747.bundle.js
Preview:	!function(t){function e(e){for(var n,a,c=e[0],u=e[1],s=e[2],l=0,p=[];l<c.length;l++)a=c[l],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in u)Object.prototype.hasOwnProperty.call(u,n)&&(t[n]=u[n]);for(f&&f(e);p.length;)p.shift()();return i.push.apply(i,s\|\|[]),r()}function r(){for(var t,e=0;e<i.length;e++){for(var r=i[e],n=!0,c=1;c<r.length;c++){var u=r[c];0!==o[u]&&(n=!1)}n&&(i.splice(e--,1),t=a(a.s=r[0]))}return t}var n={},o={23:0},i=[];function a(e){if(n[e])return n[e].exports;var r=n[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,a),r.l=!0,r.exports}a.m=t,a.c=n,a.d=function(t,e,r){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},a.t=function(t,e){if(1&e&&(t=a(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65495), with no line terminators
Category:	dropped
Size (bytes):	154070
Entropy (8bit):	5.575744078145646
Encrypted:	false
SSDEEP:	1536:4WldeROe0tNo455wjfSgQP/vHLGQPRDY1eMR45REmSRD63cnWNkGXXtQsIgQlSfe:4ydwOe03o4PwjCVYYM4NLMq31QlSG
MD5:	923076FD2B6FEFB66FA5480A11AC28D2
SHA1:	421C03D9AF5775C17897FB545FC147678711442C
SHA-256:	03149356C945F58150E4205B34572B5160BE326D8E595D1D165143A48C01092D
SHA-512:	A0A5A88ED84651B9A0CDD9E998688D0E59AF6C3C0A088B24C1E1F98B0F0F1F68E3E8B0D6474EE96CD06ACBC668EFA37B917361FE96166AC8D2DE3F2E92DD982B
Malicious:	false
Preview:	"use strict";(window.webpackChunkStripeJSouter=window.webpackChunkStripeJSouter\|\|[]).push([[944],{3799:function(t,e,d){function n(t,e){var d=Array.prototype.slice.call(e);return d.push(te),t.apply(this,d)}function r(t,e){t=t.split("-"),e=e.split("-");for(var d=t[0].split("."),n=e[0].split("."),r=0;r<3;r++){var a=Number(d[r]),i=Number(n[r]);if(a>i)return 1;if(i>a)return-1;if(!isNaN(a)&&isNaN(i))return 1;if(isNaN(a)&&!isNaN(i))return-1}return t[1]&&e[1]?t[1]>e[1]?1:t[1]<e[1]?-1:0:!t[1]&&e[1]?1:t[1]&&!e[1]?-1:0}function a(t){return null!=t&&t.constructor===ee}function i(t){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},i(t)}function o(t,e){for(var d=0;d<e.length;d++){var n=e[d];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(t,n.key,n)}}function $(t,e,d){return e&&o(t.prototype

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 32520
Category:	dropped
Size (bytes):	30857
Entropy (8bit):	7.992955710460929
Encrypted:	true
SSDEEP:	384:jGmjB7+CExyBXb+fTau9l2hFCWQDq4qFuqpzBL6x9Im4C/iPO/ozvTaIhuW7vwJC:jxjBzExyBXCfN2htJe9IRG43hDv4n+D
MD5:	0701ABC12C3B92C3BA42C9CFECE5A744
SHA1:	DABB6EC5E6D9575F983565F96A96AB5671E87DF2
SHA-256:	2D48C59C44BBB07279B885536621B52877AA1CADC932B4BD87671BC64059A7FF
SHA-512:	F9189985FFF95038FE47875524980841D24147367434A46D8B02E290B6329BFD7E715C3BE69FD8B1804E3B54F71B18DC6863F0B017E2164FC52FBA43A9BCCC2D
Malicious:	false
Preview:	............gTS[.0.......@...z..".I.J.HIh.C""A...7..(.@z..@...t....)"M...9..}..w..n...Zs.5{.k..cCm...A .....).D..\|.9E.\|.r...tl.A Q..78.T...Q.......+. }E.\..n...(..KQ%....................k%c n.Rw.....p3.74w..v.w.UQ.Q.U.....9.........W..~2,....H..........1.:2..GFTV.EBZ.GN^TBVJZ^^.GR\..&.......U..W.......-..].TC.{...x=..P.bb!!!.!R....1.yyy1qI1II..B$0./.)T./..o..n...^. /....o'gdp../..,.............:..$D....h`.?........D.....a(71S.@dp...&../.........\|....E.........K.....B.z".?..3.....z..S.2.....[Q.....(F...........r...J.'.".2"..........".......5....).....t.r.....(....9....j(..#.^^..n....2"2.nn".rNr".p)y...............5...'2<Y...uE..8..IA.M\FR..ID\.E\..YZV..I\J..)')+-.$+....Q...>N>..zB.+.QZNR...]B...s.....K..8I..II;...9..(.#.\|..c..u.p.C.y...C.:....H.....u.....^>.D....................@..@@.a...37..~.....D..\N<C.../...w...E..;...>............A!N.n.....w.(...A.......g&.......N~.n@....#...#..kN...c...../.2..OXw..P..A.W`. ..Z...j...c&...b.a...\|.m.J.eM.U..+.E..

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512), with no line terminators
Category:	downloaded
Size (bytes):	512
Entropy (8bit):	5.226212528364356
Encrypted:	false
SSDEEP:	12:McCtzXTCd33BluZEvHW87C3CpMn+dJek1kWQ:MzFed33BluZEvHZ9g+dJVQ
MD5:	A5E9016FBBA31C56588D80C5B0AE3F1E
SHA1:	58812177A56B25BA46B913E72057B607EC99894B
SHA-256:	0E975B04E461F507CF911AB5FFEC41CDDB91C9C54410D5EBD3ECAE06BD081F1C
SHA-512:	2206469AD6BDE83D2AE8A8110AB8BF31AFBAD4100B34318D8FDF0873C64777D2202D306A07DD025D01624F54E7200F7899383462716B1B306132DE95D420A55F
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISgAEJMHeVuwmX0EwSBQ0gIiIdEgUNlJCS-hIFDU8IXVMSBQ1IqWunEgUNgWKwehIFDWrIIzYSBQ0gIiIdEgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNyWkvLhIFDdlX6vUSBQ2CvvVcEgUNoHnZphIFDUZnFX0SBQ1Vu_VvEgUNY67tIRI6CbZ9atS4ADzAEgUNICIiHRIFDZSQkvoSBQ1PCF1TEgUNSKlrpxIFDYFisHoSBQ1qyCM2EgUNICIiHRJPCSHkg5rsa9G9EgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNyWkvLhIFDdlX6vUSBQ2CvvVcEgUNoHnZphIFDUZnFX0SBQ1Vu_VvEgUNY67tIQ==?alt=proto
Preview:	CpkBCgcNICIiHRoACgcNlJCS+hoACgcNTwhdUxoACgcNSKlrpxoACgcNgWKwehoACgcNasgjNhoACgcNICIiHRoACgcNkWGVThoACgcNkWGVThoACgcNkWGVThoACgcNyWkvLhoACgcN2Vfq9RoACgcNgr71XBoACgcNoHnZphoACgcNRmcVfRoACgcNVbv1bxoACgcNY67tIRoAClkKCw0gIiIdGgQINBgBCgcNlJCS+hoACg0NTwhdUxoECDQYASABCgsNSKlrpxoECDUYAQoLDYFisHoaBAg3GAEKCw1qyCM2GgQIOxgBCgsNICIiHRoECDQYAQqEAQoLDZFhlU4aBAg5GAEKCw2RYZVOGgQIORgBCgsNkWGVThoECDkYAQoLDclpLy4aBAgHGAEKCw3ZV+r1GgQIHhgBCgsNgr71XBoECB8YAQoLDaB52aYaBAgkGAEKCw1GZxV9GgQIIRgBCg0NVbv1bxoECCIYASABCgsNY67tIRoECCMYAQ==

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4492)
Category:	downloaded
Size (bytes):	14556
Entropy (8bit):	5.73234153048114
Encrypted:	false
SSDEEP:	384:wdmReX/EyhSERv+Yuy4AeYx24fPipqcQtIJ1B3qCeQFFJ/N4ylQgN/FkCC:QvEyhBRvpuXkgWPOq1taBAQFFJ/N4yl6
MD5:	E0856054845DF1B21D88BD3B24290D5F
SHA1:	92F96F80081F175F5E7466518CCABD9A93413B42
SHA-256:	1361A527543B89E4AEF0AC5242B570B77E716283176AB0A10E8924AC32FBEE3E
SHA-512:	856890AE605C1C5D9EE131C6CFEA1E6951FE58AC145146A56B78BCB7D99280B24A56144221193A7435225EB76E9AC6E03988E67CE22AEDCC91190CBDB2EEC2BC
Malicious:	false
URL:	https://pay.google.com/gp/p/ui/payframe?origin=https%3A%2F%2Fjs.stripe.com&mid=
Preview:	<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://pay.google.com/gp/p/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><link rel="canonical" href="https://pay.google.com/ui/payframe"><meta name="viewport" content="initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"><link rel="preconnect" href="https://pay.google.com"><link rel="preconnect" href="https://pay.sandbox.google.com"><script data-id="_gd" nonce="n8uDG43F1XoAA6THJruaJw">window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/","/business/console","/business/console/","/c/w","/c/w/","/campaign","/campaign/","/diwali","/diwali/","/drivesharing","/drivesharing/","/g/a/accountlinking","/g/a/accountlinking/","/g4b","/g4b/","/gp/a","/gp/a/","/gp/m","/gp/m/","/gp/t","/gp/t/","/gp/v","/gp/v/","/gp/w","/gp/w/","/gp/wallet","/gp/wallet/","/gp/wc","/gp/wc/","/invite","/invite/","/pay","/pay/","/payground","/payground/","/payments/apis-secure/ui2","

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	dropped
Size (bytes):	709604
Entropy (8bit):	5.380918238787942
Encrypted:	false
SSDEEP:	12288:I2nsWW3gh/CmxoBLVsumKCBXtD+Pv1hiWMtOSApcVdS3ni78xXTdrvuLeeM7L8Lg:7wm0S7aOtvM
MD5:	7C5CEC529D347475DA54B5520C3A5D36
SHA1:	01276D1237DB31A86B59A7B932D536FB78FA95B2
SHA-256:	F4BB1B1D0747257963737A62B82537A18FD5AED5C475301044C86C948CAABFA9
SHA-512:	CE4F823585A6B78787E00ACD546195D14C60B651D1DF61FA5E4FA00068C7AECFB15B0DBD34D5F5D0EB4F73288CB9A7FA200AA736892AEAC6C1EA2A8744685BB4
Malicious:	false
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function o(){for(;d<l.length;){var e=d;if(d+=1,l[e].call(),d>1024){for(var t=0,n=l.length-d;t<n;t++)l[t]=l[t+d];l.length-=d,d=0}}l.length=0,d=0,!1}function i(e){return function(){function t(){clearTimeout(n),clearInterval(r),e()}var n=setTimeout(t,0),r=setInterval(t,50)}}e.exports=r;var a,c,s,u,l=[],d=0,p=void 0!==n.g?n.g:self,m=p.MutationObserver\|\|p.WebKitMutationObserver;"function"==typeof m?(c=1,s=new m(o),u=document.createTextNode(""),s.observe(u,{characterData:!0}),a=function(){c=-c,u.data=c}):a=i(o),r.requestFlush=a,r.makeRequestCallFromTimer=i},5937:function(e,t,n){e.exports=n.p+"fingerprinted/img/abnamro-4445e65420800f96f68cfc67a273f66b.svg"},1520:function(e,t,n){e.exports=n.p+"fingerprinted/img/asn-3d9b1bbff2f8f12105510992dbb37ae8.svg

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 864081
Category:	downloaded
Size (bytes):	188818
Entropy (8bit):	7.9981591848523745
Encrypted:	true
SSDEEP:	3072:+s42W8lrXUZ3oROlkorxim7Gc/HWDr3+vzmeODdMmdonsfL2tEo9aRA9So:Z/7yoQJrPi5Davau9sz4ao
MD5:	FE9467159BFE3C3A6AEBDB7F6C7F017A
SHA1:	11A112B91A368E740BDE1156F9FEDF358E236BF3
SHA-256:	16C08143480CD5EE6DA3E2417A14167DB78DF35DA502F971AB048F2779A1D978
SHA-512:	5640C06F88C70F6E1FB6CE1DB7B24E538A1EB94E99C2BED2CD24014FC8EF74DA6518BF7FAF4A6C4FBE3E9CB8C2BA5451BA70F23627A8CBA8F9989F6ABBEEC967
Malicious:	false
URL:	https://js.intercomcdn.com/frame.ac03c723.js
Preview:	...........yw.7./...)...?.M...z.F.(..s...;...N.j.....d..w..+.W.d9q2v....DcG.6T..._...3k4.yj.'...8Y....r.&.4OS.\|..S'..J..<w...?...cg.va..o.....I...w.df-...3{j.w.J....w:.l.]...<...3g\|.Z=%.@.8.....>wE..c....^..d1.....<$....B'z....N.5m/t....wf.b9.X.v.Y......`.L.3{..L.+..l6..[..zf..'g.xz.......^\|...Vgg1.M....O.......~:\|\|....'.?...Zv.6..^.^.....z.[.9.....i..o...:.t>......I.^Ng....g.<.k[."...dF.6..z/c....8~.Y;..^H.b[.../&...yad...y....EU.....${../...../..~.....gy.HxAlK...,.......}..c...#..6.....(.P.F.r.X.\|,2....wJI7t. tu.."....v(L%.I..y=Q...5.{.JI..a._...<.<; ....\|.RH...xz..yUA$..........4."4U-..........Y^.tUl..~....F...~.s..q.S....._O..Gs.b..(.)t.-..{z.G...6.....\|).7....^.q.#..H;...LN.>I...Lz..B...3-\&...EZT...GA..,..O.....E....A.?.S26..>{qdG.-..Y.\........%Q. ..B.........Qd.q>^......y.....T...WE....b.....K..b3/.A^B.l.o..(..c..k../....e.k...a.VD..\|.....C1W!m.X.2{.....i.=B]..X....F\|6....4.....v.Fu>%..tvt....t7}..u'...3..l..3N...'

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1143
Entropy (8bit):	4.913553660073119
Encrypted:	false
SSDEEP:	24:Yb1MMigTaLXTEUATHrc6mLnFCQLnFF+gzBg8NgcgT+KE9qAhX:Yb1MMHaLjEU+Hrv8zOCBHNFy+KgfX
MD5:	2066096621E28ABC68FDD15669E519C8
SHA1:	3C1A62A53F6B8889034633611C3C29239EBDCF10
SHA-256:	E6244B60AE07B59D955F81BED86A05CBD447802B2349421DFEE855186F87803A
SHA-512:	4F421500F7BA4FD4E8A3E4DD1570655A6925BD5A3545819A506DD8884B5465660CD38E3CA92BE280CDC63B8D926F829A9B883A146B9AFFA978A59D18E2609430
Malicious:	false
URL:	https://rest.inboxhealth.com/api/patient/v1/unauthenticated_patients?confirmation_token=XHcUtg
Preview:	{"unauthenticated_patient":{"id":36304491,"user_id":null,"first_name":"JOHN","first_name_legal":"JOHN","middle_name":"I","last_name":"WEAVER","balance_cents":6000,"cached_balance_cents":6000,"enterprise_id":7272,"allow_self_directed_payment_plan":false,"enterprise":{"id":7272,"name":"Foot \u0026 Ankle Center of Cache Valley and the Wind Clinic","support_phone_number":"(844) 900-4909","payment_phone_number":"(844) 900-4909","enable_checkin":false,"has_logo_base64":true,"logo_background_color":null,"post_checkin_message":null,"enable_simplified_account_view":false,"patient_support_email":null,"portal_accepts_ach":true,"portal_accepts_credit_card":true,"payment_plan_minimums":[{"months":3,"minimum_balance_cents":15000},{"months":6,"minimum_balance_cents":30000},{"months":12,"minimum_balance_cents":60000}],"patient_welcome_message":"Your account is ready for your review and payment. Thank you!","patient_welcome_message_zero_balance":"Your account has been fully paid!","enable_live_chat":tr

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 10101237
Category:	dropped
Size (bytes):	1219235
Entropy (8bit):	7.999003070873174
Encrypted:	true
SSDEEP:	24576:8IHgypwvi9+SA9BIZN7O2rO0pNT9Silq47Sj2opW82IIS2:8IAvK9+SAPeN7O2LBSilYj2ox29
MD5:	85ABF41A7743C724ECDAF10F017C9140
SHA1:	FD0C07CE51BA23E8F636BB95CFAC85FEAD1BBE50
SHA-256:	3E6B8A743D697D3154D4618E67D4DF52E0163E775E33AF1028A5E701FF3B3399
SHA-512:	D983692C17CF1A81B455F5AFED0C0371C83F2EAFBFADA0300D3A777A46D228FA4E97C2C3B87D193A014E08488F6C03AF602451E787CE97F6C75A0D07E94799C5
Malicious:	false
Preview:	...........k{.8.(..B..f..J..\.Q\|.'=..$...{v... ...T......... ...(....9g;..K.(...uqV.h%i.ORgkf~(...G..K/.E.n{So..8......@i.:.#>/.8M....s......X............K...KeP..........G(6.....s.,..R.I....m.^.q....9s.U8Ah..M......;....VA:.._=.9.....7...ND.@'.4...........z..N....H..D..vV..D.....u.....D....}......S.s.~...j..............H...7.q.........M..q.`..O..T.....$.L..;..E.!Q{..dHR.Z}S..j[.h../I..e.w!.x.`F. .E.....{1.......K/n..p..8?<...k'..\L>.....t.....A....q.....w..C4"\|9_.....o`U......Sp:[.HWq.&.?....u.....^.F..i.1...#p.r1...n..y....P.G.l..b.................yo.....E.k.i....j....5....4V.%N.Y...C.h...E.....,vt&.....r.#..&.8.h..O.h.........H..N.=.@..y.0;...VKU.F.3.N..._...j.Q......p".._Wxs$C_..-.....".e....gm..1-..T;.xx....q(".v..8Y.]..=.jc....+..!......X..q.u.....9...a.#+2.]...oK..'W...7.x.h.s.".vT...7h:.1.q.....W0.........x/..y.=5..G?9./....{^O.q.'{....qJ.z...Ng..~7G#......w\..e.#..E...#.u.......fl.....K...u>.G.^.............................

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 864081
Category:	dropped
Size (bytes):	188818
Entropy (8bit):	7.9981591848523745
Encrypted:	true
SSDEEP:	3072:+s42W8lrXUZ3oROlkorxim7Gc/HWDr3+vzmeODdMmdonsfL2tEo9aRA9So:Z/7yoQJrPi5Davau9sz4ao
MD5:	FE9467159BFE3C3A6AEBDB7F6C7F017A
SHA1:	11A112B91A368E740BDE1156F9FEDF358E236BF3
SHA-256:	16C08143480CD5EE6DA3E2417A14167DB78DF35DA502F971AB048F2779A1D978
SHA-512:	5640C06F88C70F6E1FB6CE1DB7B24E538A1EB94E99C2BED2CD24014FC8EF74DA6518BF7FAF4A6C4FBE3E9CB8C2BA5451BA70F23627A8CBA8F9989F6ABBEEC967
Malicious:	false
Preview:	...........yw.7./...)...?.M...z.F.(..s...;...N.j.....d..w..+.W.d9q2v....DcG.6T..._...3k4.yj.'...8Y....r.&.4OS.\|..S'..J..<w...?...cg.va..o.....I...w.df-...3{j.w.J....w:.l.]...<...3g\|.Z=%.@.8.....>wE..c....^..d1.....<$....B'z....N.5m/t....wf.b9.X.v.Y......`.L.3{..L.+..l6..[..zf..'g.xz.......^\|...Vgg1.M....O.......~:\|\|....'.?...Zv.6..^.^.....z.[.9.....i..o...:.t>......I.^Ng....g.<.k[."...dF.6..z/c....8~.Y;..^H.b[.../&...yad...y....EU.....${../...../..~.....gy.HxAlK...,.......}..c...#..6.....(.P.F.r.X.\|,2....wJI7t. tu.."....v(L%.I..y=Q...5.{.JI..a._...<.<; ....\|.RH...xz..yUA$..........4."4U-..........Y^.tUl..~....F...~.s..q.S....._O..Gs.b..(.)t.-..{z.G...6.....\|).7....^.q.#..H;...LN.>I...Lz..B...3-\&...EZT...GA..,..O.....E....A.?.S26..>{qdG.-..Y.\........%Q. ..B.........Qd.q>^......y.....T...WE....b.....K..b3/.A^B.l.o..(..c..k../....e.k...a.VD..\|.....C1W!m.X.2{.....i.=B]..X....F\|6....4.....v.Fu>%..tvt....t7}..u'...3..l..3N...'

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	downloaded
Size (bytes):	4929
Entropy (8bit):	5.22906801638596
Encrypted:	false
SSDEEP:	96:Qy7own//2LPNuNkvyBaIQHgHVUT0T/V3Ejo85y8BI6H:N7oEWrNuNkvyBkgYU3Ko85JBHH
MD5:	761E2756BA190AE948CDCB431D1FAF03
SHA1:	171C31E1DC6E28953234FD5FE88BFA1AE6D21952
SHA-256:	F40B18BFAE3D5A5EDA04C7C61B0CB78E0F721E9834311ADAB8471CF01EFD644B
SHA-512:	0F0352E2BE7273E27F7E1B5322C5EF95BAAEA25CC4F380A0974FA2FE1B1D8798A5DDECC13B35FFEABEAB225471FE9D4A3A002BE156F1AF4FA05821BBA3589BB3
Malicious:	false
URL:	https://js.pusher.com/3.0.0/xhr.min.js
Preview:	/!. Pusher JavaScript Library v3.0.0. * http://pusher.com/. . Copyright 2014, Pusher. * Released under the MIT licence.. */..(function(){function c(b,a,c){Pusher.EventsDispatcher.call(this);this.hooks=b;this.method=a;this.url=c}var a=c.prototype;Pusher.Util.extend(a,Pusher.EventsDispatcher.prototype);a.start=function(a){var d=this;d.position=0;d.xhr=d.hooks.getRequest(d);d.unloader=function(){d.close()};Pusher.Util.addWindowListener("unload",d.unloader);d.xhr.open(d.method,d.url,!0);d.xhr.send(a)};a.close=function(){this.unloader&&(Pusher.Util.removeWindowListener("unload",this.unloader),this.unloader=null);this.xhr&&(this.hooks.abortRequest(this.xhr),.this.xhr=null)};a.onChunk=function(a,d){for(;;){var c=this.advanceBuffer(d);if(c)this.emit("chunk",{status:a,data:c});else break}this.isBufferTooLong(d)&&this.emit("buffer_too_long")};a.advanceBuffer=function(a){a=a.slice(this.position);var d=a.indexOf("\n");return-1!==d?(this.position+=d+1,a.slice(0,d)):null};a.isBufferTooLong=fun

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 146973
Category:	dropped
Size (bytes):	123155
Entropy (8bit):	7.997536971438157
Encrypted:	true
SSDEEP:	3072:ItDM4DB4O8nN6o+2XzqHrqlh7qnEeXa+uyGcgcLN:ItH94Bco+2XzqHGOnEeq+LGcgi
MD5:	406812922DECFB2E52314C5F2B01279E
SHA1:	7A6AF5AF24051145E881DB06B83F7B699F0E64E9
SHA-256:	9A7E7FF595DE49EF49F037633C1F9E9C29215BF22E18AEAF6604CA5A25D1F8B5
SHA-512:	3507127925720AD6E3EAAEFD2FE23E8FCA347849F9808BA86534CCC78D195342A480C29C0FFFBA187663D1A647E74F3B47BFB8064FCE16B310002667C6597D3F
Malicious:	false
Preview:	............[TI.>..."f..Q.@..De..q."I$I@.Q."(..3..H..DrN.Y...2d.%g..}.u?./...<...:.tWW.u.].g...Km.zp+...v...hh................+......_..b%.hh.....Sv.........g.L>~.f..b..m....>m....._...7.4.......U.vK).......{....3J.w....?.3..8....>....l.W...O{t..77]b\|.n........\|....u...;&.J4...&.6..._.......v.......a._.......c.[...?%\|n'...........>..._".?..g...m.M....6..&.?6)....a_,.............."...XLR.6.3G.rawj>z..qU.N..'.z.\.T.A.a.......Hv.v....._.2..".crB..?.e..{.....e.D...?Z^....,.q.#I!...^..?uFM.o..J..i.{.y..\..F_.".x.V....m...]0.p.0..Q..9I...S.2j7]3.;........[)4..zWG..x\|1K..a.f2...4...nd6.....q9..u.`.Ru..U.p..C...Ou...9.R..Wv.7.s...N$....P....s4'J../.i.4.g.hMw.....E.I.J.8.v.f..N....\|...x.W)..PrB.J~_<......i'...y.....Q.#.CO...i8I.7.....9..h}.....3./O....}...4.==.._......B.....!I..t...#=.;...Jp...X.&.c...k...ic..-...4.%[Pp\|b.......2.'.t..#..U...q......97.9...2..`oW........4.C6.n.....?...j%O\....Y..f.)k.b_.u.{B..hFA.T....8..M.N.I.%.l....=(=.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	474
Entropy (8bit):	4.435295901095557
Encrypted:	false
SSDEEP:	6:YGELOs2qDAfKBCE/TEPCGnN7hHc0Rgmc5Jw13H7PTfgV8TMTrlkVNxBzWQdILsp9:YGPMBCE4Ll3drPzHTMgb6QycnGZLbkn
MD5:	9BDBC44392DB31DED05237A073D884D8
SHA1:	0DF528202534C34A6FF7875AA03CB6C98A76B178
SHA-256:	C01630A110E52645AA9771F1AC75DBCED93648487603F1F7AC3CF54F64D9D48F
SHA-512:	D8CE3AB31140174D8DA568A6FFB6C8F8C561A0067C778A7187A36F494F141198F220A49D7D9866E1476DCC3BB731EB295F2221A5098515FD3E1320E00EE2843D
Malicious:	false
Preview:	{"canaryPercentage":0,"deployedRevisions":["4b9a5a2ae33c52af3f7c93bb2ee9a461aa4a1c8c","04c13ab290f73533d3e9919307bd8ff46067660a","796a7b92dfbb920cceb8b4b9098b99cd513a500f","e25a5a3ec486d5727aa81ab74ea2f6667311d1f0","3f095d067774d297e1e25a51d95058e60ea983c3","9522289a77d970b418612405c419595528920642","5a8597112fd1433af4f877a275b05ecb8773270b","ce98fca02b96347697893fd4cb8d9ad2ddb3d04a","d7f2cc0ba151ba33f6059eed7b217624bfd1b44d","553bf605c2aaee3a16ee2f4f8391c41a0b85c60c"]}

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	941993
Entropy (8bit):	5.570139547356164
Encrypted:	false
SSDEEP:	12288:C9mD6xlBlj8IRPCjUYp/BvfNwtjBCuEU+7cUMR:Coe382AvfO6uH+yR
MD5:	EBBF36FC6D459BB3AD1F2AD4904B7DDF
SHA1:	47842B85940F6CD7CD8DF2E4192DE1257B49A8DB
SHA-256:	D57EF58A6FBE42287AE7ADD28A3F9F4768DC79BDED20640D4A7DFD7DF8E7F2B2
SHA-512:	5DFF8B311BB08B2D7B6EB7BFAA625BC3922804DC93C5825E1CCA7F7EA33FF09D668A971CAD86424D925EB5D99F57581405702C12360E817761AB1013E7DAECCC
Malicious:	false
Preview:	!function(){function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return a[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var i=typeof n;if("string"===i\|\|"number"===i)e.push(n);else if(Array.isArray(n)&&n.length){var o=r.apply(null,n);o&&e.push(o)}else if("object"===i)for(var s in n)a.call(n,s)&&n[s]&&e.push(s)}}return e.join(" ")}var a={}.hasOwnProperty;e.exports?(r.default=r,e.exports=r):void 0===(n=function(){return r}.apply(t,[]))\|\|(e.exports=n)}()},62322:function(e,t,n){e.exports=n.p+"fingerprinted/data/countryRanges-da252f255fed0fefce3e3b3c60707e3d.json"},8464:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_ar-7995ee218dfd37546f754bd73b67e2cc.json"},90342:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_bg-c9f7496faecf6cafdeb3cf831b179cc8.json"},32726:function(e,t,n){e.exports=n.p+"f

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	176
Entropy (8bit):	5.0830039192559076
Encrypted:	false
SSDEEP:	3:jTqN/AS3OYNR2XU4sDOYNR2XU4HcRNqUBQEfDebYs1DdLM1BG/YfQRcJT6R7Yme:O33jaEDjaPcrqUmZZdLM1k/IH+R2
MD5:	96F5B26D366F47393B3FF36FE7471474
SHA1:	6CAA14FF7E3692BEB752734C28CBEA160C113B7A
SHA-256:	07B6B3D899DD69C0E9EB463E23E10E30E82588EDDF95D15D45BB505C6703A813
SHA-512:	970801461D6E12D7C14752B7844F1C0347650897A8C9C1540BD0CE49CABCFBF760A9B6B891DA828537F6AD49099608F205E5D47149CB71043DC9915E215E8574
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/trusted-types-checker-efd8cf45ce422659c098993bfc62531b.js
Preview:	"use strict";(window.webpackChunkStripeJSouter=window.webpackChunkStripeJSouter\|\|[]).push([[913],{9554:function(e,n,r){r.r(n),r.d(n,{loaded:function(){return t}});var t=!0}}]);

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	485590
Entropy (8bit):	5.343744004704319
Encrypted:	false
SSDEEP:	6144:X3hDqNgI6i/2AT7MxJ0+UofYoRVffcK+2lrRlUisA7ut1I:X3MMATO2ofYoRVffcK7l1lUL1I
MD5:	FC04FEB50D7C22254C1CA4114D570BDE
SHA1:	75FF255A3B74233B1B70D28A1AD2CECD6EA97E99
SHA-256:	7B941CC85F154EC31670A048A0A5A23E3DE36C81472D868D3411327913C04147
SHA-512:	418241C1B187964C5718740AFB249CB6207B92DCEB2A0634E59DC7994F185EB499DD67C167023F42FC247620DF8CCBB68CC65A2EF8391E4C9B7DAE757D324513
Malicious:	false
Preview:	(window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[7035],{94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var i=typeof n;if("string"===i\|\|"number"===i)e.push(n);else if(Array.isArray(n)&&n.length){var o=r.apply(null,n);o&&e.push(o)}else if("object"===i)for(var s in n)a.call(n,s)&&n[s]&&e.push(s)}}return e.join(" ")}var a={}.hasOwnProperty;e.exports?(r.default=r,e.exports=r):void 0===(n=function(){return r}.apply(t,[]))\|\|(e.exports=n)}()},42402:function(e,t){!function(n){if("object"==typeof t&&void 0!==e)e.exports=n();else if("function"==typeof define&&define.amd)define([],n);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).cssFontFaceSrc=n()}}((function(){return function e(t,n,r){function a(o,s){if(!n[o]){if(!t[o]){var l="function"==typeof require&&require;if(!s&&l)return l(o,!0);if(i)return i(o,!0);var u=new Error("C

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25701), with no line terminators
Category:	dropped
Size (bytes):	25703
Entropy (8bit):	4.76132914733528
Encrypted:	false
SSDEEP:	384:rdq2te24z8VEB4yCSVYC+tQ52PX2NT91z:pe24z8V24R+3z52PXyz
MD5:	EF48436BF7997A9FED0856CD3DF28C0F
SHA1:	413D809A8680F59BC72EE16FB46DF88350055C67
SHA-256:	B87B92CD9B2943BCC97A64011EB833EF4205009327EAFFE17DB1CD001AE9ECC8
SHA-512:	2D6E1AB2EDCDE2B0CC74C0CB9FAE9D115E01561A4F7B17939E8B40C0260F6B00D8A14CBD90C38AC0ECD13A4E8BDBA63AB88ED42B0E1A61C9A8B215B57979A063
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9393],{46933:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_framework.answerBot.article.feedback.no.reason.title":"Please tell us why.","embeddable_framework.answerBot.article.feedback.no.reason.unrelated":"It\'s not related to my question","embeddable_framework.answerBot.article.feedback.title":"Does this article answer your question?","embeddable_framework.answerBot.article.feedback.yes":"Yes","embeddable_framework.answerBot.bot.name":"Answer Bot","embeddable_framework.answerBot.button.get_in_touch":"Get in touch","embeddable_framework.answerBot.contextualResults.intro.many_articles":"Here are some top suggestions f

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 71896
Category:	downloaded
Size (bytes):	71903
Entropy (8bit):	7.996861667711125
Encrypted:	true
SSDEEP:	1536:iA4xrPyfyQCsyz2wCLYfhO/ORzc7Grabg5Z0jUOVw:i3jayQC/2fOI/gcK+bg5CjUZ
MD5:	FDB27BEA67684FC5BE173E888C5F403D
SHA1:	69679EE2535085BD96B6C2448793D4BA35E24DD5
SHA-256:	1A4C47B27CB872BB2F722235139AF8B1DD2CFD4FA0C542114EF1BF34012F0D2D
SHA-512:	21D0113B28A2574FF1FEDBA3EB092DE41290E5363357E38B7BCC32570111DE94E847224DE782CD4410D88CED58B5A1746D1B67272910B29908EA277A9B0CFD0E
Malicious:	false
URL:	https://patient.inboxhealth.com/fonts/fontawesome-webfont.woff2?v=4.6.3
Preview:	...........%@.wOF2..............T....y........................?FFTM.. .`........P..K.6.$........ ..\|..L?webf.[8....m;.t.........c6.....>.S.8.{...]?....?=i..%...P......f85J.0..u....f...eB.\...E.l.....Aw..6...f..F...0l...M.`;i.O.U....k."=........./6../eX.q..vf{].-.o,.5.&.}.L..:...0.{.e..V3~....1Mh.M4:9jG..B......K...Y..2c.=..@..V+..=.g.;..%.q,..sYF.oj..D..t....wZ1t.S\...L.....k(...1CK.z.Z!.iM....zH.....D[gcN........E.~.j.VD..[../..TD..........<@.j.cl...}.s.g4...F.f.F..;...H...E...P.#I..1{..X....]..ps.........^(.S........N...1S.....$@..T.\..k"G". V.Z..gf?.{..D..8f............9....g.i.\..... .".u^.+....%...u.S...!.J.Y5.{k..j..J.....i....!..t."...v...C..0...p..as..g.3.....~3/.3.<s.....K...u..t.n.......tS.\|..].~..I* ...I......7y..EL@.B.%....TTT.zu\.....eb.bM..-f.?.... .Os$/.Y....u..7..F.Q5.F..........%.......b`...o....o....c...t..@7..{HK...P..9..(.[..&&..{...W.0e.....8.v.h.a..-..%./..wgg.\|.\E.x.^;H...D..(.J&......D.mo}..0.i...g#.i{....4.3f.;.m..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65495), with no line terminators
Category:	downloaded
Size (bytes):	154070
Entropy (8bit):	5.575744078145646
Encrypted:	false
SSDEEP:	1536:4WldeROe0tNo455wjfSgQP/vHLGQPRDY1eMR45REmSRD63cnWNkGXXtQsIgQlSfe:4ydwOe03o4PwjCVYYM4NLMq31QlSG
MD5:	923076FD2B6FEFB66FA5480A11AC28D2
SHA1:	421C03D9AF5775C17897FB545FC147678711442C
SHA-256:	03149356C945F58150E4205B34572B5160BE326D8E595D1D165143A48C01092D
SHA-512:	A0A5A88ED84651B9A0CDD9E998688D0E59AF6C3C0A088B24C1E1F98B0F0F1F68E3E8B0D6474EE96CD06ACBC668EFA37B917361FE96166AC8D2DE3F2E92DD982B
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/phone-numbers-lib-2e4b163cc1a1989623e99b9224e9eda8.js
Preview:	"use strict";(window.webpackChunkStripeJSouter=window.webpackChunkStripeJSouter\|\|[]).push([[944],{3799:function(t,e,d){function n(t,e){var d=Array.prototype.slice.call(e);return d.push(te),t.apply(this,d)}function r(t,e){t=t.split("-"),e=e.split("-");for(var d=t[0].split("."),n=e[0].split("."),r=0;r<3;r++){var a=Number(d[r]),i=Number(n[r]);if(a>i)return 1;if(i>a)return-1;if(!isNaN(a)&&isNaN(i))return 1;if(isNaN(a)&&!isNaN(i))return-1}return t[1]&&e[1]?t[1]>e[1]?1:t[1]<e[1]?-1:0:!t[1]&&e[1]?1:t[1]&&!e[1]?-1:0}function a(t){return null!=t&&t.constructor===ee}function i(t){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},i(t)}function o(t,e){for(var d=0;d<e.length;d++){var n=e[d];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(t,n.key,n)}}function $(t,e,d){return e&&o(t.prototype

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	dropped
Size (bytes):	222450
Entropy (8bit):	5.372939863161049
Encrypted:	false
SSDEEP:	3072:cU6aSVVQMvSzBtSamlYBxeUE6uHhLQFiRYjbgl:cU6zVQMvStINYBxeUaBUFeYjbgl
MD5:	08A68A7308737A004B2991AA3DD00688
SHA1:	40FE1DDF2616C7017F645C08BC6CAB484D082A4B
SHA-256:	F33C7BD75E8107B0E2C531D98AF84D90780D913F9246E796EA633D948D91F709
SHA-512:	0260828F2D4264750136818334D8B4D890F2D43ECE9844AED118667E8C8B999D83060A6BB0DA7D24554A6E98A751CE007ADE294C81B528C982662234EB027AFD
Malicious:	false
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9758],{47154:e=>{var t;window,t=function(){return function(e){var t={};function r(o){if(t[o])return t[o].exports;var n=t[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,r),n.l=!0,n.exports}return r.m=e,r.c=t,r.d=function(e,t,o){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(r.r(o),Object.defineProperty(o,"default",{enume

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14142), with no line terminators
Category:	downloaded
Size (bytes):	14142
Entropy (8bit):	5.082480491761527
Encrypted:	false
SSDEEP:	384:jQlBPennHrZkuOUOUuvAKNgVPBp2cZ/QerfVnr5d+l6vh0Wfq8b:MlBPterfpQ6p0Wfq8b
MD5:	87BF0041CF7AE5E77D770C423E25828A
SHA1:	D298271C2A9A0E00E57A4D8F69CF8E2AC27430E4
SHA-256:	EAC1BB2890C6AE6D2CC8653765F594F1209EDA9EB0036EEF9FDE51299E883A5B
SHA-512:	ECD86EBE54A56FEE7EE2097F37A5D5D4B03F8CF519AF748B5B09379BD26D4A98F2F0DC4CAABF894BD8684705DBCE7B08B8A9673B73C71407E297DEDACE9C9771
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/css/elements-inner-card-53aa57bec7f6d40d72327654fd43a92e.css
Preview:	.CardBrandIcon-container{height:100%;position:absolute;top:0;width:2em}.CardBrandIcon-container.is-cbc-eligible{width:2.75em}.CardBrandIcon-wrapper{display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;height:100%;-webkit-perspective:1000px;perspective:1000px;position:relative;text-align:center}.is-link-manage .CardBrandIcon-wrapper{opacity:0;pointer-events:none;-webkit-transform:translateX(4px);-ms-transform:translateX(4px);transform:translateX(4px);transition:opacity .6s cubic-bezier(.19,1,.22,1),-webkit-transform .6s cubic-bezier(.19,1,.22,1);transition:opacity .6s cubic-bezier(.19,1,.22,1),transform .6s cubic-bezier(.19,1,.22,1);transition:opacity .6s cubic-bezier(.19,1,.22,1),transform .6s cubic-bezier(.19,1,.22,1),-webkit-transform .6s cubic-bezier(.19,1,.22,1);transition-delay:.18s}.is-link-manage.previous-link-save .CardBrandIcon-wrapper{transition-delay:.74s}.is-link-manage.previous-link-use .CardBrandIcon-wr

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	820148
Entropy (8bit):	5.5596427868827325
Encrypted:	false
SSDEEP:	12288:QMJXB8rmutNLaCxpfDEYVZ9fxBqoO9eg4RLZ:QUBCmurLOk9fxBqoOj4RLZ
MD5:	15652D8DB6EFED067703B4B5415DB938
SHA1:	66976B6D0E1DF64BD3B09D85D2B29C6F1C025F87
SHA-256:	9F1CA438068DA2D4B854164EC4C263F1576398458A0D5EC9DA1D1C9E095D131A
SHA-512:	17EDFA3E1E1F7B0020FB3373133C6B4F3A47530A4CF7C98B5178734AC55B706A0A08EBB1531780F2C1C56B073D2523079E52D18981352894E79291BCB1486586
Malicious:	false
URL:	https://js.stripe.com/v3/fingerprinted/js/link-modal-inner-ed83c1976ac2b7b2ceab9468304dea5f.js
Preview:	!function(){function e(t){var n=c[t];if(void 0!==n)return n.exports;var r=c[t]={id:t,loaded:!1,exports:{}};return s[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,i,a,o,u,s={58594:function(e,t,n){"use strict";n.d(t,{Z:function(){return i}});var r=/^((children\|dangerouslySetInnerHTML\|key\|ref\|autoFocus\|defaultValue\|defaultChecked\|innerHTML\|suppressContentEditableWarning\|suppressHydrationWarning\|valueLink\|accept\|acceptCharset\|accessKey\|action\|allow\|allowUserMedia\|allowPaymentRequest\|allowFullScreen\|allowTransparency\|alt\|async\|autoComplete\|autoPlay\|capture\|cellPadding\|cellSpacing\|challenge\|charSet\|checked\|cite\|classID\|className\|cols\|colSpan\|content\|contentEditable\|contextMenu\|controls\|controlsList\|coords\|crossOrigin\|data\|dateTime\|decoding\|default\|defer\|dir\|disabled\|disablePictureInPicture\|download\|draggable\|encType\|form\|formAction\|formEncType\|formMethod\|formNoValidate\|formTarget\|frameBorder\|headers\|height\|hidden\|high\|href\|hrefLang\|htmlFor\|httpEquiv\|id\|inputMode\|integrity\|is\|keyParams\|ke

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	dropped
Size (bytes):	228108
Entropy (8bit):	5.3784027540572374
Encrypted:	false
SSDEEP:	1536:9wovhwvwV3sMwH+0G+ZBTr9ix6HeTX0XLDDDbGw5wyPGbFkKvyraIG+UNM3VBYG3:RhwvwV8Mw9ZXixontAFkqoRUytxYScY7
MD5:	51F0735CF6390AF81E4CB97C3CDE2CB7
SHA1:	1AC0468686527BE09E1A93E684DA7CC13FA179AE
SHA-256:	E38338484D969872E570A554C807DAB4A79233B82D64A7CB7028FB459123D44A
SHA-512:	850579DFD382F8C7071E614682CFC35EE38BBEA3A6515337B8A01D21C2AA23E36801CBF1F52F8701C15214D59CF18FE6C19880FC8517F52158F37A5A95AC848A
Malicious:	false
Preview:	/! For license information please see modules.60031afbf51fb3e88a5b.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39124, version 1.0
Category:	downloaded
Size (bytes):	39124
Entropy (8bit):	7.994814808109655
Encrypted:	true
SSDEEP:	768:usTP6aNC1fdVoOCiqMR4+H42dLoPZsn578cLtxtQcvA7mQ7RHl:usTS/eDgR4u4IM+TJvUqQ7
MD5:	86B73AB5F530BE7984B704414F2A711D
SHA1:	8E297794ED7B6F5EA476D14B5270DF12E8F3E42A
SHA-256:	1A48B70F97555C13F84B8F088A417F9179D99B5101250819350ACAF6E91BB92F
SHA-512:	468F8D4AE9419CACDF913FBA2DA37055E3469D935D7B7B362717CF17D2C4C27882EA3BB34510273312DD80DC2DEA05775CE65BC3F9D1048F50AAD4B27E8188AC
Malicious:	false
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
Preview:	wOF2..............R...._.............................d...?HVAR.X.`?STAT.'2..2/t........J..L.0...6.$.... .....%..[.;Q#...K.!.tU...<..ap...............f.....%q.H..n?(.3k.i..=..@.H..".&1..3+i...(..B.....)........P-.7........d. 5.:..\\E.x;).6.T..HXx...g...1.\|yV.....U.....$.d!XH.]..4.U..,.....N....4...[._.i...k [.......=....Y@..vB..;.z...\.T\|$..(....?..dp..'...j.....l.-3...`.....{D. ....&.3<?...m.FM#&..jc.7.$m.z.'zP.6.&...3a.q..6as6f..ns..a5.F..J.Y5.HlD.."./...F.,D.w...J.....R^.C..=.....i.............s..d5.HLDv..o`..K..?...=...-../....Z.n..]...........~.MK.Y_....T..5...D..).....O...B'..iP.M.@k .H.z2..........o?.B..zk4z.......HGz......-.....G.:(..2.......oN_tg.zB=c.;. * _.]........`.J.^O...\2xiq...U..''.\......d....#....I:..W&..J..W.0W."....{..#.?z...V...T...j]..>.9...^......v..+m.G..{j.h...R.P..H.@.z.85(...F.. (..K.@.&i.6..H....J;...1....1..u.{..[.IU..DQ.w/............O.f.l..6..?.d....Qk_.eLE..my.A.`.U...`f.\AX"..3..'m..O.....Q.j....4-...............ml

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.98273524601527
Encrypted:	false
SSDEEP:	3:mStXxICkuDM0KthLg5dEkkUCGXSNrkn/:mSt5kuEtphrkn/
MD5:	BAF04D4B27A1B46019ACC30B8CB91532
SHA1:	8FD9ED62FA5D3361627F92E4DBDFF01C149892F0
SHA-256:	CC48AD88FEFEC338525962342711882B362CBBA07D3D63F09555B6A26F8C9382
SHA-512:	70A3195336F776F04ADBF1844B458F26A1519D24F668A3D877AA4306AB4C02BC408CC56B6DCA6052EA5D232B5417CC60C729F07788BEC297FA79C55E6033C331
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgnRD8HO7NP6qRIFDZfEWO8SBQ1TWkfFEgUNvyRSkBIQCYgHX9bsecQ5EgUNl8RY7xIXCaRIN1-7bv-bEgUNU1pHxRIFDb8kUpA=?alt=proto
Preview:	ChsKBw2XxFjvGgAKBw1TWkfFGgAKBw2/JFKQGgAKCQoHDZfEWO8aAAoSCgcNU1pHxRoACgcNvyRSkBoA

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (832), with no line terminators
Category:	downloaded
Size (bytes):	832
Entropy (8bit):	5.2172905376547
Encrypted:	false
SSDEEP:	24:NAlW31AQCZ5ojW3JtmSsbZ9g+dJVpAQPqk1b:NukbjKmSsV91HVp5p
MD5:	10FCD704DDF076EB6539C2C6C2654B43
SHA1:	356AA99997802F72A4D8BB0726A46BF28EB66E57
SHA-256:	E93FDC05889493030CB3BDF1AC4B05178FA696FB54ECE6F94FAA4B3F37C30330
SHA-512:	F229BED7E321AFFB1C11C9808E3D1A7F79303449BAC4FB72B9B6E2937CF699D25EEDEEAEF4103F3CD84229D8AA01E51D25AD6382EF6F0CF0DDF0418B41DAC768
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISsQEJ_wrDbHUzOwYSBQ0gIiIdEgUNlJCS-hIFDU8IXVMSBQ1IqWunEgUNgWKwehIFDWrIIzYSBQ0gIiIdEgUNkWGVThIFDSAiIh0SBQ09XxGpEgUNICIiHRIFDZFhlU4SBQ0gIiIdEgUNzPF0TxIFDU8IXVMSBQ0gIiIdEgUNkWGVThIFDclpLy4SBQ3ZV-r1EgUNgr71XBIFDaB52aYSBQ1GZxV9EgUNVbv1bxIFDWOu7SESOgm2fWrUuAA8wBIFDSAiIh0SBQ2UkJL6EgUNTwhdUxIFDUipa6cSBQ2BYrB6EgUNasgjNhIFDSAiIh0STwkh5IOa7GvRvRIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDclpLy4SBQ3ZV-r1EgUNgr71XBIFDaB52aYSBQ1GZxV9EgUNVbv1bxIFDWOu7SESHglBmYdk0ypaRRIFDSAiIh0SBQ09XxGpEgUNICIiHRIlCYcdCUfN9_IEEgUNICIiHRIFDczxdE8SBQ1PCF1TEgUNICIiHQ==?alt=proto
Preview:	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

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	709604
Entropy (8bit):	5.380918238787942
Encrypted:	false
SSDEEP:	12288:I2nsWW3gh/CmxoBLVsumKCBXtD+Pv1hiWMtOSApcVdS3ni78xXTdrvuLeeM7L8Lg:7wm0S7aOtvM
MD5:	7C5CEC529D347475DA54B5520C3A5D36
SHA1:	01276D1237DB31A86B59A7B932D536FB78FA95B2
SHA-256:	F4BB1B1D0747257963737A62B82537A18FD5AED5C475301044C86C948CAABFA9
SHA-512:	CE4F823585A6B78787E00ACD546195D14C60B651D1DF61FA5E4FA00068C7AECFB15B0DBD34D5F5D0EB4F73288CB9A7FA200AA736892AEAC6C1EA2A8744685BB4
Malicious:	false
URL:	https://js.stripe.com/v3/
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function o(){for(;d<l.length;){var e=d;if(d+=1,l[e].call(),d>1024){for(var t=0,n=l.length-d;t<n;t++)l[t]=l[t+d];l.length-=d,d=0}}l.length=0,d=0,!1}function i(e){return function(){function t(){clearTimeout(n),clearInterval(r),e()}var n=setTimeout(t,0),r=setInterval(t,50)}}e.exports=r;var a,c,s,u,l=[],d=0,p=void 0!==n.g?n.g:self,m=p.MutationObserver\|\|p.WebKitMutationObserver;"function"==typeof m?(c=1,s=new m(o),u=document.createTextNode(""),s.observe(u,{characterData:!0}),a=function(){c=-c,u.data=c}):a=i(o),r.requestFlush=a,r.makeRequestCallFromTimer=i},5937:function(e,t,n){e.exports=n.p+"fingerprinted/img/abnamro-4445e65420800f96f68cfc67a273f66b.svg"},1520:function(e,t,n){e.exports=n.p+"fingerprinted/img/asn-3d9b1bbff2f8f12105510992dbb37ae8.svg

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56584), with no line terminators
Category:	dropped
Size (bytes):	56584
Entropy (8bit):	5.506263349301995
Encrypted:	false
SSDEEP:	768:PyoDElkLZEdp5lAgswCqlRMEGC0M1oX7F3yOl1jl19lgOR:qoDElkOdhmyRGC4/Blt
MD5:	16553965860C27FAF04865C26BD8D33F
SHA1:	2544D28F31F4387D8EC1EBB38C066C49B97CBD59
SHA-256:	98DC72A0432F0E1A6AC3F4C8FD6D9E5800E094BF7659DAC65AD6A405A7B8A4AE
SHA-512:	D59D220F6D833DE31F2DEFE685241792129EBDC05A44C4BD9F6C0FDD941691D6B0F56ED858BFF509415D9C3785DB4CD1A46A4D4CA4AE27B76DAC80B64D40442D
Malicious:	false
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var r=o[t]={id:t,loaded:!1,exports:{}};return a[t].call(r.exports,r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={14657:function(e,t,n){e.exports=n.p+"fingerprinted/img/amex-a49b82f46c5cd6a96a6e418a6ca1717c.svg"},86520:function(e,t,n){e.exports=n.p+"fingerprinted/img/cartes_bancaires-4f58478f31a1195d2dee740e3a2d632a.svg"},5167:function(e,t,n){e.exports=n.p+"fingerprinted/img/diners-fbcbd3360f8e3f629cdaa80e93abdb8b.svg"},15972:function(e,t,n){e.exports=n.p+"fingerprinted/img/discover-ac52cd46f89fa40a29a0bfb954e33173.svg"},54504:function(e,t,n){e.exports=n.p+"fingerprinted/img/elo-efe873e884e6c9eb817f23a120caaa3e.svg"},75979:function(e,t,n){e.exports=n.p+"fingerprinted/img/jcb-271fd06e6e7a2c52692ffa91a95fb64f.svg"},53022:function(e,t,n){e.exports=n.p+"fingerprinted/img/mastercard-4d8844094130711885b5e41b28c9848f.svg"},2919:function(e,t,n){e.exports=n.p+"fingerprinted/img/unionpay-8a10aefc7295216c338ba4e1224627a1.svg"},

Static File Info

General

File type:	RFC 822 mail, Unicode text, UTF-8 text, with very long lines (1496), with CRLF line terminators
Entropy (8bit):	6.139964651060123
TrID:	E-Mail message (Var. 5) (54515/1) 100.00%
File name:	phish_alert_iocp_v1.10.16(15).eml
File size:	99'636 bytes
MD5:	7fe29b96b1c269607270438c42e9ea71
SHA1:	679cff68089ee14541efcdb658ecacb185705940
SHA256:	3c5b3c7a79a23f9476180c097b8e9f8543eacb120ca964dfbb4fa159fba56739
SHA512:	c5db45fc53cb58eb8ff82c73b41659ad89910d0960bb6bddd94d47d099e9ea63b6a08f3e55670245ea58f2fc76e9f6fdee8b700fab47a63a4badf975d3badefb
SSDEEP:	3072:KHbGQjoE5z+nxGlMxngbKZ+JGLJPm82UR:K7GQjoE5z+nxuMxsKZWG12M
TLSH:	A2A3E1B343833182493308A5F904FDE5AE3606175505D899B2AC22F57BFDD3EA6372E9
File Content Preview:	Received: from Mars.usurf.usu.edu (172.31.35.122) by Mars.usurf.usu.edu.. (172.31.35.122) with Microsoft SMTP Server (version=TLS1_2,.. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.39 via Mailbox.. Transport; Fri, 20 Dec 2024 09:11:24 -0700.

Static Mail

General

Subject:	Hi John, please let us know if you have any questions on your statement from Foot & Ankle Center of Cache Valley and the Wind Clinic.
From:	Foot Ankle Center of Cache Valley and the Wind Clinic <customerservice@chat.inboxhealth.com>
To:	john.weaver@sdl.usu.edu
Cc:
BCC:
Date:	Fri, 20 Dec 2024 16:11:16 +0000
Communications:	Your statement from Foot & Ankle Center of Cache Valley and the Wind Clinic Hi John, Your statement from Foot & Ankle Center of Cache Valley and the Wind Clinic is ready for review. Click the button below to view your statement and make payments. In order to access your statement details, you'll need to verify your date of birth. Account number: 36304491 Access code: XHcUtg Chart ID: 8243 Your current balance is $60 Reply to this email and our billing support team will assist you. Click here to pay <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt> This email was sent via Inbox Health on behalf of your provider. <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-047d42c05b5228b2&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxczE9PgzAUAPBPQ4-kf2CFwzu4mMWYmGC2OOeFlL5HWgWKpQy3T-_VeP_lh9D1lZCMQGhVaCG41syB0rwWXaGrXVkKwppsTVgSr5BzQt4zD6_NZf-y8fePx3vTSOsuWJ73p7g0z7fjPIZvVan57el8xLvNCu6nLvw4MkNyuQ0jG8ClNC-ZesjkIZOHbdvy_2YKyffemuTD1HoEXSipK7FjET6Dm_KNzJViVvAFh3xd1pxwZQlmkzxNqV3WcTTx1v5tWIrGfpluIDjFldgV5G8AAAD__-32Vng> <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-43b22cc641e6376e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxMzLtuqzAcgPGnsUfkW2IYPJzoCKWVKlElapouyJc_shvA1JjQ5OmrdOr-_T6nTFdShkFRyYWklEiJvXKUGCrB0spuO9iIkpZcGCoJrypNiMVBvTbn3ctK3j_-35uGWX92m9PumObm-XaYhvjFSz697U8Hd7dIkDCa-O1B99kXNg64Vz7naUb8H2I1YvW6rkWnLZgYL48AsfrpQfa_BI8xhy5YnUMc2-CUFJzJkm5xUp_Rj8UK-goJCTK7vljmpQC34KwmnQOMuZ2XYdDp1v7d4Jy0vWjTgzqmBfBVsZ8AAAD__y65WZ0> <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-694355a267dabf82&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxMzEFPwyAYgOFfA8emQFfYgYOLaYyJSc0W57wsX-FrwLVQKV3dfr3xtvv7PlZ3vWKcomZSVJKxUkrqtOorhr3ZbmuUdW_LWgEKsF2NisNGdtTr9_a0e1vLz6_ne9ty4052c9wd0ty-3vbTGH-EEtPHy3Fv74ZUpQ9d_HUIQ3aFiSMdtMt5mol4IrwhvFnXtRh8uKD14T8gvDFxnCDcCG8eZhpi9r03kH0MZ2-1rASXitU06e_oQrEiXDGRqpztUCzzUqBdaNYTZI8hn-dlHCHdzo8MzQnMBboB9SEtSK-a_wUAAP__2Odekw> <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-3d7e39dd473a4e5a&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxMzE9rwyAYgPFPo8eQqI1ePKyM0A0GGS3rukt482rRLYmZ0f779KM79frw4zG6P6qKUasryYWsqlJK6jQwRLVCxWo0XAk0vQQQNUhZggTDqdfv7WH9di4_v55vbcvQHcxqv97FpX29bucx_HLF54_NfmtuSETppz5cnIUhuQLDSAftUpoXwp8IawhrLvdKWPNyd5t_R6eQ_NEjJB-mzhstBWdSVTWN-ju4qThbONlIRLmYochLLqzJNOkZkrdT6pY8jhCv3eOGpgj4A_1g9S5mS0-a_QUAAP__DTZWOQ> Questions about this statement? Reply to this email and our billing support team will assist you. Foot & Ankle Center of Cache Valley and the Wind Clinic 435 N Gateway Dr Ste. 801 Providence, UT 843329004 Privacy Policy <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-83714a30ad5c5124&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxczMFOwyAYAOCngWMDlA564OBiGmNiUrPFOS8NhX8BbUultNg9vVfj_ctnVX-TlGFQVJRcUEqEwE5Vh0rXouZAelmL2mhTSS6JPYAkVU177NVrez2-ZPL-8XhvW2bc1VaX4zku7fN-msfwXcpyfnu6nOzdIE781IcfB3pIrjBhxINyKc0LKh8QaxBrcs7FP4NYM0e_abPjKSR_80YnH6bOWyV4yYSkBxzVZ3BTkUFvEBEnix2KdVkLsCtOatbJw5S6ZR1HHffub4NT1OZL9wOoc1wBb4r9BgAA___0RFmW> \| Contact Support <mailto:team@inboxhealth.com> Inbox Health 470 James St. Unit 001 New Haven, CT 06513 2024 Inbox Health, Corp. unsubscribe <https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-a2c1fd8d5b9e7fa1&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fu%2FeJwEwLFOwzAQANCvicfocg5NlhuoGBASUlArSlnQ2WfLhjQujt1Cv75PyPixQxXIa8YBBLUfgEEMd9YyoEfQG-gNqkhv03H7eoWPz6fbNKENR3k4bPd5nV7-d-dT-tWjPr8_H3Zys00PcTHpLzieS2htOqklleij5RLT8hWFhl7jMHYblek7haW9Or643PSwytzWtbZOqirU4KMqme0Pm9nRPlenLoT3AAAA___x4jwI> <https://email.chat.inboxhealth.com/o/eJxMzDtOwzAYAODT1GMUv93BS8WAkJCCWlHKEvnxRzYkdnDslvb0rFzg89pOChMEGkvKJMa9lChoBWSSgnAQjE4cU9jv7Z4L4RS30jCLon4bLofXW__x-fQYBuLCxfPz4VS24eV-XJf8QxVd35_PR_9wO9bHZPNvADPX0Lm8oJRrnKIzNeY0Rq8lo0QqLFDRXzmk7gbmCmXH-s3PXdtaB76hqldTI6Q6bm1ZTLmP_xlUi3Hfxs6gT6UBumryFwAA___DNkm_>
Attachments:	enterprise_logo.png

Headers

Key	Value
Received	from chat.inboxhealth.com (ec2-3-138-41-162.us-east-2.compute.amazonaws.com [3.138.41.162]) by c147fc1eb2eb with SMTP id 676597253b3f1281d71dfa6e (version=TLS1.3, cipher=TLS_AES_128_GCM_SHA256); Fri, 20 Dec 2024 16:11:17 GMT
Return-Path	bounce+5f2c40.bf812-john.weaver=sdl.usu.edu@chat.inboxhealth.com
X-FE-ETP-SENDER-IP	204.220.176.203
X-FE-ETP-CONNECTING-IP	204.220.176.203
Authentication-Results	mta-8f063r9.email.us.etp.fireeyegov.com; dmarc=pass (p=quarantine; dis=none) header.from=chat.inboxhealth.com
DKIM-Signature	a=rsa-sha256; v=1; c=relaxed/relaxed; d=chat.inboxhealth.com; q=dns/txt; s=k1; t=1734711077; x=1734718277; h=Content-Transfer-Encoding: Content-Type: Mime-Version: Subject: Subject: Message-ID: To: To: From: From: Date: Sender: Sender: List-Unsubscribe: List-Unsubscribe-Post; bh=Uz5/5vv8uocZNkzeLS5m4ERaNw+jAlPiZJAhTp3njuk=; b=LrmWMPYWsZgO0T6BCfau2EOloRX1kjxxIAM0J6VL3j57j6+7rkDC2ufKAvvodKT+Pm70N89/QJ7LKbPtHzE3lu1UMtes8GhVJNWJo4VqmMnMIlKbiifiQ/49XDv+cLVR4LgV0GkCET4sqfWMTxDsDOinyaaVDstNTqwYxMETE5U=
X-Mailgun-Sending-Ip	204.220.176.203
X-Mailgun-Sending-Ip-Pool-Name
X-Mailgun-Sending-Ip-Pool
X-Mailgun-Sid	WyIyOWE0YyIsImpvaG4ud2VhdmVyQHNkbC51c3UuZWR1IiwiYmY4MTIiXQ==
List-Unsubscribe-Post	List-Unsubscribe=One-Click
List-Unsubscribe	<mailto:u+mq6wezrygezcm2b5gfrtanldgyytsoldgjsggzdfgnrdenzwhbrtey3fg43tayztge2cm2j5kfifsqsno4yfqwsepjifamtdnbmwinkxijkhe42qjj4vg4dnn5ytgobtobleqv2tmr5ggjjugbuw4ytppbugkylmoruc4y3pnutg433unftgsy3boruw63s7nfsd2nzugmzdoobrgytheplkn5ug4ltxmvqxmzlseu2da43enqxhk43vfzswi5jgoq6xaylunfsw45c7on2w23lboj4v63tporuwm2ldmf2gs33oez2heyldnnqwe3dfhvkhe5lfez3d2mq@chat.inboxhealth.com>, <https://email.chat.inboxhealth.com/u/eJxMzD1OwzAUAODT1GPknzROBy8VA0JCCmpFKUvkvPcqGxI7-KelPT0rF_jQTJdeSOaMAL6FTux2IBGQ1CR114ME0pqDEi3z5m04719v_OPz6TEMEtwZt6f9MeXh5X5Yl_ijerW-P58O-IBNy32Y4q8jOxfXQFxYiMVfPNjiYxg9Gt0qqXvRsWS-ogvNjeyV0qblGeem5toQVlbMaounUMZcl8Wm-_ifYSVZ-LbTTOaYKrGrkX8BAAD__49dRzA>
Sender	customerservice@chat.inboxhealth.com
Date	Fri, 20 Dec 2024 16:11:16 +0000
From	Foot Ankle Center of Cache Valley and the Wind Clinic <customerservice@chat.inboxhealth.com>
To	john.weaver@sdl.usu.edu
Message-ID	<QPYBMw0XZDzPP2chYd5WBTrsPJySpmoq383pVHWSdzc@inboxhealth.com>
Subject	Hi John, please let us know if you have any questions on your statement from Foot & Ankle Center of Cache Valley and the Wind Clinic.
Mime-Version	1.0
Content-Transfer-Encoding	7bit
patient-mail-preview-id	12149231
X-Mailgun-Variables	{"notification_id":74327816,"trackable":true}
X-Mailgun-Tag	patient_summary_notification
X-FE-ETP-METADATA	eyAidGlkIjogIjN5V29ZOWQtMjE1NjItMTBnRUQ4QjEyMjEzNjI3OTU2NzYwOTA2ZDMzIiwgImFj Y2VwdGVkX3RpbWVzdGFtcCI6ICIyMDI0MTIyMDE2MTExOCIsICJhY2NlcHRlZF90aW1lc3RhbXBf ZXBvY2giOiAiMTczNDcxMTA3OCIsICJkb21haW5fbmFtZSI6ICJzZGwudXN1LmVkdSIsICJhdHRf Y291bnQiOiAtMiwgInNyY19pcCI6ICIyMDQuMjIwLjE3Ni4yMDMiIH0=
X-MS-Exchange-Organization-Network-Message-Id	bb5f2220-8e18-4357-deda-08dd2110f318
X-ETP-DOMAIN-AUTH-TOKEN	9984c2cf63c88a7575d5d20206f4f57e1d7209445543dca5c97e3f00a2be0ef9
X-MS-Exchange-Organization-AuthSource	morpheus.usurf.usu.edu
X-MS-Exchange-Organization-AuthAs	Anonymous
X-MS-Exchange-Transport-EndToEndLatency	00:00:00.3306676
X-MS-Exchange-Processed-By-BccFoldering	15.01.2507.039
Content-Type	multipart/mixed; boundary="=-1b3HVHBc6cVM9kk2v97VDA=="

File Icon


Icon Hash:	46070c0a8e0c67d6

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T19:03:22.168090+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.16	49727	18.161.111.54	443	TCP
2024-12-20T19:03:25.061155+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.16	49728	52.222.144.12	443	TCP
2024-12-20T19:03:40.285243+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.16	49788	172.217.19.238	443	TCP
2024-12-20T19:03:44.360184+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.16	49807	172.217.19.238	443	TCP
2024-12-20T19:03:53.474963+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.16	49842	172.217.19.238	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 19:02:54.189660072 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 19:02:54.491369963 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 19:02:55.092278004 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 19:02:55.363357067 CET	49673	443	192.168.2.16	204.79.197.203
Dec 20, 2024 19:02:56.304342985 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 19:02:58.661520958 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 19:02:58.709346056 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 19:02:58.962371111 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 19:02:59.577388048 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 19:03:00.789391041 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 19:03:03.203357935 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 19:03:03.522361994 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 19:03:04.966352940 CET	49673	443	192.168.2.16	204.79.197.203
Dec 20, 2024 19:03:08.004371881 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 19:03:13.128415108 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 19:03:14.893857956 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:14.893901110 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:14.894074917 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:14.894342899 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:14.894361019 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:14.894733906 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:14.894778013 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:14.895212889 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:14.895450115 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:14.895467043 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.110002995 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.110414028 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:16.110430002 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.111304998 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.111525059 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:16.113562107 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:16.113632917 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.113758087 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:16.113768101 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.113929033 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.114384890 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:16.114412069 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.115461111 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.115588903 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:16.116410971 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:16.116489887 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.166425943 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:16.166429996 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:16.166450024 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:16.213395119 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:17.524893045 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:17.525002003 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:17.525243044 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:17.525489092 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:17.525517941 CET	443	49722	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:17.525530100 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:17.525604963 CET	49722	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:17.617388010 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 19:03:17.703069925 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:17.703166962 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:17.703269005 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:17.703629971 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:17.703664064 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:18.926162004 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:18.926569939 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:18.926598072 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:18.927587986 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:18.927670956 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:18.928668022 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:18.928725958 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:18.928868055 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:18.971360922 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:18.977478981 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:18.977504969 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:19.025441885 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:19.299180031 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:19.299241066 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:19.299380064 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:19.299649954 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:19.299700022 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:19.367887020 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:19.367978096 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:19.368484974 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:19.369260073 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:19.369292974 CET	443	49725	34.110.180.34	192.168.2.16
Dec 20, 2024 19:03:19.369318008 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:19.369399071 CET	49725	443	192.168.2.16	34.110.180.34
Dec 20, 2024 19:03:19.608082056 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:19.608123064 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:19.608237982 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:19.608464956 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:19.608478069 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:20.995897055 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:20.996217966 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:20.996294022 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:20.997488976 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:20.997581959 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:20.998641014 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:20.998730898 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:21.038403988 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:21.038422108 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:21.086395025 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:21.204197884 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:21.204545021 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:21.204566956 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:21.205611944 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:21.205694914 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:21.206707001 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:21.206775904 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:21.206882954 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:21.251348972 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:21.261383057 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:21.261396885 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:21.309403896 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:22.168126106 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:22.168240070 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:22.168323040 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:22.168714046 CET	49727	443	192.168.2.16	18.161.111.54
Dec 20, 2024 19:03:22.168728113 CET	443	49727	18.161.111.54	192.168.2.16
Dec 20, 2024 19:03:22.418430090 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:22.418482065 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:22.418587923 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:22.418826103 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:22.418843031 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:23.825268030 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:23.825675011 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:23.825701952 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:23.827287912 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:23.827409029 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:23.828440905 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:23.828526974 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:23.828613997 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:23.828622103 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:23.882431984 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.061218977 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.061256886 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.061266899 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.061292887 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.061316013 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.061399937 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.061494112 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.061568022 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.062628984 CET	49728	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.062668085 CET	443	49728	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.088613987 CET	49729	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.088670969 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.088743925 CET	49729	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.089040995 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.089080095 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.089137077 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.089797974 CET	49729	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.089812994 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.091985941 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.092000961 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.093431950 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.093456984 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.093518972 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.093666077 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.093740940 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.093806982 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.093905926 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.093915939 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.094239950 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:25.094268084 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:25.229445934 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:25.229526997 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:25.229604006 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:25.229827881 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:25.229845047 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:25.230451107 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:25.230489016 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:25.230545998 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:25.230706930 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:25.230725050 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:25.271913052 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:25.271954060 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:25.272025108 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:25.272267103 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:25.272279024 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:25.397517920 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:25.397562027 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:25.397665024 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:25.397897959 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:25.397910118 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:25.404861927 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:25.404889107 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:25.404972076 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:25.405234098 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:25.405247927 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:26.443962097 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:26.444300890 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:26.444331884 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:26.445363045 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:26.445427895 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:26.446593046 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:26.446646929 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:26.446784019 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:26.446794987 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:26.460611105 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.460973978 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.461007118 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.462455034 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.462544918 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.463556051 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.463643074 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.463823080 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.463839054 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.496087074 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.496479034 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.496503115 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.496958971 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.497142076 CET	49729	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.497164011 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.497520924 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.497684002 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.497843027 CET	49729	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.497908115 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.497976065 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.498169899 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.498267889 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.498334885 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.498348951 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.498390913 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:26.498440027 CET	49729	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.498513937 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.499609947 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.499676943 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.499919891 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.499927044 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.499984980 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.500113010 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.500127077 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.500166893 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.500176907 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.501127005 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.501200914 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.501601934 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.501663923 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.501693010 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.514404058 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.543330908 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.543332100 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.547322989 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.547355890 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.547359943 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.547364950 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:26.594386101 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:26.613831997 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:26.614146948 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:26.614166975 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:26.614497900 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:26.614559889 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:26.615158081 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:26.615202904 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:26.616120100 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:26.616175890 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:26.616355896 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:26.616362095 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:26.657407045 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:26.961733103 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.961781979 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.961817980 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.961858988 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.961869001 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.961890936 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.961914062 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.961970091 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.962007046 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.962022066 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.969400883 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:26.969758034 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:26.969798088 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:26.970197916 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.970271111 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.970283985 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.970813990 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:26.970885038 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:26.970895052 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:26.970933914 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:26.971848011 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:26.971915960 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:26.972197056 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:26.972206116 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:26.978526115 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.978619099 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.978965044 CET	49735	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:26.978986025 CET	443	49735	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:26.988902092 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:26.989161968 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:26.989180088 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:26.990283012 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:26.990367889 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:26.991398096 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:26.991473913 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:26.991579056 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:26.991588116 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.024418116 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.040433884 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.043593884 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.043741941 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.043764114 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.043797016 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.043807030 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.043819904 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.043869972 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.043883085 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.043922901 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.060496092 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.064614058 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.064706087 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.064730883 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.072675943 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.072770119 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.072777987 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.120414972 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.120693922 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:27.120729923 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:27.120815992 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:27.121027946 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:27.121045113 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:27.163332939 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.213613033 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:27.213805914 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:27.213885069 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:27.214519024 CET	49734	443	192.168.2.16	104.17.25.14
Dec 20, 2024 19:03:27.214581966 CET	443	49734	104.17.25.14	192.168.2.16
Dec 20, 2024 19:03:27.219362974 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.219392061 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.235826015 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.235932112 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.235943079 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.240993023 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.241079092 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.241087914 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.248711109 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.248774052 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.248783112 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.256145954 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.256226063 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.256238937 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.271044970 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.271086931 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.271112919 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.271123886 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.271166086 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.278332949 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.285737991 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.285765886 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.285808086 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.285815954 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.285856962 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.293150902 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.300667048 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.300762892 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.300776958 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.306622982 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.306751013 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.306761980 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.312623978 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.312697887 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.312706947 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.318648100 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.318731070 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.318737984 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.356344938 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:27.356405020 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:27.356497049 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:27.356710911 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:27.356724024 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:27.363384962 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.420372963 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.420440912 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.420468092 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.420526981 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.420557022 CET	49729	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.420605898 CET	49729	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.437354088 CET	49729	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.437381029 CET	443	49729	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.441395998 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.441421986 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.441430092 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.441458941 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.441484928 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.441505909 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.441529989 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.442414045 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.442425966 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.442444086 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.442451000 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.442480087 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.442481995 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.442502022 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.442536116 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.442590952 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.453800917 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.453835011 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.453911066 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.453938961 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.465759039 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.465771914 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.465811968 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.465846062 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.465857029 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.465904951 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.484713078 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.489515066 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.489552021 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.490361929 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.490379095 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.490443945 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.500463963 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.508374929 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.508398056 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.508476973 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.508482933 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.508687973 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.517493010 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.517523050 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.517532110 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.517565966 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.517591953 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.517610073 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.517616034 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.517633915 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.517652988 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.519675970 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.519689083 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.519726992 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.519752979 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.519939899 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.519939899 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.532641888 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.532655954 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.532726049 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.532742023 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.564431906 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.571572065 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.580367088 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.592281103 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.592304945 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.592317104 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.592335939 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.592359066 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.592391968 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.592406988 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.592437983 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.592972040 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.612396002 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.628227949 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.628257990 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.628381968 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.628381968 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.628398895 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.628478050 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.643214941 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.643237114 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.643310070 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.643325090 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.643569946 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.656121016 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.656135082 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.656162024 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.656168938 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.656189919 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.656203985 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.656209946 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.656251907 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.657907009 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.657948017 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.658013105 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.658020973 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.658205032 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.662029982 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.662044048 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.662066936 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.662085056 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.662092924 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.662107944 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.662127972 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.662158012 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.662163973 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.662201881 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.670494080 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.670517921 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.670629025 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.670629025 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.670644999 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.670691967 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.685101032 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.685127020 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.685242891 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.685250998 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.685292959 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.694892883 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.694905996 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.694953918 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.694984913 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.695029020 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.695044994 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.695065975 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.695082903 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.699680090 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.699698925 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.699769974 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.699779034 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.699826956 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.699826956 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.700150013 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.700205088 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.706296921 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.706311941 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.706352949 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.706383944 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.706397057 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.706409931 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.706428051 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.706450939 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.708370924 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.708395958 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.708446980 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.708463907 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.708489895 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.708499908 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.713448048 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.713530064 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.714322090 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.714353085 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.714490891 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.714490891 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.714502096 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.714663029 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.750297070 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.750319004 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.750402927 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.750422001 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.750456095 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.784096956 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.784131050 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.784310102 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.784329891 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.785240889 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.794279099 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.794332027 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.794364929 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.794441938 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.794473886 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.794513941 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.794521093 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.807329893 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.807368994 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.807481050 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.807503939 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.807545900 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.813139915 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.813191891 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.813241959 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.813256979 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.813275099 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.813292980 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.813311100 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.813375950 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.813394070 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.813652039 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.813657045 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.825185061 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.825206041 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.825402975 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.825409889 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.825457096 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.826199055 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.826257944 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.826287985 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.826756001 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.826838970 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.829852104 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.829878092 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.829924107 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.829931974 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.829952955 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.829994917 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.830693007 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.830740929 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.834978104 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.835006952 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.835073948 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.835088968 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.835112095 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.835129976 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.835133076 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.835143089 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.835185051 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.836436987 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.836460114 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.836541891 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.836541891 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.836548090 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.836580992 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.845875025 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.845896959 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.845974922 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.845978975 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.846240997 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.853992939 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.854022980 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.854130983 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.854146957 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.854188919 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.856151104 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.856170893 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.856298923 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.856304884 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.856359005 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.862894058 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.862929106 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.863037109 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.863045931 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.863085032 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.865545988 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.865590096 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.865632057 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.865643978 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.865688086 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.866549015 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.866565943 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.867383957 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.867388964 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.867398977 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.867611885 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.876296043 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.876313925 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.876420975 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.876425982 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.876502037 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.877633095 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.877702951 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.877707958 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.880297899 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.880322933 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.880388975 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.880400896 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.880439997 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.882551908 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.882610083 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.882642984 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.882647991 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.882683039 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.885044098 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.885121107 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.885124922 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.885159969 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.885441065 CET	49730	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.885447979 CET	443	49730	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.887618065 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.887643099 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.887751102 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.887751102 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.887754917 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:27.887902021 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:27.895462990 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.895494938 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.895570993 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.895589113 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.895629883 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.910116911 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.910135031 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.910259008 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.910268068 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.910310984 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.913839102 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.937582970 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.937603951 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.937638998 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.937731028 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.937762022 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:27.937774897 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.946257114 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.946284056 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.946387053 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.946394920 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.946527958 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.963397026 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.963413000 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.975984097 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.976015091 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.976186991 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.976202965 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.976308107 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.979437113 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:27.985783100 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.985867977 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.985882998 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.991739988 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.991836071 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:27.991844893 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:27.999778986 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.999811888 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:27.999923944 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.999923944 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:27.999949932 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.000046015 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.000912905 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.000967979 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.000977039 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.007901907 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.007925034 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.008018970 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.008018970 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.008028030 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.008079052 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.009473085 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.009540081 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.009577036 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.009598017 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.009613037 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.009630919 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.014456034 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.014549017 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.014558077 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.015993118 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.016011953 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.016165972 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.016181946 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.016244888 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.017215014 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.017244101 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.017311096 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.017318964 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.017354012 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.017396927 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.020915985 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.020977974 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.021020889 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.021030903 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.021075964 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.023380995 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.023400068 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.023483038 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.023490906 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.023535967 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.028203011 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.028284073 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.028312922 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.030632973 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.030651093 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.030805111 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.030812025 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.030867100 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.038464069 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.038481951 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.038568974 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.038587093 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.038619041 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.038645983 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.039849043 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.039876938 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.039959908 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.039972067 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.040026903 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.041804075 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.041831017 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.041877031 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.041908026 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.041959047 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.042958975 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.042996883 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.043102026 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.043111086 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.043214083 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.049849987 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.049881935 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.050004005 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.050013065 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.050081015 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.051615000 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.051640987 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.051692009 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.051703930 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.051722050 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.051745892 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.055224895 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.055267096 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.055321932 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.055331945 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.055357933 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.055368900 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.055455923 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.056699038 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.056767941 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.058024883 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.058042049 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.058149099 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.058161020 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.058224916 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.066682100 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.066730022 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.066817045 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.066824913 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.066867113 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.068099022 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.068186998 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.068196058 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.068589926 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.068615913 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.068661928 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.068674088 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.068700075 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.068717957 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.079677105 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.079706907 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.079839945 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.079853058 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.079895020 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.082345963 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.082447052 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.082459927 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.083394051 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.083426952 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.083477974 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.083487988 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.083507061 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.083529949 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.086419106 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.086468935 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.086505890 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.086518049 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.086559057 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.093456984 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.093581915 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.093594074 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.100019932 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.100110054 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.100120068 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.102243900 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.102294922 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.102350950 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.102359056 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.102402925 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.104696989 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.104779005 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.109303951 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.109407902 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.109417915 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.109932899 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.110070944 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.110079050 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.121864080 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.121907949 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.121982098 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.121990919 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.122011900 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.122643948 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.122699976 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.122708082 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.133125067 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.133167982 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.133260965 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.133271933 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.133337975 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.134121895 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.134147882 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.134207964 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.134222984 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.134325027 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.134403944 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.141412020 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.141450882 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.141515017 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.141521931 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.141535044 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.148000956 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.148017883 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.148114920 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.148123980 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.148185015 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.160542965 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.160610914 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.160636902 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.160675049 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.160773993 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.161094904 CET	49738	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.161109924 CET	443	49738	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.168384075 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.168392897 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.179810047 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.179864883 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.179910898 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.179924011 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.179969072 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.184202909 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.184402943 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.188106060 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.188174963 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.188183069 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.190701962 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.190726995 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.190785885 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.190800905 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.190814018 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.190839052 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.194741964 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.194827080 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.194834948 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.197035074 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.197062016 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.197117090 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.197133064 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.197179079 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.197179079 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.199132919 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.199189901 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.199198961 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.204130888 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.204154015 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.204468966 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.204474926 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.204531908 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.205126047 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.205141068 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.205190897 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.205202103 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.205229998 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.210803032 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.210875034 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.210886002 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.211873055 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.211901903 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.211956024 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.211966991 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.212016106 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.212016106 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.214607000 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.214654922 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.214678049 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.214689016 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.214715004 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.215845108 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.215903997 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.215914011 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.219477892 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.219500065 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.219624996 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.219624996 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.219649076 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.219710112 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.222259998 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.222326994 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.222361088 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.223714113 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.223728895 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.223874092 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.223886013 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.227294922 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.227325916 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.227399111 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.227406979 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.227451086 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.233130932 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.233216047 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.233233929 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.233239889 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.233283043 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.233315945 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.233328104 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.233370066 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.234061003 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.234091043 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.234168053 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.234173059 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.234183073 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.234215021 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.234390974 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.234436989 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.241810083 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.241841078 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.241951942 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.241959095 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.242005110 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.242314100 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.242328882 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.242393970 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.242403984 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.242445946 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.243688107 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.243755102 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.243767023 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.244278908 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.244287968 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.244319916 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.244364977 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.244373083 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.244399071 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.244421005 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.245655060 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.245713949 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.249111891 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.249141932 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.249196053 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.249202013 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.249253988 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.249254942 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.251048088 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.251064062 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.251132011 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.251142025 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.251194000 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.254513979 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.254563093 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.254594088 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.254602909 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.254651070 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.256429911 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.256474972 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.256513119 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.256520033 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.256542921 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.256567955 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.256573915 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.265919924 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.266940117 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.266990900 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.267023087 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.267031908 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.267194986 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.270652056 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.270692110 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.270742893 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.270747900 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.270793915 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.276057005 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.276062012 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.276097059 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.276146889 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.276154041 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.276176929 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.276184082 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.276231050 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.284521103 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.284563065 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.284621954 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.284632921 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.284662962 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.286076069 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.292995930 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.293037891 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.293070078 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.293098927 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.293109894 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.295841932 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.295896053 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.295932055 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.295957088 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.296000004 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.301657915 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.301700115 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.301753044 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.301779985 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.301796913 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.302396059 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.302432060 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.302509069 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.302738905 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.302787066 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:28.302798986 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:28.302798033 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.302819014 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.302855968 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.305392981 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.306574106 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.306647062 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.306674004 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.315485001 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.315588951 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.315623045 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.324026108 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.324111938 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.324140072 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.332783937 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.332894087 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.332926989 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.336745024 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.337028980 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.337049007 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.340070963 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.340147972 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.340442896 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.340517044 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.340600967 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.340609074 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.341171980 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.341228962 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.341243982 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.348916054 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.348999977 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.349025011 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.356893063 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.356970072 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.356986046 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.364820957 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.364916086 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.364939928 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.375349045 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.375431061 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.375451088 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.378437996 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.378509998 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.378520012 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.382951021 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.382982016 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.383050919 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.383064032 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.383090019 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.383111000 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.383203983 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.383261919 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.383270979 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.384383917 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.384449005 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.388034105 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.388108015 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.388118029 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.388812065 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.388842106 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.388925076 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.388925076 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.388947010 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.389132023 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.390470982 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.391000032 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.391031981 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.391074896 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.391088009 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.391108990 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.391812086 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.391861916 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.391870975 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.396698952 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.396733046 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.396811008 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.396837950 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.396852016 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.396856070 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.396897078 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.396914959 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.396928072 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.398308992 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.398359060 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.398387909 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.398403883 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.398416996 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.401853085 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.401911974 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.401918888 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.404381037 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.404428005 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.404464006 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.404479980 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.404525042 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.404525042 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.405901909 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.405924082 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.405973911 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.405988932 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.406011105 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.406873941 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.406928062 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.406934977 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.410149097 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.410186052 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.410212040 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.410219908 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.410258055 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.411967039 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.412022114 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.412024021 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.412051916 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.412113905 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.412239075 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.412267923 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.412305117 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.412311077 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.412369013 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.412369013 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.417016983 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.417819977 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.417845964 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.417886972 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.417895079 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.417921066 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.417937994 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.419261932 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.419294119 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.419348955 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.419358969 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.419413090 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.419413090 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.421869993 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.421933889 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.421943903 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.422631979 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.422667027 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.422696114 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.422703981 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.422740936 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.424575090 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.424627066 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.424674034 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.424683094 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.424683094 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.424721956 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.425225019 CET	49737	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.425240993 CET	443	49737	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.427038908 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.427098989 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.427107096 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.429231882 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.429255962 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.429325104 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.429336071 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.429402113 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.431984901 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.432027102 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.432048082 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.432056904 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.432095051 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.435673952 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.435750008 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.435792923 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.435802937 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.435828924 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.435846090 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.435854912 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.436867952 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.439003944 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.439081907 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.439096928 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.446755886 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.446808100 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.446841955 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.446855068 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.446886063 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.451384068 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.451442003 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.451471090 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.451493979 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.451534986 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.451706886 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.451761961 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.451772928 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.452877045 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.452925920 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.452940941 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.454675913 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.454751015 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.454770088 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.455188990 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.455238104 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.455249071 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.458456039 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.458491087 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.458517075 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.458534956 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.458570957 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.461452961 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.462591887 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.462610960 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.462658882 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.462672949 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.462701082 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.466183901 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.466236115 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.466244936 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.470947981 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.471010923 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.471014977 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.471045971 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.471074104 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.471153975 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.471193075 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.471199989 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.471214056 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.471249104 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.475374937 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.475421906 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.475457907 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.475466013 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.475502014 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.475835085 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.479861021 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.479906082 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.479928017 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.479934931 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.479968071 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.480484009 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.480537891 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.480545998 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.485371113 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.485377073 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.485407114 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.485423088 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.485434055 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.485474110 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.485488892 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.485523939 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.486697912 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.486746073 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.486773014 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.486784935 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.486809015 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.486834049 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.489882946 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.489943981 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.489947081 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.489962101 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.490000963 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.494786024 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.495385885 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.495448112 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.495465040 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.499563932 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.499624968 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.499641895 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.503832102 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.503881931 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.503896952 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.508407116 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.508466959 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.508483887 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.513103008 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.513149977 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.513160944 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.517561913 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.517596006 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.517606020 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.517613888 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.517656088 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.517662048 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.517868042 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.517915010 CET	443	49736	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.517956972 CET	49736	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.566037893 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:28.566293955 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:28.566315889 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:28.567372084 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:28.567439079 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:28.567926884 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:28.568007946 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:28.568269014 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:28.568275928 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:28.569329023 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.569379091 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.569474936 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.569688082 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:28.569700003 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:28.577894926 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.577920914 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.577985048 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.578003883 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.578038931 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.578057051 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.584455967 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.584500074 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.584534883 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.584549904 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.584575891 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.590372086 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.590399981 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.590444088 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.590454102 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.590511084 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.597004890 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.597028971 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.597090006 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.597103119 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.603662968 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.603683949 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.603735924 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.603746891 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.603776932 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.610055923 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.610070944 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.610137939 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.610153913 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.613389969 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:28.616763115 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.616785049 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.616826057 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.616841078 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.616883039 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.626960039 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.627043962 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.627059937 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.627084017 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.627119064 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.627140045 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.633197069 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.633246899 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.633280039 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.633291960 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.633368969 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.640356064 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.640403032 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.640434027 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.640450954 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.640474081 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.640494108 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.640898943 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.640952110 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.647777081 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.647839069 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.647866011 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.647888899 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.647923946 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.647947073 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.654784918 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.654834032 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.654872894 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.654889107 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.654922009 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.654947042 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.658849001 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.658890009 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.658924103 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.658934116 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.658973932 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.661516905 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.661591053 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.661669970 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.661881924 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:28.661894083 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:28.665891886 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.665935040 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.665963888 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.665977955 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.666008949 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.666028976 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.670438051 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.670479059 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.670552969 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.670564890 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.671005964 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:28.671044111 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:28.671106100 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:28.671403885 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:28.671416044 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:28.686086893 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.686110973 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.686194897 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.686211109 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.686228037 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.686250925 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.725438118 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.726145983 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.726176023 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.726233006 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.726244926 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.726301908 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.732981920 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.733022928 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.733097076 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.733294964 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.733306885 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.770072937 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.770101070 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.770253897 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.770275116 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.770317078 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.775646925 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.775702953 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.775760889 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.775782108 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.775814056 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.781439066 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.781461954 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.781522989 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.781538010 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.781560898 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.787514925 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.787643909 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.787693024 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.787712097 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.787734985 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.787771940 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.787785053 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.787790060 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.787836075 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.787841082 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.788031101 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.788050890 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.788090944 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.788105011 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.788122892 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.794395924 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.794414043 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.794619083 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.794631958 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.795416117 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.795449972 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.795486927 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.795495033 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.795510054 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.795535088 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.795578003 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.795718908 CET	49739	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:28.795732021 CET	443	49739	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:28.801261902 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.801279068 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.801331997 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.801351070 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.801384926 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.807173014 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.807189941 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.807274103 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.807291031 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.812922001 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.812937021 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.813024998 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.813041925 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.819067001 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.819184065 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.819200993 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.825901031 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.825918913 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.825979948 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.826000929 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.826011896 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.832847118 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.832899094 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.832940102 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.832952023 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.832977057 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.839083910 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.839128017 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.839186907 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.839200020 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.839229107 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.845633030 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.845658064 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.845721960 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.845732927 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.852616072 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.852632046 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.852691889 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.852705956 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.852715969 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.853398085 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.853796959 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.853842974 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.853848934 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.853882074 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.853889942 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.853926897 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.854057074 CET	49731	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.854070902 CET	443	49731	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.961826086 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.961849928 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.961952925 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.961975098 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.962012053 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.967870951 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.967886925 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.967952967 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.967971087 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.968025923 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.968861103 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.968918085 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.969376087 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.969419956 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.970267057 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.970324039 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.975373030 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.975389957 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.975471973 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.975487947 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.975533962 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.981359959 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.981379032 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.981446028 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.981463909 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.981509924 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.987385035 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.987404108 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.987489939 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.987505913 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.987545013 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.992959976 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.992976904 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.993061066 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.993076086 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.993124962 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.997896910 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:28.997951031 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:28.998028994 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:28.998260975 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:28.998277903 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:28.999023914 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.999069929 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.999114037 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.999126911 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:28.999147892 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:28.999167919 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.025551081 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:29.025626898 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:29.025703907 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:29.026557922 CET	49740	443	192.168.2.16	104.17.24.14
Dec 20, 2024 19:03:29.026577950 CET	443	49740	104.17.24.14	192.168.2.16
Dec 20, 2024 19:03:29.082017899 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.082046032 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.082204103 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.082226038 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.082266092 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.158588886 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.158622980 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.158767939 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.158785105 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.158866882 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.159387112 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.159437895 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.165231943 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.165254116 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.165323019 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.165332079 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.171245098 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.171272039 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.171348095 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.171358109 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.176403999 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.176430941 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.176467896 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.176477909 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.176503897 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.182549000 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.182576895 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.182621002 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.182629108 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.182662964 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.187812090 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.187833071 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.187890053 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.187900066 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.188046932 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.193644047 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.193670988 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.193722010 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.193736076 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.193767071 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.236459970 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.346833944 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.346865892 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.347013950 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.347035885 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.347076893 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.352049112 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.352076054 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.352159023 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.352169037 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.352216959 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.357048035 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.357101917 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.357189894 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.357201099 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.357280970 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.362948895 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.362976074 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.363039970 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.363049984 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.363070965 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.367937088 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.367965937 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.368038893 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.368051052 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.368108988 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.373826981 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.373852015 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.373913050 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.373923063 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.373982906 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.379196882 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.379234076 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.379291058 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.379301071 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.379326105 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.384859085 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.384881020 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.384988070 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.385000944 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.428417921 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.539043903 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.539078951 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.539200068 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.539217949 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.539258003 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.543556929 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.543581963 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.543647051 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.543662071 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.543689966 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.543705940 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.549834967 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.549864054 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.549952984 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.549967051 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.550007105 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.554575920 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.554616928 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.554675102 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.554687023 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.554730892 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.554749966 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.557805061 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.557863951 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.557915926 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.557929039 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.557962894 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.558667898 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.558728933 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.562300920 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.562338114 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.562419891 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.562442064 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.562815905 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.562840939 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.562854052 CET	443	49732	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:29.562871933 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.562895060 CET	49732	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:29.566982031 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:29.567017078 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:29.567099094 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:29.567327976 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:29.567339897 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:29.704570055 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:29.704612970 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:29.704678059 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:29.704893112 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:29.704905033 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:29.781678915 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:29.783375978 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:29.783390999 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:29.783837080 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:29.783900023 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:29.784548044 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:29.784586906 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:29.784837008 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:29.784898996 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:29.785059929 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:29.785073042 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:29.833256006 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:29.879698992 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:29.880002975 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:29.880016088 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:29.881026030 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:29.881110907 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:29.881498098 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:29.881551981 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:29.881645918 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:29.881652117 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:29.923434973 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:29.954725981 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:29.955082893 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:29.955101013 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:29.956089020 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:29.956152916 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:29.957385063 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:29.957434893 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:29.957546949 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:29.957554102 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:30.003413916 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:30.051199913 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:30.051254988 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:30.051367998 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:30.051707983 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:30.051721096 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:30.218189955 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.271481037 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.319371939 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:30.319418907 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:30.319541931 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:30.319746971 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:30.319765091 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:30.337838888 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.337858915 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.337892056 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.337903976 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.337918043 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.337944031 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.337959051 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.338012934 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.359452009 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:30.359791994 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:30.359831095 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:30.360847950 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:30.361026049 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:30.361049891 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:30.361099005 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:30.361233950 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:30.361294031 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:30.361505032 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:30.361511946 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:30.368038893 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:30.368288040 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:30.368307114 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:30.369380951 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:30.369463921 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:30.369879007 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:30.369946957 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:30.370600939 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:30.370609045 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:30.414421082 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:30.415677071 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:30.415724993 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:30.415745020 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:30.415802002 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:30.415817022 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:30.415857077 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:30.415906906 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:30.416934013 CET	49747	443	192.168.2.16	216.198.53.3
Dec 20, 2024 19:03:30.416949987 CET	443	49747	216.198.53.3	192.168.2.16
Dec 20, 2024 19:03:30.422019005 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:30.422394991 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:30.422426939 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:30.423507929 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:30.423588991 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:30.423985004 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:30.424052954 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:30.424135923 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:30.424145937 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:30.446721077 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.446738958 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.446775913 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.446806908 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.446813107 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.446829081 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.446867943 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.446882963 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.451483011 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.475430965 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:30.496325970 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.496349096 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.496448994 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.496468067 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.496786118 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.501635075 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.501646042 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.501657963 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.501734018 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.501746893 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.501758099 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.501856089 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.560019016 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:30.560064077 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:30.560204029 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:30.560403109 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:30.560412884 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:30.618025064 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.618046045 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.618159056 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.618177891 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.618256092 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.643028975 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.643047094 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.643138885 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.643151999 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.643196106 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.663475990 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:30.663527012 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:30.663604021 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:30.663901091 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:30.663914919 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:30.666518927 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.666538000 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.666647911 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.666659117 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.666718960 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.683221102 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.683238029 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.683279037 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.683295965 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.683332920 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.683345079 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.683598042 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.686049938 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:30.686114073 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:30.686197996 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:30.686465025 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:30.686482906 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:30.691418886 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:30.691494942 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:30.691548109 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:30.728787899 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.728813887 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.728866100 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.728893042 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.728935957 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.729017019 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.730654955 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.730679035 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.730815887 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.730815887 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.730825901 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.730926991 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.804810047 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.804838896 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.805095911 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.805124044 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.805212021 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.819195032 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.819225073 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.819339991 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.819359064 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.819510937 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.835926056 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.835953951 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.836190939 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.836190939 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.836205959 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.836277962 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.851929903 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.851958036 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.852288008 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.852312088 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.852385044 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.852633953 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.852657080 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.852752924 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.852766991 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.852823973 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.864279985 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.864312887 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.864428043 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.864440918 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.864623070 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.873799086 CET	49726	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:30.873843908 CET	443	49726	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:30.876058102 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.876086950 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.876213074 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.876224041 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.876316071 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.887191057 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.887219906 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.888510942 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.888529062 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.888695955 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.890964985 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.890985966 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.891344070 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.891375065 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.892163038 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.909262896 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:30.909338951 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:30.909471989 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:30.909900904 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.909928083 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.911262989 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.911262989 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.911288977 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.913113117 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.930218935 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.930294037 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.930430889 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.930430889 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.930452108 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:30.930583000 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:30.974944115 CET	49721	443	192.168.2.16	162.159.246.125
Dec 20, 2024 19:03:30.975008965 CET	443	49721	162.159.246.125	192.168.2.16
Dec 20, 2024 19:03:30.979435921 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:30.979717970 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:30.979731083 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:30.981112957 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:30.981194973 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:30.981839895 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:30.981839895 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:30.981906891 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:30.989800930 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.989840031 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.989960909 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.989960909 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.989973068 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.990264893 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.995266914 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.995306015 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.995381117 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:30.995395899 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:30.995521069 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.004393101 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.004426956 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.004703045 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.004718065 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.004797935 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.012681007 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.012710094 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.012788057 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.012814999 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.013411045 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.019865036 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.019895077 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.020102978 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.020117044 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.020236969 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.027841091 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.027862072 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.027978897 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.027985096 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.028170109 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.028170109 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.028178930 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.034740925 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.034781933 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.034841061 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.034857035 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.034895897 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.035032034 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.035995007 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.036032915 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.036084890 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.036097050 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.036129951 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.036149025 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.053833008 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.053870916 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.053972960 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.053972960 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.053997993 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.054081917 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.065243959 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.065290928 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.065380096 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.065385103 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.065408945 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.065440893 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.065764904 CET	49742	443	192.168.2.16	52.222.144.109
Dec 20, 2024 19:03:31.065779924 CET	443	49742	52.222.144.109	192.168.2.16
Dec 20, 2024 19:03:31.067748070 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.067771912 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.067913055 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.067926884 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.068063021 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.078457117 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.181642056 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:31.181760073 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:31.181855917 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:31.181894064 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:31.182065010 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:31.182128906 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:31.182663918 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.182693958 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.182991982 CET	49745	443	192.168.2.16	142.250.181.132
Dec 20, 2024 19:03:31.183007956 CET	443	49745	142.250.181.132	192.168.2.16
Dec 20, 2024 19:03:31.183054924 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.183068037 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.183206081 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.187227011 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.188323975 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.188414097 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.188429117 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.188467026 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.188513041 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.188522100 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.191051006 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.191080093 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.191230059 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.191243887 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.191334009 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.197813988 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.197839022 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.198813915 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.198827982 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.198916912 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.199693918 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.199765921 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.199790955 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.199832916 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.199876070 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.206095934 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.206120014 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.206154108 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.206253052 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.206283092 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.206887960 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.206887960 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.214378119 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.214411974 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.215186119 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.215200901 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.215255976 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.218292952 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.218391895 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.218427896 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.221410990 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.221436024 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.221524954 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.221537113 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.221584082 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.229526997 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.229552984 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.229667902 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.229680061 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.229748011 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.257488012 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.257675886 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.269634008 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.306936979 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.317250967 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.317275047 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.317379951 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.317409992 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.317461014 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.324712992 CET	49757	443	192.168.2.16	172.217.19.228
Dec 20, 2024 19:03:31.324769974 CET	443	49757	172.217.19.228	192.168.2.16
Dec 20, 2024 19:03:31.324923038 CET	49757	443	192.168.2.16	172.217.19.228
Dec 20, 2024 19:03:31.325093031 CET	49757	443	192.168.2.16	172.217.19.228
Dec 20, 2024 19:03:31.325109005 CET	443	49757	172.217.19.228	192.168.2.16
Dec 20, 2024 19:03:31.347431898 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.347465992 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.370958090 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.371025085 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.371089935 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.371105909 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.371126890 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.371175051 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.377859116 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.377923012 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.378002882 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.378015995 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.378026009 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.378151894 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.378170013 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.378231049 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.378247976 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.378927946 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.379024029 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.383265972 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.383359909 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.383366108 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.387089968 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.387115002 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.387218952 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.387218952 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.387237072 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.392813921 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.392899990 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.392909050 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.395179033 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.395234108 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.395270109 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.395277977 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.395323038 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.402465105 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.402508020 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.402652979 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.402652979 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.402678967 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.406661987 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.406747103 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.406755924 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.411067009 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.411118031 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.411164999 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.411179066 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.411340952 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.417948961 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.417995930 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.418056965 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.418068886 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.418087006 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.419949055 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.420022011 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.420032978 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.428612947 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.428627014 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.428704023 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.428718090 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.428747892 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.428766012 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.428788900 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.433634043 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.433681965 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.433713913 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.433722973 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.433772087 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.451335907 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.453175068 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.453243971 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.453320026 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.453340054 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.453439951 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.459897041 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.459969997 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.459978104 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.460028887 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.460074902 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.472810030 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.485630035 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.485686064 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.485768080 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.485807896 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.485857964 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.491914034 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.500869989 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.501007080 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.501046896 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.508184910 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.511360884 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:31.511687994 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:31.511719942 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:31.512999058 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:31.513106108 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:31.513674974 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.513755083 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.513794899 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.514383078 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:31.514456034 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:31.514563084 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:31.514575005 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:31.534773111 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.534848928 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.534966946 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.534981012 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.535026073 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.535052061 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.555454016 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.555490017 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.555550098 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:31.564491987 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.564511061 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.564555883 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.564569950 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.564585924 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.564591885 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.564802885 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.564802885 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.572505951 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.572523117 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.572546005 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.572556019 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.572575092 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.572587967 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.572649956 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.572649956 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.573013067 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.573057890 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.573087931 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.573120117 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.573165894 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.575452089 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.575495958 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.575556993 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.575586081 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.575606108 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.575630903 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.576936960 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.579924107 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.579942942 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.579977989 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.580014944 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.580075026 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.580075026 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.580101013 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.580215931 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.580566883 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.580641985 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.580677032 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.587053061 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.587069988 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.587101936 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.587255955 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.587255955 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.587272882 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.587331057 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.590651035 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.590728998 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.590748072 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.595164061 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.595196962 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.595287085 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.595304012 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.595331907 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.595385075 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.602648020 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.602725029 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.602752924 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.603403091 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.603436947 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.603609085 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.603609085 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.603636980 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.603704929 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.604613066 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.604711056 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.604772091 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.604862928 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.604862928 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.604882956 CET	443	49743	151.101.0.176	192.168.2.16
Dec 20, 2024 19:03:31.604944944 CET	49743	443	192.168.2.16	151.101.0.176
Dec 20, 2024 19:03:31.615329027 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.615425110 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.615456104 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.624908924 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.624984980 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.625015020 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.636126041 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.636272907 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.636307955 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.646183014 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.646233082 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.646321058 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.646353960 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.646399975 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.656563997 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.657319069 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:31.657854080 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:31.657886028 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:31.658921003 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:31.659003973 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:31.659996986 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:31.660089970 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:31.660326958 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:31.660332918 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:31.670361042 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.670406103 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.670459986 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.670495033 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.670550108 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.678772926 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.689943075 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.690021992 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.690025091 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.690066099 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.690108061 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.696633101 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.696748018 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.696778059 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.700251102 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.701412916 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.701474905 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.701508999 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.710081100 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.710154057 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.710190058 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.712435007 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:31.718676090 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.718758106 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.718791962 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.724220991 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.724292040 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.724313974 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.724342108 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.724373102 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.724396944 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.726746082 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.726811886 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.726840973 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.734082937 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.734163046 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.734190941 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.740514994 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.740607023 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.740633965 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.744108915 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.744167089 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.744219065 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.744255066 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.744278908 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.744298935 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.747910023 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.747976065 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.748018026 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.757004976 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.757076025 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.757097960 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.759002924 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.759103060 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.759134054 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.763220072 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.763283968 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.763293028 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.769505978 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.769576073 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.769584894 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.774019957 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.774086952 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.774096012 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.774542093 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.774838924 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:31.774859905 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.776550055 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.776762009 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:31.777055979 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:31.777126074 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.777215004 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:31.777226925 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.777890921 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.777941942 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.777980089 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.778012037 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.778028965 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.778064013 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.778985977 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.779052019 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.779062033 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.783524990 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.783588886 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.783598900 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.787741899 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.787820101 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.787827015 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.792726994 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.792808056 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.792814970 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.797736883 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.797830105 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.797837019 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.802995920 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.803029060 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.803189039 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.803222895 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.803287029 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.807786942 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.812895060 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.812930107 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.812966108 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.812978029 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.813025951 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.817775011 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.822956085 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.823040009 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.823080063 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.824480057 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:31.827732086 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.827773094 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.827801943 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.827814102 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.827861071 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.832776070 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.837587118 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.837647915 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.837661028 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.837702036 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.837887049 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.842426062 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.847448111 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.847490072 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.847534895 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.847558022 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.847609997 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.853307962 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.857806921 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.857914925 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.857917070 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.857947111 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.858000040 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.862468004 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.867263079 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.867304087 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.867378950 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.867418051 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.867470980 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.871651888 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.876003981 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.876070023 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.876075029 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.876113892 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.876166105 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.876610994 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.876893997 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:31.876925945 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.877260923 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.877635956 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:31.877695084 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.877816916 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:31.880853891 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.885704041 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.885765076 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.885776043 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.885797024 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.885807991 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.885855913 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.886301994 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.886348009 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.886410952 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.886442900 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.886459112 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.886498928 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.890067101 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.890145063 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.890168905 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.895052910 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.895143986 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.895165920 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.899167061 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.899235964 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.899264097 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.902100086 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.902209997 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.902216911 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.902255058 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.902303934 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.902321100 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.904093027 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.904155970 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.904172897 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.908202887 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.908240080 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.908276081 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.908298016 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.908364058 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.908560038 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.908591986 CET	443	49744	142.250.181.78	192.168.2.16
Dec 20, 2024 19:03:31.908649921 CET	49744	443	192.168.2.16	142.250.181.78
Dec 20, 2024 19:03:31.918533087 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.918612957 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.918637991 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.918664932 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.918683052 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.918704987 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.919336081 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:31.932218075 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.934696913 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.934720993 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.934844017 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.934854984 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.934915066 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.945975065 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.946077108 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.946161985 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.946183920 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.946213007 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.957602024 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.957626104 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.957706928 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.957741022 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.968540907 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.968610048 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.968730927 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.968776941 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.980170012 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.980190039 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.980349064 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.980382919 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.980880976 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.980896950 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.980957985 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.980988026 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.981004000 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.981013060 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.981023073 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.981026888 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:31.981043100 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.981091976 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.981091976 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:31.981100082 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.031445026 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.032614946 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.051675081 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.063899040 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:32.069704056 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:32.069739103 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:32.071415901 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:32.071639061 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:32.077364922 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:32.078270912 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.078286886 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.078346014 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.078380108 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.078397989 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.078428030 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.078444958 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.078465939 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.078574896 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:32.078608990 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:32.078818083 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:32.079098940 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:32.079214096 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:32.081971884 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:32.081988096 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:32.084002018 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:32.084129095 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:32.086766958 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:32.088243008 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.088272095 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.088372946 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.088402033 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.088448048 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.095489979 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.098269939 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.098303080 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.098392963 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.098417997 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.098462105 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.107057095 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.107076883 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.107182026 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.107202053 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.107240915 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.112446070 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:32.112535954 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:32.112603903 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:32.115921021 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.115993023 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.116034031 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.116050005 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.116086006 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.116107941 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.120949984 CET	49751	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:32.120985985 CET	443	49751	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:32.123895884 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.123966932 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.124017000 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.124041080 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.124080896 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.124080896 CET	49760	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:32.124114990 CET	443	49760	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:32.124124050 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.124182940 CET	49760	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:32.127000093 CET	49760	443	192.168.2.16	13.59.75.255
Dec 20, 2024 19:03:32.127015114 CET	443	49760	13.59.75.255	192.168.2.16
Dec 20, 2024 19:03:32.129071951 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:32.130157948 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.130213976 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.130285025 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.130310059 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.130362988 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.130386114 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.131333113 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:32.136298895 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.136358976 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.136406898 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.136435032 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.136466026 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.136486053 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.163119078 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.163134098 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.163270950 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.163290977 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.163305044 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.163348913 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.163355112 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.163374901 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.163716078 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.192532063 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.192543030 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.192581892 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.192595959 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.192632914 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.192759991 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.272327900 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.272399902 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.272454023 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.272497892 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.272521973 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.272550106 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.275888920 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.276000977 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.276029110 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.276098013 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.276511908 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.276566029 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.279512882 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.279612064 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.279638052 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.282023907 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.282113075 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.282139063 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.282191992 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.285317898 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.285377979 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.285414934 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.285439968 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.285486937 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.286184072 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.286254883 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.291464090 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.291491032 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.291558027 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.291584015 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.291599989 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.291626930 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.297519922 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.297544956 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.297605038 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.297622919 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.297796011 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.297796011 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.298327923 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.298396111 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.301321983 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.301423073 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.301440001 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.307579041 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.307607889 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.307715893 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.307733059 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.310292006 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.310336113 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.310389996 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.310400009 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.310440063 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.310956955 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.324655056 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.324671984 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.324716091 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.324728966 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.324768066 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.324776888 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.324836969 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.340327024 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.340451002 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.340537071 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.340567112 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.340595961 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.340652943 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.340658903 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.340667009 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.341705084 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.341725111 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.348459959 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.348503113 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.348566055 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.348592997 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.348701954 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.352185965 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.352308035 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.352849007 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.353214979 CET	49753	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.353235960 CET	443	49753	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.356791019 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.357901096 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:32.357928991 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:32.358022928 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:32.358037949 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:32.358098984 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:32.362884998 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.362915039 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.363342047 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.363342047 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.363358021 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.365272999 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.365374088 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.365392923 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.365452051 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.388480902 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.388503075 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.389239073 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.389256954 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.400513887 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:32.400527000 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:32.400558949 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:32.400635958 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:32.400641918 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:32.400690079 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:32.401093960 CET	49750	443	192.168.2.16	108.158.75.120
Dec 20, 2024 19:03:32.401117086 CET	443	49750	108.158.75.120	192.168.2.16
Dec 20, 2024 19:03:32.404927969 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:32.405025959 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:32.405073881 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:32.405270100 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:32.405270100 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:32.405283928 CET	443	49752	52.4.95.4	192.168.2.16
Dec 20, 2024 19:03:32.406202078 CET	49752	443	192.168.2.16	52.4.95.4
Dec 20, 2024 19:03:32.410393000 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.410424948 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.410711050 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.410711050 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.410726070 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.410893917 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.411390066 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.432728052 CET	49761	443	192.168.2.16	108.158.81.56
Dec 20, 2024 19:03:32.432769060 CET	443	49761	108.158.81.56	192.168.2.16
Dec 20, 2024 19:03:32.432851076 CET	49761	443	192.168.2.16	108.158.81.56
Dec 20, 2024 19:03:32.433062077 CET	49761	443	192.168.2.16	108.158.81.56
Dec 20, 2024 19:03:32.433073997 CET	443	49761	108.158.81.56	192.168.2.16
Dec 20, 2024 19:03:32.461235046 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.463464975 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.463519096 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.463557959 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.463578939 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.463638067 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.464876890 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.464936018 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.470520973 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.470544100 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.470594883 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.470601082 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.470642090 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.474219084 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.474242926 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.474289894 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.474298000 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.474353075 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.480256081 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.480282068 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.480331898 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.480353117 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.480390072 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.486298084 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.486323118 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.486393929 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.486399889 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.486432076 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.492402077 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.492419004 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.492480993 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.492486000 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.492521048 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.493700981 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.493756056 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.499178886 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.499216080 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.499253988 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.499259949 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.499322891 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.499326944 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.499356985 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.505173922 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.505218983 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.505255938 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.505274057 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.505300999 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.505328894 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.505408049 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.505414009 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.510021925 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.510092974 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.528163910 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.528192997 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.528245926 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.528264046 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.528299093 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.536087990 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.536164045 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.536194086 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.542133093 CET	49762	443	192.168.2.16	108.158.75.113
Dec 20, 2024 19:03:32.542179108 CET	443	49762	108.158.75.113	192.168.2.16
Dec 20, 2024 19:03:32.542263985 CET	49762	443	192.168.2.16	108.158.75.113
Dec 20, 2024 19:03:32.542481899 CET	49762	443	192.168.2.16	108.158.75.113
Dec 20, 2024 19:03:32.542498112 CET	443	49762	108.158.75.113	192.168.2.16
Dec 20, 2024 19:03:32.543806076 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.543873072 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.543879032 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.546113968 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.546144009 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.546189070 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.546209097 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.546226978 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.546951056 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.547005892 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.547015905 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.561464071 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.561494112 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.561606884 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.561606884 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.561625004 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.562537909 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.562603951 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.562611103 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.562637091 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.562849998 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.566385031 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.566451073 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.566466093 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.566610098 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.570314884 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.578138113 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.578195095 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.578217983 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.578248024 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.578313112 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.581830025 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.581862926 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.581935883 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.581954002 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.581971884 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.581993103 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.585983992 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.593755007 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.593822002 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.593856096 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.600594044 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.600627899 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.600697041 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.600722075 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.600882053 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.601671934 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.601721048 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.601748943 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.608650923 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.608716965 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.608746052 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.615703106 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.615767956 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.615797997 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.615933895 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.615967035 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.616010904 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.616029978 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.616046906 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.616127014 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.633491993 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.633527994 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.633573055 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.633600950 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.633680105 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.656759024 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.656795979 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.656883955 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.656932116 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.656996965 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.662679911 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.662718058 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.662763119 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.662780046 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.662832022 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.663675070 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.663738012 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.665402889 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.669878006 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.669908047 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.669961929 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.669980049 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.669998884 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.670030117 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.675805092 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.675837994 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.675895929 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.675910950 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.675931931 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.675967932 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.676903009 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.676959991 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.682001114 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.682040930 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.682080984 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.682099104 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.682121992 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.682127953 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.682145119 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.682171106 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.682472944 CET	49748	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.682492018 CET	443	49748	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.712244987 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.712276936 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.712424040 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.712424040 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.712445021 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.712622881 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.724817991 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.724865913 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.724890947 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.724942923 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.724962950 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.725001097 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.725085974 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.727435112 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.727488041 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.727505922 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.732235909 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.732301950 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.732315063 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.735351086 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.735377073 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.735469103 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.735469103 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.735487938 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.735589027 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.737159967 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.737217903 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.737227917 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.747030973 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.747060061 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.747149944 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.747165918 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.747165918 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.747183084 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.747211933 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.747224092 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.747271061 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.747308016 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.755944967 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.755958080 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.756014109 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.756023884 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.756078959 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.757015944 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.757055044 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.757096052 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.757110119 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.757133007 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.757436037 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.760170937 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.760368109 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.760377884 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.764729977 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.764744043 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.764820099 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.765635014 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.765656948 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.765733004 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.765733004 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.765749931 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.771858931 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.771884918 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.771990061 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.771990061 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.772001028 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.772684097 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.772747993 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.772756100 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.772800922 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.773520947 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.773587942 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.778073072 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.778146029 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.786875010 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.786951065 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.795481920 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.795586109 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.804409027 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.804549932 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.808856010 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.808976889 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.897072077 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.897104025 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.897164106 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.897270918 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.897280931 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.897299051 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.903417110 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.903448105 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.903551102 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.903573036 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.908713102 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.908739090 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.908868074 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.908885956 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.912292957 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.912395954 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.912409067 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.912468910 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.916098118 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.916204929 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.916220903 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.916285992 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.916923046 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.917010069 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.922166109 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.922198057 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.922285080 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.922291040 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.922291040 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.922307014 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.922364950 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.922395945 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.925765038 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.925860882 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.928190947 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.928226948 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.928287983 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.928307056 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.928323984 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.928363085 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.932893991 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.932998896 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.934067965 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.934089899 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.934163094 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.934163094 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.934181929 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.934309959 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.937699080 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.937752008 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.937783957 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.937788963 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:32.937824011 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:32.939577103 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.939647913 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.942807913 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.942888021 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.949254990 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.949393034 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.955523014 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.955672979 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.958786964 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.958874941 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.965024948 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.965111971 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.971844912 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.971967936 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.974651098 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.974723101 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.981044054 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.981144905 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.987323999 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.987430096 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.993730068 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.993834019 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:32.996964931 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:32.997030973 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.013236046 CET	443	49757	172.217.19.228	192.168.2.16
Dec 20, 2024 19:03:33.013771057 CET	49757	443	192.168.2.16	172.217.19.228
Dec 20, 2024 19:03:33.013801098 CET	443	49757	172.217.19.228	192.168.2.16
Dec 20, 2024 19:03:33.014894962 CET	443	49757	172.217.19.228	192.168.2.16
Dec 20, 2024 19:03:33.014962912 CET	49757	443	192.168.2.16	172.217.19.228
Dec 20, 2024 19:03:33.015377998 CET	49757	443	192.168.2.16	172.217.19.228
Dec 20, 2024 19:03:33.015460014 CET	443	49757	172.217.19.228	192.168.2.16
Dec 20, 2024 19:03:33.015558004 CET	49757	443	192.168.2.16	172.217.19.228
Dec 20, 2024 19:03:33.015569925 CET	443	49757	172.217.19.228	192.168.2.16
Dec 20, 2024 19:03:33.061388016 CET	49757	443	192.168.2.16	172.217.19.228
Dec 20, 2024 19:03:33.081140041 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:33.081176996 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:33.081197023 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:33.081253052 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:33.081284046 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:33.081305981 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:33.081330061 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:33.089579105 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.089653969 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.089689970 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.089715004 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.089731932 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.089864016 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.093249083 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.093393087 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.093410015 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.099201918 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.099225998 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.099353075 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.099371910 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.099392891 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.104614973 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.104635000 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.104677916 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.104702950 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.104722977 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.109042883 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.109121084 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.109138012 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.109247923 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.109442949 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.109497070 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.114065886 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.114128113 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.115288019 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.115309954 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.115462065 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.115483999 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.119085073 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.119146109 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.120682001 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.120706081 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.120762110 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.120778084 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.120795965 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.121846914 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.121916056 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.122287989 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.122440100 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.122459888 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.122502089 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.126676083 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.126735926 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.128215075 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.128236055 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.128293037 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.128310919 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.128371000 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.131462097 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.131521940 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.136420012 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.136482954 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.139031887 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.139096022 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.143855095 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.143923998 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.146378994 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.146435022 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.151371956 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.151447058 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.154160023 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:33.156271935 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.156404972 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.161242962 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.161391973 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.163785934 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.163872004 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.176151991 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.176162958 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.176203012 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.176321983 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.176331043 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.176357985 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.192375898 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.192400932 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.192466021 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.192480087 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.192528963 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.205446005 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:33.220419884 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.220442057 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.220544100 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.220561981 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.226794004 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.226819038 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.226948977 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.226974964 CET	443	49754	216.198.54.3	192.168.2.16
Dec 20, 2024 19:03:33.266681910 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:33.266722918 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:33.266880989 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:33.266921043 CET	443	49755	52.222.144.12	192.168.2.16
Dec 20, 2024 19:03:33.266993999 CET	49755	443	192.168.2.16	52.222.144.12
Dec 20, 2024 19:03:33.269473076 CET	49754	443	192.168.2.16	216.198.54.3
Dec 20, 2024 19:03:33.278831005 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.278863907 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.278928995 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.278947115 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.278963089 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.279068947 CET	49749	443	192.168.2.16	52.222.144.10
Dec 20, 2024 19:03:33.282300949 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.282355070 CET	443	49749	52.222.144.10	192.168.2.16
Dec 20, 2024 19:03:33.282409906 CET	49749	443	192.168.2.16	52.222.144.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 19:03:14.746893883 CET	192.168.2.16	1.1.1.1	0x477d	Standard query (0)	protect2.fireeye.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:14.747142076 CET	192.168.2.16	1.1.1.1	0x738e	Standard query (0)	protect2.fireeye.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:17.527502060 CET	192.168.2.16	1.1.1.1	0x6aae	Standard query (0)	email.chat.inboxhealth.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:17.527657032 CET	192.168.2.16	1.1.1.1	0xffbc	Standard query (0)	email.chat.inboxhealth.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:19.154417992 CET	192.168.2.16	1.1.1.1	0x24a9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:19.154567957 CET	192.168.2.16	1.1.1.1	0x1c8d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:19.370042086 CET	192.168.2.16	1.1.1.1	0x3a29	Standard query (0)	inboxhealth.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:19.370206118 CET	192.168.2.16	1.1.1.1	0x9e85	Standard query (0)	inboxhealth.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:22.171036005 CET	192.168.2.16	1.1.1.1	0xfc14	Standard query (0)	patient.inboxhealth.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:22.171233892 CET	192.168.2.16	1.1.1.1	0x430f	Standard query (0)	patient.inboxhealth.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:25.090586901 CET	192.168.2.16	1.1.1.1	0x6c5a	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.090586901 CET	192.168.2.16	1.1.1.1	0x715e	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:25.091031075 CET	192.168.2.16	1.1.1.1	0xc8f1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.091216087 CET	192.168.2.16	1.1.1.1	0xcb22	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:25.091592073 CET	192.168.2.16	1.1.1.1	0x3265	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.091759920 CET	192.168.2.16	1.1.1.1	0x1a9f	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:25.092401981 CET	192.168.2.16	1.1.1.1	0xb609	Standard query (0)	cdn.plaid.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.092614889 CET	192.168.2.16	1.1.1.1	0x40cc	Standard query (0)	cdn.plaid.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:25.092989922 CET	192.168.2.16	1.1.1.1	0x53cc	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.093302965 CET	192.168.2.16	1.1.1.1	0x2b9e	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:26.982450962 CET	192.168.2.16	1.1.1.1	0x26ec	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:26.982655048 CET	192.168.2.16	1.1.1.1	0x9f23	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:27.218190908 CET	192.168.2.16	1.1.1.1	0xd4bd	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:27.218240023 CET	192.168.2.16	1.1.1.1	0x6a8b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:28.164088964 CET	192.168.2.16	1.1.1.1	0x57de	Standard query (0)	cdn.plaid.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.164236069 CET	192.168.2.16	1.1.1.1	0x8118	Standard query (0)	cdn.plaid.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:28.430111885 CET	192.168.2.16	1.1.1.1	0xad57	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.430232048 CET	192.168.2.16	1.1.1.1	0xd86c	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:28.523139954 CET	192.168.2.16	1.1.1.1	0xadd4	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.523711920 CET	192.168.2.16	1.1.1.1	0x180b	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:28.533575058 CET	192.168.2.16	1.1.1.1	0x1bf5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.533827066 CET	192.168.2.16	1.1.1.1	0x95a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:28.588390112 CET	192.168.2.16	1.1.1.1	0xc67d	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.588488102 CET	192.168.2.16	1.1.1.1	0x8001	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:28.859411955 CET	192.168.2.16	1.1.1.1	0xa391	Standard query (0)	patient.inboxhealth.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.859522104 CET	192.168.2.16	1.1.1.1	0x342	Standard query (0)	patient.inboxhealth.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:29.566529989 CET	192.168.2.16	1.1.1.1	0x71a	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:29.566680908 CET	192.168.2.16	1.1.1.1	0x1060	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:29.777005911 CET	192.168.2.16	1.1.1.1	0xac2e	Standard query (0)	ws.pusherapp.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:29.777221918 CET	192.168.2.16	1.1.1.1	0x45ba	Standard query (0)	ws.pusherapp.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:29.825114012 CET	192.168.2.16	1.1.1.1	0x7315	Standard query (0)	rest.inboxhealth.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:29.825337887 CET	192.168.2.16	1.1.1.1	0x458d	Standard query (0)	rest.inboxhealth.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:30.421045065 CET	192.168.2.16	1.1.1.1	0x2300	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.421185970 CET	192.168.2.16	1.1.1.1	0xcf8a	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:31.186022997 CET	192.168.2.16	1.1.1.1	0x5a75	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:31.186243057 CET	192.168.2.16	1.1.1.1	0x50f7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:32.124914885 CET	192.168.2.16	1.1.1.1	0x71ff	Standard query (0)	js.pusher.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:32.124914885 CET	192.168.2.16	1.1.1.1	0xe969	Standard query (0)	js.pusher.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:32.403912067 CET	192.168.2.16	1.1.1.1	0xd0f8	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:32.404767990 CET	192.168.2.16	1.1.1.1	0x43b9	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:33.958456993 CET	192.168.2.16	1.1.1.1	0xe350	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:33.958642006 CET	192.168.2.16	1.1.1.1	0x1161	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:34.226248980 CET	192.168.2.16	1.1.1.1	0x845c	Standard query (0)	inboxhealth.zendesk.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:34.226469994 CET	192.168.2.16	1.1.1.1	0x52eb	Standard query (0)	inboxhealth.zendesk.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:35.169469118 CET	192.168.2.16	1.1.1.1	0x8d08	Standard query (0)	rest.inboxhealth.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.169646025 CET	192.168.2.16	1.1.1.1	0x3a5e	Standard query (0)	rest.inboxhealth.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:35.527787924 CET	192.168.2.16	1.1.1.1	0xd0fe	Standard query (0)	sockjs.pusher.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.528058052 CET	192.168.2.16	1.1.1.1	0xf31d	Standard query (0)	sockjs.pusher.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:35.528316021 CET	192.168.2.16	1.1.1.1	0x3050	Standard query (0)	js.pusher.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.528418064 CET	192.168.2.16	1.1.1.1	0x2884	Standard query (0)	js.pusher.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:36.179717064 CET	192.168.2.16	1.1.1.1	0x1047	Standard query (0)	inboxhealth.zendesk.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:36.179717064 CET	192.168.2.16	1.1.1.1	0xb65a	Standard query (0)	inboxhealth.zendesk.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:37.291248083 CET	192.168.2.16	1.1.1.1	0xd25b	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.291248083 CET	192.168.2.16	1.1.1.1	0xf2b3	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:37.318434954 CET	192.168.2.16	1.1.1.1	0xe35b	Standard query (0)	vc.hotjar.io	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.318434954 CET	192.168.2.16	1.1.1.1	0xd21	Standard query (0)	vc.hotjar.io	65	IN (0x0001)	false
Dec 20, 2024 19:03:37.556274891 CET	192.168.2.16	1.1.1.1	0xfefc	Standard query (0)	sockjs.pusher.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.556468964 CET	192.168.2.16	1.1.1.1	0x6d89	Standard query (0)	sockjs.pusher.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:37.632957935 CET	192.168.2.16	1.1.1.1	0xe45a	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.633116961 CET	192.168.2.16	1.1.1.1	0xc3a7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:37.639487982 CET	192.168.2.16	1.1.1.1	0x5cc1	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.639652967 CET	192.168.2.16	1.1.1.1	0xc995	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Dec 20, 2024 19:03:38.577414036 CET	192.168.2.16	1.1.1.1	0x357a	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:38.578041077 CET	192.168.2.16	1.1.1.1	0x82dc	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:40.287900925 CET	192.168.2.16	1.1.1.1	0x5620	Standard query (0)	stats.pusher.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:40.288151979 CET	192.168.2.16	1.1.1.1	0x1b63	Standard query (0)	stats.pusher.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:40.288649082 CET	192.168.2.16	1.1.1.1	0x8288	Standard query (0)	usage.trackjs.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:40.288649082 CET	192.168.2.16	1.1.1.1	0xde1c	Standard query (0)	usage.trackjs.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:42.052745104 CET	192.168.2.16	1.1.1.1	0x607b	Standard query (0)	m.stripe.network	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.052822113 CET	192.168.2.16	1.1.1.1	0xff3c	Standard query (0)	m.stripe.network	65	IN (0x0001)	false
Dec 20, 2024 19:03:42.063812017 CET	192.168.2.16	1.1.1.1	0x16fb	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.066804886 CET	192.168.2.16	1.1.1.1	0xdbb3	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Dec 20, 2024 19:03:42.183979988 CET	192.168.2.16	1.1.1.1	0xacd4	Standard query (0)	widget-mediator.zopim.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.184274912 CET	192.168.2.16	1.1.1.1	0x675e	Standard query (0)	widget-mediator.zopim.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:42.332289934 CET	192.168.2.16	1.1.1.1	0x555f	Standard query (0)	usage.trackjs.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.332531929 CET	192.168.2.16	1.1.1.1	0x7f8c	Standard query (0)	usage.trackjs.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:42.617352009 CET	192.168.2.16	1.1.1.1	0x4e80	Standard query (0)	stats.pusher.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.617607117 CET	192.168.2.16	1.1.1.1	0x5e2a	Standard query (0)	stats.pusher.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:46.342936993 CET	192.168.2.16	1.1.1.1	0xd9e6	Standard query (0)	m.stripe.network	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.343072891 CET	192.168.2.16	1.1.1.1	0x7fb	Standard query (0)	m.stripe.network	65	IN (0x0001)	false
Dec 20, 2024 19:03:46.691272974 CET	192.168.2.16	1.1.1.1	0x1aaa	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.691272974 CET	192.168.2.16	1.1.1.1	0xc28	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:46.708543062 CET	192.168.2.16	1.1.1.1	0xf37f	Standard query (0)	widget-mediator.zopim.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.708651066 CET	192.168.2.16	1.1.1.1	0x8633	Standard query (0)	widget-mediator.zopim.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:46.709165096 CET	192.168.2.16	1.1.1.1	0x7399	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.709538937 CET	192.168.2.16	1.1.1.1	0x7fe5	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Dec 20, 2024 19:03:49.096137047 CET	192.168.2.16	1.1.1.1	0xa14a	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:49.096276999 CET	192.168.2.16	1.1.1.1	0x40b6	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:50.221605062 CET	192.168.2.16	1.1.1.1	0xbe2d	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.221807957 CET	192.168.2.16	1.1.1.1	0x8653	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Dec 20, 2024 19:03:50.231434107 CET	192.168.2.16	1.1.1.1	0xa1e6	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.231813908 CET	192.168.2.16	1.1.1.1	0xfa59	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:51.402179956 CET	192.168.2.16	1.1.1.1	0x5a87	Standard query (0)	stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:51.402354956 CET	192.168.2.16	1.1.1.1	0x7215	Standard query (0)	stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:52.621515036 CET	192.168.2.16	1.1.1.1	0xab47	Standard query (0)	api.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:52.621648073 CET	192.168.2.16	1.1.1.1	0x152f	Standard query (0)	api.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:52.652473927 CET	192.168.2.16	1.1.1.1	0xd54	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:52.653372049 CET	192.168.2.16	1.1.1.1	0xb6a2	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:54.114367008 CET	192.168.2.16	1.1.1.1	0x12c	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:54.114367008 CET	192.168.2.16	1.1.1.1	0x2079	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:55.826877117 CET	192.168.2.16	1.1.1.1	0x757	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:55.827099085 CET	192.168.2.16	1.1.1.1	0xd01d	Standard query (0)	google.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:55.827436924 CET	192.168.2.16	1.1.1.1	0x20bf	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:55.827436924 CET	192.168.2.16	1.1.1.1	0x5404	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:56.486686945 CET	192.168.2.16	1.1.1.1	0x3f33	Standard query (0)	merchant-ui-api.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:56.487143040 CET	192.168.2.16	1.1.1.1	0xe67c	Standard query (0)	merchant-ui-api.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:58.685549974 CET	192.168.2.16	1.1.1.1	0x2ca7	Standard query (0)	stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:58.685699940 CET	192.168.2.16	1.1.1.1	0xe818	Standard query (0)	stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:58.779334068 CET	192.168.2.16	1.1.1.1	0xe60e	Standard query (0)	merchant-ui-api.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:58.779504061 CET	192.168.2.16	1.1.1.1	0x2953	Standard query (0)	merchant-ui-api.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:03:59.763267994 CET	192.168.2.16	1.1.1.1	0x57b5	Standard query (0)	r.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:59.763662100 CET	192.168.2.16	1.1.1.1	0x41c4	Standard query (0)	r.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:00.858210087 CET	192.168.2.16	1.1.1.1	0x2334	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:00.858338118 CET	192.168.2.16	1.1.1.1	0x7e60	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:01.774182081 CET	192.168.2.16	1.1.1.1	0x1c6b	Standard query (0)	pay.sandbox.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:01.774182081 CET	192.168.2.16	1.1.1.1	0xff30	Standard query (0)	pay.sandbox.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:02.283745050 CET	192.168.2.16	1.1.1.1	0x6da2	Standard query (0)	r.stripe.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.284164906 CET	192.168.2.16	1.1.1.1	0xbbd7	Standard query (0)	r.stripe.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:02.735817909 CET	192.168.2.16	1.1.1.1	0x33f5	Standard query (0)	b.stripecdn.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.736084938 CET	192.168.2.16	1.1.1.1	0x169e	Standard query (0)	b.stripecdn.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:04.873573065 CET	192.168.2.16	1.1.1.1	0x162a	Standard query (0)	hcaptcha.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:04.873862982 CET	192.168.2.16	1.1.1.1	0x43f	Standard query (0)	hcaptcha.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:06.654243946 CET	192.168.2.16	1.1.1.1	0x4a1a	Standard query (0)	b.stripecdn.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:06.654546022 CET	192.168.2.16	1.1.1.1	0xa60f	Standard query (0)	b.stripecdn.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:07.317820072 CET	192.168.2.16	1.1.1.1	0xe0ba	Standard query (0)	hcaptcha.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:07.320014954 CET	192.168.2.16	1.1.1.1	0xa6f2	Standard query (0)	hcaptcha.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:07.415283918 CET	192.168.2.16	1.1.1.1	0x8399	Standard query (0)	newassets.hcaptcha.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:07.415596962 CET	192.168.2.16	1.1.1.1	0xae4b	Standard query (0)	newassets.hcaptcha.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:08.078829050 CET	192.168.2.16	1.1.1.1	0x54b4	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:08.078918934 CET	192.168.2.16	1.1.1.1	0x3284	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:10.331046104 CET	192.168.2.16	1.1.1.1	0x6d6e	Standard query (0)	api2.hcaptcha.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:10.331325054 CET	192.168.2.16	1.1.1.1	0x58b6	Standard query (0)	api2.hcaptcha.com	65	IN (0x0001)	false
Dec 20, 2024 19:04:56.963526011 CET	192.168.2.16	1.1.1.1	0x1a2f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:56.964013100 CET	192.168.2.16	1.1.1.1	0xd620	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:05:03.977616072 CET	192.168.2.16	1.1.1.1	0x8c36	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:05:03.977704048 CET	192.168.2.16	1.1.1.1	0xa0f8	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 20, 2024 19:05:04.973150969 CET	192.168.2.16	1.1.1.1	0x227c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:05:04.973289013 CET	192.168.2.16	1.1.1.1	0xf9bb	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 19:03:14.890620947 CET	1.1.1.1	192.168.2.16	0x477d	No error (0)	protect2.fireeye.com		162.159.246.125	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:14.892155886 CET	1.1.1.1	192.168.2.16	0x738e	No error (0)	protect2.fireeye.com			65	IN (0x0001)	false
Dec 20, 2024 19:03:17.672126055 CET	1.1.1.1	192.168.2.16	0x6aae	No error (0)	email.chat.inboxhealth.com	mailgun.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:17.672126055 CET	1.1.1.1	192.168.2.16	0x6aae	No error (0)	mailgun.org		34.110.180.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:17.894933939 CET	1.1.1.1	192.168.2.16	0xffbc	No error (0)	email.chat.inboxhealth.com	mailgun.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:19.291671991 CET	1.1.1.1	192.168.2.16	0x24a9	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:19.296467066 CET	1.1.1.1	192.168.2.16	0x1c8d	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 19:03:19.607444048 CET	1.1.1.1	192.168.2.16	0x3a29	No error (0)	inboxhealth.com		18.161.111.54	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:19.607444048 CET	1.1.1.1	192.168.2.16	0x3a29	No error (0)	inboxhealth.com		18.161.111.84	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:19.607444048 CET	1.1.1.1	192.168.2.16	0x3a29	No error (0)	inboxhealth.com		18.161.111.112	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:19.607444048 CET	1.1.1.1	192.168.2.16	0x3a29	No error (0)	inboxhealth.com		18.161.111.73	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:22.417588949 CET	1.1.1.1	192.168.2.16	0xfc14	No error (0)	patient.inboxhealth.com		52.222.144.12	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:22.417588949 CET	1.1.1.1	192.168.2.16	0xfc14	No error (0)	patient.inboxhealth.com		52.222.144.117	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:22.417588949 CET	1.1.1.1	192.168.2.16	0xfc14	No error (0)	patient.inboxhealth.com		52.222.144.10	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:22.417588949 CET	1.1.1.1	192.168.2.16	0xfc14	No error (0)	patient.inboxhealth.com		52.222.144.23	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.228631973 CET	1.1.1.1	192.168.2.16	0x6c5a	No error (0)	www.googleoptimize.com		142.250.181.78	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.228863001 CET	1.1.1.1	192.168.2.16	0xc8f1	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.228863001 CET	1.1.1.1	192.168.2.16	0xc8f1	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.228899002 CET	1.1.1.1	192.168.2.16	0xcb22	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 20, 2024 19:03:25.230067015 CET	1.1.1.1	192.168.2.16	0x53cc	No error (0)	static.zdassets.com		216.198.54.3	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.230067015 CET	1.1.1.1	192.168.2.16	0x53cc	No error (0)	static.zdassets.com		216.198.53.3	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.392064095 CET	1.1.1.1	192.168.2.16	0x1a9f	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:25.396636009 CET	1.1.1.1	192.168.2.16	0x3265	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:25.396636009 CET	1.1.1.1	192.168.2.16	0x3265	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.396636009 CET	1.1.1.1	192.168.2.16	0x3265	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.396636009 CET	1.1.1.1	192.168.2.16	0x3265	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.396636009 CET	1.1.1.1	192.168.2.16	0x3265	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.402606010 CET	1.1.1.1	192.168.2.16	0xb609	No error (0)	cdn.plaid.com		52.222.144.109	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.402606010 CET	1.1.1.1	192.168.2.16	0xb609	No error (0)	cdn.plaid.com		52.222.144.16	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.402606010 CET	1.1.1.1	192.168.2.16	0xb609	No error (0)	cdn.plaid.com		52.222.144.11	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:25.402606010 CET	1.1.1.1	192.168.2.16	0xb609	No error (0)	cdn.plaid.com		52.222.144.107	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:27.119885921 CET	1.1.1.1	192.168.2.16	0x26ec	No error (0)	static.zdassets.com		216.198.53.3	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:27.119885921 CET	1.1.1.1	192.168.2.16	0x26ec	No error (0)	static.zdassets.com		216.198.54.3	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:27.355356932 CET	1.1.1.1	192.168.2.16	0x6a8b	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 20, 2024 19:03:27.355416059 CET	1.1.1.1	192.168.2.16	0xd4bd	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:27.355416059 CET	1.1.1.1	192.168.2.16	0xd4bd	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.301206112 CET	1.1.1.1	192.168.2.16	0x57de	No error (0)	cdn.plaid.com		52.222.144.109	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.301206112 CET	1.1.1.1	192.168.2.16	0x57de	No error (0)	cdn.plaid.com		52.222.144.16	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.301206112 CET	1.1.1.1	192.168.2.16	0x57de	No error (0)	cdn.plaid.com		52.222.144.107	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.301206112 CET	1.1.1.1	192.168.2.16	0x57de	No error (0)	cdn.plaid.com		52.222.144.11	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.567687035 CET	1.1.1.1	192.168.2.16	0xad57	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:28.567687035 CET	1.1.1.1	192.168.2.16	0xad57	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.567687035 CET	1.1.1.1	192.168.2.16	0xad57	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.567687035 CET	1.1.1.1	192.168.2.16	0xad57	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.567687035 CET	1.1.1.1	192.168.2.16	0xad57	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.568378925 CET	1.1.1.1	192.168.2.16	0xd86c	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:28.660692930 CET	1.1.1.1	192.168.2.16	0xadd4	No error (0)	www.googleoptimize.com		142.250.181.78	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.670141935 CET	1.1.1.1	192.168.2.16	0x1bf5	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.670435905 CET	1.1.1.1	192.168.2.16	0x95a	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 19:03:28.725357056 CET	1.1.1.1	192.168.2.16	0xc67d	No error (0)	ekr.zdassets.com		216.198.53.3	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.725357056 CET	1.1.1.1	192.168.2.16	0xc67d	No error (0)	ekr.zdassets.com		216.198.54.3	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.997334957 CET	1.1.1.1	192.168.2.16	0xa391	No error (0)	patient.inboxhealth.com		52.222.144.10	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.997334957 CET	1.1.1.1	192.168.2.16	0xa391	No error (0)	patient.inboxhealth.com		52.222.144.23	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.997334957 CET	1.1.1.1	192.168.2.16	0xa391	No error (0)	patient.inboxhealth.com		52.222.144.12	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:28.997334957 CET	1.1.1.1	192.168.2.16	0xa391	No error (0)	patient.inboxhealth.com		52.222.144.117	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:29.703576088 CET	1.1.1.1	192.168.2.16	0x71a	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:29.703576088 CET	1.1.1.1	192.168.2.16	0x71a	No error (0)	static-cdn.hotjar.com		108.158.75.120	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:29.703576088 CET	1.1.1.1	192.168.2.16	0x71a	No error (0)	static-cdn.hotjar.com		108.158.75.112	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:29.703576088 CET	1.1.1.1	192.168.2.16	0x71a	No error (0)	static-cdn.hotjar.com		108.158.75.87	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:29.703576088 CET	1.1.1.1	192.168.2.16	0x71a	No error (0)	static-cdn.hotjar.com		108.158.75.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:29.703969955 CET	1.1.1.1	192.168.2.16	0x1060	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:30.036593914 CET	1.1.1.1	192.168.2.16	0x7315	No error (0)	rest.inboxhealth.com		13.59.75.255	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.036593914 CET	1.1.1.1	192.168.2.16	0x7315	No error (0)	rest.inboxhealth.com		3.143.103.203	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.036593914 CET	1.1.1.1	192.168.2.16	0x7315	No error (0)	rest.inboxhealth.com		3.132.245.25	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	ws.pusherapp.com	ws-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	ws-mt1.pusher.com	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		52.4.95.4	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		52.4.34.138	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		54.235.104.225	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		54.234.19.72	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		3.222.66.1	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		54.208.165.19	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		52.1.28.67	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.317774057 CET	1.1.1.1	192.168.2.16	0xac2e	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		23.21.123.171	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.318701982 CET	1.1.1.1	192.168.2.16	0x45ba	No error (0)	ws.pusherapp.com	ws-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:30.318701982 CET	1.1.1.1	192.168.2.16	0x45ba	No error (0)	ws-mt1.pusher.com	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:30.558312893 CET	1.1.1.1	192.168.2.16	0x2300	No error (0)	ekr.zdassets.com		216.198.54.3	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:30.558312893 CET	1.1.1.1	192.168.2.16	0x2300	No error (0)	ekr.zdassets.com		216.198.53.3	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:31.323548079 CET	1.1.1.1	192.168.2.16	0x50f7	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 19:03:31.323976994 CET	1.1.1.1	192.168.2.16	0x5a75	No error (0)	www.google.com		172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:32.426804066 CET	1.1.1.1	192.168.2.16	0xe969	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:32.432063103 CET	1.1.1.1	192.168.2.16	0x71ff	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:32.432063103 CET	1.1.1.1	192.168.2.16	0x71ff	No error (0)	d3dy5gmtp8yhk7.cloudfront.net		108.158.81.56	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:32.541033983 CET	1.1.1.1	192.168.2.16	0xd0f8	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:32.541033983 CET	1.1.1.1	192.168.2.16	0xd0f8	No error (0)	static-cdn.hotjar.com		108.158.75.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:32.541033983 CET	1.1.1.1	192.168.2.16	0xd0f8	No error (0)	static-cdn.hotjar.com		108.158.75.112	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:32.541033983 CET	1.1.1.1	192.168.2.16	0xd0f8	No error (0)	static-cdn.hotjar.com		108.158.75.87	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:32.541033983 CET	1.1.1.1	192.168.2.16	0xd0f8	No error (0)	static-cdn.hotjar.com		108.158.75.120	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:32.541532993 CET	1.1.1.1	192.168.2.16	0x43b9	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:34.095288038 CET	1.1.1.1	192.168.2.16	0xe350	No error (0)	script.hotjar.com		13.227.8.2	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:34.095288038 CET	1.1.1.1	192.168.2.16	0xe350	No error (0)	script.hotjar.com		13.227.8.4	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:34.095288038 CET	1.1.1.1	192.168.2.16	0xe350	No error (0)	script.hotjar.com		13.227.8.16	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:34.095288038 CET	1.1.1.1	192.168.2.16	0xe350	No error (0)	script.hotjar.com		13.227.8.35	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:34.446321964 CET	1.1.1.1	192.168.2.16	0x845c	No error (0)	inboxhealth.zendesk.com		216.198.53.1	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:34.446321964 CET	1.1.1.1	192.168.2.16	0x845c	No error (0)	inboxhealth.zendesk.com		216.198.54.1	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.309930086 CET	1.1.1.1	192.168.2.16	0x8d08	No error (0)	rest.inboxhealth.com		3.132.245.25	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.309930086 CET	1.1.1.1	192.168.2.16	0x8d08	No error (0)	rest.inboxhealth.com		3.143.103.203	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.309930086 CET	1.1.1.1	192.168.2.16	0x8d08	No error (0)	rest.inboxhealth.com		13.59.75.255	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.666193962 CET	1.1.1.1	192.168.2.16	0x2884	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:35.666307926 CET	1.1.1.1	192.168.2.16	0x3050	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:35.666307926 CET	1.1.1.1	192.168.2.16	0x3050	No error (0)	d3dy5gmtp8yhk7.cloudfront.net		108.158.81.56	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.887729883 CET	1.1.1.1	192.168.2.16	0xf31d	No error (0)	sockjs.pusher.com	sockjs-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:35.887729883 CET	1.1.1.1	192.168.2.16	0xf31d	No error (0)	sockjs-mt1.pusher.com	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:35.887861013 CET	1.1.1.1	192.168.2.16	0xd0fe	No error (0)	sockjs.pusher.com	sockjs-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:35.887861013 CET	1.1.1.1	192.168.2.16	0xd0fe	No error (0)	sockjs-mt1.pusher.com	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:35.887861013 CET	1.1.1.1	192.168.2.16	0xd0fe	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		44.217.82.191	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.887861013 CET	1.1.1.1	192.168.2.16	0xd0fe	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		34.201.239.212	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:35.887861013 CET	1.1.1.1	192.168.2.16	0xd0fe	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		52.55.106.120	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:36.317692041 CET	1.1.1.1	192.168.2.16	0x1047	No error (0)	inboxhealth.zendesk.com		216.198.54.1	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:36.317692041 CET	1.1.1.1	192.168.2.16	0x1047	No error (0)	inboxhealth.zendesk.com		216.198.53.1	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.429259062 CET	1.1.1.1	192.168.2.16	0xd25b	No error (0)	script.hotjar.com		13.227.8.2	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.429259062 CET	1.1.1.1	192.168.2.16	0xd25b	No error (0)	script.hotjar.com		13.227.8.4	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.429259062 CET	1.1.1.1	192.168.2.16	0xd25b	No error (0)	script.hotjar.com		13.227.8.35	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.429259062 CET	1.1.1.1	192.168.2.16	0xd25b	No error (0)	script.hotjar.com		13.227.8.16	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.455656052 CET	1.1.1.1	192.168.2.16	0xe35b	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:37.455656052 CET	1.1.1.1	192.168.2.16	0xe35b	No error (0)	vc-live-cf.hotjar.io		3.160.212.126	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.455656052 CET	1.1.1.1	192.168.2.16	0xe35b	No error (0)	vc-live-cf.hotjar.io		3.160.212.128	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.455656052 CET	1.1.1.1	192.168.2.16	0xe35b	No error (0)	vc-live-cf.hotjar.io		3.160.212.84	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.455656052 CET	1.1.1.1	192.168.2.16	0xe35b	No error (0)	vc-live-cf.hotjar.io		3.160.212.101	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.629503965 CET	1.1.1.1	192.168.2.16	0xd21	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:37.693478107 CET	1.1.1.1	192.168.2.16	0xfefc	No error (0)	sockjs.pusher.com	sockjs-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:37.693478107 CET	1.1.1.1	192.168.2.16	0xfefc	No error (0)	sockjs-mt1.pusher.com	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:37.693478107 CET	1.1.1.1	192.168.2.16	0xfefc	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		44.217.82.191	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.693478107 CET	1.1.1.1	192.168.2.16	0xfefc	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		52.55.106.120	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.693478107 CET	1.1.1.1	192.168.2.16	0xfefc	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		34.201.239.212	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.698153973 CET	1.1.1.1	192.168.2.16	0x6d89	No error (0)	sockjs.pusher.com	sockjs-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:37.698153973 CET	1.1.1.1	192.168.2.16	0x6d89	No error (0)	sockjs-mt1.pusher.com	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:37.770709038 CET	1.1.1.1	192.168.2.16	0xe45a	No error (0)	analytics.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:37.776964903 CET	1.1.1.1	192.168.2.16	0x5cc1	No error (0)	td.doubleclick.net		142.250.181.130	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:38.715727091 CET	1.1.1.1	192.168.2.16	0x357a	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:38.715727091 CET	1.1.1.1	192.168.2.16	0x357a	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:38.715727091 CET	1.1.1.1	192.168.2.16	0x357a	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:38.715727091 CET	1.1.1.1	192.168.2.16	0x357a	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:38.715727091 CET	1.1.1.1	192.168.2.16	0x357a	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:38.718370914 CET	1.1.1.1	192.168.2.16	0x82dc	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:40.425745964 CET	1.1.1.1	192.168.2.16	0x8288	No error (0)	usage.trackjs.com		148.113.163.217	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:40.425745964 CET	1.1.1.1	192.168.2.16	0x8288	No error (0)	usage.trackjs.com		148.113.163.172	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:40.425764084 CET	1.1.1.1	192.168.2.16	0x5620	No error (0)	stats.pusher.com	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:40.425764084 CET	1.1.1.1	192.168.2.16	0x5620	No error (0)	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		54.225.146.64	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:40.425764084 CET	1.1.1.1	192.168.2.16	0x5620	No error (0)	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		54.91.56.182	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:40.425964117 CET	1.1.1.1	192.168.2.16	0x1b63	No error (0)	stats.pusher.com	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:42.191215992 CET	1.1.1.1	192.168.2.16	0x607b	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:42.191215992 CET	1.1.1.1	192.168.2.16	0x607b	No error (0)	prod-m-tree.stripe.network	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:42.191215992 CET	1.1.1.1	192.168.2.16	0x607b	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.191215992 CET	1.1.1.1	192.168.2.16	0x607b	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.191215992 CET	1.1.1.1	192.168.2.16	0x607b	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.191215992 CET	1.1.1.1	192.168.2.16	0x607b	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.191414118 CET	1.1.1.1	192.168.2.16	0xff3c	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:42.191414118 CET	1.1.1.1	192.168.2.16	0xff3c	No error (0)	prod-m-tree.stripe.network	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:42.200777054 CET	1.1.1.1	192.168.2.16	0x16fb	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.200777054 CET	1.1.1.1	192.168.2.16	0x16fb	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.200777054 CET	1.1.1.1	192.168.2.16	0x16fb	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.200777054 CET	1.1.1.1	192.168.2.16	0x16fb	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.327651024 CET	1.1.1.1	192.168.2.16	0xacd4	No error (0)	widget-mediator.zopim.com		18.184.10.197	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.327651024 CET	1.1.1.1	192.168.2.16	0xacd4	No error (0)	widget-mediator.zopim.com		52.57.117.92	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.327651024 CET	1.1.1.1	192.168.2.16	0xacd4	No error (0)	widget-mediator.zopim.com		52.57.45.42	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.327651024 CET	1.1.1.1	192.168.2.16	0xacd4	No error (0)	widget-mediator.zopim.com		3.66.102.145	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.327651024 CET	1.1.1.1	192.168.2.16	0xacd4	No error (0)	widget-mediator.zopim.com		3.67.33.203	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.327651024 CET	1.1.1.1	192.168.2.16	0xacd4	No error (0)	widget-mediator.zopim.com		3.69.121.54	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.469769955 CET	1.1.1.1	192.168.2.16	0x555f	No error (0)	usage.trackjs.com		148.113.163.217	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.469769955 CET	1.1.1.1	192.168.2.16	0x555f	No error (0)	usage.trackjs.com		148.113.163.172	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.785933971 CET	1.1.1.1	192.168.2.16	0x5e2a	No error (0)	stats.pusher.com	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:42.785949945 CET	1.1.1.1	192.168.2.16	0x4e80	No error (0)	stats.pusher.com	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:42.785949945 CET	1.1.1.1	192.168.2.16	0x4e80	No error (0)	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		54.91.56.182	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:42.785949945 CET	1.1.1.1	192.168.2.16	0x4e80	No error (0)	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		54.225.146.64	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.480928898 CET	1.1.1.1	192.168.2.16	0xd9e6	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:46.480928898 CET	1.1.1.1	192.168.2.16	0xd9e6	No error (0)	prod-m-tree.stripe.network	d1tcqh4bio8cty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:46.480928898 CET	1.1.1.1	192.168.2.16	0xd9e6	No error (0)	d1tcqh4bio8cty.cloudfront.net		108.158.75.118	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.480928898 CET	1.1.1.1	192.168.2.16	0xd9e6	No error (0)	d1tcqh4bio8cty.cloudfront.net		108.158.75.96	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.480928898 CET	1.1.1.1	192.168.2.16	0xd9e6	No error (0)	d1tcqh4bio8cty.cloudfront.net		108.158.75.14	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.480928898 CET	1.1.1.1	192.168.2.16	0xd9e6	No error (0)	d1tcqh4bio8cty.cloudfront.net		108.158.75.47	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.480947971 CET	1.1.1.1	192.168.2.16	0x7fb	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:46.480947971 CET	1.1.1.1	192.168.2.16	0x7fb	No error (0)	prod-m-tree.stripe.network	d1tcqh4bio8cty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:03:46.828541994 CET	1.1.1.1	192.168.2.16	0x1aaa	No error (0)	m.stripe.com		34.215.94.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.828541994 CET	1.1.1.1	192.168.2.16	0x1aaa	No error (0)	m.stripe.com		54.149.101.27	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.828541994 CET	1.1.1.1	192.168.2.16	0x1aaa	No error (0)	m.stripe.com		54.200.201.125	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.828541994 CET	1.1.1.1	192.168.2.16	0x1aaa	No error (0)	m.stripe.com		54.187.114.187	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.828541994 CET	1.1.1.1	192.168.2.16	0x1aaa	No error (0)	m.stripe.com		44.237.227.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.828541994 CET	1.1.1.1	192.168.2.16	0x1aaa	No error (0)	m.stripe.com		34.209.114.55	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.828541994 CET	1.1.1.1	192.168.2.16	0x1aaa	No error (0)	m.stripe.com		54.188.6.230	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.828541994 CET	1.1.1.1	192.168.2.16	0x1aaa	No error (0)	m.stripe.com		44.238.51.57	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.846355915 CET	1.1.1.1	192.168.2.16	0xf37f	No error (0)	widget-mediator.zopim.com		18.184.10.197	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.846355915 CET	1.1.1.1	192.168.2.16	0xf37f	No error (0)	widget-mediator.zopim.com		52.57.117.92	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.846355915 CET	1.1.1.1	192.168.2.16	0xf37f	No error (0)	widget-mediator.zopim.com		3.69.121.54	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.846355915 CET	1.1.1.1	192.168.2.16	0xf37f	No error (0)	widget-mediator.zopim.com		52.57.45.42	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.846355915 CET	1.1.1.1	192.168.2.16	0xf37f	No error (0)	widget-mediator.zopim.com		3.67.33.203	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.846355915 CET	1.1.1.1	192.168.2.16	0xf37f	No error (0)	widget-mediator.zopim.com		3.66.102.145	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.847420931 CET	1.1.1.1	192.168.2.16	0x7399	No error (0)	widget.intercom.io		108.158.75.116	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.847420931 CET	1.1.1.1	192.168.2.16	0x7399	No error (0)	widget.intercom.io		108.158.75.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.847420931 CET	1.1.1.1	192.168.2.16	0x7399	No error (0)	widget.intercom.io		108.158.75.31	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:46.847420931 CET	1.1.1.1	192.168.2.16	0x7399	No error (0)	widget.intercom.io		108.158.75.33	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:49.233920097 CET	1.1.1.1	192.168.2.16	0xa14a	No error (0)	m.stripe.com		34.215.94.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:49.233920097 CET	1.1.1.1	192.168.2.16	0xa14a	No error (0)	m.stripe.com		54.149.101.27	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:49.233920097 CET	1.1.1.1	192.168.2.16	0xa14a	No error (0)	m.stripe.com		34.209.114.55	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:49.233920097 CET	1.1.1.1	192.168.2.16	0xa14a	No error (0)	m.stripe.com		44.238.51.57	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:49.233920097 CET	1.1.1.1	192.168.2.16	0xa14a	No error (0)	m.stripe.com		44.237.227.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:49.233920097 CET	1.1.1.1	192.168.2.16	0xa14a	No error (0)	m.stripe.com		54.188.6.230	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:49.233920097 CET	1.1.1.1	192.168.2.16	0xa14a	No error (0)	m.stripe.com		54.187.114.187	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:49.233920097 CET	1.1.1.1	192.168.2.16	0xa14a	No error (0)	m.stripe.com		54.200.201.125	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.358804941 CET	1.1.1.1	192.168.2.16	0xbe2d	No error (0)	widget.intercom.io		108.158.75.33	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.358804941 CET	1.1.1.1	192.168.2.16	0xbe2d	No error (0)	widget.intercom.io		108.158.75.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.358804941 CET	1.1.1.1	192.168.2.16	0xbe2d	No error (0)	widget.intercom.io		108.158.75.116	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.358804941 CET	1.1.1.1	192.168.2.16	0xbe2d	No error (0)	widget.intercom.io		108.158.75.31	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.369649887 CET	1.1.1.1	192.168.2.16	0xa1e6	No error (0)	js.intercomcdn.com		108.158.75.52	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.369649887 CET	1.1.1.1	192.168.2.16	0xa1e6	No error (0)	js.intercomcdn.com		108.158.75.64	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.369649887 CET	1.1.1.1	192.168.2.16	0xa1e6	No error (0)	js.intercomcdn.com		108.158.75.91	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:50.369649887 CET	1.1.1.1	192.168.2.16	0xa1e6	No error (0)	js.intercomcdn.com		108.158.75.4	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:51.539042950 CET	1.1.1.1	192.168.2.16	0x5a87	No error (0)	stripe.com		34.252.74.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:51.539042950 CET	1.1.1.1	192.168.2.16	0x5a87	No error (0)	stripe.com		54.76.53.164	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:51.539042950 CET	1.1.1.1	192.168.2.16	0x5a87	No error (0)	stripe.com		52.215.231.162	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:52.759341002 CET	1.1.1.1	192.168.2.16	0xab47	No error (0)	api.stripe.com		34.250.29.31	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:52.759341002 CET	1.1.1.1	192.168.2.16	0xab47	No error (0)	api.stripe.com		34.250.89.120	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:52.759341002 CET	1.1.1.1	192.168.2.16	0xab47	No error (0)	api.stripe.com		34.241.59.225	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:52.790385962 CET	1.1.1.1	192.168.2.16	0xd54	No error (0)	pay.google.com		108.177.14.92	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:54.258035898 CET	1.1.1.1	192.168.2.16	0x12c	No error (0)	js.intercomcdn.com		108.158.75.52	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:54.258035898 CET	1.1.1.1	192.168.2.16	0x12c	No error (0)	js.intercomcdn.com		108.158.75.4	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:54.258035898 CET	1.1.1.1	192.168.2.16	0x12c	No error (0)	js.intercomcdn.com		108.158.75.91	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:54.258035898 CET	1.1.1.1	192.168.2.16	0x12c	No error (0)	js.intercomcdn.com		108.158.75.64	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:55.964092016 CET	1.1.1.1	192.168.2.16	0xd01d	No error (0)	google.com			65	IN (0x0001)	false
Dec 20, 2024 19:03:55.964678049 CET	1.1.1.1	192.168.2.16	0x20bf	No error (0)	pay.google.com		108.177.14.92	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:55.964693069 CET	1.1.1.1	192.168.2.16	0x757	No error (0)	google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:56.624146938 CET	1.1.1.1	192.168.2.16	0x3f33	No error (0)	merchant-ui-api.stripe.com		52.210.46.219	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:56.624146938 CET	1.1.1.1	192.168.2.16	0x3f33	No error (0)	merchant-ui-api.stripe.com		54.170.183.1	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:56.624146938 CET	1.1.1.1	192.168.2.16	0x3f33	No error (0)	merchant-ui-api.stripe.com		176.34.78.115	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:58.822647095 CET	1.1.1.1	192.168.2.16	0x2ca7	No error (0)	stripe.com		52.215.231.162	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:58.822647095 CET	1.1.1.1	192.168.2.16	0x2ca7	No error (0)	stripe.com		54.76.53.164	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:58.822647095 CET	1.1.1.1	192.168.2.16	0x2ca7	No error (0)	stripe.com		34.252.74.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:58.917069912 CET	1.1.1.1	192.168.2.16	0xe60e	No error (0)	merchant-ui-api.stripe.com		54.170.183.1	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:58.917069912 CET	1.1.1.1	192.168.2.16	0xe60e	No error (0)	merchant-ui-api.stripe.com		176.34.78.115	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:58.917069912 CET	1.1.1.1	192.168.2.16	0xe60e	No error (0)	merchant-ui-api.stripe.com		52.210.46.219	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:59.904079914 CET	1.1.1.1	192.168.2.16	0x57b5	No error (0)	r.stripe.com		54.187.119.242	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:59.904079914 CET	1.1.1.1	192.168.2.16	0x57b5	No error (0)	r.stripe.com		54.187.159.182	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:03:59.904079914 CET	1.1.1.1	192.168.2.16	0x57b5	No error (0)	r.stripe.com		54.186.23.98	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:00.995891094 CET	1.1.1.1	192.168.2.16	0x2334	No error (0)	pay.google.com		209.85.233.92	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:01.911791086 CET	1.1.1.1	192.168.2.16	0x1c6b	No error (0)	pay.sandbox.google.com		173.194.73.81	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.422281027 CET	1.1.1.1	192.168.2.16	0x6da2	No error (0)	r.stripe.com		54.187.159.182	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.422281027 CET	1.1.1.1	192.168.2.16	0x6da2	No error (0)	r.stripe.com		54.187.119.242	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.422281027 CET	1.1.1.1	192.168.2.16	0x6da2	No error (0)	r.stripe.com		54.186.23.98	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.873843908 CET	1.1.1.1	192.168.2.16	0x33f5	No error (0)	b.stripecdn.com	prod-b-tree.stripecdn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:04:02.873843908 CET	1.1.1.1	192.168.2.16	0x33f5	No error (0)	prod-b-tree.stripecdn.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:04:02.873843908 CET	1.1.1.1	192.168.2.16	0x33f5	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.873843908 CET	1.1.1.1	192.168.2.16	0x33f5	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.873843908 CET	1.1.1.1	192.168.2.16	0x33f5	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.873843908 CET	1.1.1.1	192.168.2.16	0x33f5	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:02.876281977 CET	1.1.1.1	192.168.2.16	0x169e	No error (0)	b.stripecdn.com	prod-b-tree.stripecdn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:04:02.876281977 CET	1.1.1.1	192.168.2.16	0x169e	No error (0)	prod-b-tree.stripecdn.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:04:05.011432886 CET	1.1.1.1	192.168.2.16	0x43f	No error (0)	hcaptcha.com			65	IN (0x0001)	false
Dec 20, 2024 19:04:05.011666059 CET	1.1.1.1	192.168.2.16	0x162a	No error (0)	hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:05.011666059 CET	1.1.1.1	192.168.2.16	0x162a	No error (0)	hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:06.792100906 CET	1.1.1.1	192.168.2.16	0x4a1a	No error (0)	b.stripecdn.com	prod-b-tree.stripecdn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:04:06.792100906 CET	1.1.1.1	192.168.2.16	0x4a1a	No error (0)	prod-b-tree.stripecdn.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:04:06.792100906 CET	1.1.1.1	192.168.2.16	0x4a1a	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:06.792100906 CET	1.1.1.1	192.168.2.16	0x4a1a	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:06.792100906 CET	1.1.1.1	192.168.2.16	0x4a1a	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:06.792100906 CET	1.1.1.1	192.168.2.16	0x4a1a	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:06.798064947 CET	1.1.1.1	192.168.2.16	0xa60f	No error (0)	b.stripecdn.com	prod-b-tree.stripecdn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:04:06.798064947 CET	1.1.1.1	192.168.2.16	0xa60f	No error (0)	prod-b-tree.stripecdn.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:04:07.455302954 CET	1.1.1.1	192.168.2.16	0xe0ba	No error (0)	hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:07.455302954 CET	1.1.1.1	192.168.2.16	0xe0ba	No error (0)	hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:07.473424911 CET	1.1.1.1	192.168.2.16	0xa6f2	No error (0)	hcaptcha.com			65	IN (0x0001)	false
Dec 20, 2024 19:04:07.551892042 CET	1.1.1.1	192.168.2.16	0x8399	No error (0)	newassets.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:07.551892042 CET	1.1.1.1	192.168.2.16	0x8399	No error (0)	newassets.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:07.560600042 CET	1.1.1.1	192.168.2.16	0xae4b	No error (0)	newassets.hcaptcha.com			65	IN (0x0001)	false
Dec 20, 2024 19:04:08.215831995 CET	1.1.1.1	192.168.2.16	0x54b4	No error (0)	play.google.com		142.250.181.142	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:10.469178915 CET	1.1.1.1	192.168.2.16	0x6d6e	No error (0)	api2.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:10.469178915 CET	1.1.1.1	192.168.2.16	0x6d6e	No error (0)	api2.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:10.470043898 CET	1.1.1.1	192.168.2.16	0x58b6	No error (0)	api2.hcaptcha.com			65	IN (0x0001)	false
Dec 20, 2024 19:04:57.100267887 CET	1.1.1.1	192.168.2.16	0x1a2f	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:04:57.101030111 CET	1.1.1.1	192.168.2.16	0xd620	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 19:05:04.116534948 CET	1.1.1.1	192.168.2.16	0xa0f8	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:05:04.118063927 CET	1.1.1.1	192.168.2.16	0x8c36	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 19:05:04.118063927 CET	1.1.1.1	192.168.2.16	0x8c36	No error (0)	plus.l.google.com		142.250.181.46	A (IP address)	IN (0x0001)	false
Dec 20, 2024 19:05:05.110399008 CET	1.1.1.1	192.168.2.16	0x227c	No error (0)	play.google.com		142.250.181.142	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49722	162.159.246.125	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:16 UTC	1253	OUT	GET /v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt HTTP/1.1 Host: protect2.fireeye.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:17 UTC	719	IN	HTTP/1.1 302 Found Date: Fri, 20 Dec 2024 18:03:17 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close location: https://email.chat.inboxhealth.com/c/eJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt x-fireeye-faude: Benign CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8f518c52cb8972b7-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49725	34.110.180.34	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:18 UTC	1103	OUT	GET /c/eJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt HTTP/1.1 Host: email.chat.inboxhealth.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:19 UTC	454	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-store Content-Length: 712 Content-Type: text/html Date: Fri, 20 Dec 2024 18:03:19 GMT Location: https://inboxhealth.com/patient/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba X-Robots-Tag: noindex X-Xss-Protection: 1; mode=block Connection: close
2024-12-20 18:03:19 UTC	712	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta name="robots" content="noindex"><meta charset="utf-8"></head><body><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49727	18.161.111.54	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:21 UTC	799	OUT	GET /patient/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba HTTP/1.1 Host: inboxhealth.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:22 UTC	746	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Content-Length: 389 Connection: close Date: Fri, 20 Dec 2024 18:03:21 GMT Location: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Server: Apache Strict-Transport-Security: max-age=315360000; preload X-Cache: Miss from cloudfront Via: 1.1 8d5fe515617dadfba41ff97cf5f2abec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P4 X-Amz-Cf-Id: Po89mo7SB6GrOXYFvPgkudNoh8KXA6_AtCH6I5yaZooBX8AXuxBS_g== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-12-20 18:03:22 UTC	389	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 74 69 65 6e 74 2e 69 6e 62 6f 78 68 65 61 6c 74 68 2e 63 6f 6d 2f 71 75 69 63 6b 50 61 79 3f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 74 6f 6b 65 6e 3d 58 48 63 55 74 67 26 61 6d 70 3b 65 6e 74 65 72 70 72 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49728	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:23 UTC	799	OUT	GET /quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:25 UTC	736	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 9946 Connection: close Last-Modified: Wed, 18 Dec 2024 22:04:40 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 20 Dec 2024 18:03:25 GMT Cache-Control: max-age=0, no-cache ETag: "bc95dc71758ea24509aeb7531b105db3" X-Cache: Error from cloudfront Via: 1.1 8e72609f76eedcc790a085684fec9340.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: vemqixBkJkpkU1A0d-_kz8R0bIe8Z5ggbPaSumrGiYU3VceJTjRCpA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:25 UTC	9946	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6f 6c 64 20 70 6f 6c 79 66 69 6c 6c 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6f 6c 64 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 38 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 Data Ascii: <!DOCTYPE html>...[if lt IE 8 ]><html class="unsupported"><![endif]-->...[if IE 8 ]><html class="old polyfill"><![endif]-->...[if IE 9 ]><html class="old"><![endif]-->...[if (gt IE 8)\|!(IE)]>...> <html class=""> ...<![endif]--> <head> <met

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49734	104.17.25.14	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:26 UTC	582	OUT	GET /polyfill/v2/polyfill.min.js?features=Intl.~locale.en-US HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:27 UTC	887	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:27 GMT Content-Type: text/javascript; charset=UTF-8 Content-Length: 103 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800, immutable Vary: User-Agent, Accept-Encoding Access-Control-Allow-Methods: GET,HEAD,OPTIONS Cf-Polyfill-Version: 3.25.1 X-Compress-Hint: on Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rdFKETVi2ebsyxEhAqWIi47RblOaqmkP9XCadSLbkvfjUpQwtPUSncSJ9JC3iRiNUAor0SM3gF1sbXfaSIWTIVFgo%2Br2WDtiPdW%2BkyJJCDlcc%2BlKIw6gU%2Fs5FD6vaqRks5B7sFxK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f518c93fc19c411-EWR alt-svc: h3=":443"; ma=86400
2024-12-20 18:03:27 UTC	103	IN	Data Raw: 2f 2a 0a 20 2a 20 50 6f 6c 79 66 69 6c 6c 20 73 65 72 76 69 63 65 20 76 33 2e 32 35 2e 31 0a 20 2a 20 44 69 73 61 62 6c 65 20 6d 69 6e 69 66 69 63 61 74 69 6f 6e 20 28 72 65 6d 6f 76 65 20 60 2e 6d 69 6e 60 20 66 72 6f 6d 20 55 52 4c 20 70 61 74 68 29 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 0a 2a 2f 0a 0a Data Ascii: /* * Polyfill service v3.25.1 * Disable minification (remove `.min` from URL path) for more info*/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49735	216.198.54.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:26 UTC	581	OUT	GET /ekr/snippet.js?key=a38e4305-dfd3-44f3-b64c-d15d8b98fd79 HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:26 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:26 GMT Content-Type: application/javascript Content-Length: 10215 Connection: close x-amz-id-2: V3cI6UbGikpJegbVFxEndZhQn+QRsrs/iMERLXsBmzhw/qhhpHaF49+66GIwiR5ZvMEzrtaC66Y= x-amz-request-id: PFXPRZFE9H8WA2XP x-amz-replication-status: COMPLETED Last-Modified: Mon, 04 Nov 2024 09:45:04 GMT ETag: "c88d625098ddb649cf216dba2e52435c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600, s-maxage=60 x-amz-version-id: C4qpYKgeT8.DeRlre_wbz3El4DCj0uok CF-Cache-Status: HIT Age: 49 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UkIoMK0villEFKQSFxbDiw3ZcOjC2QKwqVvHz9PIyrISelQENEDkEJKLzs%2FmuwfMkitOhMCE4IGMzzKjVsjT2oAi%2BVAND%2BHkLthhv2jgGkoD6YCx8AGhUvTrUw4Z3rcZnjbRwj4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518c941da378e2-EWR
2024-12-20 18:03:26 UTC	239	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 37 31 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2c 74 2e 73 65 61 72 63 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 53 74 72 69 6e 67 3a 74 2c 70 61 72 73 65 55 72 6c 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 72 3f 7b 7d 3a 72 2e 73 70 6c 69 74 28 22 26 22 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: (()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e
2024-12-20 18:03:26 UTC	1369	IN	Data Raw: 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 5b 72 5b 30 5d 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 29 2c 65 7d 29 2c 7b 7d 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 22 53 63 72 69 70 74 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 22 29 29 7d 2c 72 2e 72 65 61 64 79 53 74 61 74 65 3f 72 2e 6f 6e 72 65 61 64 Data Ascii: ,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onread
2024-12-20 18:03:26 UTC	1369	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 74 2b 6f 29 2c 61 2e 73 72 63 3d 72 29 2c 65 5b 72 5d 3d 5b 6e 5d 3b 76 61 72 20 6c 3d 28 74 2c 6e 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 3b 76 61 72 20 73 3d 65 5b 72 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 72 5d 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 61 2e 70 61 72 65 6e 74 4e Data Ascii: document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",t+o),a.src=r),e[r]=[n];var l=(t,n)=>{a.onerror=a.onload=null,clearTimeout(h);var s=e[r];if(delete e[r],a.parentNode&&a.parentN
2024-12-20 18:03:26 UTC	1369	IN	Data Raw: 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 22 22 2c 74 3d 7b 7d 2c 72 3d 21 31 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 3d 45 72 72 6f 72 28 74 68 69 73 2e 6d 65 73 73 61 67 65 29 2c 74 68 69 73 2e 69 73 55 73 65 72 45 72 72 6f 72 3d 72 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 7d 63 6f 6e 73 74 20 74 3d 7b 7d 2c 72 3d 7b 7d 2c 6e 3d 7b 7d 3b 63 6c 61 73 73 20 6f 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 Data Ascii: ull,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";class e{constructor(e="",t={},r=!1){this.message=e,this.props=t,this.error=Error(this.message),this.isUserError=r,this.fingerprint=this.message}}const t={},r={},n={};class o{constructor(e,t
2024-12-20 18:03:26 UTC	1369	IN	Data Raw: 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 52 65 61 64 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 73 65 74 2e 70 72 6f 64 75 63 74 3d 74 68 69 73 2e 6e 61 6d 65 2c 65 2e 74 69 74 6c 65 3d 22 4e 6f 20 63 6f 6e 74 65 6e 74 22 2c 65 2e 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 61 6c 6c 6f 77 3d 22 6d 69 63 72 6f 70 68 6f 6e 65 20 2a 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 21 30 29 2c 65 2e 73 74 79 Data Ascii: IframeElement(){return this.parentDocumentReady().then((()=>{const e=this.doc.createElement("iframe");return e.dataset.product=this.name,e.title="No content",e.role="presentation",e.tabIndex=-1,e.allow="microphone *",e.setAttribute("aria-hidden",!0),e.sty
2024-12-20 18:03:26 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 28 65 29 2c 74 68 69 73 2e 62 61 73 65 55 72 6c 3d 60 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 63 6f 6d 70 6f 73 65 2f 24 7b 74 7d 60 2c 74 68 69 73 2e 73 6e 69 70 70 65 74 4b 65 79 3d 74 7d 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 73 65 55 72 6c 28 65 3d 21 31 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 61 73 65 55 72 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 26 26 28 74 2b 3d 60 3f 24 7b 74 68 69 73 2e 67 65 74 53 65 72 69 61 6c 69 7a 65 64 56 65 72 73 69 6f 6e 51 75 65 72 79 50 61 72 61 6d 28 29 7d 60 2c 74 68 69 73 2e 64 69 73 70 6c 61 79 57 61 72 6e 69 6e 67 28 29 29 2c 64 65 63 6f 64 65 55 52 49 28 74 Data Ascii: (e,t){this.version=this.getVersion(e),this.baseUrl=`https://ekr.zdassets.com/compose/${t}`,this.snippetKey=t}resolveComposeUrl(e=!1){let t=this.baseUrl;return this.version&&(t+=`?${this.getSerializedVersionQueryParam()}`,this.displayWarning()),decodeURI(t
2024-12-20 18:03:26 UTC	1369	IN	Data Raw: 2c 74 29 3a 6e 65 77 20 69 28 65 2c 74 29 29 29 7d 65 72 72 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 22 63 6f 6d 70 6f 73 65 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 7b 6b 65 79 3a 74 7d 29 7d 7d 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 77 69 6e 3d 65 2c 74 68 69 73 2e 64 6f 63 3d 65 2e 64 6f 63 75 6d 65 6e 74 7d 67 65 74 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 72 29 3d 3e 72 28 6e 65 77 20 65 28 22 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 73 6e 69 70 70 65 74 22 2c 7b 7d 2c 21 30 29 29 29 29 7d 67 65 74 5a 45 51 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 67 65 74 50 61 72 65 6e 74 57 69 6e 64 6f 77 28 29 7b Data Ascii: ,t):new i(e,t)))}error(t){return new e("compose request failed",{key:t})}}class l{constructor(e){this.win=e,this.doc=e.document}getKey(){return new Promise(((t,r)=>r(new e("Key is missing from snippet",{},!0))))}getZEQueue(){return null}getParentWindow(){
2024-12-20 18:03:26 UTC	1369	IN	Data Raw: 74 68 69 73 2e 77 69 6e 29 29 7d 60 29 29 29 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 69 70 74 53 72 63 28 65 29 7b 69 66 28 65 2e 24 7a 6f 70 69 6d 26 26 65 2e 24 7a 6f 70 69 6d 2e 73 29 72 65 74 75 72 6e 20 65 2e 24 7a 6f 70 69 6d 2e 73 2e 73 72 63 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 2f 2e 2a 7a 6f 70 69 6d 2e 28 63 6f 6d 7c 6e 65 74 7c 6f 72 67 29 5c 2f 2f 3b 6c 65 74 20 6e 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 73 3b 65 2b 2b 29 69 66 28 6e 3d 74 5b 65 5d 2e 73 72 63 7c 7c 22 22 2c 72 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 7d 73 74 61 74 69 63 20 69 73 53 6e 69 70 70 65 74 50 72 65 73 Data Ascii: this.win))}`)))}static getScriptSrc(e){if(e.$zopim&&e.$zopim.s)return e.$zopim.s.src;const t=document.getElementsByTagName("script"),r=/.*zopim.(com\|net\|org)\//;let n;for(let e=0,s=t.length;e<s;e++)if(n=t[e].src\|\|"",r.test(n))return n}static isSnippetPres
2024-12-20 18:03:26 UTC	393	IN	Data Raw: 2c 77 69 6e 64 6f 77 2e 7a 45 6d 62 65 64 3d 65 7d 69 66 28 77 69 6e 64 6f 77 2e 7a 45 41 43 4c 6f 61 64 65 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 6d 28 65 29 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 65 6e 64 65 73 6b 48 6f 73 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 45 51 75 65 75 65 3f 6e 65 77 20 68 28 65 29 3a 67 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 67 28 65 29 3a 6e 65 77 20 6d 28 65 29 7d 28 77 69 6e 64 6f 77 29 2c 74 3d 6e 65 77 20 70 28 65 29 2c 72 3d 21 31 3b 65 2e 67 65 74 4b 65 79 28 29 2e 74 68 65 6e 28 28 65 3d 3e 74 2e 67 65 74 50 72 6f 64 75 63 74 73 28 65 Data Ascii: ,window.zEmbed=e}if(window.zEACLoaded)return;const e=function(e){return m.isSnippetPresent(e)?new m(e):e.document.zendeskHost&&e.document.zEQueue?new h(e):g.isSnippetPresent(e)?new g(e):new m(e)}(window),t=new p(e),r=!1;e.getKey().then((e=>t.getProducts(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49729	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:26 UTC	728	OUT	GET /assets/vendor-7e37a236efac18346865853f791205ed.css HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:27 UTC	781	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 13264 Connection: close Date: Fri, 20 Dec 2024 18:03:28 GMT Last-Modified: Fri, 10 Sep 2021 01:57:47 GMT ETag: "0931e5c1446c16dd29401301cd165d95" Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 472d8295289753113caedd2aa0660466.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: 5hHhKWxy48XgXTmzoWtBbLR_JcQagDxIISdVVN-4h3SPegfSJOzfTQ== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:27 UTC	13264	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d fd 93 db 36 b2 e0 ef f9 2b b8 4e f9 76 c6 27 d1 14 29 ea 6b 2a ae 75 e2 e4 5d aa de db da bb ec dd 6d 55 d6 75 45 89 d0 88 6b 4a 54 91 d4 8c 27 ba f9 df 0f df df 20 41 69 ec cd bb f7 a2 78 66 44 02 8d 46 a3 d1 e8 6e 34 1a 6f df fc e1 9b e0 4d f0 d3 a9 2c 7f c8 4a 70 c8 b3 3a 78 88 c3 79 18 07 bf b4 4f 25 68 76 00 b4 a8 c4 87 6a d3 04 ff 25 f8 d7 62 03 0e 0d 58 05 bb b6 3d ae de be dd c2 8a 1b 5a 31 2c aa b7 a8 e8 cd e6 36 88 a3 c9 2c 78 9f 67 fb e0 97 5d f6 08 9f be 0d b7 9b 71 b1 a9 0e 23 f4 c7 09 c2 28 c1 a6 cd d6 25 38 8f f7 cd f8 d4 80 7a 4c 9e ad 0e d5 01 dc 8d f7 d5 6f 96 a7 8f 60 fd a9 68 8d 17 cf 10 68 80 a1 8d 08 cc 75 55 e7 a8 c8 31 db 14 87 fb 55 84 0a 8c d7 f7 e0 01 1c 5a 8c c1 ae b8 df 95 f0 5f 7b ae 50 99 Data Ascii: }6+Nv')k*u]mUuEkJT' AixfDFn4oM,Jp:xyO%hvj%bX=Z1,6,xg]q#(%8zLo`hhuU1UZ_{P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49730	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:26 UTC	735	OUT	GET /assets/inbox-patient-7a28dffeaad312cf15cd8597f88d1af5.css HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:27 UTC	819	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 99111 Connection: close Date: Fri, 20 Dec 2024 18:03:28 GMT Last-Modified: Mon, 09 Dec 2024 19:59:33 GMT ETag: "49940b490149f5d0228b665061570c5e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 313d89143144c0a6ff7ca4969034d54a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: L0eC06CjqUV66jd_drkhX_9v5oGUEDmPQjPbT2vQLYB53OtSG103Ww== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:27 UTC	8192	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd d9 b2 2b b9 91 20 f8 3e 5f c1 ca 34 99 f2 2a 49 66 44 70 3f 34 dd 51 57 75 75 77 99 75 d5 3c b4 c6 ac cd 52 d9 6d c1 88 e0 21 95 dc c4 e5 2e 3a 7d fa 5b e6 5b e6 cb 06 6b 04 16 77 6c c1 54 56 8d 95 8e 29 6f 10 70 77 00 0e 87 03 70 77 00 7f a8 76 e5 f5 d6 dc 07 df fc df 7f fc 4f a3 e5 37 eb 1f 7e f7 77 ff c7 e0 77 83 bf 3f 9f ef b7 fb b5 bc 0c 3e 4d c6 93 f1 62 f0 dd ee 7e bf bc fc f0 c3 6b 73 df c8 bc 71 75 3e 7e a0 d0 ff 70 be 7c bd ee 5f 77 f7 41 91 e5 f9 88 fc 67 3e f8 e3 e7 fd fd de 5c 87 83 7f 3a 55 63 0a f4 5f f7 55 73 ba 35 f5 e0 71 aa 9b eb e0 9f ff e9 8f 9c e8 8d 52 dd df 77 8f 0d a5 f7 c3 fd f3 e6 f6 43 5b c4 0f 9b c3 79 f3 c3 b1 bc 11 52 3f fc d7 7f fa 87 7f fc 97 ff f6 8f b4 c8 1f 48 3d 07 a7 f3 f5 58 1e f6 Data Ascii: + >_4*IfDp?4QWuuwu<Rm!.:}[[kwlTV)opwpwvO7~ww?>Mb~ksqu>~p\|_wAg>\:Uc_Us5qRwC[yR?H=X
2024-12-20 18:03:27 UTC	8645	IN	Data Raw: 0e 0a f5 f4 e1 35 65 3c 06 60 81 15 ef 37 1e 03 f0 91 26 46 8c 47 07 34 dc a4 a4 f1 e8 c0 73 36 21 7c 3c fa 50 5c 8d 49 19 8f 3e 64 f7 78 3c bc 62 e3 51 cf 81 c7 a3 0e a3 8d c7 c3 ab 36 1e a7 73 76 ff 01 e3 3a ab a2 79 d9 17 3f 31 2e d6 e0 c3 31 5b 72 03 07 d1 cd eb 76 bd d7 61 b6 34 07 fc 86 46 4e 99 ff 78 53 cc 83 6c e7 a7 9d 6b 07 ee 2a cd d6 e6 4d a8 e6 25 b4 6d 69 e0 5e aa cd 16 77 96 21 50 bc 8a d6 06 44 64 00 b8 62 63 d6 b2 ab dc 90 b5 fe e3 de 68 b7 49 8c d4 06 51 96 4d e9 6e ed dd ac 13 0b da a5 4f 7d 31 73 bf bc e0 83 7f 3d 2e fc 22 98 6d d3 d4 74 85 a8 d7 c8 ee ae 8e f8 f7 66 df 7e 2f ba 58 a9 cf 48 93 81 b6 3a 5a 11 fe 1b de c0 6e 33 e2 a3 8e fb ba 3e 34 c1 9d 29 0a ff de 5d b7 ef f5 9a aa d7 af ae f5 f0 38 da 4c 1a 1d c7 6a ff 7d f7 49 98 db Data Ascii: 5e<`7&FG4s6!\|<P\I>dx<bQ6sv:y?1.1[rva4FNxSlk*M%mi^w!PDdbchIQMnO}1s=."mtf~/XH:Zn3>4)]8Lj}I
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: e6 6a d9 ed 45 8d d0 75 ca 0a 80 e1 4d 74 be 2d 65 b8 bd 43 69 06 32 31 98 de 40 bf 84 4e 56 0a 7e 32 04 24 04 f3 18 aa 97 d8 3a d9 55 6b 2f a5 04 0f 69 68 30 08 8b 13 ce 7e b8 c8 46 72 39 84 e4 20 e6 b6 3f 90 50 2a a3 f5 da b5 f7 4d e8 72 37 67 91 ea 3a 0c 26 ce ee f3 05 a6 44 07 50 8e 15 ea 00 92 06 bb 65 d5 90 88 74 84 56 b2 68 6b 15 e4 07 f6 81 db ad 54 00 8c d7 ee b8 77 f0 d2 2c 07 d9 48 46 7b e9 99 5c 16 95 42 a2 a9 21 42 a9 2c d6 ab d6 de 06 a0 b1 63 5b d2 88 49 03 06 61 b4 27 66 7b 1d 4f 39 92 d7 21 24 4d 65 2d aa 86 44 f9 22 b4 52 39 ae 57 50 de 3b a0 b1 85 02 d4 b9 0e 82 f0 db 13 4d 6c be 72 eb 27 1c c9 ee 00 8a 26 b7 45 c5 90 58 54 98 54 2a b3 65 f5 9a e3 a6 a9 d5 25 a2 ef 88 b6 88 f9 ec 2e a8 cd ec 93 fa 26 d1 81 95 22 c2 e2 2c 40 96 00 a4 ef Data Ascii: jEuMt-eCi21@NV~2$:Uk/ih0~Fr9 ?PMr7g:&DPetVhkTw,HF{\B!B,c[Ia'f{O9!$Me-D"R9WP;Mlr'&EXTTe%.&",@
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 0a f6 77 be 20 6c 00 5f 16 1c e0 5f 15 1a 12 ff 43 2c 14 8f 5e ea 7b 9d 0d bc 64 90 7a fa ad c5 3c ee c5 c3 63 1f 6a 73 3d 33 7b 45 d5 bf b1 9a 2f 76 69 77 71 be 89 ca 3c 8e ab 41 17 ef 90 31 cf eb 2e 31 5e e1 85 2f fc 01 1d ee c6 6f 79 91 c4 9b 11 26 8e ea a5 48 d6 44 8d 36 b4 65 64 63 0b 7f 0d 54 95 26 0b ec 31 0d cd 9f 22 f1 5a d5 af 1d 7a 22 86 b8 48 18 8f b9 e8 7e f2 ff 22 a2 22 d5 de 90 a8 68 5f 11 59 4a 1f 89 69 2f 92 07 1c b5 55 fd ca 32 32 e7 0e a0 f6 2c 85 9a 49 3a 10 69 c2 d5 97 3d 94 57 3f 1a 3c 3b e9 72 3e 2a e3 89 39 1f 35 b0 f5 42 bd 0a b5 de aa 57 67 ca 05 a1 09 e8 62 3a e2 db 64 7e 1f 26 82 fe 51 54 59 c7 db 1e 14 eb 01 12 2d ff 36 7f ba d8 75 f4 e0 6b 5b a6 f9 0d 58 5e 42 81 51 2e e8 eb 6c 9c 34 8d 42 1c 63 91 14 20 1e 16 4d 70 0e a8 ee Data Ascii: w l__C,^{dz<cjs=3{E/viwq<A1.1^/oy&HD6edcT&1"Zz"H~""h_YJi/U22,I:i=W?<;r>*95BWgb:d~&QTY-6uk[X^BQ.l4Bc Mp
2024-12-20 18:03:27 UTC	1514	IN	Data Raw: 3a 80 c1 6f 3a 29 be ae f6 b9 f5 50 37 89 6c 57 50 6e 84 34 db 9f 1c d8 6c 38 a4 bd b7 6b ea 51 08 a9 0a 04 06 11 52 33 ae 70 32 7d 47 e7 b6 17 38 12 28 45 d6 3c 52 5e d4 73 35 1a 0c fb 9e 46 95 97 e1 f8 33 a4 ae 66 51 cb 43 cc cc 75 ac e9 c9 b4 d7 a0 bb 5a 7d c4 f8 8f f2 4a 7d ad 1b 00 ac 55 b1 4c f0 56 59 03 64 99 ae 4e 74 e9 66 3f 91 77 c0 60 b2 37 5b f5 0a 95 96 cc 69 42 8b d3 df d8 4b df 2c be 40 7b 03 b6 f9 f0 32 5a 94 81 f4 ac 69 4f 51 4a b8 35 28 27 ca 5e 39 a8 17 8c 12 b5 08 7f d4 9c f9 3a c0 42 83 4b 2d 41 f3 7e d2 07 74 8d 91 3d 41 a6 57 5b 5f ca 83 bb cd 87 85 b6 74 ec a8 40 61 ef a0 38 0b 94 19 d8 32 ac 98 be 16 2c cd 90 a2 6a 2f dc 13 cd f4 ce bd 7b 8a 81 6a 5b 67 ef 4e ef 4d ee dd 3b b1 dd 16 ba 4a 53 f9 bc 90 11 9b 0e 7d cc 91 0b af 6e 41 Data Ascii: :o:)P7lWPn4l8kQR3p2}G8(E<R^s5F3fQCuZ}J}ULVYdNtf?w`7[iBK,@{2ZiOQJ5('^9:BK-A~t=AW[_t@a82,j/{j[gNM;JS}nA
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: a2 93 ec c8 c6 81 2e b2 56 0c 9e d9 c3 24 14 b3 31 ab 53 df 2e 93 e8 7f 02 61 bf e0 ed 33 e3 d5 4e 74 63 57 8b a1 e7 21 7a 2a 63 b1 28 a3 99 ae 5c 26 a3 3c 9a 0f aa ab 01 4c 12 5b 55 10 12 e0 ad ba bd b2 7b e9 7d 02 11 84 39 40 25 ae ab ce a2 c3 e7 5a 8c b0 a8 de 73 e6 a4 9e bb b2 fa d4 d9 5e 61 87 d1 3d 61 73 9f 54 f1 a5 aa e2 10 c7 98 51 e2 63 55 2b b8 11 85 70 c0 8b 2e ff 8b 91 cc 51 da f2 6b b1 46 b7 0a fc 1b 05 b0 d8 d3 e6 5b 0e fd 9a 5b 5f 0b f3 dc 93 2a 6e e2 f5 d3 3d 1d 73 21 6a c9 38 a9 36 00 26 d4 2a 87 b8 8c 2e d3 a6 a8 89 0a b6 f7 89 4e da 37 88 a9 ad 67 45 5d ca 8c e1 d1 55 43 d6 8e 8c 95 c9 4e 48 ad 2d a2 7a 6c c4 ac 53 e7 9a 71 62 a7 ad 40 3e 7c 9b 32 82 ec 1f fa 0a 94 95 8c 87 ca 35 93 31 be 67 15 9b 10 9f 21 ba 5b 54 cf 57 4f 9f 1e b1 d0 Data Ascii: .V$1S.a3NtcW!zc(\&<L[U{}9@%Zs^a=asTQcU+p.QkF[[_n=s!j86&*.N7gE]UCNH-zlSqb@>\|251g![TWO
2024-12-20 18:03:27 UTC	1558	IN	Data Raw: 34 74 dc dd 71 37 2a 22 9a 46 11 87 e3 74 b3 7a 7d 6c f1 ca 94 88 59 f3 67 8f e0 f6 16 1b 7b f9 e4 66 b3 59 5b 27 06 b3 62 30 bf d9 d8 b5 dc 46 1b a9 07 72 50 61 1e 05 1c c6 26 f1 75 c9 a9 16 f6 5a ce 0a 6d 14 7c 38 c7 4e 55 ca 28 4b a9 2e a5 d7 f8 b2 17 18 5f 4a 37 b2 6b 44 a3 3e 23 ba 9a ff c4 fa 6e c7 28 66 d3 f4 17 1b c4 c8 37 88 e9 b4 f8 c5 06 91 7b c6 c0 73 54 f4 da 1f ab cd 49 48 6f 42 9b 47 e3 f8 55 96 90 67 6e 1e d4 c1 d3 53 bc 2c 9b f5 bc 2e 8f 2a df 8e fb 44 61 2a d0 d6 a6 f5 48 21 24 8e 5d 93 8c a9 62 a8 0d fb f0 aa be 33 63 02 8a 26 b1 ac 1f c0 5f d2 bc 1f 9c fd 88 d6 47 ea 55 14 e5 38 fe f8 cb a6 d9 90 ab d0 a5 a1 ed 44 c7 fd 6f b0 dc f6 87 fa 70 d8 ec 1b 24 b8 19 a9 3c 84 08 5f 9e 4e c7 37 04 5f 49 91 de b8 b3 bb d8 11 83 2c 8c 2d 41 72 15 Data Ascii: 4tq7"Ftz}lYg{fY['b0FrPa&uZm\|8NU(K._J7kD>#n(f7{sTIHoBGUgnS,.Da*H!$]b3c&_GU8Dop$<_N7_I,-Ar
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 96 cb 1c d0 14 a4 dc 60 0c 6b 50 47 42 8a 90 51 10 7c 56 d5 b7 45 55 2d 1b 9c 5b 8d 6a 6d ce 3b 1a 28 11 b1 a3 30 b0 13 9a d3 93 e5 ea 3b de 91 0f fd c8 12 e4 d3 03 a6 5d 41 34 cf b7 b3 55 f9 4d 0e 8a 29 87 c8 a6 91 ee d8 17 91 79 0f 88 58 7b 3e ee 2b b0 f3 e9 b5 e3 3d 95 73 14 33 d2 ea 18 eb 60 0e cd 48 02 e9 b6 eb f3 6b 8c e0 8e 3a 5b fd 3a 62 07 7a ba 8e c2 a5 cc 3c 5d 7e 57 1e 22 f2 d7 cf a3 74 08 fe 2b 37 fa 89 47 2e 9d 57 3b d7 18 d7 00 9a aa 74 87 b5 a6 37 28 c5 81 e4 1e a6 4e 42 e2 70 64 15 4b cc 46 fb 07 f2 57 0d f2 0d 79 dc ec 86 53 98 1f a7 94 0c e0 f7 ec 3b c0 b3 1d 9b bf 4c 39 ac 39 ad 86 8d 39 46 01 08 e6 bb db b6 77 5c b8 75 bd 02 9b e5 49 86 08 b5 f5 ce fd d2 20 9f 1d 1f c8 4d 8b 23 a2 1f 41 a7 b3 a1 7f e6 7a ae 7c be 13 dc 0d e4 a1 36 bc Data Ascii: `kPGBQ\|VEU-[jm;(0;]A4UM)yX{>+=s3`Hk:[:bz<]~W"t+7G.W;t7(NBpdKFWyS;L999Fw\uI M#Az\|6
2024-12-20 18:03:27 UTC	8949	IN	Data Raw: 7f f0 80 2e ed 53 64 6a e5 45 1b ef 18 07 9a 43 36 53 d8 c3 76 37 82 03 77 9b e5 72 5b 3d a9 1e cd 70 2b 54 e1 c5 41 c9 94 d6 da 7e d8 d8 cf 6a eb 91 c7 5f 23 79 d2 d6 c0 99 b5 87 05 0d fc b2 c4 dc ba 98 4c 36 fd c6 91 fa 12 4f a5 25 4b b4 15 68 e5 0c 9c a7 1d a6 b3 e1 08 02 15 0a a0 4e 3e 41 ce 0b dd 16 97 ef 6a 60 e6 18 cd 20 fe 11 e4 66 6d 66 8c f0 fb c9 18 07 fc 99 7a 24 48 65 58 21 24 0f b6 f9 2f 38 74 cb 76 6a 13 c9 9f 46 98 d5 b5 17 dc a1 30 e3 95 83 50 4f 12 3b 58 8a 37 0b a9 82 c3 22 11 3e 96 5a 24 23 7a be dd 18 c1 04 ea c4 0c b8 72 97 e5 99 30 54 a6 63 26 0c e2 e7 72 48 30 af c1 4c 7f 69 aa 54 51 c0 2c cb 6c 33 88 cb 2f e5 a9 24 c2 c1 79 3e 87 ac 4c 07 22 1c ee 6a e4 25 e8 0c 7a d0 a6 12 d3 24 85 3a 4d 4e f5 4f 04 50 20 b4 5d 0c 63 a0 3e 47 7d Data Ascii: .SdjEC6Sv7wr[=p+TA~j_#yL6O%KhN>Aj` fmfz$HeX!$/8tvjF0PO;X7">Z$#zr0Tc&rH0LiTQ,l3/$y>L"j%z$:MNOP ]c>G}
2024-12-20 18:03:27 UTC	4717	IN	Data Raw: d5 ab 5a af 5b ee 64 3b a0 b6 b8 3a 75 fd 54 7c 58 94 84 17 ab 83 36 83 07 5e 06 f1 bd c8 b1 37 af 8f 1d 8c bd 8b 69 68 3d 0a cc 3f 82 23 2a c3 73 83 41 6c 01 92 1f 54 43 61 9c f2 61 c3 a5 a7 bb da 3d 2e 77 87 13 38 06 23 d9 96 e1 0f 12 e9 ee 86 41 76 d9 06 0d 9d 66 eb 75 a2 9d 4b a6 c8 9c 79 3a f3 69 f3 c3 b0 ba e6 08 4e 8c b5 b2 74 fa e5 4b 9b 59 12 c8 1a b1 ee d1 d5 75 0f 92 75 0f af ae bb 9f ac 7b 70 75 dd 36 61 59 f3 1a d4 55 f9 08 12 7a e0 eb 19 82 05 8e bd a9 6d d1 87 9f c8 27 9d b9 61 4f 2e 5b a3 ce 7a 4c b6 b8 39 a4 ed 14 c3 e5 52 f6 bf 88 f8 00 2a 35 49 88 8b 6c 8c 16 b2 dc a6 1d 1a 1a 77 a5 bb 54 bf ce c1 d1 bf c0 84 04 31 00 02 e5 66 e3 07 25 33 30 18 d1 1b 36 0d e8 ce 5c 36 a9 44 e9 1e c5 76 c1 f0 e6 7f 05 81 84 20 1a a2 99 74 9f b7 02 56 6c Data Ascii: Z[d;:uT\|X6^7ih=?#sAlTCaa=.w8#AvfuKy:iNtKYuu{pu6aYUzm'aO.[zL9R5IlwT1f%306\6Dv tVl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49731	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:26 UTC	713	OUT	GET /assets/vendor-6c9826c2fc718fe6ddcdd435bffce760.js HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:27 UTC	834	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 706567 Connection: close Date: Fri, 20 Dec 2024 18:03:28 GMT Last-Modified: Wed, 06 Mar 2024 21:08:47 GMT ETag: "c9e43ffda512d60ad518789cf211bec2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 54676611483790933ee5232c181e2cb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: 0wIbmyLqjmnOj4r6q_12eMfhZZTbWScuEop4Lx2a5rO3DhqcJ8Nqxg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:27 UTC	15550	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d fb 5f d3 48 d7 f8 ef fc 15 25 df 5d de c4 86 d2 b4 e5 56 8d fd 70 53 54 0a 28 28 2a f2 f0 86 76 80 48 9b 60 92 ca c5 f2 fe ed df 73 ce cc 24 33 69 8a e0 aa eb b3 eb b2 36 73 bf 9e 39 b7 39 33 73 e1 07 dd f0 a2 b2 d6 3f 62 d1 da e6 1b f7 cb 93 b5 a5 dd d7 af d6 76 9a 5f 6e ec b5 cd a5 e5 8d b5 c3 d5 9d c3 27 cf 36 76 d7 5e 35 27 ab f6 a1 08 dc 58 7b ba b4 f2 ee f0 cd b3 b5 bd c3 9d d7 db db 5b af 76 21 fa 66 e2 b3 17 95 7a a1 d7 65 91 dd 65 c7 7e c0 ec 88 7d 1a f8 11 6b 87 dd 41 2f f5 c9 ef c7 d8 8e 06 41 e0 07 27 bb 2c 4e 62 77 d2 79 68 1e 0f 82 4e e2 87 81 c9 ac 2f c6 20 66 a5 38 89 fc 4e 62 4c c8 88 52 62 5a 5f b0 22 e6 6e 1d 7d 64 9d a4 d2 89 98 97 30 33 18 f4 7a d6 44 c4 92 41 14 94 58 e5 f0 d0 fd 1c fa dd 52 15 9a Data Ascii: }_H%]VpST((*vH`s$3i6s993s?bv_n'6v^5'X{[v!fzee~}kA/A',NbwyhN/ f8NbLRbZ_"n}d03zDAXR
2024-12-20 18:03:27 UTC	1284	IN	Data Raw: d4 0c e1 0c be 68 01 3c 6b 62 7a b9 2c 0f d2 33 fd f1 83 5e d6 21 7c 6e 84 5e b4 e7 5c 5c f5 61 f2 48 5e dc c2 5f 01 a7 d7 bf 4d fc 28 6f 73 f8 fa 79 4c f1 0c 0b 6f 50 a2 36 28 c2 3d 76 c8 0c 9f 94 cf 51 1e 0b f3 14 dd 95 1c ca a1 41 cf 4d 02 33 24 43 4a 06 32 86 09 f0 45 32 c4 40 ce 30 01 f6 48 49 92 16 0f bd b5 23 7c 63 3a c2 77 cc 74 b0 95 3d 15 4d a5 36 a2 41 80 66 8d 0d 01 f4 2e 62 d5 a2 17 26 c9 60 60 02 3a 01 81 ae 33 53 bd 31 43 db 4b 5f be fe 12 78 7d d6 4c 68 e6 8f 8e a2 b8 e9 9b 09 cc bf d6 76 68 2d 99 67 61 64 80 de 41 90 f8 bd b8 19 da e7 e1 f9 a0 47 98 bd 59 1d 26 fb b3 ea db 29 21 dd ce 9c ea 55 19 cc a9 a9 bd d9 13 ab a3 97 84 88 08 24 3b 45 0f 76 f2 eb f2 66 3e 98 fb de f4 75 e9 a0 fc c1 9a c1 b7 74 a7 a6 f0 c1 d0 56 e0 8a c7 45 65 ba fd Data Ascii: h<kbz,3^!\|n^\\aH^_M(osyLoP6(=vQAM3$CJ2E2@0HI#\|c:wt=M6Af.b&``:3S1CK_x}Lhvh-gadAGY&)!U$;Evf>utVEe
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 6f e1 d7 39 78 68 ae 3d aa 0d 87 b8 f5 bc 36 35 b5 f5 68 0e 86 b9 a0 63 42 ba 8b 4b 3c a2 f2 31 2e 3d 76 4b b5 ca 5c a5 5a 29 bd 0b 07 25 90 d9 4b 03 bc 5e 44 49 81 a3 91 0e 45 a5 b4 c3 e4 76 f2 c7 18 cf 66 a0 d0 a0 c8 b5 5f 70 c9 6b 9b e8 34 33 b4 fc 39 fe cd 18 ca d8 e5 0c 84 78 65 9e b3 ef 08 52 e4 50 79 d1 38 e5 0b 45 70 c6 48 b8 1a 57 61 1f fa b0 90 2e 47 77 f1 81 9d 00 36 59 6c 11 f2 0a 14 d2 18 69 e8 f8 d8 0c 1e 45 48 c2 24 8c dd d8 04 ab 45 a5 8a 0d 1c 28 5b 6c d8 c8 66 c6 6a 55 20 88 66 cb 47 21 83 3d a2 7f c8 5a b8 21 e0 20 68 24 7c ca 0e be 27 0f 8e 96 3f ed 34 21 34 79 04 7c 7f bb 82 af d9 2c f5 8f fc 93 41 38 40 cb af 0b 2f ea b6 12 64 93 1f 47 32 5e 9c 0b 10 b1 a4 fd c1 d5 f4 28 86 d2 e9 0e 85 94 87 c1 fa 52 12 bd df 3b b8 21 41 4b eb a2 ba Data Ascii: o9xh=65hcBK<1.=vK\Z)%K^DIEvf_pk439xeRPy8EpHWa.Gw6YliEH$E([lfjU fG!=Z! h$\|'?4!4y\|,A8@/dG2^(R;!AK
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 24 8c 19 0b 00 63 f3 94 9a 07 c4 26 61 cd 9d d2 ee 2b dc 3c ef c7 61 2d 21 ec 87 20 cc 31 4a 77 21 6c 43 93 f4 16 51 c4 79 a8 d8 4b 08 c9 0e 3f 0d 5d 03 77 34 d1 16 b5 2f 2a d7 3b 92 2c 2f 01 fe 97 24 aa 4b 88 7f 7f 88 b7 cf 28 74 a1 ac 66 6a 9a 34 17 bc 7f 38 80 6d 15 1d 18 fa 58 08 9b 9c 94 53 72 a3 fc 3b 0f 4d 65 35 7a da bd 39 42 de 20 cf 51 c2 83 27 4f 6f 38 ef 3b e8 c5 d3 34 7e f4 04 5e ac 62 33 41 ad 90 cd 07 20 6d 93 68 f7 92 32 8b 94 cd 4d 45 5c 65 83 5b f9 96 29 c8 04 ea 3e a7 95 9f d3 5d 99 7b 91 64 69 2f 0c 8e e9 7b fa bb d3 df d3 45 7d 35 4e 61 39 67 53 02 69 0f 02 db 30 0d 1e 70 d6 ee 86 23 6d 2b 93 2f 06 5a b5 a3 b6 88 66 2c 3c 72 79 01 92 39 eb b8 06 86 f8 f5 93 7a 2f 0a dc 18 58 22 a2 25 22 fa 58 44 94 e6 c7 90 c5 81 aa b5 af 77 d4 7b 9b Data Ascii: $c&a+<a-! 1Jw!lCQyK?]w4/*;,/$K(tfj48mXSr;Me5z9B Q'Oo8;4~^b3A mh2ME\e[)>]{di/{E}5Na9gSi0p#m+/Zf,<ry9z/X"%"XDw{
2024-12-20 18:03:27 UTC	10997	IN	Data Raw: eb 03 fc 3a 9f 1b 0c 87 16 7e 41 80 05 89 8c f6 0d 8f 4f 37 a2 33 c3 3b eb 0f 81 d4 74 0a 04 71 0a b5 ff a7 26 eb 1b 99 6e 7d 68 3e de 4f 6c 3b ce df 87 ef a5 91 10 b8 af e8 19 d4 ed 67 9e ab cd 73 47 0f f0 d4 7b fb 8f e4 14 b3 1a a3 82 8a 73 2c fd 01 c7 30 7b 18 37 8c 9d a1 d1 d8 6e 0e 90 3b e9 f7 8f 06 27 27 bb 07 fb 47 fb fd 93 13 10 2f fb f6 f0 1d 3f 04 98 f4 ad 7e 48 a5 47 56 ea 0c 16 fa 10 53 f8 80 91 59 e3 05 ea 50 3e 96 38 62 8a c0 6f da d3 04 5f a3 64 3e e0 08 e0 75 a0 23 da 6b 4c 6b 4d 9b 43 62 e9 6d 12 eb 7e bc fa c6 cb ad ff 59 f5 9b a2 f0 52 4c bb 53 48 04 c4 ed 22 dd 5e c0 b9 1b 23 c7 b3 4d ed 92 2e 62 d2 3d f1 78 23 1f db 57 4b 23 0b 93 69 7a e3 3e 3c 71 8e 34 8f 39 4a f1 6e e3 54 39 7e 24 1c ef 93 23 dc 4e 27 eb c4 9e ee 1f 02 88 a9 6d 70 Data Ascii: :~AO73;tq&n}h>Ol;gsG{s,0{7n;''G/?~HGVSYP>8bo_d>u#kLkMCbm~YRLSH"^#M.b=x#WK#iz><q49JnT9~$#N'mp
2024-12-20 18:03:27 UTC	10189	IN	Data Raw: 9a 47 d7 68 93 a5 1c d4 0c 58 92 7d 7d c5 d2 67 4f ca 98 ee a5 27 5a 91 a7 35 83 db 32 be d5 73 90 c8 48 34 6e c2 ed 46 24 22 4b 9b 8e 7a 79 42 bf 75 3b ca 53 6b e0 69 af 93 62 1c 28 ad ae c8 8b 74 61 9b 45 ad 96 f6 ad a4 9f 56 e3 46 fd 31 6c 62 34 a7 e2 2b 84 41 4e d6 71 6c 51 d4 a3 85 ce d6 f2 a8 07 92 85 1d 95 d3 43 76 7f 2d 70 27 a3 01 f5 d5 97 49 b4 c0 32 1a 87 15 db a0 0a b2 c0 72 0c a2 5b 46 4e fc 6a b1 a6 54 73 20 9b 22 52 ac 9b b0 8a 68 4a 12 d1 6a 65 6b 93 95 b9 3a de bc ac ba 03 ce 2e db ed 4a 38 8f b0 d6 f7 78 8c f9 46 aa fd cf d2 94 26 24 c4 47 df a6 13 b5 0a 29 f1 da d4 a1 f5 a9 ee 9d 05 7a d5 70 25 b9 32 22 86 c2 21 f7 18 78 c8 41 dd af b9 7c 15 27 f0 ed 2b dd 20 3b 13 48 d2 e5 05 78 16 f6 d4 bb a6 72 73 8d 6c 49 95 e7 4d a1 f6 1b d6 55 0d Data Ascii: GhX}}gO'Z52sH4nF$"KzyBu;Skib(taEVF1lb4+ANqlQCv-p'I2r[FNjTs "RhJjek:.J8xF&$G)zp%2"!xA\|'+ ;HxrslIMU
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 36 03 a8 0d 51 7a 7b ee c9 d5 e1 f9 35 ac e2 42 df 23 bd 9e 82 24 01 8e d2 4e f9 31 1b e2 5e f6 91 22 1b 44 6b f8 41 90 ae 78 00 d3 9b a2 50 7e 46 b4 81 1b 90 57 a6 34 99 e2 93 74 54 c4 da ea c0 bc 05 63 16 52 62 ca c2 2b d3 5c c6 67 f6 86 f2 0b 4b 9e dc 2b f2 6d 4b 04 5d b1 91 9e d7 7a 2b 4c ab 61 b7 09 42 96 d0 41 67 db 37 5d 6b bb 07 9c 24 12 e5 81 4c a6 a4 50 d8 dc 53 51 da 20 98 e2 d0 d4 b6 6d 45 1c b9 a5 d7 54 71 fc 78 b9 1a cf af 40 1d 0e b5 6f e0 f3 1e e5 a3 1a ca bf b4 a0 dd 19 1c df 96 f7 60 ae 63 17 dc 4a d3 f4 d7 72 17 22 f5 0d 91 0b 35 a2 a7 1b 49 8a b3 b6 d2 73 11 40 35 48 c8 24 bc e2 7a ff cc 9b 86 07 2e 5f a1 13 1a fc fc 39 29 e2 f9 8a 42 40 77 c4 c7 e0 9e 1c ab e0 09 32 42 b1 7b 45 8e df 29 91 05 1a a1 e0 35 b4 23 99 f3 f6 85 b1 c9 21 6a Data Ascii: 6Qz{5B#$N1^"DkAxP~FW4tTcRb+\gK+mK]z+LaBAg7]k$LPSQ mETqx@o`cJr"5Is@5H$z._9)B@w2B{E)5#!j
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 1d 28 d5 25 91 79 86 e2 d6 fc 18 b7 bf c3 92 c5 5e f6 74 37 dc a5 f3 18 31 75 68 25 72 37 f6 f6 10 43 47 9e 1e e0 38 6e c4 e7 2c b8 68 db ab 04 bc 13 72 4f 83 ff 3c 0c 92 e0 ab af be 0c a2 08 c2 7c ca dd c9 c6 a5 79 f9 c4 89 8f 3a b8 b7 b7 98 38 e7 a0 95 77 1b 1e 46 e7 53 23 92 32 6d ce f4 00 61 90 71 bb c7 02 81 29 56 bc 00 b5 8c 17 c4 7b bd 8c 62 d9 e7 6a a5 bc 64 4e 63 4d 6b 92 23 ec e4 12 ea 7c a1 d0 bb 05 19 06 d1 69 c0 2f ec ef 33 5b e1 85 69 0c 98 2c c2 50 cc ce ad fc f1 e1 03 e9 1d 64 bd 2a 6c c3 6e db ca f1 2f 59 61 a3 c2 93 e1 e5 e2 cd a6 ba a9 de ef a7 e1 9f 95 0e b5 a6 cb fe 1e 0d dd 34 88 f6 55 af 95 b6 5b 9e 54 70 cc 85 84 ab e1 91 c2 c2 fd 1f fb b9 55 70 fc 0f ad d8 cf 8e 88 86 ee ff 89 3a 19 25 f5 fe 60 35 81 c9 81 ee 14 67 9a 71 e2 90 07 Data Ascii: (%y^t71uh%r7CG8n,hrO<\|y:8wFS#2maq)V{bjdNcMk#\|i/3[i,Pd*ln/Ya4U[TpUp:%`5gq
2024-12-20 18:03:27 UTC	1514	IN	Data Raw: a8 7d c2 c8 22 1c 5b 4d 97 6d c5 15 fa e6 0d 3c c3 b4 51 0d 9c 59 dc bb 21 b9 57 e2 a8 77 61 3f 76 ad f5 cd 48 10 15 d6 df 41 e7 0b 4e 20 bb ad be 8d a7 6c 37 72 5e c5 e2 90 d3 50 de 36 57 14 5c 4d 6c 01 00 83 77 5f 41 db 45 8e f2 ce 22 be da c8 a6 e4 17 42 cc 17 c7 de 91 5e ac fc 0e ba b0 a8 6d 39 91 4b e5 31 d8 4b 36 5c b7 66 64 9d 93 a3 97 6f 5e 1c 9e 1c 1d 37 53 4a 8c 3c ad c6 d9 64 18 b0 dd f7 0c be 26 93 bb 88 4f ea 4f 4a b5 f5 3c 1b b6 9f 36 1e aa ad 33 89 68 1a 88 31 31 9d 3d 35 f2 88 cf d5 25 35 fe 6c bd bd 44 a8 f4 60 44 0b 30 19 16 f8 ee 20 39 34 41 be cc 8a 5e e8 a4 cd ba 4b 8e 6e db 3a c2 da 48 6e 6e 4a b5 2f 63 2f 1c 99 54 78 4c f1 6c 32 d6 5d a7 88 ce d5 c6 c3 47 9c b9 ee 23 d4 a3 09 e9 e2 74 bb b2 c9 31 8f a3 b1 48 7b 70 62 46 fd f1 ff f7 Data Ascii: }"[Mm<QY!Wwa?vHAN l7r^P6W\Mlw_AE"B^m9K1K6\fdo^7SJ<d&OOJ<63h11=5%5lD`D0 94A^Kn:HnnJ/c/TxLl2]G#t1H{pbF
2024-12-20 18:03:28 UTC	16384	IN	Data Raw: 32 43 a6 77 48 9e 55 b8 5e 59 6d d5 78 3a 56 cb 3b a4 75 fd d2 c0 7c 9d 92 3e 54 38 b7 a8 5f 9e 6e 41 ec aa ce 6e 28 65 f3 ad 14 e5 0d 8f 68 c5 e9 ed a1 80 24 5d 74 38 08 a3 f4 7f 7a 8a c1 b3 a7 35 3f e1 56 b5 77 bd e2 5e 7a 36 5d 66 8b a4 ec 68 82 69 56 db 6b 17 f9 ac ab f2 bc bd 92 0d 4b ba 6a f7 d2 ac bd c1 9e 56 27 ef c9 00 5b ad 2d 39 87 70 47 03 14 8e ee 99 04 8e 6d cd 2c 8b 98 3d 5c 95 3d 8f 8b f7 06 6f fd ca d0 dd f1 0a 45 6c c6 90 f3 b7 71 0e af 75 d3 fa 2a 9a f9 63 5a f7 ab 66 0b 04 b9 f8 ce 1e ba 35 7e 32 d6 c6 29 2c ea 0f fa e9 59 1f ae 84 f4 8c 9f 99 06 74 5b 28 58 cc 07 fc ab bd 25 43 a5 c6 c7 be 26 04 9a 8b ee 16 00 9f cb ae 16 0c a4 b3 75 4d 08 52 e7 5d ad 9a e0 7a d1 d5 5c 81 ec 59 67 9f 2e dc 5e 75 b6 b5 60 ea d4 34 34 52 c0 a3 57 7f 1a Data Ascii: 2CwHU^Ymx:V;u\|>T8_nAn(eh$]t8z5?Vw^z6]fhiVkKjV'[-9pGm,=\=oElqu*cZf5~2),Yt[(X%C&uMR]z\Yg.^u`44RW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49732	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:26 UTC	720	OUT	GET /assets/inbox-patient-716e5cc784b622116d4a9b0f962397c1.js HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:27 UTC	835	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 1219235 Connection: close Date: Fri, 20 Dec 2024 18:03:28 GMT Last-Modified: Wed, 18 Dec 2024 22:04:40 GMT ETag: "85abf41a7743c724ecdaf10f017c9140" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e3be5f49ae00f8ca7130519d28e56cd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: 7ZHRbSSOgrXT1j92Qzsz6LsIvifOaMcBl1i8jHDIVRPWNqcTC8xv5w== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:27 UTC	7859	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 7b db 38 92 28 fc dd bf 42 e1 f4 66 a4 13 4a 96 ec 5c d5 51 7c 1c 27 3d ed d9 24 f6 1b a7 7b 76 d6 eb a3 87 96 20 8b 13 8a 54 93 94 13 b7 e3 ff fe d6 05 20 01 12 a4 28 c7 e9 ee d9 99 39 67 3b 16 88 4b 01 28 14 aa 0a 75 71 56 89 68 25 69 ec 4f 52 67 6b 2a 66 7e 28 da 8e 1f 9e 47 9f bb 4b 2f f5 45 98 6e 7b 53 6f 99 8a 38 d9 f6 96 cb c0 9f 40 69 14 3a ee a9 23 3e 2f a3 38 4d 1c d7 11 8b 73 11 ab 7f bb 89 bf 58 06 a2 eb ad d2 f9 f6 c2 ff ec 87 c9 f6 d4 4b bd ae ec a7 4b 65 50 db 9b a4 fe a5 e8 2e a2 a9 08 d4 47 28 36 07 97 1d a8 b6 73 11 2c 01 94 52 b5 49 14 ce fc 8b 6d 11 5e fa 71 14 2e a0 c8 39 73 db b3 55 38 41 68 db c2 4d dd d0 f5 dc c0 8d 3b d7 a2 07 f3 f4 56 41 3a f2 d4 5f 3d f1 39 15 e1 b4 1d a8 02 37 cc fe ba 4e Data Ascii: k{8(BfJ\Q\|'=${v T (9g;K(uqVh%iORgk*f~(GK/En{So8@i:#>/8MsXKKeP.G(6s,RIm^q.9sU8AhM;VA:_=97N
2024-12-20 18:03:27 UTC	8962	IN	Data Raw: 81 f7 02 9b c8 91 19 98 c8 8c 55 24 6d b8 55 55 a4 81 c1 ba 58 74 fa 01 c3 7c 7f dd c0 0f 3f 76 d3 e8 9b b0 ea 3e f0 e9 18 4c 04 f3 28 fd ec 8b 4f c0 82 db f9 72 7e cd a5 07 28 4a 01 a7 59 b3 55 3c 09 e8 bd ca 37 0c d9 49 bd 0f e7 be 26 64 9a bd a0 cb 89 34 8c 95 3d f1 32 fa 53 36 5c 37 ae 3e ab ad bb cd ce bd c2 ef 3d cd c2 08 79 3d 66 2b 2f 01 06 62 f9 d9 b4 b5 d2 4d ab 25 7a 63 ac fb 9e 0c 8e e3 ab 53 0c a3 8a 71 9b 34 5b e6 c2 c4 5c a9 12 c9 c4 93 d0 bb f4 2f 0a 81 22 75 e5 2c a0 71 66 db 8b b9 94 c2 84 02 b2 7c 88 28 29 65 21 b7 24 f0 50 53 e4 c9 8a 0f 44 ec 12 d4 5c 14 21 6c bc f3 eb d2 0b 7c 2f 51 2f 70 e7 8a 2b a6 3f 0f 25 9e 91 c4 a0 bb 7f 2b fc 43 88 0e 39 2f 1c cb f4 79 f1 91 fe b8 cf 2f e2 e4 c1 02 a2 dd 5c 2f a4 76 79 21 8d 4b 74 7b e8 c8 bc Data Ascii: U$mUUXt\|?v>L(Or~(JYU<7I&d4=2S6\7>=y=f+/bM%zcSq4[\/"u,qf\|()e!$PSD\!l\|/Q/p+?%+C9/y/\/vy!Kt{
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 8e 16 ab 28 bf 08 22 3e dd d6 18 02 e6 f2 91 8e 14 a7 10 25 a2 51 fd 41 f3 eb 81 fc 9d 51 96 48 b6 e1 ae f2 97 42 c9 fe 09 a6 3c 6f 16 13 a9 61 94 23 18 e9 1d e9 3c 39 38 25 fb cc 42 e1 c1 e5 a4 50 f2 fa f3 d2 8f af 0a 85 b2 2d 0a e3 e4 1b 2c 5b ea bf 65 3b 55 c4 13 fa 79 b7 36 e3 15 cd f9 12 9d 7a 44 8d 88 2e df ec 54 8f 3d 91 71 f9 eb 79 9d bb b9 d1 a8 2b ad 04 dd e7 b2 e8 1d 24 48 19 df 0a 4e c2 ec 34 aa c5 e5 b8 7f bf 50 04 6d 2c ef dc f9 34 53 ad 38 ca 72 1e 18 41 93 b2 1d c8 bc 1b be 7c 49 b7 e8 e6 95 6b c3 95 78 27 f9 06 ae fa d6 93 bc 53 1b 25 a5 62 25 d8 77 7b 6b fa 50 db 94 01 b4 b7 56 df f2 0e a4 76 5f a8 34 14 3a 88 98 f2 2a 28 7c c2 f1 b1 3c 2e 94 cb 9e dd b0 b3 95 c6 57 d7 5e 8f c2 ac b6 9d 3f 15 cf 1c de e4 42 46 21 90 f1 1c 3a 64 8c bd be Data Ascii: (">%QAQHB<oa#<98%BP-,[e;Uy6zD.T=qy+$HN4Pm,4S8rA\|Ikx'S%b%w{kPVv_4:*(\|<.W^?BF!:d
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 11 e2 c4 4a ba 4e 76 ca 1f 4d eb 86 f6 4e a4 15 1b b9 98 b5 45 cb 67 39 11 04 31 45 26 99 85 09 55 a8 5a 93 2f 67 03 fd 72 06 1b f8 da 2f 13 57 a1 dc c0 07 84 2d 45 0e 47 75 74 52 ac fd 14 2d 65 40 e6 53 3b 41 30 3c 89 2f 10 89 85 5d ca 28 b0 f9 89 d8 30 3a cd 47 ad 89 9e 5f d8 9e 32 75 bb c4 e5 92 5f ef 7e 4e 37 f1 d1 59 54 b0 53 ea 16 74 38 eb 48 0b 29 f2 c7 ec dc ef bc 09 49 cd 42 c6 7e 41 bc 0d dc 71 7a b2 c5 b8 d7 c2 27 53 bc 47 4e 29 49 e4 13 38 23 ce 8c 0a fe 72 62 78 d1 ca 9c f4 a9 7f 54 24 9e e8 9b b0 83 c7 00 35 d8 0f 9c 77 ea 1a 05 9c b8 b5 78 f3 39 ea 46 45 df be 30 bd e8 ed 2d bf 4b b6 45 a4 0e 94 9f 48 05 38 f6 e8 45 85 2c 26 85 9b de 65 d9 58 7a 91 55 74 d9 fc 79 e5 76 e6 9f de ac dc 4d b8 ec 8e b8 f3 34 f7 a8 ae 8c 91 55 5b 9c 19 5a 5c 9d Data Ascii: JNvMNEg91E&UZ/gr/W-EGutR-e@S;A0</](0:G_2u_~N7YTSt8H)IB~Aqz'SGN)I8#rbxT$5wx9FE0-KEH8E,&eXzUtyvM4U[Z\
2024-12-20 18:03:27 UTC	1514	IN	Data Raw: ed 1c 0b 4a f1 61 32 b9 a0 99 5e d0 64 c0 aa 01 5e be 7e 6c fd ac ae 66 a2 56 6f dd 5c 3d a3 16 e2 93 62 fb b7 d4 1c bb d7 12 e3 c6 45 b8 6c 7d c1 8e 8e d8 1c 84 f1 63 ad 1b a0 4a ae 5f 04 c5 e9 e0 2c f8 a0 8c 52 07 f2 0f c9 5e f1 3a fd 13 5b f6 05 e8 47 94 00 db 4e 5f ae ae 86 65 eb 56 6f 60 cb 2b 3d b2 0f 6d a2 d6 6b e1 e3 ff 18 0e 37 cb 99 ea 98 88 51 53 c6 80 b7 63 6c 78 ba 34 dd 13 32 fc a1 a8 1f 41 72 88 03 f0 74 64 44 c9 41 9a 2c 83 32 3f 73 72 2d de 7a bc ee 29 8e a5 fe fa 5f a8 b8 5e 78 13 de e2 71 aa 74 57 28 7f da 78 1e 1a 6b e7 f0 04 6a bc 9b b0 71 47 0e fb a2 ad c9 24 af 55 91 bc 88 ad 5a 42 f6 67 24 8f d5 3f 3b 7b 0e c7 c6 bf 67 f1 d2 7e 8c 1e 3a 56 42 57 1f 0e 37 fe 4a 4e a0 f9 03 d3 89 57 7b 32 ae 7b 83 fc fd 89 b7 94 7e 35 4a 8e d3 8f a0 Data Ascii: Ja2^d^~lfVo\=bEl}cJ_,R^:[GN_eVo`+=mk7QSclx42ArtdDA,2?sr-z)_^xqtW(xkjqG$UZBg$?;{g~:VBW7JNW{2{~5J
2024-12-20 18:03:27 UTC	9973	IN	Data Raw: 6a 15 53 c1 49 dd ba 19 e9 01 3f 5d c9 62 4f 8d f0 0b 24 8f 07 5a 51 37 2f e9 dc 09 f8 7e 25 ff b0 bb ea 19 5b 09 51 7f eb b6 0b 81 58 ea 1f ed 40 44 3f 4a 5f 18 96 d4 d9 94 8f 9a 2a 6e cc 47 0f 33 b3 39 42 a8 36 1a f4 33 f8 5d db a4 1f 41 aa 6e 54 42 f6 a1 de 2c b8 ba 0a e0 9f b8 bf 71 75 75 af 5b c0 86 4a 70 57 75 33 f8 4f 74 1b 62 74 47 54 e8 40 50 8f 96 50 7a fb 22 ec a9 f7 0c 5f 2e 48 13 2e 3e 6c c0 cf 6b 5f 26 ef 85 40 c4 a6 66 fa 43 f8 a9 d3 df 9e 46 99 95 fc 7d 66 26 3f 4b e7 19 3e 72 ea f4 1f e0 a7 91 1e 1d db c9 8f 30 f9 40 0a 11 8a 60 b6 7b fb 21 71 10 b7 0c 97 e2 e3 74 7b d2 69 40 42 0a ed 75 3c 99 23 94 17 4a 57 78 c9 1a 3d 01 06 b6 5b 41 6f e2 85 51 1e 13 be 09 50 62 13 0c d8 da 1c e6 02 36 f6 f0 c7 e0 71 f8 63 b0 be de bb 4c c6 b4 25 37 fb Data Ascii: jSI?]bO$ZQ7/~%[QX@D?J_*nG39B63]AnTB,quu[JpWu3OtbtGT@PPz"_.H.>lk_&@fCF}f&?K>r0@`{!qt{i@Bu<#JWx=[AoQPb6qcL%7
2024-12-20 18:03:27 UTC	6945	IN	Data Raw: 7d b3 05 e3 c6 21 c9 09 a8 49 53 17 39 a6 23 0d 17 83 88 2b 49 c2 52 aa 88 59 72 d3 fe 1f a9 9b b1 77 7c 0c 38 07 3f b1 e6 f7 98 a3 ad 4b 5f 0a ce 25 54 e9 81 3e 31 a3 01 63 6e cd 32 bb da f7 68 7f 2d 5b 19 db c2 6c 23 97 84 1d 52 4c 9d f7 88 e6 64 d1 9f 5f 5f b2 fa 3c 4e 28 c4 a0 e0 fb 5d ce 04 b4 f6 41 31 42 ed 9d ab 9e 60 b7 16 37 98 aa 3b d2 0d 44 8f 03 f4 1f 11 70 d1 bb 32 79 1d 1e ce a1 6d 20 be f4 ee 71 35 87 e2 1f f8 6d 99 ed cd 44 5e 1f b3 49 91 82 50 7a 46 46 c4 29 8c ed c8 cf 14 f0 f2 19 21 aa f4 ab 93 37 af a7 18 5e 42 34 4b d3 ad e0 d4 d6 1f f0 a3 e5 4e b8 95 f0 51 1c 80 46 f8 29 4a 07 49 f8 03 fb 8e fa 8a a7 b7 1a 6c a9 e5 38 a3 63 26 6d a6 0e 7e 36 be 0b 4b ed b6 5f 30 7d 11 aa 27 5d 4c 45 c2 81 c9 ac e9 7c 1a 43 52 9f fb f8 94 da 4e 1c 3e Data Ascii: }!IS9#+IRYrw\|8?K_%T>1cn2h-[l#RLd__<N(]A1B`7;Dp2ym q5mD^IPzFF)!7^B4KNQF)JIl8c&m~6K_0}']LE\|CRN>
2024-12-20 18:03:27 UTC	1024	IN	Data Raw: 5a 66 91 7a 58 fd 4d 8e e4 89 eb 87 42 22 f9 05 45 bb b5 f6 97 56 df ef a1 56 2e 0f d8 ae 8a 9b bf b2 4a df 47 83 8e c8 72 50 ad 8e e0 00 83 25 91 81 dc f0 f0 85 39 b2 3b 20 bc 45 1a 03 82 ac 91 58 76 0f 5c ad ad 5f d1 9c 5b e8 b7 f6 72 f7 67 6d 2e 8d 0e 99 dd 6e 4a 99 c2 40 91 fe 99 12 eb 35 67 61 91 eb 25 38 8c 39 5b 72 a7 6b 7e 33 75 c4 71 c2 de d3 68 ae 2b 12 ad c7 96 b6 d9 19 db e7 b8 e5 c2 6c 79 db 2f 22 38 cd 93 7f 89 04 f6 61 9b 34 8c 25 e9 70 d9 d4 6f 00 0d 6c 2d e7 01 a1 17 72 8b 70 85 a5 ae 71 39 4a e0 46 dd 9f 71 09 c5 77 dc 1a 37 40 cc 9a 24 b7 69 66 2a 68 bc 26 04 a3 94 45 9f d8 11 8a 4d c6 4d 94 0e 60 2b 96 44 c0 14 c1 a5 55 cf 0a 77 3d 88 78 ed d9 97 ed 39 d5 3e ce ab 0c b2 6f c2 23 8b 74 2a 94 a1 a8 bc c9 66 43 ba 9c 5a df cd 44 78 8c ac Data Ascii: ZfzXMB"EVV.JGrP%9; EXv\_[rgm.nJ@5ga%89[rk~3uqh+ly/"8a4%pol-rpq9JFqw7@$ifh&EMM`+DUw=x9>o#tfCZDx
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: f1 57 0b df d4 fd 6f a9 de e6 d8 08 02 93 72 53 70 37 8b 10 0b 47 7c ef 95 74 45 5c b0 e3 2a 9f ff b6 8b c6 f9 dd 7c ce e2 df 6c e5 b6 1f 61 e5 18 60 4d 48 47 71 be 79 6a c1 82 73 02 f6 77 88 b7 ec 0a fb 94 fb 29 d8 48 34 4b cf 31 fa 4a f3 85 47 6c 14 06 be b5 d7 00 2d d7 44 30 34 4f ff 68 da b6 16 31 72 35 6e 3e ce 6a 73 ec 93 27 e9 ce a0 c1 c4 de a8 5d be eb 89 11 7a 33 be 0a 79 05 38 3a 60 66 f7 92 0b 2f 41 ee 74 9e 57 57 1e 83 56 15 24 52 96 7b ba 3c 04 cc 2d 02 4e c9 79 32 e7 6d b2 41 5e fa 29 00 f1 c4 31 e2 0c a9 0a 23 34 f2 04 13 e7 a0 c8 07 04 cd 81 da c5 68 16 b7 bc f5 99 b8 76 57 78 71 0c d7 93 fc 77 dd 76 35 f5 4d 96 84 4c 1b ab 1f 04 d9 93 27 80 2c 8f b6 dc 17 54 69 50 63 e2 6f 66 5f bf 6e 66 23 cc 7a f9 9f ec 86 ab 62 d6 e2 4d f3 42 4d 1f dd Data Ascii: WorSp7G\|tE\*\|la`MHGqyjsw)H4K1JGl-D04Oh1r5n>js']z3y8:`f/AtWWV$R{<-Ny2mA^)1#4hvWxqwv5ML',TiPcof_nf#zbMBM
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 40 eb 3f 67 de 39 a7 8c 8f 3d 20 19 71 b4 c9 f2 d1 2a 72 a3 14 29 79 77 c0 ce 4e 13 e6 dc 99 f8 44 97 dd cb a7 02 7d c4 6f c1 a4 e3 32 99 a5 b9 24 72 0d 9e fd 7e 18 4f 6f b9 ce 93 d0 77 9b 14 ba df 9e d5 9b 6d 10 db 92 a4 68 06 aa f6 5e e5 e2 bf 01 b0 8e 58 ee b9 4c a1 72 78 ec c8 a1 12 df 37 87 8a 4d 5d 62 6e 14 50 97 39 f7 ff 63 ef 5b bb db 36 92 b4 bf eb 57 c0 98 5d 87 1c 83 b4 e4 4c 66 76 98 30 5a 59 b6 27 da f5 ed 44 ce cc 99 f5 ea e8 40 64 4b c2 18 04 38 00 68 59 91 f5 df df ba 74 37 ba 81 06 08 50 94 93 bc 3b 73 76 1d 11 e8 6e f4 a5 ba ba aa ba ea 29 26 0e 38 53 0b a7 19 17 1d 8d bb 6e 8f 52 29 a8 3a fb 9a 2a 52 a2 bb d9 25 eb c0 d6 bc 94 5d 53 13 93 76 76 3f d2 83 94 cd da fd c1 2a a7 fe 97 3e ef 37 3e ab 6b 57 42 9b a7 69 bc 8f 83 b9 86 74 7d ff Data Ascii: @?g9= qr)ywND}o2$r~Oowmh^XLrx7M]bnP9c[6W]Lfv0ZY'D@dK8hYt7P;svn)&8SnR):R%]Svv?*>7>kWBit}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49737	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:26 UTC	523	OUT	GET /v3/ HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:27 UTC	706	IN	HTTP/1.1 200 OK Connection: close Content-Length: 709604 Last-Modified: Thu, 19 Dec 2024 21:47:17 GMT ETag: "7c5cec529d347475da54b5520c3a5d36" Cache-Control: max-age=60 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 97 Date: Fri, 20 Dec 2024 18:03:26 GMT Via: 1.1 varnish X-Request-ID: 898996da-13da-454e-bdcd-762b14fde084 X-Served-By: cache-nyc-kteb1890030-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6f 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 74 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 3d 7b 37 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 6c 2e 6c 65 6e 67 74 68 7c 7c 28 61 28 29 2c 21 30 29 2c 6c 5b 6c 2e 6c 65 6e 67 74 68 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 65 34 32 62 64 64 30 65 2e 73 76 67 22 7d 2c 36 36 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 6e 6e 2d 65 66 30 64 61 34 62 33 36 31 34 32 63 32 38 37 31 38 61 64 32 34 62 61 65 64 63 35 38 34 35 33 2e 73 76 67 22 7d 2c 39 38 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 72 61 62 6f 62 61 6e 6b 2d 64 63 35 31 38 37 65 38 34 31 33 34 31 39 39 37 35 66 64 61 39 61 37 32 61 30 38 63 32 35 61 33 2e 73 76 67 22 7d 2c 33 32 36 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 Data Ascii: e42bdd0e.svg"},6628:function(e,t,n){e.exports=n.p+"fingerprinted/img/nn-ef0da4b36142c28718ad24baedc58453.svg"},9824:function(e,t,n){e.exports=n.p+"fingerprinted/img/rabobank-dc5187e8413419975fda9a72a08c25a3.svg"},3260:function(e,t,n){e.exports=n.p+"finger
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 54 44 4c 6f 67 6f 2d 31 39 63 34 30 37 34 66 33 38 38 65 61 34 61 65 34 62 61 64 33 35 37 34 30 38 37 63 64 61 66 61 2e 73 76 67 22 7d 2c 36 31 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 55 53 41 41 4c 6f 67 6f 2d 63 30 33 63 36 38 30 62 62 37 30 31 30 36 63 62 62 61 30 38 33 61 34 36 66 35 65 63 35 35 39 34 2e 73 76 67 22 7d 2c 32 35 33 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 55 53 42 61 6e 6b 4c 6f 67 6f 2d 64 39 35 66 33 61 36 Data Ascii: ){e.exports=n.p+"fingerprinted/img/TDLogo-19c4074f388ea4ae4bad3574087cdafa.svg"},6119:function(e,t,n){e.exports=n.p+"fingerprinted/img/USAALogo-c03c680bb70106cbba083a46f5ec5594.svg"},2531:function(e,t,n){e.exports=n.p+"fingerprinted/img/USBankLogo-d95f3a6
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 75 20 69 6e 20 69 3d 4f 62 6a 65 63 74 28 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 72 2e 63 61 6c 6c 28 69 2c 75 29 26 26 28 63 5b 75 5d 3d 69 5b 75 5d 29 3b 69 66 28 6e 29 7b 61 3d 6e 28 69 29 3b 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 61 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 6f 2e 63 61 6c 6c 28 69 2c 61 5b 6c 5d 29 26 26 28 63 5b 61 5b 6c 5d 5d 3d 69 5b 61 5b 6c 5d 5d 29 7d 7d 72 65 74 75 72 6e 20 63 7d 7d 2c 33 34 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 Data Ascii: {for(var u in i=Object(arguments[s]))r.call(i,u)&&(c[u]=i[u]);if(n){a=n(i);for(var l=0;l<a.length;l++)o.call(i,a[l])&&(c[a[l]]=i[a[l]])}}return c}},3434:function(e,t,n){"use strict";function r(){}function o(e){if("object"!=typeof this)throw new TypeError(
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 2e 5f 35 34 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 6f 6e 52 65 6a 65 63 74 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 72 79 7b 65 28 74 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 70 3d 65 2c 6d 7d 7d 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 61 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ._54=null}}function u(e,t,n){this.onFulfilled="function"==typeof e?e:null,this.onRejected="function"==typeof t?t:null,this.promise=n}function l(e,t){var n=!1,r=function(e,t,n){try{e(t,n)}catch(e){return p=e,m}}(e,(function(e){n\|\|(n=!0,a(t,e))}),(function(
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 61 2c 65 29 7d 29 2c 6e 29 29 7d 76 61 72 20 73 3d 63 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 65 77 20 6f 28 73 2e 62 69 6e 64 28 63 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 61 2c 65 29 7d 29 2c 6e 29 7d 74 5b 61 5d 3d 63 2c 30 3d 3d 2d 2d 69 26 26 65 28 74 29 7d 69 66 28 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 66 6f 72 28 76 61 72 20 69 3d 74 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 72 28 61 2c 74 5b 61 5d 29 7d 29 29 7d 2c 6f 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: hen((function(e){r(a,e)}),n))}var s=c.then;if("function"==typeof s)return void new o(s.bind(c)).then((function(e){r(a,e)}),n)}t[a]=c,0==--i&&e(t)}if(0===t.length)return e([]);for(var i=t.length,a=0;a<t.length;a++)r(a,t[a])}))},o.reject=function(e){return
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 31 3d 3d 3d 63 29 6f 2e 63 68 69 6c 64 72 65 6e 3d 6e 3b 65 6c 73 65 20 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 73 3d 41 72 72 61 79 28 63 29 2c 75 3d 30 3b 75 3c 63 3b 75 2b 2b 29 73 5b 75 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 75 2b 32 5d 3b 6f 2e 63 68 69 6c 64 72 65 6e 3d 73 7d 69 66 28 65 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 72 20 69 6e 20 63 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 76 6f 69 64 20 30 3d 3d 3d 6f 5b 72 5d 26 26 28 6f 5b 72 5d 3d 63 5b 72 5d 29 3b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 62 2c 74 79 70 65 3a 65 2c 6b 65 79 3a 69 2c 72 65 66 3a 61 2c 70 72 6f 70 73 3a 6f 2c 5f 6f 77 6e 65 72 3a 5a 2e 63 75 72 72 65 6e 74 7d 7d 66 75 6e 63 Data Ascii: ments.length-2;if(1===c)o.children=n;else if(1<c){for(var s=Array(c),u=0;u<c;u++)s[u]=arguments[u+2];o.children=s}if(e&&e.defaultProps)for(r in c=e.defaultProps)void 0===o[r]&&(o[r]=c[r]);return{$$typeof:b,type:e,key:i,ref:a,props:o,_owner:Z.current}}func
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 22 3d 22 3a 22 3d 30 22 2c 22 3a 22 3a 22 3d 32 22 7d 3b 72 65 74 75 72 6e 22 24 22 2b 28 22 22 2b 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 7d 28 65 2e 6b 65 79 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 65 2e 66 75 6e 63 2e 63 61 6c 6c 28 65 2e 63 6f 6e 74 65 78 74 2c 74 2c 65 2e 63 6f 75 6e 74 2b 2b 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 72 65 73 75 6c 74 2c 6f 3d 65 2e 6b 65 79 50 72 65 66 69 78 3b 65 3d 65 2e 66 75 6e 63 2e 63 61 6c 6c 28 65 2e 63 6f 6e 74 65 78 74 2c 74 2c 65 2e 63 6f 75 6e 74 2b 2b Data Ascii: function(e){var t={"=":"=0",":":"=2"};return"$"+(""+e).replace(/[=:]/g,(function(e){return t[e]}))}(e.key):t.toString(36)}function f(e,t){e.func.call(e.context,t,e.count++)}function _(e,t,n){var r=e.result,o=e.keyPrefix;e=e.func.call(e.context,t,e.count++
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 52 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 4f 3d 7b 7d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 65 61 63 74 43 6f 6d 70 6f 6e 65 6e 74 3d 7b 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 72 28 38 35 29 29 3b 74 68 69 73 2e 75 70 64 61 74 65 72 2e 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 28 74 Data Ascii: date:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},O={};o.prototype.isReactComponent={},o.prototype.setState=function(e,t){if("object"!=typeof e&&"function"!=typeof e&&null!=e)throw Error(r(85));this.updater.enqueueSetState(t
2024-12-20 18:03:27 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 52 2c 74 79 70 65 3a 65 2c 63 6f 6d 70 61 72 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 7d 7d 2c 75 73 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 79 28 29 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 65 2c 74 29 7d 2c 75 73 65 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 79 28 29 2e 75 73 65 43 6f 6e 74 65 78 74 28 65 2c 74 29 7d 2c 75 73 65 45 66 66 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 79 28 29 2e 75 73 65 45 66 66 65 63 74 28 65 2c 74 29 7d 2c 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: ction(e,t){return{$$typeof:R,type:e,compare:void 0===t?null:t}},useCallback:function(e,t){return y().useCallback(e,t)},useContext:function(e,t){return y().useContext(e,t)},useEffect:function(e,t){return y().useEffect(e,t)},useImperativeHandle:function(e,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49736	142.250.181.78	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:26 UTC	555	OUT	GET /optimize.js?id=OPT-MWT7J5H HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:27 UTC	1003	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Fri, 20 Dec 2024 18:03:27 GMT Expires: Fri, 20 Dec 2024 18:03:27 GMT Cache-Control: private, max-age=900 Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1169:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1169:0"}],} Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-12-20 18:03:27 UTC	387	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 32 31 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 76 74 70 5f 67 6c 6f 62 61 6c 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 5f 6f 70 74 69 6d 69 7a 65 22 2c 22 76 74 70 5f 6c 69 73 74 65 6e 46 Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"21", "macros":[{"function":"__e"},{"function":"__dee"}], "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenF
2024-12-20 18:03:27 UTC	1390	IN	Data Raw: 61 63 72 6f 22 2c 31 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 65 71 22 2c 22 61 72 67 30 22 3a 5b 22 6d 61 63 72 6f 22 2c 30 5d 2c 22 61 72 67 31 22 3a 22 6f 70 74 69 6d 69 7a 65 2e 63 61 6c 6c 62 61 63 6b 22 7d 5d 2c 0a 20 20 22 72 75 6c 65 73 22 3a 5b 5b 5b 22 69 66 22 2c 30 5d 2c 5b 22 61 64 64 22 2c 30 5d 5d 2c 5b 5b 22 69 66 22 2c 31 5d 2c 5b 22 61 64 64 22 2c 31 5d 5d 5d 0a 7d 2c 0a 22 72 75 6e 74 69 6d 65 22 3a 5b 20 5b 35 30 2c 22 5f 5f 65 22 2c 5b 34 36 2c 22 61 22 5d 2c 5b 33 36 2c 5b 31 33 2c 5b 34 31 2c 22 24 30 22 5d 2c 5b 33 2c 22 24 30 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 69 6e 74 65 72 6e 61 6c 2e 67 65 74 45 76 65 6e 74 44 61 74 61 22 5d 5d 2c 5b 22 24 30 22 2c 22 65 76 65 6e 74 22 5d 5d 5d 5d 0a 20 0a 5d 0a 2c 22 65 6e 74 Data Ascii: acro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}], "rules":[[["if",0],["add",0]],[["if",1],["add",1]]]},"runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]] ],"ent
2024-12-20 18:03:27 UTC	1390	IN	Data Raw: 69 73 2e 6a 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 6a 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: is.j};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(f\|\|"")+"_"+d++,f)};return e});var ja=typeof Object.create=="function"?Object.create:function
2024-12-20 18:03:27 UTC	1390	IN	Data Raw: 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 69 61 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 78 61 7d 29 3b 0a 76 61 72 20 79 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d Data Ascii: uments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};ia("Object.assign",function(a){return a\|\|xa});var ya=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=argum
2024-12-20 18:03:27 UTC	1390	IN	Data Raw: 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 76 63 7c 7c 28 64 3f 61 2e 76 61 6c 75 65 73 2e 77 69 28 62 2c 63 29 3a 61 2e 76 61 6c 75 65 73 2e 73 65 74 28 62 2c 63 29 29 7d 3b 46 61 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 76 63 7c 7c 28 21 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 26 26 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 68 61 73 28 61 29 3f 74 68 69 73 2e 70 61 72 65 6e 74 2e 73 65 74 28 61 2c 62 29 3a 74 68 69 73 2e 76 61 6c 75 65 73 2e 73 65 74 28 61 2c 62 29 29 7d 3b 0a 46 61 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 3f 74 68 Data Ascii: ion(a,b,c,d){a.vc\|\|(d?a.values.wi(b,c):a.values.set(b,c))};Fa.prototype.set=function(a,b){this.vc\|\|(!this.values.has(a)&&this.parent&&this.parent.has(a)?this.parent.set(a,b):this.values.set(a,b))};Fa.prototype.get=function(a){return this.values.has(a)?th
2024-12-20 18:03:27 UTC	1390	IN	Data Raw: 75 65 29 3b 72 65 74 75 72 6e 20 64 7d 3b 68 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 2e 47 61 28 29 7d 3b 76 61 72 20 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6d 61 3d 21 31 3b 74 68 69 73 2e 52 3d 6e 65 77 20 43 61 7d 3b 68 3d 4c 61 2e 70 72 6f 74 6f 74 79 70 65 3b 68 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 52 2e 67 65 74 28 61 29 7d 3b 68 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6d 61 7c 7c 74 68 69 73 2e 52 2e 73 65 74 28 61 2c 62 29 7d 3b 68 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 52 2e 68 61 73 28 61 29 7d 3b 68 2e 77 69 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6d 61 7c Data Ascii: ue);return d};h.Ga=function(){this.j.Ga()};var La=function(){this.ma=!1;this.R=new Ca};h=La.prototype;h.get=function(a){return this.R.get(a)};h.set=function(a,b){this.ma\|\|this.R.set(a,b)};h.has=function(a){return this.R.has(a)};h.wi=function(a,b){this.ma\|
2024-12-20 18:03:27 UTC	1390	IN	Data Raw: 20 56 61 28 61 2c 62 29 7b 55 61 5b 61 5d 3d 55 61 5b 61 5d 7c 7c 5b 5d 3b 55 61 5b 61 5d 5b 62 5d 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 29 7b 76 61 72 20 62 3d 55 61 5b 61 5d 3b 69 66 28 21 62 7c 7c 62 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 2c 65 3d 30 3b 65 3c 62 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 65 25 38 3d 3d 3d 30 26 26 65 3e 30 26 26 28 63 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 29 29 2c 64 3d 30 29 2c 62 5b 65 5d 26 26 28 64 7c 3d 31 3c 3c 65 25 38 29 3b 64 3e 30 26 26 63 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 29 29 3b 72 65 74 75 72 6e 20 51 61 28 63 2e 6a 6f 69 6e 28 22 22 29 29 Data Ascii: Va(a,b){Ua[a]=Ua[a]\|\|[];Ua[a][b]=!0}function Wa(a){var b=Ua[a];if(!b\|\|b.length===0)return"";for(var c=[],d=0,e=0;e<b.length;e++)e%8===0&&e>0&&(c.push(String.fromCharCode(d)),d=0),b[e]&&(d\|=1<<e%8);d>0&&c.push(String.fromCharCode(d));return Qa(c.join(""))
2024-12-20 18:03:27 UTC	1390	IN	Data Raw: 74 69 6f 6e 20 6d 62 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 44 61 74 65 2e 6e 6f 77 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 62 28 29 7b 72 65 74 75 72 6e 20 6d 62 28 29 2e 67 65 74 54 69 6d 65 28 29 7d 76 61 72 20 65 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 66 69 78 3d 22 67 74 6d 2e 22 3b 74 68 69 73 2e 76 61 6c 75 65 73 3d 7b 7d 7d 3b 65 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 3d 62 7d 3b 65 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 7d 3b 65 62 2e Data Ascii: tion mb(){return new Date(Date.now())}function nb(){return mb().getTime()}var eb=function(){this.prefix="gtm.";this.values={}};eb.prototype.set=function(a,b){this.values[this.prefix+a]=b};eb.prototype.get=function(a){return this.values[this.prefix+a]};eb.
2024-12-20 18:03:27 UTC	1390	IN	Data Raw: 5b 30 5d 3a 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 62 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 6e 29 7b 76 61 72 20 70 3d 6e 2e 73 70 6c 69 74 28 22 3d 22 29 5b 30 5d 3b 69 66 28 61 2e 69 6e 64 65 78 4f 66 28 70 29 3c 30 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 63 21 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 70 2b 22 3d 22 2b 63 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 73 70 6c 69 74 28 22 26 22 29 2e 6d 61 70 28 64 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 70 21 3d 3d 76 6f 69 64 20 30 7d 29 2e 6a 6f 69 6e 28 22 26 22 29 7d 76 61 72 20 66 3d 62 2e 68 72 65 66 2e 73 70 6c 69 74 28 2f 5b 3f 23 5d 2f 29 5b 30 5d 2c 67 3d 62 2e 73 65 61 72 63 68 2c 6b 3d 62 2e 68 61 Data Ascii: [0]:a}function Ab(a,b,c){function d(n){var p=n.split("=")[0];if(a.indexOf(p)<0)return n;if(c!==void 0)return p+"="+c}function e(n){return n.split("&").map(d).filter(function(p){return p!==void 0}).join("&")}var f=b.href.split(/[?#]/)[0],g=b.search,k=b.ha
2024-12-20 18:03:27 UTC	1390	IN	Data Raw: 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 61 7d 3b 4f 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 7d 3b 76 61 72 20 50 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 4f 6d 3d 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 62 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 62 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 76 61 72 20 52 62 3d 5b 51 62 28 22 64 61 74 61 22 29 2c 51 62 28 22 68 74 74 70 22 29 2c 51 62 28 22 68 74 74 70 73 22 29 2c 51 62 28 22 6d 61 69 6c 74 6f 22 29 2c 51 62 28 22 66 74 70 22 29 2c 6e Data Ascii: on(a){this.j=a};Ob.prototype.toString=function(){return this.j};var Pb=function(a){this.Om=a};function Qb(a){return new Pb(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})}var Rb=[Qb("data"),Qb("http"),Qb("https"),Qb("mailto"),Qb("ftp"),n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49738	52.222.144.109	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:26 UTC	553	OUT	GET /link/v2/stable/link-initialize.js HTTP/1.1 Host: cdn.plaid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:27 UTC	801	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 160097 Connection: close x-amz-id-2: pm0xrdoCUWzl+3EvdeHSrUJkrevl+pcKQ6RsYPaMEbZW9seEgbtbjVejhujyYeL51xszdYbmt1HG8awBp1UtsTYG9Dfhl40ykvlTZ9FxKnI= x-amz-request-id: BVAK0W3BDX2N3MY2 x-amz-replication-status: COMPLETED Last-Modified: Thu, 19 Dec 2024 19:08:08 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: cEIA7fKZ1IdVWK2ENQrJhhvUcoRM6Fai Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 20 Dec 2024 15:39:05 GMT Cache-Control: no-cache,must-revalidate,max-age=0 ETag: "38b93694c8ebeb57f06089effc54e980" X-Cache: Hit from cloudfront Via: 1.1 93c32b8d81c9a38079148004208d6478.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: dgvJ_lf6YoYRd7eVzjp2ZcWp1zmI2OlqPM93RBDpt4PEZJzZZmYGGQ== Age: 8663
2024-12-20 18:03:27 UTC	15583	IN	Data Raw: 76 61 72 20 50 6c 61 69 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 72 29 7b 66 6f 72 28 76 61 72 20 69 2c 61 2c 75 3d 72 5b 30 5d 2c 6c 3d 72 5b 31 5d 2c 64 3d 30 2c 70 3d 5b 5d 3b 64 3c 75 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 61 3d 75 5b 64 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 61 29 26 26 6f 5b 61 5d 26 26 70 2e 70 75 73 68 28 6f 5b 61 5d 5b 30 5d 29 2c 6f 5b 61 5d 3d 30 3b 66 6f 72 28 69 20 69 6e 20 6c 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6c 2c 69 29 26 26 28 74 5b 69 5d 3d 6c 5b 69 5d 29 3b 66 6f 72 28 63 Data Ascii: var Plaid=function(t){function webpackJsonpCallback(r){for(var i,a,u=r[0],l=r[1],d=0,p=[];d<u.length;d++)a=u[d],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(i in l)Object.prototype.hasOwnProperty.call(l,i)&&(t[i]=l[i]);for(c
2024-12-20 18:03:27 UTC	801	IN	Data Raw: 69 6f 6e 28 74 2c 72 2c 6f 2c 6d 2c 45 2c 77 29 7b 76 61 72 20 53 3d 69 5b 74 5d 2c 4f 3d 53 2c 78 3d 45 3f 22 73 65 74 22 3a 22 61 64 64 22 2c 49 3d 4f 26 26 4f 2e 70 72 6f 74 6f 74 79 70 65 2c 41 3d 7b 7d 3b 72 65 74 75 72 6e 20 62 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 26 26 28 77 7c 7c 49 2e 66 6f 72 45 61 63 68 26 26 21 63 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 65 77 20 4f 29 2e 65 6e 74 72 69 65 73 28 29 2e 6e 65 78 74 28 29 7d 29 29 29 3f 28 4f 3d 72 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 76 28 72 2c 4f 2c 74 2c 22 5f 63 22 29 2c 72 2e 5f 63 3d 6e 65 77 20 53 2c 6e 75 6c 6c 21 3d 6f 26 26 70 28 6f 2c 45 2c 72 5b 78 5d 2c 72 29 7d 29 29 2c 67 28 22 61 64 64 2c 63 6c 65 61 72 2c 64 65 6c 65 74 65 2c 66 6f 72 Data Ascii: ion(t,r,o,m,E,w){var S=i[t],O=S,x=E?"set":"add",I=O&&O.prototype,A={};return b&&"function"==typeof O&&(w\|\|I.forEach&&!c((function(){(new O).entries().next()})))?(O=r((function(r,o){v(r,O,t,"_c"),r._c=new S,null!=o&&p(o,E,r[x],r)})),g("add,clear,delete,for
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 2e 6c 65 6e 67 74 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 74 2d 2d 3b 29 72 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 72 29 7d 7d 29 7d 7d 2c 31 33 35 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6f 28 35 33 34 29 2c 61 3d 6f 28 32 31 39 37 29 2c 75 3d 6f 28 31 31 38 37 29 2c 63 3d 6f 28 31 32 32 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 69 2e 53 2c 74 2c 7b 66 72 6f 6d 3a 66 75 6e 63 74 69 6f 6e 20 66 72 6f 6d 28 74 29 7b 76 61 72 20 72 2c 6f 2c 69 2c 6c 2c 64 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 72 65 74 75 72 6e 20 61 28 74 68 69 73 29 2c 28 72 3d 76 6f 69 64 20 30 21 3d 3d 64 Data Ascii: .length,r=new Array(t);t--;)r[t]=arguments[t];return new this(r)}})}},1350:function(t,r,o){"use strict";var i=o(534),a=o(2197),u=o(1187),c=o(1226);t.exports=function(t){i(i.S,t,{from:function from(t){var r,o,i,l,d=arguments[1];return a(this),(r=void 0!==d
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 72 6e 20 75 3e 3d 35 31 7c 7c 21 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 28 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 63 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 2c 31 21 3d 3d 72 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 7d 2c 32 30 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6f 28 31 31 29 2c 61 3d 6f 28 31 37 29 2c 75 3d 6f 28 31 38 35 29 2c 63 3d 6f 28 34 34 29 2c 6c 3d 6f 28 35 31 29 2c 64 3d 6f 28 37 31 29 2e 66 2c 70 3d 6f 28 31 36 32 29 2c 76 3d 6f 28 32 37 38 29 2c 68 3d 6f 28 34 38 36 29 2c 79 3d 6f 28 32 30 38 29 2c 5f 3d 6f 28 32 37 37 29 2c 67 3d 21 31 2c 62 3d Data Ascii: rn u>=51\|\|!i((function(){var r=[];return(r.constructor={})[c]=function(){return{foo:1}},1!==r[t](Boolean).foo}))}},205:function(t,r,o){"use strict";var i=o(11),a=o(17),u=o(185),c=o(44),l=o(51),d=o(71).f,p=o(162),v=o(278),h=o(486),y=o(208),_=o(277),g=!1,b=
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 22 29 29 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 22 63 64 6e 2e 70 6c 61 69 64 2e 63 6f 6d 22 2c 22 73 65 63 75 72 65 2e 70 6c 61 69 64 2e 63 6f 6d 22 29 3b 69 66 28 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 63 64 6e 2d 74 65 73 74 69 6e 67 2e 70 6c 61 69 64 2e 63 6f 6d 22 29 29 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 22 63 64 6e 2d 74 65 73 74 69 6e 67 2e 70 6c 61 69 64 2e 63 6f 6d 22 2c 22 73 65 63 75 72 65 2d 74 65 73 74 69 6e 67 2e 70 6c 61 69 64 2e 63 6f 6d 22 29 7d 72 65 74 75 72 6e 20 74 7d 2c 62 2e 68 6f 6f 6b 73 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 3d 5f 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 2c 62 2e 68 6f 6f 6b 73 2e 73 68 6f 75 6c 64 52 65 69 6e 69 74 69 61 6c 69 7a 65 4f 6e 4f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e Data Ascii: "))return t.replace("cdn.plaid.com","secure.plaid.com");if(-1!==t.indexOf("cdn-testing.plaid.com"))return t.replace("cdn-testing.plaid.com","secure-testing.plaid.com")}return t},b.hooks.emitLinkOpen=_.emitLinkOpen,b.hooks.shouldReinitializeOnOpen=function
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 61 7c 7c 28 69 3f 62 2e 55 6e 69 64 65 6e 74 69 66 69 65 64 4d 6f 62 69 6c 65 42 72 6f 77 73 65 72 57 61 6c 6c 65 74 3a 62 2e 55 6e 69 64 65 6e 74 69 66 69 65 64 50 6c 75 67 69 6e 57 61 6c 6c 65 74 29 29 7d 3b 66 6f 72 28 63 2e 73 28 29 3b 21 28 75 3d 63 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 6c 28 29 7d 63 61 74 63 68 28 74 29 7b 63 2e 65 28 74 29 7d 66 69 6e 61 6c 6c 79 7b 63 2e 66 28 29 7d 7d 72 65 74 75 72 6e 20 72 2e 73 69 7a 65 3e 31 26 26 72 2e 64 65 6c 65 74 65 28 22 77 61 6c 6c 65 74 5f 33 35 33 22 29 2c 72 2e 73 69 7a 65 3e 31 26 26 28 72 2e 64 65 6c 65 74 65 28 62 2e 55 6e 69 64 65 6e 74 69 66 69 65 64 4d 6f 62 69 6c 65 42 72 6f 77 73 65 72 57 61 6c 6c 65 74 29 2c 72 2e 64 65 6c 65 74 65 28 62 2e 55 6e 69 64 65 6e 74 69 66 69 65 64 50 6c 75 67 69 Data Ascii: a\|\|(i?b.UnidentifiedMobileBrowserWallet:b.UnidentifiedPluginWallet))};for(c.s();!(u=c.n()).done;)l()}catch(t){c.e(t)}finally{c.f()}}return r.size>1&&r.delete("wallet_353"),r.size>1&&(r.delete(b.UnidentifiedMobileBrowserWallet),r.delete(b.UnidentifiedPlugi
2024-12-20 18:03:27 UTC	16384	IN	Data Raw: 69 2c 7b 4c 49 4e 4b 5f 43 4c 49 45 4e 54 5f 53 54 41 42 4c 45 5f 55 52 4c 3a 68 2e 4c 49 4e 4b 5f 43 4c 49 45 4e 54 5f 53 54 41 42 4c 45 5f 55 52 4c 2c 4c 49 4e 4b 5f 43 4c 49 45 4e 54 5f 55 52 4c 3a 68 2e 4c 49 4e 4b 5f 43 4c 49 45 4e 54 5f 55 52 4c 2c 4c 49 4e 4b 5f 48 54 4d 4c 5f 50 41 54 48 3a 68 2e 4c 49 4e 4b 5f 4f 50 45 4e 5f 48 54 4d 4c 5f 50 41 54 48 7d 29 3b 6e 75 6c 6c 21 3d 76 2e 68 6f 6f 6b 73 2e 75 70 64 61 74 65 4c 69 6e 6b 55 52 4c 26 26 28 61 3d 76 2e 68 6f 6f 6b 73 2e 75 70 64 61 74 65 4c 69 6e 6b 55 52 4c 28 61 2c 53 29 29 2c 6e 75 6c 6c 21 3d 76 2e 68 6f 6f 6b 73 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 3f 76 2e 68 6f 6f 6b 73 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 28 61 29 3a 28 30 2c 67 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 29 28 61 Data Ascii: i,{LINK_CLIENT_STABLE_URL:h.LINK_CLIENT_STABLE_URL,LINK_CLIENT_URL:h.LINK_CLIENT_URL,LINK_HTML_PATH:h.LINK_OPEN_HTML_PATH});null!=v.hooks.updateLinkURL&&(a=v.hooks.updateLinkURL(a,S)),null!=v.hooks.emitLinkOpen?v.hooks.emitLinkOpen(a):(0,g.emitLinkOpen)(a
2024-12-20 18:03:28 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 76 61 6c 69 64 61 74 65 43 68 61 69 6e 4f 70 74 69 6f 6e 41 6e 64 43 68 61 69 6e 49 6e 66 6f 72 6d 61 74 69 6f 6e 3a 74 2e 76 61 6c 69 64 61 74 65 43 68 61 69 6e 4f 70 74 69 6f 6e 41 6e 64 43 68 61 69 6e 49 6e 66 6f 72 6d 61 74 69 6f 6e 7d 7d 29 29 7d 7d 2c 32 33 32 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 28 31 34 29 2c 6f 28 33 29 2c 6f 28 31 30 29 2c 6f 28 31 38 29 2c 6f 28 30 29 3b 76 61 72 20 69 3d 6f 28 38 30 30 29 2c 61 3d 6f 28 36 36 32 29 2c 75 3d 6f 28 38 31 37 29 2c 63 3d 6f 28 38 31 36 29 2c 6c 3d 6f 28 31 31 39 30 29 2c 64 3d 6f 28 31 33 32 31 29 2c 70 3d 6f 28 36 36 30 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 Data Ascii: tion(t){return{validateChainOptionAndChainInformation:t.validateChainOptionAndChainInformation}}))}},2321:function(t,r,o){"use strict";o(14),o(3),o(10),o(18),o(0);var i=o(800),a=o(662),u=o(817),c=o(816),l=o(1190),d=o(1321),p=o(660);Object.defineProperty(r
2024-12-20 18:03:28 UTC	16384	IN	Data Raw: 20 41 2c 4e 3d 54 5b 4f 5d 28 53 3f 7b 7d 3a 2d 30 2c 31 29 21 3d 3d 54 2c 52 3d 67 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 54 2e 68 61 73 28 31 29 7d 29 29 2c 4c 3d 62 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 65 77 20 78 28 74 29 7d 29 29 2c 43 3d 21 53 26 26 67 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 65 77 20 78 2c 72 3d 35 3b 72 2d 2d 3b 29 74 5b 4f 5d 28 72 2c 72 29 3b 72 65 74 75 72 6e 21 74 2e 68 61 73 28 2d 30 29 7d 29 29 3b 4c 7c 7c 28 28 41 3d 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 28 74 2c 49 29 3b 76 61 72 20 6f 3d 45 28 6e 65 77 20 78 2c 74 2c 41 29 3b 72 65 74 75 72 6e 20 79 28 72 29 7c 7c 70 28 72 2c 6f 5b 4f 5d 2c 7b 74 68 61 74 3a 6f 2c 41 53 5f 45 4e 54 52 49 45 53 3a 77 7d 29 2c 6f 7d 29 Data Ascii: A,N=T[O](S?{}:-0,1)!==T,R=g((function(){T.has(1)})),L=b((function(t){new x(t)})),C=!S&&g((function(){for(var t=new x,r=5;r--;)t[O](r,r);return!t.has(-0)}));L\|\|((A=r((function(t,r){v(t,I);var o=E(new x,t,A);return y(r)\|\|p(r,o[O],{that:o,AS_ENTRIES:w}),o})
2024-12-20 18:03:28 UTC	16384	IN	Data Raw: 20 6f 7d 3a 79 7d 2c 33 39 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6f 28 31 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 7d 72 65 74 75 72 6e 20 46 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 46 29 21 3d 3d 46 2e 70 72 6f 74 6f 74 79 70 65 7d 29 29 7d 2c 33 39 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 28 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 Data Ascii: o}:y},394:function(t,r,o){"use strict";var i=o(16);t.exports=!i((function(){function F(){}return F.prototype.constructor=null,Object.getPrototypeOf(new F)!==F.prototype}))},396:function(t,r,o){"use strict";o(0),Object.defineProperty(r,"__esModule",{value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49739	216.198.53.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:28 UTC	398	OUT	GET /ekr/snippet.js?key=a38e4305-dfd3-44f3-b64c-d15d8b98fd79 HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:28 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:28 GMT Content-Type: application/javascript Content-Length: 10215 Connection: close x-amz-id-2: V3cI6UbGikpJegbVFxEndZhQn+QRsrs/iMERLXsBmzhw/qhhpHaF49+66GIwiR5ZvMEzrtaC66Y= x-amz-request-id: PFXPRZFE9H8WA2XP x-amz-replication-status: COMPLETED Last-Modified: Mon, 04 Nov 2024 09:45:04 GMT ETag: "c88d625098ddb649cf216dba2e52435c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600, s-maxage=60 x-amz-version-id: C4qpYKgeT8.DeRlre_wbz3El4DCj0uok CF-Cache-Status: HIT Age: 51 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZooJhrXtETENvEbChVG7nK3KbrP3p7LPITCxiR2TBE6EdMC2IdmKQE%2BHl4%2BG7D1ZGOMM1u4LUgpIDLH%2F0OZd3FK1VHEPhqbgHiF2nCmZ70NGcsTNbpYR6oMr9%2F6wB4fh9csW1nQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518c9fdacf0f80-EWR
2024-12-20 18:03:28 UTC	237	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 37 31 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2c 74 2e 73 65 61 72 63 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 53 74 72 69 6e 67 3a 74 2c 70 61 72 73 65 55 72 6c 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 72 3f 7b 7d 3a 72 2e 73 70 6c 69 74 28 22 26 22 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: (()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function
2024-12-20 18:03:28 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 5b 72 5b 30 5d 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 29 2c 65 7d 29 2c 7b 7d 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 22 53 63 72 69 70 74 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 22 29 29 7d 2c 72 2e 72 65 61 64 79 53 74 61 74 65 3f 72 2e 6f 6e 72 65 Data Ascii: (e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onre
2024-12-20 18:03:28 UTC	1369	IN	Data Raw: 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 74 2b 6f 29 2c 61 2e 73 72 63 3d 72 29 2c 65 5b 72 5d 3d 5b 6e 5d 3b 76 61 72 20 6c 3d 28 74 2c 6e 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 3b 76 61 72 20 73 3d 65 5b 72 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 72 5d 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 61 2e 70 61 72 65 6e Data Ascii: a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",t+o),a.src=r),e[r]=[n];var l=(t,n)=>{a.onerror=a.onload=null,clearTimeout(h);var s=e[r];if(delete e[r],a.parentNode&&a.paren
2024-12-20 18:03:28 UTC	1369	IN	Data Raw: 28 6e 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 22 22 2c 74 3d 7b 7d 2c 72 3d 21 31 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 3d 45 72 72 6f 72 28 74 68 69 73 2e 6d 65 73 73 61 67 65 29 2c 74 68 69 73 2e 69 73 55 73 65 72 45 72 72 6f 72 3d 72 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 7d 63 6f 6e 73 74 20 74 3d 7b 7d 2c 72 3d 7b 7d 2c 6e 3d 7b 7d 3b 63 6c 61 73 73 20 6f 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 Data Ascii: (null,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";class e{constructor(e="",t={},r=!1){this.message=e,this.props=t,this.error=Error(this.message),this.isUserError=r,this.fingerprint=this.message}}const t={},r={},n={};class o{constructor(e
2024-12-20 18:03:28 UTC	1369	IN	Data Raw: 74 65 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 52 65 61 64 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 73 65 74 2e 70 72 6f 64 75 63 74 3d 74 68 69 73 2e 6e 61 6d 65 2c 65 2e 74 69 74 6c 65 3d 22 4e 6f 20 63 6f 6e 74 65 6e 74 22 2c 65 2e 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 61 6c 6c 6f 77 3d 22 6d 69 63 72 6f 70 68 6f 6e 65 20 2a 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 21 30 29 2c 65 2e 73 Data Ascii: teIframeElement(){return this.parentDocumentReady().then((()=>{const e=this.doc.createElement("iframe");return e.dataset.product=this.name,e.title="No content",e.role="presentation",e.tabIndex=-1,e.allow="microphone *",e.setAttribute("aria-hidden",!0),e.s
2024-12-20 18:03:28 UTC	1369	IN	Data Raw: 6f 72 28 65 2c 74 29 7b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 28 65 29 2c 74 68 69 73 2e 62 61 73 65 55 72 6c 3d 60 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 63 6f 6d 70 6f 73 65 2f 24 7b 74 7d 60 2c 74 68 69 73 2e 73 6e 69 70 70 65 74 4b 65 79 3d 74 7d 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 73 65 55 72 6c 28 65 3d 21 31 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 61 73 65 55 72 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 26 26 28 74 2b 3d 60 3f 24 7b 74 68 69 73 2e 67 65 74 53 65 72 69 61 6c 69 7a 65 64 56 65 72 73 69 6f 6e 51 75 65 72 79 50 61 72 61 6d 28 29 7d 60 2c 74 68 69 73 2e 64 69 73 70 6c 61 79 57 61 72 6e 69 6e 67 28 29 29 2c 64 65 63 6f 64 65 55 52 49 Data Ascii: or(e,t){this.version=this.getVersion(e),this.baseUrl=`https://ekr.zdassets.com/compose/${t}`,this.snippetKey=t}resolveComposeUrl(e=!1){let t=this.baseUrl;return this.version&&(t+=`?${this.getSerializedVersionQueryParam()}`,this.displayWarning()),decodeURI
2024-12-20 18:03:28 UTC	1369	IN	Data Raw: 69 64 2c 74 29 3a 6e 65 77 20 69 28 65 2c 74 29 29 29 7d 65 72 72 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 22 63 6f 6d 70 6f 73 65 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 7b 6b 65 79 3a 74 7d 29 7d 7d 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 77 69 6e 3d 65 2c 74 68 69 73 2e 64 6f 63 3d 65 2e 64 6f 63 75 6d 65 6e 74 7d 67 65 74 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 72 29 3d 3e 72 28 6e 65 77 20 65 28 22 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 73 6e 69 70 70 65 74 22 2c 7b 7d 2c 21 30 29 29 29 29 7d 67 65 74 5a 45 51 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 67 65 74 50 61 72 65 6e 74 57 69 6e 64 6f 77 28 Data Ascii: id,t):new i(e,t)))}error(t){return new e("compose request failed",{key:t})}}class l{constructor(e){this.win=e,this.doc=e.document}getKey(){return new Promise(((t,r)=>r(new e("Key is missing from snippet",{},!0))))}getZEQueue(){return null}getParentWindow(
2024-12-20 18:03:28 UTC	1369	IN	Data Raw: 63 28 74 68 69 73 2e 77 69 6e 29 29 7d 60 29 29 29 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 69 70 74 53 72 63 28 65 29 7b 69 66 28 65 2e 24 7a 6f 70 69 6d 26 26 65 2e 24 7a 6f 70 69 6d 2e 73 29 72 65 74 75 72 6e 20 65 2e 24 7a 6f 70 69 6d 2e 73 2e 73 72 63 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 2f 2e 2a 7a 6f 70 69 6d 2e 28 63 6f 6d 7c 6e 65 74 7c 6f 72 67 29 5c 2f 2f 3b 6c 65 74 20 6e 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 73 3b 65 2b 2b 29 69 66 28 6e 3d 74 5b 65 5d 2e 73 72 63 7c 7c 22 22 2c 72 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 7d 73 74 61 74 69 63 20 69 73 53 6e 69 70 70 65 74 50 72 Data Ascii: c(this.win))}`)))}static getScriptSrc(e){if(e.$zopim&&e.$zopim.s)return e.$zopim.s.src;const t=document.getElementsByTagName("script"),r=/.*zopim.(com\|net\|org)\//;let n;for(let e=0,s=t.length;e<s;e++)if(n=t[e].src\|\|"",r.test(n))return n}static isSnippetPr
2024-12-20 18:03:28 UTC	395	IN	Data Raw: 3d 65 2c 77 69 6e 64 6f 77 2e 7a 45 6d 62 65 64 3d 65 7d 69 66 28 77 69 6e 64 6f 77 2e 7a 45 41 43 4c 6f 61 64 65 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 6d 28 65 29 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 65 6e 64 65 73 6b 48 6f 73 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 45 51 75 65 75 65 3f 6e 65 77 20 68 28 65 29 3a 67 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 67 28 65 29 3a 6e 65 77 20 6d 28 65 29 7d 28 77 69 6e 64 6f 77 29 2c 74 3d 6e 65 77 20 70 28 65 29 2c 72 3d 21 31 3b 65 2e 67 65 74 4b 65 79 28 29 2e 74 68 65 6e 28 28 65 3d 3e 74 2e 67 65 74 50 72 6f 64 75 63 74 73 Data Ascii: =e,window.zEmbed=e}if(window.zEACLoaded)return;const e=function(e){return m.isSnippetPresent(e)?new m(e):e.document.zendeskHost&&e.document.zEQueue?new h(e):g.isSnippetPresent(e)?new g(e):new m(e)}(window),t=new p(e),r=!1;e.getKey().then((e=>t.getProducts

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49740	104.17.24.14	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:28 UTC	399	OUT	GET /polyfill/v2/polyfill.min.js?features=Intl.~locale.en-US HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:29 UTC	939	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:28 GMT Content-Type: text/javascript; charset=UTF-8 Content-Length: 103 Connection: close CF-Ray: 8f518ca1486a4356-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 1 Cache-Control: public, max-age=604800 Expires: Fri, 27 Dec 2024 18:03:28 GMT Last-Modified: Fri, 20 Dec 2024 18:03:27 GMT Strict-Transport-Security: max-age=15780000 Vary: User-Agent, Accept-Encoding Access-Control-Allow-Methods: GET,HEAD,OPTIONS Cf-Polyfill-Version: 3.25.1 X-Compress-Hint: on Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oig9ceoXqgJll31pAfzRgbD2gtZD5hh1cZXROGo2hJ7MId%2Ftv4OkVwCKWEzbsnt25XK3ZzLDUVDfFYBnAWko%2BCH0cShu4QEdGZTlWqV2rLSI99%2F9rVxIQQwGAAC9laLIgsDmngOA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-12-20 18:03:29 UTC	103	IN	Data Raw: 2f 2a 0a 20 2a 20 50 6f 6c 79 66 69 6c 6c 20 73 65 72 76 69 63 65 20 76 33 2e 32 35 2e 31 0a 20 2a 20 44 69 73 61 62 6c 65 20 6d 69 6e 69 66 69 63 61 74 69 6f 6e 20 28 72 65 6d 6f 76 65 20 60 2e 6d 69 6e 60 20 66 72 6f 6d 20 55 52 4c 20 70 61 74 68 29 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 0a 2a 2f 0a 0a Data Ascii: /* * Polyfill service v3.25.1 * Disable minification (remove `.min` from URL path) for more info*/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49743	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:29 UTC	340	OUT	GET /v3/ HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:30 UTC	705	IN	HTTP/1.1 200 OK Connection: close Content-Length: 709604 Last-Modified: Thu, 19 Dec 2024 21:47:17 GMT ETag: "7c5cec529d347475da54b5520c3a5d36" Cache-Control: max-age=60 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Fri, 20 Dec 2024 18:03:30 GMT Via: 1.1 varnish Age: 3 X-Request-ID: 86fc2bbc-ad02-4c72-831f-a0bbf4778d9e X-Served-By: cache-nyc-kteb1890059-NYC X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6f 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 74 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 3d 7b 37 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 6c 2e 6c 65 6e 67 74 68 7c 7c 28 61 28 29 2c 21 30 29 2c 6c 5b 6c 2e 6c 65 6e 67 74 68 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 29 7d 29 2c 63 3d 22 73 68 69 70 70 69 6e 67 22 2c 73 3d 22 62 69 6c 6c 69 6e 67 22 2c 75 3d 28 30 2c 72 2e 6f 72 29 28 28 30 2c 72 2e 6d 43 29 28 7b 6d 6f 64 65 3a 28 30 2c 72 2e 6b 77 29 28 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 64 69 73 61 62 6c 65 64 22 29 7d 29 2c 28 30 2c 72 2e 6d 43 29 28 7b 6d 6f 64 65 3a 28 30 2c 72 2e 6b 77 29 28 22 67 6f 6f 67 6c 65 5f 6d 61 70 73 5f 61 70 69 22 29 2c 61 70 69 4b 65 79 3a 72 2e 5a 5f 7d 29 29 2c 6c 3d 7b 61 75 74 6f 6d 61 74 69 63 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 64 69 73 61 62 6c 65 64 3a 22 64 69 73 61 62 6c 65 64 22 2c 67 6f 6f 67 6c 65 5f 6d 61 70 73 5f 61 70 69 3a 22 67 6f 6f 67 6c 65 5f 6d 61 70 73 5f 61 70 69 22 7d 2c 64 3d 7b 73 74 72 69 70 65 3a 22 73 74 72 69 70 65 22 2c 6d 65 72 63 68 61 6e 74 Data Ascii: )}),c="shipping",s="billing",u=(0,r.or)((0,r.mC)({mode:(0,r.kw)("automatic","disabled")}),(0,r.mC)({mode:(0,r.kw)("google_maps_api"),apiKey:r.Z_})),l={automatic:"automatic",disabled:"disabled",google_maps_api:"google_maps_api"},d={stripe:"stripe",merchant
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 7d 2c 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 52 6f 6c 6c 6f 75 74 43 6f 6e 66 69 67 3a 7b 74 79 70 65 3a 22 67 61 22 7d 2c 73 75 70 70 6f 72 74 65 64 42 75 74 74 6f 6e 54 68 65 6d 65 73 3a 61 2c 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 54 68 65 6d 65 3a 22 6c 69 67 68 74 22 2c 64 65 66 61 75 6c 74 42 61 63 6b 67 72 6f 75 6e 64 44 61 72 6b 42 75 74 74 6f 6e 54 68 65 6d 65 3a 22 6c 69 67 68 74 22 2c 64 65 66 61 75 6c 74 42 61 63 6b 67 72 6f 75 6e 64 4c 69 67 68 74 42 75 74 74 6f 6e 54 68 65 6d 65 3a 22 64 61 72 6b 22 2c 73 75 70 70 6f 72 74 65 64 42 75 74 74 6f 6e 54 79 70 65 73 3a 69 2c 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 54 79 70 65 4f 70 74 69 6f 6e 3a 22 70 61 79 22 2c 70 6c 61 69 6e 42 75 74 74 6f 6e 54 79 70 65 3a 22 70 61 79 22 2c 69 73 Data Ascii: },confirmationTokenRolloutConfig:{type:"ga"},supportedButtonThemes:a,defaultButtonTheme:"light",defaultBackgroundDarkButtonTheme:"light",defaultBackgroundLightButtonTheme:"dark",supportedButtonTypes:i,defaultButtonTypeOption:"pay",plainButtonType:"pay",is
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 45 22 2c 22 4a 50 22 2c 22 4e 5a 22 2c 22 50 4c 22 2c 22 53 47 22 2c 22 55 53 22 5d 29 2c 28 30 2c 61 2e 5a 29 28 72 2c 73 2e 72 4d 2e 55 4e 49 4f 4e 50 41 59 2c 5b 22 41 55 22 2c 22 43 41 22 2c 22 48 4b 22 2c 22 4d 59 22 2c 22 4e 5a 22 2c 22 53 47 22 2c 22 47 42 22 2c 22 55 53 22 2c 22 43 48 22 2c 22 41 54 22 2c 22 42 45 22 2c 22 42 47 22 2c 22 43 59 22 2c 22 43 5a 22 2c 22 44 4b 22 2c 22 45 45 22 2c 22 46 49 22 2c 22 46 52 22 2c 22 44 45 22 2c 22 47 52 22 2c 22 48 55 22 2c 22 49 45 22 2c 22 49 54 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 4b 22 2c 22 53 49 22 2c 22 45 53 22 2c 22 53 45 22 2c 22 4e 4f 22 5d 29 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e 4d 41 53 Data Ascii: E","JP","NZ","PL","SG","US"]),(0,a.Z)(r,s.rM.UNIONPAY,["AU","CA","HK","MY","NZ","SG","GB","US","CH","AT","BE","BG","CY","CZ","DK","EE","FI","FR","DE","GR","HU","IE","IT","LV","LT","LU","MT","NL","PL","PT","RO","SK","SI","ES","SE","NO"]),s.rM.VISA,s.rM.MAS
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 74 75 72 6e 20 77 7d 2c 55 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 43 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 4f 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 37 34 36 32 29 2c 69 3d 6e 28 31 34 31 33 29 2c 61 3d 6e 28 35 36 37 31 29 2c 63 3d 6e 28 33 31 34 34 29 2c 73 3d 6e 28 31 33 36 29 2c 75 3d 6e 28 39 33 38 38 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e 5a 29 28 74 68 69 73 2c 74 29 2c 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 63 68 61 6e 6e 65 6c 3a 22 68 63 61 70 74 63 68 61 2d 69 6e 76 69 73 69 62 6c 65 22 2c 66 69 6e 67 65 72 70 72 69 6e 74 65 64 50 61 74 68 Data Ascii: turn w},Ul:function(){return g},Cn:function(){return h},O$:function(){return b}});var r,o=n(7462),i=n(1413),a=n(5671),c=n(3144),s=n(136),u=n(9388),l=function(e){function t(){return(0,a.Z)(this,t),n.call(this,{channel:"hcaptcha-invisible",fingerprintedPath
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 6f 2c 69 29 7b 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 6f 2c 69 29 2c 65 3d 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 28 30 2c 72 2e 5a 29 28 65 2c 34 29 2c 6f 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 61 3d 6e 5b 32 5d 2c 63 3d 6e 5b 33 5d 2c 73 3d 28 30 2c 72 2e 5a 29 28 74 2c 34 29 2c 75 3d 73 5b 30 5d 2c 6c 3d 73 5b 31 5d 2c 64 3d 73 5b 32 5d 2c 70 3d 73 5b 33 5d 3b 72 65 74 75 72 6e 20 75 21 3d 3d 6f 7c 7c 6c 21 3d 3d 69 7c 7c 64 21 3d 3d 61 7c 7c 21 30 3d 3d 3d 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 3f 63 2e 63 61 70 74 75 72 65 3a 63 29 21 3d 28 21 30 Data Ascii: function(t,n,o,i){t.removeEventListener(n,o,i),e=e.filter((function(e){return function(e,t){var n=(0,r.Z)(e,4),o=n[0],i=n[1],a=n[2],c=n[3],s=(0,r.Z)(t,4),u=s[0],l=s[1],d=s[2],p=s[3];return u!==o\|\|l!==i\|\|d!==a\|\|!0===("object"==typeof c&&c?c.capture:c)!=(!0
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 76 33 2f 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2f 69 63 6f 6e 2d 70 6d 2d 62 69 6c 6c 69 65 5f 64 61 72 6b 2d 39 36 66 30 66 65 38 36 38 34 65 63 34 62 62 37 31 37 35 63 32 31 37 61 38 34 34 37 63 61 64 39 2e 73 76 67 22 7d 2c 66 65 61 74 75 72 65 73 3a 7b 65 78 63 6c 75 64 65 46 72 6f 6d 4f 76 65 72 66 6c 6f 77 49 63 6f 6e 52 6f 74 61 74 69 6f 6e 3a 21 31 2c 69 73 53 75 62 6d 69 74 74 61 62 6c 65 3a 21 30 2c 68 61 73 53 70 65 63 69 66 69 63 4e 6f 74 69 63 65 3a 21 31 2c 68 61 73 43 75 73 74 6f 6d 52 65 64 75 63 65 72 73 3a 21 31 2c 73 75 70 70 6f 72 74 73 53 65 74 75 70 4d 6f 64 65 3a 21 31 2c 73 75 70 70 6f 72 74 73 53 75 62 73 63 72 69 70 74 69 6f 6e 3a 21 31 7d 2c 64 61 74 61 44 72 69 76 65 Data Ascii: v3/fingerprinted/img/payment-methods/icon-pm-billie_dark-96f0fe8684ec4bb7175c217a8447cad9.svg"},features:{excludeFromOverflowIconRotation:!1,isSubmittable:!0,hasSpecificNotice:!1,hasCustomReducers:!1,supportsSetupMode:!1,supportsSubscription:!1},dataDrive
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 5b 65 5d 3d 28 74 5b 65 5d 7c 7c 5b 5d 29 2e 63 6f 6e 63 61 74 28 5b 72 5d 29 7d 29 29 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 74 79 70 65 73 42 79 54 79 70 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 73 2e 52 62 29 28 6c 28 29 2c 22 70 61 79 6d 65 6e 74 4d 65 74 68 6f 64 53 70 65 63 2e 74 79 70 65 22 29 7d 7d 2c 7b 6b 65 79 3a 22 61 6c 6c 42 65 74 61 46 6c 61 67 73 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 73 2e 52 62 29 28 6c 28 29 2c 22 6a 73 41 70 69 43 6f 6e 66 69 67 2e 62 65 74 61 46 6c 61 67 73 22 29 2c 74 3d 28 30 2c 73 2e 4e 6e 29 28 65 2c 76 6f 69 64 20 30 29 2c 6e 3d 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 73 Data Ascii: forEach((function(e){t[e]=(t[e]\|\|[]).concat([r])}))})),t}},{key:"typesByType",get:function(){return(0,s.Rb)(l(),"paymentMethodSpec.type")}},{key:"allBetaFlags",get:function(){var e=(0,s.Rb)(l(),"jsApiConfig.betaFlags"),t=(0,s.Nn)(e,void 0),n={};return(0,s
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 63 28 61 28 65 29 2c 22 6f 70 65 72 61 20 6d 69 6e 69 22 29 7d 2c 76 3d 69 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 28 65 29 26 26 21 77 28 65 29 26 26 2f 5e 28 28 3f 21 63 68 72 6f 6d 65 7c 61 6e 64 72 6f 69 64 29 2e 29 2a 73 61 66 61 72 69 2f 69 2e 74 65 73 74 28 65 29 26 26 21 64 28 65 29 7d 29 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 28 61 28 65 29 2c 22 66 69 72 65 66 6f 78 22 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 28 61 28 65 29 2c 22 61 6e 64 72 6f 69 64 22 29 26 26 21 6c 28 65 29 7d 2c 77 3d 69 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 28 61 28 65 29 2c 22 63 68 72 6f 6d 65 2f 22 29 7d 29 29 2c 6b 3d 69 28 Data Ascii: ){return c(a(e),"opera mini")},v=i((function(e){return f(e)&&!w(e)&&/^((?!chrome\|android).)*safari/i.test(e)&&!d(e)})),g=function(e){return c(a(e),"firefox")},b=function(e){return c(a(e),"android")&&!l(e)},w=i((function(e){return c(a(e),"chrome/")})),k=i(
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 29 3b 72 65 74 75 72 6e 20 6f 2e 6f 62 73 65 72 76 65 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 7d 7d 7d 2c 34 32 30 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 54 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 57 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 2c 58 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 2e 58 71 7d 2c 4c 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 64 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 44 78 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ent.documentElement});return o.observe(e),function(){return o.disconnect()}}},4200:function(e,t,n){"use strict";n.d(t,{Tf:function(){return a},W3:function(){return _},Xq:function(){return h.Xq},L$:function(){return p},dh:function(){return m},Dx:function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49742	52.222.144.109	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:29 UTC	370	OUT	GET /link/v2/stable/link-initialize.js HTTP/1.1 Host: cdn.plaid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:30 UTC	801	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 160097 Connection: close x-amz-id-2: pm0xrdoCUWzl+3EvdeHSrUJkrevl+pcKQ6RsYPaMEbZW9seEgbtbjVejhujyYeL51xszdYbmt1HG8awBp1UtsTYG9Dfhl40ykvlTZ9FxKnI= x-amz-request-id: BVAK0W3BDX2N3MY2 x-amz-replication-status: COMPLETED Last-Modified: Thu, 19 Dec 2024 19:08:08 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: cEIA7fKZ1IdVWK2ENQrJhhvUcoRM6Fai Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 20 Dec 2024 15:39:05 GMT Cache-Control: no-cache,must-revalidate,max-age=0 ETag: "38b93694c8ebeb57f06089effc54e980" X-Cache: Hit from cloudfront Via: 1.1 472d8295289753113caedd2aa0660466.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: UbYIRMptE15GfEWQgYeLM7QgEsvfJ61HJGHAw9hVVQGc-1ed2xBN4Q== Age: 8666
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 76 61 72 20 50 6c 61 69 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 72 29 7b 66 6f 72 28 76 61 72 20 69 2c 61 2c 75 3d 72 5b 30 5d 2c 6c 3d 72 5b 31 5d 2c 64 3d 30 2c 70 3d 5b 5d 3b 64 3c 75 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 61 3d 75 5b 64 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 61 29 26 26 6f 5b 61 5d 26 26 70 2e 70 75 73 68 28 6f 5b 61 5d 5b 30 5d 29 2c 6f 5b 61 5d 3d 30 3b 66 6f 72 28 69 20 69 6e 20 6c 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6c 2c 69 29 26 26 28 74 5b 69 5d 3d 6c 5b 69 5d 29 3b 66 6f 72 28 63 Data Ascii: var Plaid=function(t){function webpackJsonpCallback(r){for(var i,a,u=r[0],l=r[1],d=0,p=[];d<u.length;d++)a=u[d],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(i in l)Object.prototype.hasOwnProperty.call(l,i)&&(t[i]=l[i]);for(c
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 2e 6c 65 6e 67 74 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 74 2d 2d 3b 29 72 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 72 29 7d 7d 29 7d 7d 2c 31 33 35 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6f 28 35 33 34 29 2c 61 3d 6f 28 32 31 39 37 29 2c 75 3d 6f 28 31 31 38 37 29 2c 63 3d 6f 28 31 32 32 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 69 2e 53 2c 74 2c 7b 66 72 6f 6d 3a 66 75 6e 63 74 69 6f 6e 20 66 72 6f 6d 28 74 29 7b 76 61 72 20 72 2c 6f 2c 69 2c 6c 2c 64 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 72 65 74 75 72 6e 20 61 28 74 68 69 73 29 2c 28 72 3d 76 6f 69 64 20 30 21 3d 3d 64 Data Ascii: .length,r=new Array(t);t--;)r[t]=arguments[t];return new this(r)}})}},1350:function(t,r,o){"use strict";var i=o(534),a=o(2197),u=o(1187),c=o(1226);t.exports=function(t){i(i.S,t,{from:function from(t){var r,o,i,l,d=arguments[1];return a(this),(r=void 0!==d
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 72 6e 20 75 3e 3d 35 31 7c 7c 21 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 28 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 63 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 2c 31 21 3d 3d 72 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 7d 2c 32 30 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6f 28 31 31 29 2c 61 3d 6f 28 31 37 29 2c 75 3d 6f 28 31 38 35 29 2c 63 3d 6f 28 34 34 29 2c 6c 3d 6f 28 35 31 29 2c 64 3d 6f 28 37 31 29 2e 66 2c 70 3d 6f 28 31 36 32 29 2c 76 3d 6f 28 32 37 38 29 2c 68 3d 6f 28 34 38 36 29 2c 79 3d 6f 28 32 30 38 29 2c 5f 3d 6f 28 32 37 37 29 2c 67 3d 21 31 2c 62 3d Data Ascii: rn u>=51\|\|!i((function(){var r=[];return(r.constructor={})[c]=function(){return{foo:1}},1!==r[t](Boolean).foo}))}},205:function(t,r,o){"use strict";var i=o(11),a=o(17),u=o(185),c=o(44),l=o(51),d=o(71).f,p=o(162),v=o(278),h=o(486),y=o(208),_=o(277),g=!1,b=
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 22 29 29 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 22 63 64 6e 2e 70 6c 61 69 64 2e 63 6f 6d 22 2c 22 73 65 63 75 72 65 2e 70 6c 61 69 64 2e 63 6f 6d 22 29 3b 69 66 28 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 63 64 6e 2d 74 65 73 74 69 6e 67 2e 70 6c 61 69 64 2e 63 6f 6d 22 29 29 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 22 63 64 6e 2d 74 65 73 74 69 6e 67 2e 70 6c 61 69 64 2e 63 6f 6d 22 2c 22 73 65 63 75 72 65 2d 74 65 73 74 69 6e 67 2e 70 6c 61 69 64 2e 63 6f 6d 22 29 7d 72 65 74 75 72 6e 20 74 7d 2c 62 2e 68 6f 6f 6b 73 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 3d 5f 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 2c 62 2e 68 6f 6f 6b 73 2e 73 68 6f 75 6c 64 52 65 69 6e 69 74 69 61 6c 69 7a 65 4f 6e 4f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e Data Ascii: "))return t.replace("cdn.plaid.com","secure.plaid.com");if(-1!==t.indexOf("cdn-testing.plaid.com"))return t.replace("cdn-testing.plaid.com","secure-testing.plaid.com")}return t},b.hooks.emitLinkOpen=_.emitLinkOpen,b.hooks.shouldReinitializeOnOpen=function
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 61 7c 7c 28 69 3f 62 2e 55 6e 69 64 65 6e 74 69 66 69 65 64 4d 6f 62 69 6c 65 42 72 6f 77 73 65 72 57 61 6c 6c 65 74 3a 62 2e 55 6e 69 64 65 6e 74 69 66 69 65 64 50 6c 75 67 69 6e 57 61 6c 6c 65 74 29 29 7d 3b 66 6f 72 28 63 2e 73 28 29 3b 21 28 75 3d 63 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 6c 28 29 7d 63 61 74 63 68 28 74 29 7b 63 2e 65 28 74 29 7d 66 69 6e 61 6c 6c 79 7b 63 2e 66 28 29 7d 7d 72 65 74 75 72 6e 20 72 2e 73 69 7a 65 3e 31 26 26 72 2e 64 65 6c 65 74 65 28 22 77 61 6c 6c 65 74 5f 33 35 33 22 29 2c 72 2e 73 69 7a 65 3e 31 26 26 28 72 2e 64 65 6c 65 74 65 28 62 2e 55 6e 69 64 65 6e 74 69 66 69 65 64 4d 6f 62 69 6c 65 42 72 6f 77 73 65 72 57 61 6c 6c 65 74 29 2c 72 2e 64 65 6c 65 74 65 28 62 2e 55 6e 69 64 65 6e 74 69 66 69 65 64 50 6c 75 67 69 Data Ascii: a\|\|(i?b.UnidentifiedMobileBrowserWallet:b.UnidentifiedPluginWallet))};for(c.s();!(u=c.n()).done;)l()}catch(t){c.e(t)}finally{c.f()}}return r.size>1&&r.delete("wallet_353"),r.size>1&&(r.delete(b.UnidentifiedMobileBrowserWallet),r.delete(b.UnidentifiedPlugi
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 69 2c 7b 4c 49 4e 4b 5f 43 4c 49 45 4e 54 5f 53 54 41 42 4c 45 5f 55 52 4c 3a 68 2e 4c 49 4e 4b 5f 43 4c 49 45 4e 54 5f 53 54 41 42 4c 45 5f 55 52 4c 2c 4c 49 4e 4b 5f 43 4c 49 45 4e 54 5f 55 52 4c 3a 68 2e 4c 49 4e 4b 5f 43 4c 49 45 4e 54 5f 55 52 4c 2c 4c 49 4e 4b 5f 48 54 4d 4c 5f 50 41 54 48 3a 68 2e 4c 49 4e 4b 5f 4f 50 45 4e 5f 48 54 4d 4c 5f 50 41 54 48 7d 29 3b 6e 75 6c 6c 21 3d 76 2e 68 6f 6f 6b 73 2e 75 70 64 61 74 65 4c 69 6e 6b 55 52 4c 26 26 28 61 3d 76 2e 68 6f 6f 6b 73 2e 75 70 64 61 74 65 4c 69 6e 6b 55 52 4c 28 61 2c 53 29 29 2c 6e 75 6c 6c 21 3d 76 2e 68 6f 6f 6b 73 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 3f 76 2e 68 6f 6f 6b 73 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 28 61 29 3a 28 30 2c 67 2e 65 6d 69 74 4c 69 6e 6b 4f 70 65 6e 29 28 61 Data Ascii: i,{LINK_CLIENT_STABLE_URL:h.LINK_CLIENT_STABLE_URL,LINK_CLIENT_URL:h.LINK_CLIENT_URL,LINK_HTML_PATH:h.LINK_OPEN_HTML_PATH});null!=v.hooks.updateLinkURL&&(a=v.hooks.updateLinkURL(a,S)),null!=v.hooks.emitLinkOpen?v.hooks.emitLinkOpen(a):(0,g.emitLinkOpen)(a
2024-12-20 18:03:30 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 76 61 6c 69 64 61 74 65 43 68 61 69 6e 4f 70 74 69 6f 6e 41 6e 64 43 68 61 69 6e 49 6e 66 6f 72 6d 61 74 69 6f 6e 3a 74 2e 76 61 6c 69 64 61 74 65 43 68 61 69 6e 4f 70 74 69 6f 6e 41 6e 64 43 68 61 69 6e 49 6e 66 6f 72 6d 61 74 69 6f 6e 7d 7d 29 29 7d 7d 2c 32 33 32 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 28 31 34 29 2c 6f 28 33 29 2c 6f 28 31 30 29 2c 6f 28 31 38 29 2c 6f 28 30 29 3b 76 61 72 20 69 3d 6f 28 38 30 30 29 2c 61 3d 6f 28 36 36 32 29 2c 75 3d 6f 28 38 31 37 29 2c 63 3d 6f 28 38 31 36 29 2c 6c 3d 6f 28 31 31 39 30 29 2c 64 3d 6f 28 31 33 32 31 29 2c 70 3d 6f 28 36 36 30 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 Data Ascii: tion(t){return{validateChainOptionAndChainInformation:t.validateChainOptionAndChainInformation}}))}},2321:function(t,r,o){"use strict";o(14),o(3),o(10),o(18),o(0);var i=o(800),a=o(662),u=o(817),c=o(816),l=o(1190),d=o(1321),p=o(660);Object.defineProperty(r
2024-12-20 18:03:31 UTC	16384	IN	Data Raw: 20 41 2c 4e 3d 54 5b 4f 5d 28 53 3f 7b 7d 3a 2d 30 2c 31 29 21 3d 3d 54 2c 52 3d 67 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 54 2e 68 61 73 28 31 29 7d 29 29 2c 4c 3d 62 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 65 77 20 78 28 74 29 7d 29 29 2c 43 3d 21 53 26 26 67 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 65 77 20 78 2c 72 3d 35 3b 72 2d 2d 3b 29 74 5b 4f 5d 28 72 2c 72 29 3b 72 65 74 75 72 6e 21 74 2e 68 61 73 28 2d 30 29 7d 29 29 3b 4c 7c 7c 28 28 41 3d 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 28 74 2c 49 29 3b 76 61 72 20 6f 3d 45 28 6e 65 77 20 78 2c 74 2c 41 29 3b 72 65 74 75 72 6e 20 79 28 72 29 7c 7c 70 28 72 2c 6f 5b 4f 5d 2c 7b 74 68 61 74 3a 6f 2c 41 53 5f 45 4e 54 52 49 45 53 3a 77 7d 29 2c 6f 7d 29 Data Ascii: A,N=T[O](S?{}:-0,1)!==T,R=g((function(){T.has(1)})),L=b((function(t){new x(t)})),C=!S&&g((function(){for(var t=new x,r=5;r--;)t[O](r,r);return!t.has(-0)}));L\|\|((A=r((function(t,r){v(t,I);var o=E(new x,t,A);return y(r)\|\|p(r,o[O],{that:o,AS_ENTRIES:w}),o})
2024-12-20 18:03:31 UTC	16384	IN	Data Raw: 20 6f 7d 3a 79 7d 2c 33 39 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6f 28 31 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 7d 72 65 74 75 72 6e 20 46 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 46 29 21 3d 3d 46 2e 70 72 6f 74 6f 74 79 70 65 7d 29 29 7d 2c 33 39 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 28 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 Data Ascii: o}:y},394:function(t,r,o){"use strict";var i=o(16);t.exports=!i((function(){function F(){}return F.prototype.constructor=null,Object.getPrototypeOf(new F)!==F.prototype}))},396:function(t,r,o){"use strict";o(0),Object.defineProperty(r,"__esModule",{value
2024-12-20 18:03:31 UTC	12641	IN	Data Raw: 7c 7c 7b 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3b 66 6f 72 28 64 20 69 6e 20 79 26 26 28 6f 3d 72 29 2c 6f 29 28 70 3d 21 68 26 26 53 26 26 76 6f 69 64 20 30 21 3d 3d 53 5b 64 5d 29 26 26 6c 28 45 2c 64 29 7c 7c 28 76 3d 70 3f 53 5b 64 5d 3a 6f 5b 64 5d 2c 45 5b 64 5d 3d 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 53 5b 64 5d 3f 6f 5b 64 5d 3a 62 26 26 70 3f 75 28 76 2c 69 29 3a 6d 26 26 53 5b 64 5d 3d 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 2c 69 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 65 77 20 74 3b 63 61 73 65 20 31 3a 72 65 Data Ascii: \|\|{}).prototype;for(d in y&&(o=r),o)(p=!h&&S&&void 0!==S[d])&&l(E,d)\|\|(v=p?S[d]:o[d],E[d]=y&&"function"!=typeof S[d]?o[d]:b&&p?u(v,i):m&&S[d]==v?function(t){var F=function(r,o,i){if(this instanceof t){switch(arguments.length){case 0:return new t;case 1:re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49747	216.198.53.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:29 UTC	604	OUT	GET /compose/a38e4305-dfd3-44f3-b64c-d15d8b98fd79 HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://patient.inboxhealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:30 UTC	1309	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:30 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-expose-headers: access-control-max-age: 7200 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"83209b9d63727b674c1a95e5fe72b79f" x-request-id: 8f3f29aa1e9d0924-SEA X-Request-ID: 8f3f29aa1e9d0924-SEA X-Request-ID: 8f3f29aa1e9d0924-SEA x-runtime: 0.002908 X-Zendesk-Zorg: yes X-Zendesk-Zorg: yes CF-Cache-Status: HIT Age: 23 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LI98DiWaK%2F3RXFP%2FPNdAmA0y5DZInEQDStFSLnm17WcdMeRtGdbJyTplzRKIrxR%2BFJ3NPldneQxBhBZIg%2BKoXpQrP7PsS88hEOG8G6ITOjOqvqgY6crUxXBXARVUscAcw4E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 8f518ca9fc07de96-EWR
2024-12-20 18:03:30 UTC	60	IN	Data Raw: 33 66 32 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 69 6e 62 6f 78 68 65 61 6c 74 68 2e 7a 65 6e Data Ascii: 3f2{"products":[{"name":"web_widget","id":"inboxhealth.zen
2024-12-20 18:03:30 UTC	957	IN	Data Raw: 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 41 33 30 30 22 2c 22 62 72 61 6e 64 22 3a 22 49 6e 62 6f 78 20 48 65 61 6c 74 68 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 73 75 62 6d 69 74 54 69 63 6b 65 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 30 2e 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 41 33 30 30 22 2c 22 6e 61 6d 65 46 69 65 6c 64 45 6e 61 62 6c 65 64 Data Ascii: desk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#78A300","brand":"Inbox Health","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"color":"#78A300","nameFieldEnabled
2024-12-20 18:03:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49744	142.250.181.78	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:30 UTC	372	OUT	GET /optimize.js?id=OPT-MWT7J5H HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:31 UTC	1003	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Fri, 20 Dec 2024 18:03:30 GMT Expires: Fri, 20 Dec 2024 18:03:30 GMT Cache-Control: private, max-age=900 Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1169:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1169:0"}],} Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-12-20 18:03:31 UTC	387	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 32 31 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 76 74 70 5f 67 6c 6f 62 61 6c 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 5f 6f 70 74 69 6d 69 7a 65 22 2c 22 76 74 70 5f 6c 69 73 74 65 6e 46 Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"21", "macros":[{"function":"__e"},{"function":"__dee"}], "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenF
2024-12-20 18:03:31 UTC	1390	IN	Data Raw: 61 63 72 6f 22 2c 31 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 65 71 22 2c 22 61 72 67 30 22 3a 5b 22 6d 61 63 72 6f 22 2c 30 5d 2c 22 61 72 67 31 22 3a 22 6f 70 74 69 6d 69 7a 65 2e 63 61 6c 6c 62 61 63 6b 22 7d 5d 2c 0a 20 20 22 72 75 6c 65 73 22 3a 5b 5b 5b 22 69 66 22 2c 30 5d 2c 5b 22 61 64 64 22 2c 30 5d 5d 2c 5b 5b 22 69 66 22 2c 31 5d 2c 5b 22 61 64 64 22 2c 31 5d 5d 5d 0a 7d 2c 0a 22 72 75 6e 74 69 6d 65 22 3a 5b 20 5b 35 30 2c 22 5f 5f 65 22 2c 5b 34 36 2c 22 61 22 5d 2c 5b 33 36 2c 5b 31 33 2c 5b 34 31 2c 22 24 30 22 5d 2c 5b 33 2c 22 24 30 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 69 6e 74 65 72 6e 61 6c 2e 67 65 74 45 76 65 6e 74 44 61 74 61 22 5d 5d 2c 5b 22 24 30 22 2c 22 65 76 65 6e 74 22 5d 5d 5d 5d 0a 20 0a 5d 0a 2c 22 65 6e 74 Data Ascii: acro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}], "rules":[[["if",0],["add",0]],[["if",1],["add",1]]]},"runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]] ],"ent
2024-12-20 18:03:31 UTC	1390	IN	Data Raw: 69 73 2e 6a 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 6a 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: is.j};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(f\|\|"")+"_"+d++,f)};return e});var ja=typeof Object.create=="function"?Object.create:function
2024-12-20 18:03:31 UTC	1390	IN	Data Raw: 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 69 61 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 78 61 7d 29 3b 0a 76 61 72 20 79 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d Data Ascii: uments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};ia("Object.assign",function(a){return a\|\|xa});var ya=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=argum
2024-12-20 18:03:31 UTC	1390	IN	Data Raw: 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 76 63 7c 7c 28 64 3f 61 2e 76 61 6c 75 65 73 2e 77 69 28 62 2c 63 29 3a 61 2e 76 61 6c 75 65 73 2e 73 65 74 28 62 2c 63 29 29 7d 3b 46 61 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 76 63 7c 7c 28 21 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 26 26 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 68 61 73 28 61 29 3f 74 68 69 73 2e 70 61 72 65 6e 74 2e 73 65 74 28 61 2c 62 29 3a 74 68 69 73 2e 76 61 6c 75 65 73 2e 73 65 74 28 61 2c 62 29 29 7d 3b 0a 46 61 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 3f 74 68 Data Ascii: ion(a,b,c,d){a.vc\|\|(d?a.values.wi(b,c):a.values.set(b,c))};Fa.prototype.set=function(a,b){this.vc\|\|(!this.values.has(a)&&this.parent&&this.parent.has(a)?this.parent.set(a,b):this.values.set(a,b))};Fa.prototype.get=function(a){return this.values.has(a)?th
2024-12-20 18:03:31 UTC	1390	IN	Data Raw: 75 65 29 3b 72 65 74 75 72 6e 20 64 7d 3b 68 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 2e 47 61 28 29 7d 3b 76 61 72 20 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6d 61 3d 21 31 3b 74 68 69 73 2e 52 3d 6e 65 77 20 43 61 7d 3b 68 3d 4c 61 2e 70 72 6f 74 6f 74 79 70 65 3b 68 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 52 2e 67 65 74 28 61 29 7d 3b 68 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6d 61 7c 7c 74 68 69 73 2e 52 2e 73 65 74 28 61 2c 62 29 7d 3b 68 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 52 2e 68 61 73 28 61 29 7d 3b 68 2e 77 69 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6d 61 7c Data Ascii: ue);return d};h.Ga=function(){this.j.Ga()};var La=function(){this.ma=!1;this.R=new Ca};h=La.prototype;h.get=function(a){return this.R.get(a)};h.set=function(a,b){this.ma\|\|this.R.set(a,b)};h.has=function(a){return this.R.has(a)};h.wi=function(a,b){this.ma\|
2024-12-20 18:03:31 UTC	1390	IN	Data Raw: 20 56 61 28 61 2c 62 29 7b 55 61 5b 61 5d 3d 55 61 5b 61 5d 7c 7c 5b 5d 3b 55 61 5b 61 5d 5b 62 5d 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 29 7b 76 61 72 20 62 3d 55 61 5b 61 5d 3b 69 66 28 21 62 7c 7c 62 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 2c 65 3d 30 3b 65 3c 62 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 65 25 38 3d 3d 3d 30 26 26 65 3e 30 26 26 28 63 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 29 29 2c 64 3d 30 29 2c 62 5b 65 5d 26 26 28 64 7c 3d 31 3c 3c 65 25 38 29 3b 64 3e 30 26 26 63 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 29 29 3b 72 65 74 75 72 6e 20 51 61 28 63 2e 6a 6f 69 6e 28 22 22 29 29 Data Ascii: Va(a,b){Ua[a]=Ua[a]\|\|[];Ua[a][b]=!0}function Wa(a){var b=Ua[a];if(!b\|\|b.length===0)return"";for(var c=[],d=0,e=0;e<b.length;e++)e%8===0&&e>0&&(c.push(String.fromCharCode(d)),d=0),b[e]&&(d\|=1<<e%8);d>0&&c.push(String.fromCharCode(d));return Qa(c.join(""))
2024-12-20 18:03:31 UTC	1390	IN	Data Raw: 74 69 6f 6e 20 6d 62 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 44 61 74 65 2e 6e 6f 77 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 62 28 29 7b 72 65 74 75 72 6e 20 6d 62 28 29 2e 67 65 74 54 69 6d 65 28 29 7d 76 61 72 20 65 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 66 69 78 3d 22 67 74 6d 2e 22 3b 74 68 69 73 2e 76 61 6c 75 65 73 3d 7b 7d 7d 3b 65 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 3d 62 7d 3b 65 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 7d 3b 65 62 2e Data Ascii: tion mb(){return new Date(Date.now())}function nb(){return mb().getTime()}var eb=function(){this.prefix="gtm.";this.values={}};eb.prototype.set=function(a,b){this.values[this.prefix+a]=b};eb.prototype.get=function(a){return this.values[this.prefix+a]};eb.
2024-12-20 18:03:31 UTC	1390	IN	Data Raw: 5b 30 5d 3a 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 62 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 6e 29 7b 76 61 72 20 70 3d 6e 2e 73 70 6c 69 74 28 22 3d 22 29 5b 30 5d 3b 69 66 28 61 2e 69 6e 64 65 78 4f 66 28 70 29 3c 30 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 63 21 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 70 2b 22 3d 22 2b 63 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 73 70 6c 69 74 28 22 26 22 29 2e 6d 61 70 28 64 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 70 21 3d 3d 76 6f 69 64 20 30 7d 29 2e 6a 6f 69 6e 28 22 26 22 29 7d 76 61 72 20 66 3d 62 2e 68 72 65 66 2e 73 70 6c 69 74 28 2f 5b 3f 23 5d 2f 29 5b 30 5d 2c 67 3d 62 2e 73 65 61 72 63 68 2c 6b 3d 62 2e 68 61 Data Ascii: [0]:a}function Ab(a,b,c){function d(n){var p=n.split("=")[0];if(a.indexOf(p)<0)return n;if(c!==void 0)return p+"="+c}function e(n){return n.split("&").map(d).filter(function(p){return p!==void 0}).join("&")}var f=b.href.split(/[?#]/)[0],g=b.search,k=b.ha
2024-12-20 18:03:31 UTC	1390	IN	Data Raw: 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 61 7d 3b 4f 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 7d 3b 76 61 72 20 50 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 4f 6d 3d 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 62 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 62 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 76 61 72 20 52 62 3d 5b 51 62 28 22 64 61 74 61 22 29 2c 51 62 28 22 68 74 74 70 22 29 2c 51 62 28 22 68 74 74 70 73 22 29 2c 51 62 28 22 6d 61 69 6c 74 6f 22 29 2c 51 62 28 22 66 74 70 22 29 2c 6e Data Ascii: on(a){this.j=a};Ob.prototype.toString=function(){return this.j};var Pb=function(a){this.Om=a};function Qb(a){return new Pb(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})}var Rb=[Qb("data"),Qb("http"),Qb("https"),Qb("mailto"),Qb("ftp"),n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49745	142.250.181.132	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:30 UTC	646	OUT	GET /recaptcha/api.js?render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:31 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 20 Dec 2024 18:03:30 GMT Date: Fri, 20 Dec 2024 18:03:30 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 18:03:31 UTC	641	IN	Data Raw: 35 39 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59c/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-12-20 18:03:31 UTC	802	IN	Data Raw: 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 Data Ascii: UAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabe
2024-12-20 18:03:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49748	52.222.144.10	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:30 UTC	396	OUT	GET /assets/vendor-6c9826c2fc718fe6ddcdd435bffce760.js HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:31 UTC	834	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 706567 Connection: close Date: Fri, 20 Dec 2024 18:03:32 GMT Last-Modified: Wed, 06 Mar 2024 21:08:47 GMT ETag: "c9e43ffda512d60ad518789cf211bec2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e3be5f49ae00f8ca7130519d28e56cd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: 6OjjVxeQlO5SxqGcrBARielAiBcJfCmgo9o2rVackc8uh6pDfE7f7w== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:31 UTC	3198	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d fb 5f d3 48 d7 f8 ef fc 15 25 df 5d de c4 86 d2 b4 e5 56 8d fd 70 53 54 0a 28 28 2a f2 f0 86 76 80 48 9b 60 92 ca c5 f2 fe ed df 73 ce cc 24 33 69 8a e0 aa eb b3 eb b2 36 73 bf 9e 39 b7 39 33 73 e1 07 dd f0 a2 b2 d6 3f 62 d1 da e6 1b f7 cb 93 b5 a5 dd d7 af d6 76 9a 5f 6e ec b5 cd a5 e5 8d b5 c3 d5 9d c3 27 cf 36 76 d7 5e 35 27 ab f6 a1 08 dc 58 7b ba b4 f2 ee f0 cd b3 b5 bd c3 9d d7 db db 5b af 76 21 fa 66 e2 b3 17 95 7a a1 d7 65 91 dd 65 c7 7e c0 ec 88 7d 1a f8 11 6b 87 dd 41 2f f5 c9 ef c7 d8 8e 06 41 e0 07 27 bb 2c 4e 62 77 d2 79 68 1e 0f 82 4e e2 87 81 c9 ac 2f c6 20 66 a5 38 89 fc 4e 62 4c c8 88 52 62 5a 5f b0 22 e6 6e 1d 7d 64 9d a4 d2 89 98 97 30 33 18 f4 7a d6 44 c4 92 41 14 94 58 e5 f0 d0 fd 1c fa dd 52 15 9a Data Ascii: }_H%]VpST((*vH`s$3i6s993s?bv_n'6v^5'X{[v!fzee~}kA/A',NbwyhN/ f8NbLRbZ_"n}d03zDAXR
2024-12-20 18:03:31 UTC	13624	IN	Data Raw: 3e 50 af ea 43 2f 13 a4 78 82 c4 05 e6 02 96 e6 be 77 60 c9 cd 2e 58 7e 96 24 7e 81 0b 15 52 7c d9 01 e4 d0 0a 94 44 34 6f 0f 93 c7 d5 87 d4 b0 08 1a e6 a7 bb 64 89 44 e6 58 9a 6c 6d 84 5d 09 b2 dd d5 c7 48 a3 4f 4c 9f ab f3 c0 37 ed 58 47 00 3a 67 13 c9 f4 f4 8d 57 2e df 28 6b e2 46 43 27 6b 2a 4d ca 61 93 89 24 21 c4 05 bf 65 23 36 c8 95 1c a8 bc eb 96 82 8d 63 2e b0 65 9a 80 56 92 10 bd c0 8f 5e f0 81 d4 3a a7 05 6d a6 0c 08 8e 32 60 d6 0c 0f 33 0b 65 50 c2 c3 30 cc 5b 80 50 d0 19 51 4b 08 d3 16 e0 d1 6d c2 dc 5f f2 b3 19 e5 90 43 d4 32 57 05 8f 07 42 61 11 97 06 a5 10 f3 67 35 af 25 33 78 93 55 73 ad 21 1c 56 11 92 84 69 b5 50 84 da 37 80 2b 04 da 2b 39 e0 96 01 3f 46 d3 00 a2 9c 1c 70 4e 31 2b 6a 55 32 50 4a 29 04 e3 50 4c 7c 4b 31 81 32 97 1b 2a 1e Data Ascii: >PC/xw`.X~$~R\|D4odDXlm]HOL7XG:gW.(kFC'kMa$!e#6c.eV^:m2`3eP0[PQKm_C2WBag5%3xUs!ViP7++9?FpN1+jU2PJ)PL\|K12
2024-12-20 18:03:31 UTC	12792	IN	Data Raw: 9f 9d 0c c0 54 a9 68 cd 2d ef 20 00 6f e1 d7 39 78 68 ae 3d aa 0d 87 b8 f5 bc 36 35 b5 f5 68 0e 86 b9 a0 63 42 ba 8b 4b 3c a2 f2 31 2e 3d 76 4b b5 ca 5c a5 5a 29 bd 0b 07 25 90 d9 4b 03 bc 5e 44 49 81 a3 91 0e 45 a5 b4 c3 e4 76 f2 c7 18 cf 66 a0 d0 a0 c8 b5 5f 70 c9 6b 9b e8 34 33 b4 fc 39 fe cd 18 ca d8 e5 0c 84 78 65 9e b3 ef 08 52 e4 50 79 d1 38 e5 0b 45 70 c6 48 b8 1a 57 61 1f fa b0 90 2e 47 77 f1 81 9d 00 36 59 6c 11 f2 0a 14 d2 18 69 e8 f8 d8 0c 1e 45 48 c2 24 8c dd d8 04 ab 45 a5 8a 0d 1c 28 5b 6c d8 c8 66 c6 6a 55 20 88 66 cb 47 21 83 3d a2 7f c8 5a b8 21 e0 20 68 24 7c ca 0e be 27 0f 8e 96 3f ed 34 21 34 79 04 7c 7f bb 82 af d9 2c f5 8f fc 93 41 38 40 cb af 0b 2f ea b6 12 64 93 1f 47 32 5e 9c 0b 10 b1 a4 fd c1 d5 f4 28 86 d2 e9 0e 85 94 87 c1 fa Data Ascii: Th- o9xh=65hcBK<1.=vK\Z)%K^DIEvf_pk439xeRPy8EpHWa.Gw6YliEH$E([lfjU fG!=Z! h$\|'?4!4y\|,A8@/dG2^(
2024-12-20 18:03:31 UTC	16384	IN	Data Raw: 59 c8 53 0d 65 3e 65 7a ba 23 47 5f 64 af 68 a6 47 35 9a ab b5 cf 71 29 12 e1 7b 85 16 66 cf c9 d8 81 45 18 87 cc 11 00 4c 1f 2d ea c8 39 74 f9 46 b5 4e 9d 26 7b d8 40 55 ba d7 fb 70 a1 6d d8 d9 c7 ff 86 f3 fe 6a 6a db cf 1b db a7 67 bc 82 14 5a fb b2 83 75 f3 fa d6 71 1e ef 38 07 46 b2 19 29 51 f9 f1 f6 ab c9 34 c8 74 cf c4 ae 82 a7 fa 38 13 65 f6 c0 d0 cd c0 7d cc 97 75 26 14 3d e0 dc 78 b0 03 ce 06 0c 1a 08 26 4d 06 02 99 67 94 e2 0b 33 5d 0b fd 00 87 e8 fa 43 08 d5 95 75 6c b3 49 ab 90 f1 0f e8 1d 3b 6f 61 e7 e8 cc bb e0 70 e6 f3 68 08 f1 f4 4a eb eb fc a8 de 71 1b 5f 89 9a 47 bc db ba 47 4f 10 f9 85 74 8f fd 2d 2a 4c fc e2 6a c7 22 ef a9 1d 77 b5 be 69 e8 7d 6b 97 8a af 05 67 05 03 a6 d9 59 2a 37 81 af 7e 64 f5 82 2e 5e 3c 6c 63 b5 c3 9b 0b bc 2d 17 Data Ascii: YSe>ez#G_dhG5q){fEL-9tFN&{@UpmjjgZuq8F)Q4t8e}u&=x&Mg3]CulI;oaphJq_GGOt-Lj"wi}kgY7~d.^<lc-
2024-12-20 18:03:31 UTC	9200	IN	Data Raw: 6a 85 b8 ba 2a e9 5f 24 45 a2 1a 60 78 80 2b 55 95 fb 6c 0d 33 73 4b d8 76 cb c7 49 92 b8 ce 54 53 15 b1 1c 22 42 b8 86 9d 73 58 eb f0 bc cf 5a 67 0e 76 dd 5b 1d a2 fa 6b 77 4c 63 06 50 7c 72 15 5f 5f 59 31 ca 51 c6 40 42 8b 24 87 e8 30 63 90 a0 15 4d 76 86 d4 3d 8b d5 91 82 d4 6f dd 88 a1 91 0f 82 a1 42 11 82 01 4f 36 3d 54 dd f5 84 14 cb 6e 9b 63 bb ed 26 28 c3 bb 14 16 d8 ae 47 8f 65 cb 86 20 fe 99 36 25 39 db 96 2f 9f 47 fe 0d 78 73 66 0e ab 26 26 61 27 44 9f c1 d4 aa e1 56 b3 ec e5 a2 4f 00 75 8d 1b d4 c4 77 e4 9c ca 8c 92 e0 1a 01 66 07 f6 6d d7 7d 9b 67 67 eb 23 1e b6 ee cd 1d 8c b9 0d 68 8a e1 5a fb 8c 2d c2 e3 82 9d 6c 63 0d d4 da 67 79 a6 b5 c7 4e 69 7b cc d7 31 7e 09 b3 a4 19 eb 9a 4e 65 25 76 79 95 c2 35 5d e0 87 f0 db a2 92 62 47 00 7f 08 5c Data Ascii: j*_$E`x+Ul3sKvITS"BsXZgv[kwLcP\|r__Y1Q@B$0cMv=oBO6=Tnc&(Ge 6%9/Gxsf&&a'DVOuwfm}gg#hZ-lcgyNi{1~Ne%vy5]bG\
2024-12-20 18:03:31 UTC	15578	IN	Data Raw: bf c0 e7 f5 d3 d6 17 71 2f 87 da bf 23 5f d6 c3 43 18 11 7b fc a5 67 97 b9 90 c9 80 6e c5 d2 60 89 e7 aa 34 fd 9c b8 e7 cd df 60 47 e1 a1 e4 e0 22 69 c2 e8 0b 45 9a 3d 72 40 54 23 8b cc 82 29 df 6d c1 42 7a 8e 81 18 5e b9 22 da 07 55 67 af 92 9f d6 1d b2 51 41 29 7a 4f 6e 48 81 38 7c b0 e3 e0 89 04 61 35 57 ab 6b 5a 1f 15 e8 04 26 b2 8d 4d 8f d5 09 43 6d 8f 9b db de 72 bf 20 fb 52 f3 d1 bd eb b1 13 60 8f d7 68 85 0f e2 80 06 d3 55 78 b6 61 40 3f eb d8 35 d9 3e 5e 9d ea dc 0b e9 3b 0e 2e c5 71 22 8e 5a a9 9e 05 99 52 04 07 66 8a d4 93 a7 b1 46 d0 55 61 5a 09 1c 4d c3 d8 52 9b a7 25 2f d2 98 9b 93 52 d2 0c cd 97 45 35 06 0f 9a 9d 12 c2 1a 10 bf 1c a3 56 22 d1 ed 26 e8 0d 96 7b 94 db 87 14 f8 f8 cb 62 83 73 54 1a e6 7c d2 48 ce 93 c6 58 64 e1 24 fa 33 43 42 Data Ascii: q/#_C{gn`4`G"iE=r@T#)mBz^"UgQA)zOnH8\|a5WkZ&MCmr R`hUxa@?5>^;.q"ZRfFUaZMR%/RE5V"&{bsT\|HXd$3CB
2024-12-20 18:03:31 UTC	16384	IN	Data Raw: 98 08 46 4a 8c f0 61 e5 2e db 22 0b 36 03 a8 0d 51 7a 7b ee c9 d5 e1 f9 35 ac e2 42 df 23 bd 9e 82 24 01 8e d2 4e f9 31 1b e2 5e f6 91 22 1b 44 6b f8 41 90 ae 78 00 d3 9b a2 50 7e 46 b4 81 1b 90 57 a6 34 99 e2 93 74 54 c4 da ea c0 bc 05 63 16 52 62 ca c2 2b d3 5c c6 67 f6 86 f2 0b 4b 9e dc 2b f2 6d 4b 04 5d b1 91 9e d7 7a 2b 4c ab 61 b7 09 42 96 d0 41 67 db 37 5d 6b bb 07 9c 24 12 e5 81 4c a6 a4 50 d8 dc 53 51 da 20 98 e2 d0 d4 b6 6d 45 1c b9 a5 d7 54 71 fc 78 b9 1a cf af 40 1d 0e b5 6f e0 f3 1e e5 a3 1a ca bf b4 a0 dd 19 1c df 96 f7 60 ae 63 17 dc 4a d3 f4 d7 72 17 22 f5 0d 91 0b 35 a2 a7 1b 49 8a b3 b6 d2 73 11 40 35 48 c8 24 bc e2 7a ff cc 9b 86 07 2e 5f a1 13 1a fc fc 39 29 e2 f9 8a 42 40 77 c4 c7 e0 9e 1c ab e0 09 32 42 b1 7b 45 8e df 29 91 05 1a a1 Data Ascii: FJa."6Qz{5B#$N1^"DkAxP~FW4tTcRb+\gK+mK]z+LaBAg7]k$LPSQ mETqx@o`cJr"5Is@5H$z._9)B@w2B{E)
2024-12-20 18:03:31 UTC	9200	IN	Data Raw: db 59 9d 80 6e b3 b2 ea 68 5b d6 15 1d 28 d5 25 91 79 86 e2 d6 fc 18 b7 bf c3 92 c5 5e f6 74 37 dc a5 f3 18 31 75 68 25 72 37 f6 f6 10 43 47 9e 1e e0 38 6e c4 e7 2c b8 68 db ab 04 bc 13 72 4f 83 ff 3c 0c 92 e0 ab af be 0c a2 08 c2 7c ca dd c9 c6 a5 79 f9 c4 89 8f 3a b8 b7 b7 98 38 e7 a0 95 77 1b 1e 46 e7 53 23 92 32 6d ce f4 00 61 90 71 bb c7 02 81 29 56 bc 00 b5 8c 17 c4 7b bd 8c 62 d9 e7 6a a5 bc 64 4e 63 4d 6b 92 23 ec e4 12 ea 7c a1 d0 bb 05 19 06 d1 69 c0 2f ec ef 33 5b e1 85 69 0c 98 2c c2 50 cc ce ad fc f1 e1 03 e9 1d 64 bd 2a 6c c3 6e db ca f1 2f 59 61 a3 c2 93 e1 e5 e2 cd a6 ba a9 de ef a7 e1 9f 95 0e b5 a6 cb fe 1e 0d dd 34 88 f6 55 af 95 b6 5b 9e 54 70 cc 85 84 ab e1 91 c2 c2 fd 1f fb b9 55 70 fc 0f ad d8 cf 8e 88 86 ee ff 89 3a 19 25 f5 fe 60 Data Ascii: Ynh[(%y^t71uh%r7CG8n,hrO<\|y:8wFS#2maq)V{bjdNcMk#\|i/3[i,Pd*ln/Ya4U[TpUp:%`
2024-12-20 18:03:31 UTC	12792	IN	Data Raw: 7c 59 4b 47 f2 59 da 8d 3c 2a ad 38 2b ef dc 83 b5 90 78 60 7e 88 42 77 ca 9b e2 9f c4 6b f7 74 4b 2f b8 a9 06 4a cc 3b 60 87 0e a4 ce f5 9c 2d 6e b7 1d 0f 72 30 8f 32 1c 0d 25 1d 0d 23 f0 7a ed 05 9d 4f 7c 54 84 4d 44 67 c1 71 68 3b 64 4f 65 77 8f f6 de a4 b3 79 a4 c2 97 df 6a 01 46 d2 c6 5a 76 01 e4 24 28 41 b7 f5 c2 15 63 da 0d 5e 6e 39 17 45 4e 31 16 d1 a1 81 f9 4b ac 88 50 34 50 6e 1b b9 a2 3a 72 15 cf ee 3a d4 3d b6 7c cb ac b0 bd f5 52 3f d6 53 04 0b 8a 87 d8 9d 5e a7 c3 7b 78 4e 77 b0 b7 65 f8 58 4b 7a a3 e6 b4 6c 7b ab b6 70 22 71 6f d4 4a cb 9d 0c cc 5c fc b1 e9 19 ea 55 58 33 e2 eb b1 df 71 a7 d3 75 6f 54 bc 97 1f 1b 91 02 23 c0 3c d8 10 ad d5 02 87 d6 06 4b d4 88 4f 3d a6 ba f2 c4 10 7d de 05 7e 31 87 f1 2a d5 50 ac c7 cd c3 15 fb 36 2a 1d 69 Data Ascii: \|YKGY<8+x`~BwktK/J;`-nr02%#zO\|TMDgqh;dOewyjFZv$(Ac^n9EN1KP4Pn:r:=\|R?S^{xNweXKzl{p"qoJ\UX3quoT#<KO=}~1P6*i
2024-12-20 18:03:31 UTC	12792	IN	Data Raw: 0f 75 9e a1 cb 5a 22 ae 2d 7d 00 e7 a8 16 9a ed 78 6d dc 19 e2 a0 0c 30 d6 2b 47 79 91 2c 63 b8 a2 a0 d0 4c 69 37 47 a2 ef 24 38 ac b6 c5 5c 1a 2a ba 44 4b 4e 88 ea 6c 6a 4a 90 37 28 f1 0c e2 67 7c 1f 69 d3 c7 00 86 5f 0e cc cc 00 b1 5f 1b 39 bc fa 9c 67 9e 02 28 c1 7c c9 a2 fa 55 2f 87 9b 64 2e 61 f6 35 e7 23 8b ae a7 68 34 8a 9d ea e0 e6 d0 ec 1a 58 b2 61 be 12 ba f2 39 1b a3 0c 4b 59 87 e1 28 05 a0 2b 59 4d 01 14 d4 03 8d 21 32 cf d8 10 fa ae 3e ea 96 fa 49 35 d5 05 4a 1f 64 1c 6d b4 1a a8 82 b5 99 8b 99 bc dc 51 94 69 14 38 17 e2 62 a0 d7 38 26 15 ce da 63 d7 a1 7b eb 38 04 6d e0 ef 01 13 45 ba f0 ee e8 0f a2 29 6a 8f ed 47 17 e8 ae c0 50 ad ab 65 3f 0b ea e9 5a 79 16 c5 42 9a 03 e1 ae 94 e1 fa c3 93 29 33 1c 15 2c b5 26 f5 4d 11 f8 0d 21 e2 1c 21 67 Data Ascii: uZ"-}xm0+Gy,cLi7G$8\*DKNljJ7(g\|i__9g(\|U/d.a5#h4Xa9KY(+YM!2>I5JdmQi8b8&c{8mE)jGPe?ZyB)3,&M!!g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49749	52.222.144.10	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:30 UTC	403	OUT	GET /assets/inbox-patient-716e5cc784b622116d4a9b0f962397c1.js HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:31 UTC	835	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 1219235 Connection: close Date: Fri, 20 Dec 2024 18:03:32 GMT Last-Modified: Wed, 18 Dec 2024 22:04:40 GMT ETag: "85abf41a7743c724ecdaf10f017c9140" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: yx70BQ1pYdNOkF3HIKxegAb7zp3hcY2jLb58SY1ht-8D9jQXNgUNDA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:31 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 7b db 38 92 28 fc dd bf 42 e1 f4 66 a4 13 4a 96 ec 5c d5 51 7c 1c 27 3d ed d9 24 f6 1b a7 7b 76 d6 eb a3 87 96 20 8b 13 8a 54 93 94 13 b7 e3 ff fe d6 05 20 01 12 a4 28 c7 e9 ee d9 99 39 67 3b 16 88 4b 01 28 14 aa 0a 75 71 56 89 68 25 69 ec 4f 52 67 6b 2a 66 7e 28 da 8e 1f 9e 47 9f bb 4b 2f f5 45 98 6e 7b 53 6f 99 8a 38 d9 f6 96 cb c0 9f 40 69 14 3a ee a9 23 3e 2f a3 38 4d 1c d7 11 8b 73 11 ab 7f bb 89 bf 58 06 a2 eb ad d2 f9 f6 c2 ff ec 87 c9 f6 d4 4b bd ae ec a7 4b 65 50 db 9b a4 fe a5 e8 2e a2 a9 08 d4 47 28 36 07 97 1d a8 b6 73 11 2c 01 94 52 b5 49 14 ce fc 8b 6d 11 5e fa 71 14 2e a0 c8 39 73 db b3 55 38 41 68 db c2 4d dd d0 f5 dc c0 8d 3b d7 a2 07 f3 f4 56 41 3a f2 d4 5f 3d f1 39 15 e1 b4 1d a8 02 37 cc fe ba 4e Data Ascii: k{8(BfJ\Q\|'=${v T (9g;K(uqVh%iORgk*f~(GK/En{So8@i:#>/8MsXKKeP.G(6s,RIm^q.9sU8AhM;VA:_=97N
2024-12-20 18:03:32 UTC	469	IN	Data Raw: 38 2e 7a 6a fa 17 17 18 84 9a b2 36 53 89 8a 6f 6e 24 1f 56 13 68 a1 9d d3 c8 49 39 5c 96 f3 42 af e3 61 fe 56 95 79 f8 f9 7c b7 d0 b6 4b 11 d6 f0 fb 7c f7 85 a5 ef ae 4a ea a7 7a e0 0c c6 12 62 0f d6 18 c0 3c 8f a6 57 08 25 a5 45 24 dc 70 62 f6 c6 5f 9b f0 fe 3b d8 4e 38 21 72 b4 f6 f5 44 c5 aa cb ce 71 b6 36 14 5a 80 17 46 ff 2a 17 0b bf aa 45 32 3e ab 60 cb 1d 77 92 41 5c ec 9d 4a d1 69 29 9b 80 5e 23 9b 16 9e ca 46 1e 01 85 59 c1 f5 44 d5 1d 33 6e 6f 38 3d 29 20 43 9d 26 c0 ac 8a 4f a5 80 fc 9b 91 84 dc 89 ef 2b a8 c2 3e 74 90 21 bc 8d 31 5b 78 9f a5 f6 fa cc cd fe 56 7e 68 ff bb 68 08 65 83 49 b6 fd 79 f7 3c 0d eb d2 06 df 96 a0 a8 2e 8f 64 ba 5b 1e 91 dc 6c 9d 00 a4 30 fe ad 7c d8 1c e0 ce 48 17 4b 02 d8 51 f8 06 e3 16 52 ec 76 1f a3 61 bd a4 ca 3a Data Ascii: 8.zj6Son$VhI9\BaVy\|K\|Jzb<W%E$pb_;N8!rDq6ZF*E2>`wA\Ji)^#FYD3no8=) C&O+>t!1[xV~hheIy<.d[l0\|HKQRva:
2024-12-20 18:03:32 UTC	16384	IN	Data Raw: b6 e1 ae f2 97 42 c9 fe 09 a6 3c 6f 16 13 a9 61 94 23 18 e9 1d e9 3c 39 38 25 fb cc 42 e1 c1 e5 a4 50 f2 fa f3 d2 8f af 0a 85 b2 2d 0a e3 e4 1b 2c 5b ea bf 65 3b 55 c4 13 fa 79 b7 36 e3 15 cd f9 12 9d 7a 44 8d 88 2e df ec 54 8f 3d 91 71 f9 eb 79 9d bb b9 d1 a8 2b ad 04 dd e7 b2 e8 1d 24 48 19 df 0a 4e c2 ec 34 aa c5 e5 b8 7f bf 50 04 6d 2c ef dc f9 34 53 ad 38 ca 72 1e 18 41 93 b2 1d c8 bc 1b be 7c 49 b7 e8 e6 95 6b c3 95 78 27 f9 06 ae fa d6 93 bc 53 1b 25 a5 62 25 d8 77 7b 6b fa 50 db 94 01 b4 b7 56 df f2 0e a4 76 5f a8 34 14 3a 88 98 f2 2a 28 7c c2 f1 b1 3c 2e 94 cb 9e dd b0 b3 95 c6 57 d7 5e 8f c2 ac b6 9d 3f 15 cf 1c de e4 42 46 21 90 f1 1c 3a 64 8c bd be fa 04 e7 ee c6 8d ea 0a 39 d3 1b 16 6b 7d c4 54 90 17 5a 9e b6 76 81 f6 77 ac fd ed 6b 0e 35 51 Data Ascii: B<oa#<98%BP-,[e;Uy6zD.T=qy+$HN4Pm,4S8rA\|Ikx'S%b%w{kPVv_4:*(\|<.W^?BF!:d9k}TZvwk5Q
2024-12-20 18:03:32 UTC	9973	IN	Data Raw: 55 a8 5a 93 2f 67 03 fd 72 06 1b f8 da 2f 13 57 a1 dc c0 07 84 2d 45 0e 47 75 74 52 ac fd 14 2d 65 40 e6 53 3b 41 30 3c 89 2f 10 89 85 5d ca 28 b0 f9 89 d8 30 3a cd 47 ad 89 9e 5f d8 9e 32 75 bb c4 e5 92 5f ef 7e 4e 37 f1 d1 59 54 b0 53 ea 16 74 38 eb 48 0b 29 f2 c7 ec dc ef bc 09 49 cd 42 c6 7e 41 bc 0d dc 71 7a b2 c5 b8 d7 c2 27 53 bc 47 4e 29 49 e4 13 38 23 ce 8c 0a fe 72 62 78 d1 ca 9c f4 a9 7f 54 24 9e e8 9b b0 83 c7 00 35 d8 0f 9c 77 ea 1a 05 9c b8 b5 78 f3 39 ea 46 45 df be 30 bd e8 ed 2d bf 4b b6 45 a4 0e 94 9f 48 05 38 f6 e8 45 85 2c 26 85 9b de 65 d9 58 7a 91 55 74 d9 fc 79 e5 76 e6 9f de ac dc 4d b8 ec 8e b8 f3 34 f7 a8 ae 8c 91 55 5b 9c 19 5a 5c 9d 97 10 7f f0 90 a3 70 a6 df cc e8 fa 81 61 6d 19 19 95 91 be a9 50 b5 86 60 24 34 f7 db ca 78 0b Data Ascii: UZ/gr/W-EGutR-e@S;A0</](0:G_2u_~N7YTSt8H)IB~Aqz'SGN)I8#rbxT$5wx9FE0-KEH8E,&eXzUtyvM4U[Z\pamP`$4x
2024-12-20 18:03:32 UTC	16384	IN	Data Raw: d4 43 0e b3 36 ad b9 5a cb 06 fb 86 9e 47 cd f6 f3 f5 0e 37 6b 2c a7 36 f8 2a cd 04 af 5a 63 dd 6d 05 4f 37 b8 27 53 39 ef be 1e c2 9e 4b 7e 77 ce 77 95 fa 36 4f 8c b0 73 6b 1a 55 85 09 77 9a a6 1b 42 a0 7a 08 49 5c 1e 5f 3a 11 e8 47 43 bb 6e 1e 82 9e fe 5a 94 52 b9 7b 8f 13 66 bb 42 cb 6f 0d a3 46 ed 7c 88 88 d4 35 f8 59 0d 5b 6f 1d b7 6e 04 d5 7b a7 41 fe 52 46 b2 5f ea 28 0a ed 94 f9 5e 6f 2d 39 b2 62 f7 1a 6d a0 4c df e7 ea 5c 29 2d 08 85 80 f7 8d bd c7 c8 14 49 f8 81 7f 39 3b 6d ee d4 6a af ab 91 b0 78 a3 ac 6f 60 53 f2 f9 6c d5 b5 f7 a9 76 04 83 79 2d dd 28 96 98 6f 92 a9 da 4c a6 ad 37 74 f9 2d 97 fe 75 bb df 6a 24 09 51 1f 5c 40 86 8f bb 5c 1e 7e 14 16 30 15 78 43 84 af 8e b5 0b e8 72 c4 dd f1 1c b9 55 d2 e3 95 1e 09 b7 d4 2d ed 98 88 d6 34 11 18 Data Ascii: C6ZG7k,6*ZcmO7'S9K~ww6OskUwBzI\_:GCnZR{fBoF\|5Y[on{ARF_(^o-9bmL\)-I9;mjxo`Slvy-(oL7t-uj$Q\@\~0xCrU-4
2024-12-20 18:03:32 UTC	9483	IN	Data Raw: b2 a0 c9 21 c9 ff 71 40 f7 25 98 3b b5 3d e3 00 b8 35 a7 1c 0c 59 6f f5 a7 87 ad eb dd 10 98 0a 15 b7 84 fb d5 63 8b 95 96 f8 00 03 ab 55 ce 7a 54 71 1d a7 87 98 1b 57 51 d6 50 86 c0 3a a8 46 f6 47 b8 21 c6 d4 e6 c1 88 9f 20 84 44 e7 5b fb 97 f1 4f b2 82 b8 75 86 cb 34 81 85 32 e4 f2 1e 80 fd 8c 30 68 63 f0 f4 03 42 1e 6f 87 cf ee fe 5f f1 fb 59 f8 fd dd d3 4b de 94 56 eb a9 4f 5c 38 9d 66 0a 19 86 3f 0c b1 39 b3 b3 69 1a ae bc 54 9c 55 8a 98 59 03 3a a8 24 e4 01 5e 99 eb a4 a0 1d 6b 0a 10 b4 06 4f b7 4f 39 2f fc 9d b1 c8 10 2a 3f 4c a7 03 38 a2 5e f0 19 21 1c c8 4b be 6f 7e 45 66 1d 16 d3 74 eb d9 18 9d 33 40 97 92 92 b8 b9 91 50 97 4a a7 db ff f6 ef ff c6 2b a0 e6 24 c6 12 c0 52 22 14 f8 c0 ff 95 ff 0f 6c 3b d1 54 19 10 98 84 68 80 85 0a 76 5c 35 df 0c Data Ascii: !q@%;=5YocUzTqWQP:FG! D[Ou420hcBo_YKVO\8f?9iTUY:$^kOO9/*?L8^!Ko~Eft3@PJ+$R"l;Thv\5
2024-12-20 18:03:32 UTC	16384	IN	Data Raw: ff b6 8b c6 f9 dd 7c ce e2 df 6c e5 b6 1f 61 e5 18 60 4d 48 47 71 be 79 6a c1 82 73 02 f6 77 88 b7 ec 0a fb 94 fb 29 d8 48 34 4b cf 31 fa 4a f3 85 47 6c 14 06 be b5 d7 00 2d d7 44 30 34 4f ff 68 da b6 16 31 72 35 6e 3e ce 6a 73 ec 93 27 e9 ce a0 c1 c4 de a8 5d be eb 89 11 7a 33 be 0a 79 05 38 3a 60 66 f7 92 0b 2f 41 ee 74 9e 57 57 1e 83 56 15 24 52 96 7b ba 3c 04 cc 2d 02 4e c9 79 32 e7 6d b2 41 5e fa 29 00 f1 c4 31 e2 0c a9 0a 23 34 f2 04 13 e7 a0 c8 07 04 cd 81 da c5 68 16 b7 bc f5 99 b8 76 57 78 71 0c d7 93 fc 77 dd 76 35 f5 4d 96 84 4c 1b ab 1f 04 d9 93 27 80 2c 8f b6 dc 17 54 69 50 63 e2 6f 66 5f bf 6e 66 23 cc 7a f9 9f ec 86 ab 62 d6 e2 4d f3 42 4d 1f dd ab a1 47 c8 43 24 e4 41 2b e0 00 c6 80 a5 7a 50 ec 40 e5 75 58 d2 ee f6 bd 39 fd e6 b6 b0 7d a0 Data Ascii: \|la`MHGqyjsw)H4K1JGl-D04Oh1r5n>js']z3y8:`f/AtWWV$R{<-Ny2mA^)1#4hvWxqwv5ML',TiPcof_nf#zbMBMGC$A+zP@uX9}
2024-12-20 18:03:32 UTC	16384	IN	Data Raw: 44 97 dd cb a7 02 7d c4 6f c1 a4 e3 32 99 a5 b9 24 72 0d 9e fd 7e 18 4f 6f b9 ce 93 d0 77 9b 14 ba df 9e d5 9b 6d 10 db 92 a4 68 06 aa f6 5e e5 e2 bf 01 b0 8e 58 ee b9 4c a1 72 78 ec c8 a1 12 df 37 87 8a 4d 5d 62 6e 14 50 97 39 f7 ff 63 ef 5b bb db 36 92 b4 bf eb 57 c0 98 5d 87 1c 83 b4 e4 4c 66 76 98 30 5a 59 b6 27 da f5 ed 44 ce cc 99 f5 ea e8 40 64 4b c2 18 04 38 00 68 59 91 f5 df df ba 74 37 ba 81 06 08 50 94 93 bc 3b 73 76 1d 11 e8 6e f4 a5 ba ba aa ba ea 29 26 0e 38 53 0b a7 19 17 1d 8d bb 6e 8f 52 29 a8 3a fb 9a 2a 52 a2 bb d9 25 eb c0 d6 bc 94 5d 53 13 93 76 76 3f d2 83 94 cd da fd c1 2a a7 fe 97 3e ef 37 3e ab 6b 57 42 9b a7 69 bc 8f 83 b9 86 74 7d ff fa 77 6b 70 dc 86 ce b5 eb 3c 65 b7 a7 0e b6 75 be 1b 6a a0 e3 22 ad d1 85 a4 f3 c1 f5 16 33 dc Data Ascii: D}o2$r~Oowmh^XLrx7M]bnP9c[6W]Lfv0ZY'D@dK8hYt7P;svn)&8SnR):R%]Svv?>7>kWBit}wkp<euj"3
2024-12-20 18:03:32 UTC	15596	IN	Data Raw: ec a1 ff 70 f7 ec 44 cd 77 44 7d 6c 97 7a 2c 2a fb f0 86 97 80 ce 96 36 35 bb 36 26 7c 5f f7 c1 5f f0 de cf 7d fe 37 fb 8a f5 b1 b2 3a 7d 0d 36 b9 af 5a 7f 89 d1 70 2f 74 ac 83 80 7e 0d 57 42 0e 46 71 df 57 42 35 b9 a0 0d 47 42 0a b4 cf cb f0 93 e1 5d 6f 6c 6e c9 a7 15 e4 73 c3 e6 a8 32 7c d7 c2 e4 0c 4d 97 62 54 64 dc 38 5f 09 5a 47 82 91 74 fc 66 99 e1 f8 67 a2 01 55 4a 2e d6 5b 59 0a 95 c7 20 31 c8 b6 12 bc ae 3c 15 e8 18 ca 27 59 a9 f2 c6 b6 2f 9f 0d 03 af 95 55 59 5c 9a 8f b9 95 ff 16 d7 9c 5c 7b a7 41 c7 70 72 85 31 dd 75 0b 5a 61 e4 6d 8e 19 ac 98 b7 a4 11 ab e3 d0 34 f0 6b ad a7 fb d5 51 37 17 1d 7e 99 19 12 e4 e2 b4 d9 69 67 f3 f5 ed 3a 0f a8 a2 09 28 14 33 31 ba 10 c0 11 40 77 5a 73 87 25 e7 91 ee 7b 44 63 29 d7 18 d6 b5 dc c3 69 ca c5 f8 5b 32 Data Ascii: pDwD}lz,*656&\|__}7:}6Zp/t~WBFqWB5GB]olns2\|MbTd8_ZGtfgUJ.[Y 1<'Y/UY\\{Apr1uZam4kQ7~ig:(31@wZs%{Dc)i[2
2024-12-20 18:03:32 UTC	3860	IN	Data Raw: 5e 53 71 41 bd ef ea f4 ef 9d 1c 1f 4a 8e f9 16 ef 82 07 15 e4 59 91 ac 26 5a 1c d5 46 07 20 0b bb 1a e1 5d cb e6 df 86 1f 2b ed 1d 1e 6a fe 19 de 41 74 4f e7 57 70 69 99 6b 1d a7 0a bc 4d 99 38 21 55 17 c9 37 6c f6 2c cd 41 19 9d 31 34 f7 9c f2 85 4f 2b 5e 4d a5 77 d8 81 e6 6f a5 2f df 51 ce 7a 90 9b c3 b8 c9 2f ab e2 63 cb dc f4 db ab 4f a0 8b 15 9e 48 b9 79 14 16 b7 d4 b6 e1 5c 62 78 7a 95 84 ff 07 94 d7 a3 d1 59 4b df 37 d2 8b a7 40 23 0a dc 9a f4 dc b0 16 93 5c 9e 53 50 67 15 2e 5f 17 a1 a2 ca 53 cb 87 67 77 50 31 26 a6 c6 70 5c d7 bb 0d 0f c2 cc 31 58 e5 25 93 d6 da 39 5d 8d 49 b1 b0 bb 8e dd 6f a7 e2 4e 2b b8 ff d9 d9 03 86 88 20 0a a1 23 33 b9 ae 07 11 aa 13 24 eb d5 7a 70 45 df a1 6e a6 5b cd 7c 59 7d 1f 89 03 6d 22 8f 98 14 80 cb d7 cf b9 bb 08 Data Ascii: ^SqAJY&ZF ]+jAtOWpikM8!U7l,A14O+^Mwo/Qz/cOHy\bxzYK7@#\SPg._SgwP1&p\1X%9]IoN+ #3$zpEn[\|Y}m"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49750	108.158.75.120	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:31 UTC	548	OUT	GET /c/hotjar-1820622.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:32 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 20 Dec 2024 18:03:32 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/c7abff525eac4db1ebd9e008e334d340 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 cc7817394ecf8a11385b5cd3569958f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: 2dRpvqv1FJz_2bUq1iHhZ_C9QXAT33JJvLvxPNga_rWEBRht3E9-Eg==
2024-12-20 18:03:32 UTC	3200	IN	Data Raw: 63 37 39 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 38 32 30 36 32 32 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 39 2e 39 39 39 39 39 39 39 39 34 37 33 36 34 34 32 65 2d 31 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 Data Ascii: c79window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1820622,"rec_value":9.999999994736442e-10,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console
2024-12-20 18:03:32 UTC	13241	IN	Data Raw: 33 33 62 31 0d 0a 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 72 75 6c 65 5f 74 79 70 65 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 64 65 76 69 63 65 22 2c 22 6d 61 74 63 68 5f 6f 70 65 72 61 74 69 6f 6e 22 3a 22 65 78 61 63 74 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 70 61 74 74 65 72 6e 22 3a 22 74 61 62 6c 65 74 22 2c 22 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 72 75 6c 65 5f 74 79 70 65 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 64 65 76 69 63 65 22 2c 22 6d 61 74 63 68 5f 6f 70 65 72 61 74 69 6f 6e 22 3a 22 65 78 61 63 74 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 70 61 74 74 65 72 6e 22 3a 22 70 68 6f 6e 65 22 2c 22 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 72 Data Ascii: 33b1":"desktop","name":null,"rule_type":null},{"component":"device","match_operation":"exact","negate":false,"pattern":"tablet","name":null,"rule_type":null},{"component":"device","match_operation":"exact","negate":false,"pattern":"phone","name":null,"r
2024-12-20 18:03:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49751	13.59.75.255	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:31 UTC	584	OUT	OPTIONS /api/patient/v1/unauthenticated_patients?confirmation_token=XHcUtg HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://patient.inboxhealth.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:32 UTC	493	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET, PUT, DELETE, POST, OPTIONS, PATCH Access-Control-Allow-Origin: https://patient.inboxhealth.com Access-Control-Expose-Headers: Authorization, Content-Disposition, X-Amzn-Remapped-Authorization Access-Control-Max-Age: 7200 Content-Length: 0 Date: Fri, 20 Dec 2024 18:03:31 GMT Strict-Transport-Security: max-age=315360000; preload Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49753	216.198.54.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:31 UTC	384	OUT	GET /compose/a38e4305-dfd3-44f3-b64c-d15d8b98fd79 HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:32 UTC	1165	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:32 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"83209b9d63727b674c1a95e5fe72b79f" x-request-id: 8f3f2d86e90af78d-SEA X-Request-ID: 8f3f2d86e90af78d-SEA X-Request-ID: 8f3f2d86e90af78d-SEA x-runtime: 0.004205 X-Zendesk-Zorg: yes X-Zendesk-Zorg: yes CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FTncRqAU0cLJDOA7sOT%2Ba8XcowCdmOV2mZMNyoshZHVaGAdHtC%2Fb8etPvXk%2B0LC1s1VOSak7flVuxUE78AEih1Xga5qFJ%2B4zMLqGgCu9e5eTReD270LDmSmYAf31ty5ioNE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 8f518cb55aec41c6-EWR
2024-12-20 18:03:32 UTC	204	IN	Data Raw: 33 66 32 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 69 6e 62 6f 78 68 65 61 6c 74 68 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 41 33 30 30 22 2c 22 62 72 61 6e 64 22 3a 22 49 6e 62 6f 78 20 48 65 61 6c 74 68 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 Data Ascii: 3f2{"products":[{"name":"web_widget","id":"inboxhealth.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#78A300","brand":"Inbox Health","embeds":{"ticketSubmissionForm":{"embed"
2024-12-20 18:03:32 UTC	813	IN	Data Raw: 3a 22 73 75 62 6d 69 74 54 69 63 6b 65 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 30 2e 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 41 33 30 30 22 2c 22 6e 61 6d 65 46 69 65 6c 64 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 63 68 61 74 22 3a 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 62 61 64 67 65 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 69 6d 61 67 65 5f 72 69 67 68 74 22 2c 22 74 65 78 74 22 3a 22 43 68 61 74 20 77 69 74 68 20 75 73 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 65 65 65 65 65 65 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 6d 61 67 65 50 61 74 68 22 3a 22 22 7d 2c Data Ascii: :"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"color":"#78A300","nameFieldEnabled":true}},"chat":{"embed":"chat","props":{"badge":{"layout":"image_right","text":"Chat with us","color":"#eeeeee","enabled":true,"imagePath":""},
2024-12-20 18:03:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49754	216.198.54.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:31 UTC	535	OUT	GET /web_widget/classic/latest/web-widget-main-bcac9f6.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:32 UTC	1194	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:32 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 849701 Connection: close x-amz-id-2: ANlVXEFR0AIxaTC/oZtgoabAupi9TapvseAJpIAEQc9a5CIYqzj/QiSrP9AVhRdLoEH/Fj+oEBJj+3hvmIEwag== x-amz-request-id: 6RTEDAXCSHJMA1XY x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Dec 2024 09:50:44 GMT ETag: "419802576603f417f149fc475b138e7e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Wed, 17 Dec 2025 09:50:43 GMT x-amz-version-id: HSsYuF0DBd0RIN7zCStOoTZG9o.DjzRZ CF-Cache-Status: HIT Age: 106 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F0vVDvIbPOFS83oVhe85btuHdmF4AG57dM%2Fr2OAI%2FbajZYGq7tvhIJAB96kgTMD5eYKdJ2rLLaZy0OD9kPqDUPshvP2PC%2BKfNxnHs8esFPaEqN%2Fz3Zr9yOjYCoICHBv52pNfA1M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518cb5fc1a8c27-EWR
2024-12-20 18:03:32 UTC	175	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic
2024-12-20 18:03:32 UTC	1369	IN	Data Raw: 2d 77 65 62 2d 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 36 34 37 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b Data Ascii: -web-widget-sdks/web-widget/getting-started/legal/ */(()=>{var e,t,n,r,o={6470:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){
2024-12-20 18:03:32 UTC	1369	IN	Data Raw: 2e 32 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 35 34 35 2e 32 38 36 48 36 2e 32 61 2e 37 34 38 2e 37 34 38 20 30 20 30 20 31 2d 2e 35 33 2d 2e 32 32 4c 33 2e 39 37 20 37 2e 39 33 61 2e 37 35 2e 37 35 20 30 20 31 20 31 20 31 2e 30 36 2d 31 2e 30 36 6c 31 2e 31 30 33 20 31 2e 31 30 32 4c 38 2e 39 31 20 34 2e 34 33 37 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 31 2e 31 38 2e 39 32 36 7a 22 7d 29 29 29 7d 2c 33 31 34 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 Data Ascii: .2a.75.75 0 0 1-.545.286H6.2a.748.748 0 0 1-.53-.22L3.97 7.93a.75.75 0 1 1 1.06-1.06l1.103 1.102L8.91 4.437a.75.75 0 0 1 1.18.926z"})))},31498:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object
2024-12-20 18:03:32 UTC	1369	IN	Data Raw: 74 7d 2c 6e 29 2c 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 39 20 31 31 4c 35 20 37 6c 34 2d 34 22 7d 29 29 29 7d 2c 35 38 34 37 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 Data Ascii: t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M9 11L5 7l4-4"})))},58478:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var
2024-12-20 18:03:32 UTC	1369	IN	Data Raw: 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 31 31 20 31 2e 35 4c 34 2e 39 20 37 2e 36 63 2d 2e 32 2e 32 2d 2e 32 2e 35 20 30 20 2e 37 6c 36 2e 31 20 36 2e 31 22 7d 29 29 29 7d 2c 33 34 38 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 Data Ascii: ntColor",strokeLinecap:"round",strokeWidth:2,d:"M11 1.5L4.9 7.6c-.2.2-.2.5 0 .7l6.1 6.1"})))},34890:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<ar
2024-12-20 18:03:32 UTC	1369	IN	Data Raw: 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 37 2e 35 20 33 76 35 2e 35 48 31 31 22 7d 29 29 29 29 7d 2c 37 33 36 30 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 Data Ascii: createElement("path",{strokeLinecap:"round",strokeLinejoin:"round",d:"M7.5 3v5.5H11"}))))},73606:(e,t,n)=>{"use strict";n.d(t,{A:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t
2024-12-20 18:03:32 UTC	1369	IN	Data Raw: 35 2e 31 35 2d 35 2e 31 35 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 31 20 30 6c 33 2e 32 39 20 33 2e 32 39 61 2e 35 2e 35 20 30 20 30 20 30 20 2e 37 31 20 30 6c 31 2e 32 39 2d 31 2e 32 39 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 31 20 30 4c 31 35 2e 35 20 31 34 22 7d 29 29 29 2c 6f 7c 7c 28 6f 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 69 72 63 6c 65 22 2c 7b 63 78 3a 31 31 2e 35 2c 63 79 3a 35 2e 35 2c 72 3a 31 2e 35 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 29 29 29 7d 2c 31 38 37 30 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f Data Ascii: 5.15-5.15a.5.5 0 0 1 .71 0l3.29 3.29a.5.5 0 0 0 .71 0l1.29-1.29a.5.5 0 0 1 .71 0L15.5 14"}))),o\|\|(o=a.createElement("circle",{cx:11.5,cy:5.5,r:1.5,fill:"currentColor"})))},18709:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);functio
2024-12-20 18:03:32 UTC	1369	IN	Data Raw: 2f 32 30 30 30 2f 73 76 67 22 2c 77 69 64 74 68 3a 31 36 2c 68 65 69 67 68 74 3a 31 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 74 7d 2c 6e 29 2c 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 31 34 2e 35 20 36 2e 35 61 Data Ascii: /2000/svg",width:16,height:16,focusable:"false",viewBox:"0 0 16 16","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("g",{fill:"none",stroke:"currentColor"},o.createElement("path",{strokeLinejoin:"round",d:"M14.5 6.5a
2024-12-20 18:03:32 UTC	1369	IN	Data Raw: 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 61 2e 61 70 70 6c 79 Data Ascii: strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply
2024-12-20 18:03:32 UTC	1369	IN	Data Raw: 35 2d 2e 35 2e 35 7a 6d 30 2d 33 68 2d 31 31 63 2d 2e 32 38 20 30 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 73 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 31 31 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 73 2d 2e 32 32 2e 35 2d 2e 35 2e 35 7a 6d 30 2d 33 68 2d 31 31 63 2d 2e 32 38 20 30 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 73 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 31 31 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 73 2d 2e 32 32 2e 35 2d 2e 35 2e 35 7a 4d 31 35 20 37 61 32 20 32 20 30 20 30 20 31 2d 32 2d 32 56 31 6c 36 20 36 68 2d 34 7a 22 7d 29 29 29 7d 2c 39 30 36 30 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e Data Ascii: 5-.5.5zm0-3h-11c-.28 0-.5-.22-.5-.5s.22-.5.5-.5h11c.28 0 .5.22.5.5s-.22.5-.5.5zm0-3h-11c-.28 0-.5-.22-.5-.5s.22-.5.5-.5h11c.28 0 .5.22.5.5s-.22.5-.5.5zM15 7a2 2 0 0 1-2-2V1l6 6h-4z"})))},90604:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49752	52.4.95.4	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:32 UTC	574	OUT	GET /app/1811ca2096d3867b6a5f?protocol=7&client=js&version=3.0.0&flash=false HTTP/1.1 Host: ws.pusherapp.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://patient.inboxhealth.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: gttAeMEheJTqpIGYL+iYUg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-20 18:03:32 UTC	128	IN	HTTP/1.1 426 Upgrade Required Date: Fri, 20 Dec 2024 18:03:32 GMT Content-Length: 0 Connection: close Upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49755	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:32 UTC	663	OUT	GET /fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://patient.inboxhealth.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://patient.inboxhealth.com/assets/inbox-patient-7a28dffeaad312cf15cd8597f88d1af5.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:33 UTC	927	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 71903 Connection: close Date: Fri, 20 Dec 2024 18:03:33 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT, POST, DELETE, HEAD Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3600 Last-Modified: Wed, 24 Feb 2021 01:52:03 GMT ETag: "fdb27bea67684fc5be173e888c5f403d" Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 44f6a169aef9148c6facf6748e9e598e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: q3lncjHRVqw-XVXhtpLOLsujc5OvcxYl2NsC4BI8r3lLo614neql8w== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:33 UTC	15457	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 00 25 40 da bf 77 4f 46 32 00 01 00 00 00 01 18 d8 00 0e 00 00 00 02 54 c8 00 01 18 79 00 04 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 86 02 11 08 0a 88 bb 50 86 e9 4b 01 36 02 24 03 95 00 0b 95 18 00 04 20 05 86 7c 07 b2 4c 3f 77 65 62 66 06 5b 38 e0 91 00 d6 6d 3b af 74 05 e9 cd fa d3 d5 e7 e8 00 63 36 c2 d6 9b 15 96 f0 3e bc 53 ad 38 ae 7b 1c 80 19 5d 3f fb ff ff ff 3f 3d 69 8c a1 25 81 e6 00 50 d5 da ae da ad fb ff cf 66 38 35 4a 88 30 aa b9 75 04 0f b2 98 66 b1 b0 c9 65 42 af 5c d8 eb a6 02 45 b9 6c fb fd e8 fd 81 41 77 98 d6 36 84 11 1c 66 b3 11 46 c0 8e a0 30 6c 9b 0d c3 b6 4d 81 60 3b 69 96 4f df 9e 55 13 cb d4 b1 e6 6b d9 b6 22 3d e8 cb b2 0b eb c3 ba 8a 96 f2 Data Ascii: %@wOF2Ty?FFTM `PK6$ \|L?webf[8m;tc6>S8{]??=i%Pf85J0ufeB\ElAw6fF0lM`;iOUk"=
2024-12-20 18:03:33 UTC	1195	IN	Data Raw: d7 a2 1f 2d a3 34 a2 1a a3 37 fc 17 6d a2 a9 eb e0 ed a9 58 4e 96 41 89 3a 3a 12 9a 88 d3 b1 56 e5 9f e9 c0 8e ee af 16 6a 01 fe 90 5d fc 6f 9f 3a 94 18 1c 08 a9 d0 12 04 cd 5a b1 0a 1a d4 fc ac 77 ca b6 93 64 ae ee 7d fc c1 e4 a5 ff 1d 26 d0 21 8e 0a d6 95 c2 53 54 bf 0c da 9a 55 7c df 78 3b 9a 06 21 88 5f 85 19 be ca 74 fd 25 f1 8e 92 fc dd a6 b4 a6 23 56 3d 60 7d 7d f1 70 3f 73 2c 0b 78 82 18 84 9d 2f cf 65 d7 5a af 8c 8a a6 9a 79 7f 84 b9 41 77 8f c9 42 89 c7 68 50 3d df 86 55 b2 ea 99 40 91 80 50 21 b3 cd fa e2 b8 37 0d 5d be ec 08 8e aa 83 97 19 4e 1d b7 7e 7d 7c 6e 6c 8c 62 56 8e bf 00 bf 7b cf e1 30 a2 56 6e c8 a9 5f db 0c 3a 5c 72 0f 18 ef dd 93 ed 46 a3 fb cb 9c fe b6 cd 18 38 a3 09 cd c8 99 73 a5 c5 05 a4 77 7d 17 d6 f1 e1 e3 79 ae f0 d2 d8 87 Data Ascii: -47mXNA::Vj]o:Zwd}&!STU\|x;!_t%#V=`}}p?s,x/eZyAwBhP=U@P!7]N~}\|nlbV{0Vn_:\rF8sw}y
2024-12-20 18:03:33 UTC	16384	IN	Data Raw: 3c a6 31 ac 9e d7 8e 9e c2 c2 84 80 fd f3 5c dd 50 81 14 55 0e 57 31 87 21 87 79 c4 e8 16 75 84 67 a4 1e d6 67 51 08 5c 14 b6 19 4b 1f 93 29 8b 8f 69 c2 c9 c0 be 08 da 7c 88 36 14 2b 63 c5 8c 27 5e 18 42 a4 6c ec 47 e6 ae 67 2b 1c 57 fe 8b 12 d7 bf 86 b9 b5 17 98 ec 5b 14 13 ed 36 0b 16 50 ac 72 ab 91 10 1b 18 b3 c0 e1 be f4 3e bf 5f ca bf 72 52 1a b6 ae 7e 34 b6 f1 6a e0 f6 2b 88 d9 63 04 d0 a7 f7 d8 49 6d 98 5d 46 3b af de a6 7a a6 68 71 a3 c4 d8 a8 02 db 0a f6 32 a1 f2 08 53 98 fd 34 7f 84 52 f0 57 86 aa 81 a1 83 d8 e7 c6 b4 d9 44 08 05 19 31 f9 fc 7d f9 b4 56 e3 3a 6f f1 5a b8 ca 20 fa 6f eb a7 15 97 ec d0 92 95 15 25 04 9b 3d d0 42 bb 54 aa b7 17 6d 1d 83 76 52 7b dd ce 61 bc 71 0e 09 3b 62 ef 56 01 55 36 56 2c af b2 de 34 48 2b 7d d5 88 9c 8b 94 5f Data Ascii: <1\PUW1!yuggQ\K)i\|6+c'^BlGg+W[6Pr>_rR~4j+cIm]F;zhq2S4RWD1}V:oZ o%=BTmvR{aq;bVU6V,4H+}_
2024-12-20 18:03:33 UTC	8949	IN	Data Raw: 51 5f d6 ee 91 83 c2 98 31 8f 53 41 b5 b1 af ec 62 ec f8 06 e4 30 bf 9c 44 07 b3 38 23 73 bc 7d 74 07 e5 2f c2 28 48 12 02 63 3b c5 06 6a 4e 64 ba 28 cd d8 e7 cb 1b 11 b3 35 15 27 b0 d3 07 23 10 09 da 50 01 27 53 e0 2a da e6 9e 65 9c 26 4a 77 ce 21 f7 44 db 39 5b a7 51 70 cc 55 de cc 5f 6f 3c 2f 3e b0 46 75 29 c2 3a 89 66 23 85 54 48 40 fb 99 93 5d 01 08 d4 cf 1b 0d 88 d5 0e b4 fd 28 eb cb a3 a2 be c5 de de 01 4c 8e 84 07 b0 0c 08 53 35 d2 92 3d 1a 7b 00 08 80 01 1c 03 b8 b7 75 30 36 d1 61 9e 5d 70 2e a5 53 f7 17 54 b1 88 41 91 f9 2c 2b 7e 20 6d 7f b2 39 d1 15 74 a6 e2 4d 78 7b 12 3d b2 9c fa 16 39 65 11 cf 25 a4 99 60 da 61 9d 38 c3 41 77 2f ef c6 e5 93 c5 c3 16 f6 de d3 ca be 68 04 5d fd 53 2a cb 9e 3c ed 12 35 ed 2e f9 8c ee 6e 96 20 a2 87 94 c2 44 04 Data Ascii: Q_1SAb0D8#s}t/(Hc;jNd(5'#P'Se&Jw!D9[QpU_o</>Fu):f#TH@](LS5={u06a]p.STA,+~ m9tMx{=9e%`a8Aw/h]S<5.n D
2024-12-20 18:03:33 UTC	16384	IN	Data Raw: 0e 20 60 93 81 15 d2 67 60 4f 41 12 20 6c 2d 4f b0 8f d3 dd b6 40 39 d8 09 78 8e 56 5d 2f 21 1f d5 e4 10 0c 8e b0 b0 39 ab bb 7d 19 01 a0 2f b6 69 7f f6 95 b7 10 9d 5a 18 89 3d d8 7a 2b 01 5d c1 18 37 a5 11 04 dc 76 88 34 c0 95 a1 5f 9c f1 06 6d f2 00 ca 67 03 d1 25 af 97 8b 5c 91 cb b3 73 04 e6 e1 4d 0a 1c 81 26 8e 79 ed 13 3a c3 9b 49 60 cd 35 95 d2 fd 8a 2c 3c 7a 53 7c 70 34 2c 0d 82 c5 92 93 69 f1 25 7d c4 9c 03 fe 9e a6 5c e5 7b e5 ca bf b8 96 47 32 fe 3d 68 c6 64 7a ef 5d ef 48 3c e7 ef de e2 1e 73 2e 6b 2d 3f 46 d0 42 25 e0 1c 93 21 28 0a ca e8 ab cb a8 18 14 af 97 80 e4 ef 3b 6c a5 cb a8 31 9b db b0 64 d2 90 de 2d 8b 19 27 29 b6 ce 91 64 23 20 79 73 3b 96 07 cf 1a 19 79 5d cd d7 8e 40 4e e6 f3 45 a7 25 a7 83 2b dd 53 b3 70 79 eb 2e fa b3 6b 1a 63 Data Ascii: `g`OA l-O@9xV]/!9}/iZ=z+]7v4_mg%\sM&y:I`5,<zS\|p4,i%}\{G2=hdz]H<s.k-?FB%!(;l1d-')d# ys;y]@NE%+Spy.kc
2024-12-20 18:03:33 UTC	13534	IN	Data Raw: ca 1c bb c7 c4 ca 21 23 a9 bd 72 d3 5f 49 55 48 78 d8 a3 4d 44 77 a9 6d 8d c2 e4 9b b3 a5 32 d0 be 34 d2 a7 4b 0d a5 84 d7 60 99 34 4a 79 21 5a e6 78 e5 55 c9 b7 3a 64 45 c1 b7 ca 90 c4 d8 25 ce a5 a8 5f b9 c1 89 36 23 0a 88 a5 70 c6 c4 d9 53 c2 23 1e f5 b1 e3 15 6b 45 e2 41 8f e0 57 13 4f ee 66 15 7c 0d aa 53 cc 96 70 1a 8d 2a f8 e2 82 50 6f af 7a 61 1e c1 24 be 44 cf 94 7c 51 86 24 6f 73 24 3b 6a a3 43 21 51 d0 83 23 40 da 87 2a ac 8f eb ba bb a5 a0 6b fb 91 93 0f 5d 2f e4 1f f2 5a 43 8a e7 a2 52 fd 94 8c cd 1d 9d ef 83 d8 08 54 f2 7e aa d5 f4 14 ce 6e a0 b9 e7 cd 73 8d 12 8a 84 4d 95 b0 4f 7c 25 17 57 d9 d4 fb 11 4b 97 04 41 2c 59 91 c5 8a 5d 90 ff 9d cb 6b 90 1f ce e7 4a 06 d4 5d 96 ce 2b 3c 4c 1e ee 0c 6f 22 9a a6 46 90 bb 23 cd 44 10 45 61 a4 9b ab Data Ascii: !#r_IUHxMDwm24K`4Jy!ZxU:dE%_6#pS#kEAWOf\|SpPoza$D\|Q$os$;jC!Q#@k]/ZCRT~nsMO\|%WKA,Y]kJ]+<Lo"F#DEa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49757	172.217.19.228	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:33 UTC	463	OUT	GET /recaptcha/api.js?render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:33 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 20 Dec 2024 18:03:33 GMT Date: Fri, 20 Dec 2024 18:03:33 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 18:03:33 UTC	641	IN	Data Raw: 35 39 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59c/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-12-20 18:03:33 UTC	802	IN	Data Raw: 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 Data Ascii: UAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabe
2024-12-20 18:03:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49760	13.59.75.255	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:33 UTC	718	OUT	GET /api/patient/v1/unauthenticated_patients?confirmation_token=XHcUtg HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=utf-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://patient.inboxhealth.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:34 UTC	667	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, DELETE, POST, OPTIONS, PATCH Access-Control-Allow-Origin: https://patient.inboxhealth.com Access-Control-Expose-Headers: Authorization, Content-Disposition, X-Amzn-Remapped-Authorization Access-Control-Max-Age: 7200 Cache-Control: max-age=0, private, must-revalidate Content-Length: 1143 Content-Type: application/json Date: Fri, 20 Dec 2024 18:03:34 GMT Etag: W/"e6244b60ae07b59d955f81bed86a05cb" Strict-Transport-Security: max-age=315360000; preload Vary: Origin X-Request-Id: ce06aa97-b6c2-4410-bb98-2e05594872ec X-Runtime: 0.028153 Connection: close
2024-12-20 18:03:34 UTC	519	IN	Data Raw: 7b 22 75 6e 61 75 74 68 65 6e 74 69 63 61 74 65 64 5f 70 61 74 69 65 6e 74 22 3a 7b 22 69 64 22 3a 33 36 33 30 34 34 39 31 2c 22 75 73 65 72 5f 69 64 22 3a 6e 75 6c 6c 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 4a 4f 48 4e 22 2c 22 66 69 72 73 74 5f 6e 61 6d 65 5f 6c 65 67 61 6c 22 3a 22 4a 4f 48 4e 22 2c 22 6d 69 64 64 6c 65 5f 6e 61 6d 65 22 3a 22 49 22 2c 22 6c 61 73 74 5f 6e 61 6d 65 22 3a 22 57 45 41 56 45 52 22 2c 22 62 61 6c 61 6e 63 65 5f 63 65 6e 74 73 22 3a 36 30 30 30 2c 22 63 61 63 68 65 64 5f 62 61 6c 61 6e 63 65 5f 63 65 6e 74 73 22 3a 36 30 30 30 2c 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 3a 37 32 37 32 2c 22 61 6c 6c 6f 77 5f 73 65 6c 66 5f 64 69 72 65 63 74 65 64 5f 70 61 79 6d 65 6e 74 5f 70 6c 61 6e 22 3a 66 61 6c 73 65 2c 22 65 Data Ascii: {"unauthenticated_patient":{"id":36304491,"user_id":null,"first_name":"JOHN","first_name_legal":"JOHN","middle_name":"I","last_name":"WEAVER","balance_cents":6000,"cached_balance_cents":6000,"enterprise_id":7272,"allow_self_directed_payment_plan":false,"e
2024-12-20 18:03:34 UTC	624	IN	Data Raw: 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 5f 73 69 6d 70 6c 69 66 69 65 64 5f 61 63 63 6f 75 6e 74 5f 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 70 61 74 69 65 6e 74 5f 73 75 70 70 6f 72 74 5f 65 6d 61 69 6c 22 3a 6e 75 6c 6c 2c 22 70 6f 72 74 61 6c 5f 61 63 63 65 70 74 73 5f 61 63 68 22 3a 74 72 75 65 2c 22 70 6f 72 74 61 6c 5f 61 63 63 65 70 74 73 5f 63 72 65 64 69 74 5f 63 61 72 64 22 3a 74 72 75 65 2c 22 70 61 79 6d 65 6e 74 5f 70 6c 61 6e 5f 6d 69 6e 69 6d 75 6d 73 22 3a 5b 7b 22 6d 6f 6e 74 68 73 22 3a 33 2c 22 6d 69 6e 69 6d 75 6d 5f 62 61 6c 61 6e 63 65 5f 63 65 6e 74 73 22 3a 31 35 30 30 30 7d 2c 7b 22 6d 6f 6e 74 68 73 22 3a 36 2c 22 6d 69 6e 69 6d 75 6d 5f 62 61 6c 61 6e 63 65 5f 63 65 6e 74 73 22 3a 33 30 30 30 30 7d 2c 7b 22 6d 6f 6e Data Ascii: sage":null,"enable_simplified_account_view":false,"patient_support_email":null,"portal_accepts_ach":true,"portal_accepts_credit_card":true,"payment_plan_minimums":[{"months":3,"minimum_balance_cents":15000},{"months":6,"minimum_balance_cents":30000},{"mon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49761	108.158.81.56	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:34 UTC	536	OUT	GET /3.0.0/xhr.min.js HTTP/1.1 Host: js.pusher.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:35 UTC	565	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4929 Connection: close Date: Fri, 20 Dec 2024 18:03:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Tue, 06 Nov 2018 11:41:00 GMT ETag: "761e2756ba190ae948cdcb431d1faf03" Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 732d327a177208e8e508d6284bc8d40c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: JDyr41kNMj01dlWMqAZS3PY-KK2dp3zLSHRUSYlNYlw02umQxlzOnw==
2024-12-20 18:03:35 UTC	4929	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 75 73 68 65 72 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 30 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 75 73 68 65 72 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 50 75 73 68 65 72 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 63 65 2e 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 62 2c 61 2c 63 29 7b 50 75 73 68 65 72 2e 45 76 65 6e 74 73 44 69 73 70 61 74 63 68 65 72 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 68 6f 6f 6b 73 3d 62 3b 74 68 69 73 2e 6d 65 74 68 6f 64 3d 61 3b 74 68 69 73 2e 75 72 6c 3d 63 7d 76 61 72 20 61 3d 63 2e 70 72 6f 74 6f 74 79 70 65 3b 50 75 73 Data Ascii: /! Pusher JavaScript Library v3.0.0 * http://pusher.com/ * * Copyright 2014, Pusher * Released under the MIT licence. */(function(){function c(b,a,c){Pusher.EventsDispatcher.call(this);this.hooks=b;this.method=a;this.url=c}var a=c.prototype;Pus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49762	108.158.75.113	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:34 UTC	365	OUT	GET /c/hotjar-1820622.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:35 UTC	640	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 20 Dec 2024 18:03:32 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/c7abff525eac4db1ebd9e008e334d340 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e59c3614c775e0e475019dd43ac0810e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: ONx8qUufH44FLhY7HrtMFtT-GsIRhkWFBOrRCYlqKVowfmPKq4nt1A== Age: 2
2024-12-20 18:03:35 UTC	16384	IN	Data Raw: 34 30 32 61 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 38 32 30 36 32 32 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 39 2e 39 39 39 39 39 39 39 39 34 37 33 36 34 34 32 65 2d 31 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c Data Ascii: 402awindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1820622,"rec_value":9.999999994736442e-10,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_consol
2024-12-20 18:03:35 UTC	50	IN	Data Raw: 3a 7b 72 65 73 6f 75 72 63 65 3a 22 68 6f 74 6a 61 72 2d 6a 73 22 7d 2c 73 74 61 72 74 3a 6b 2c 74 79 70 65 3a 22 6c 61 62 22 7d 29 7d 28 29 3b 0d 0a Data Ascii: :{resource:"hotjar-js"},start:k,type:"lab"})}();
2024-12-20 18:03:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49766	216.198.54.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:35 UTC	557	OUT	GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-bcac9f6.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:35 UTC	1214	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:35 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 25703 Connection: close x-amz-id-2: McAtkxEpUwldq/USWm1Cq/Sf0dAlHUDCvgWeRsQpXTLoAbCKXEyIXD2R56LDY+kFSFLvlmgCHZZAZPBVAOjGskGiM7xhGk/me+Ck1D2j6fQ= x-amz-request-id: 0WWG2MJCSWWBAW7J x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Dec 2024 09:50:46 GMT ETag: "ef48436bf7997a9fed0856cd3df28c0f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Wed, 17 Dec 2025 09:50:45 GMT x-amz-version-id: ZNY1FVImW6VU1ojAeCi38kHzm.pPRRmF CF-Cache-Status: HIT Age: 192864 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQcu%2BPwPzcL6XAfcfHM2qywPJcfvkebsH8YR%2FkBeE58zicvQJbPD3e2%2Bns6Gm09MrX2TinNdVXnDTvvHtVMa4TiVIW9TProZEuW7d4TjM8GmW%2BFHcLejbc0J08My6kf3xbdN2lY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518ccc3b0d32d9-EWR
2024-12-20 18:03:35 UTC	155	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 39 33 5d 2c 7b 34 36 39 33 33 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9393],{46933:e=>{e.exports=
2024-12-20 18:03:35 UTC	1369	IN	Data Raw: 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 6c 6f 63 61 6c 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 75 73 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 6e 65 65 64 5f 68 65 6c 70 22 3a 22 4e 6f 2c 20 49 20 6e 65 65 64 20 68 65 6c 70 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 72 65 61 73 6f 6e 2e 72 65 6c 61 74 65 64 22 3a 22 49 74 5c 27 73 20 72 65 6c 61 74 65 64 2c 20 62 75 74 20 69 74 20 64 69 64 6e 5c 27 74 20 61 6e 73 77 65 72 20 Data Ascii: JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer
2024-12-20 18:03:35 UTC	1369	IN	Data Raw: 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 67 65 74 5f 69 6e 5f 74 6f 75 63 68 22 3a 22 48 6f 77 20 64 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 65 74 20 69 6e 20 74 6f 75 63 68 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 72 65 71 75 65 73 74 5f 63 61 6c 6c 62 61 63 6b 5f 6f 6e 6c 79 2e 74 69 74 6c 65 22 3a 22 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 68 65 20 74 65 61 6d 20 74 6f 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 72 65 67 61 72 64 69 6e 67 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 Data Ascii: rk.answerBot.msg.channel_choice.get_in_touch":"How do you want to get in touch?","embeddable_framework.answerBot.msg.channel_choice.request_callback_only.title":"Would you like the team to contact you regarding your question?","embeddable_framework.answer
2024-12-20 18:03:35 UTC	1369	IN	Data Raw: 20 66 69 6e 64 20 66 6f 72 20 79 6f 75 2c 20 6a 75 73 74 20 74 79 70 65 20 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 70 72 6f 6d 70 74 5f 61 67 61 69 6e 5f 6e 6f 5f 63 68 61 6e 6e 65 6c 73 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 59 6f 75 20 63 61 6e 20 61 73 6b 20 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 79 65 73 5f 61 63 6b 6e 6f 77 6c 65 64 67 65 6d 65 6e 74 22 3a 22 4e 69 63 65 2e 20 4b 6e 6f 77 6c 65 64 67 65 20 69 73 20 70 6f 77 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e Data Ascii: find for you, just type another question.","embeddable_framework.answerBot.msg.prompt_again_no_channels_available":"You can ask another question.","embeddable_framework.answerBot.msg.yes_acknowledgement":"Nice. Knowledge is power.","embeddable_framework.
2024-12-20 18:03:35 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 64 69 73 61 62 6c 65 5f 63 68 61 74 22 3a 22 44 69 73 61 62 6c 65 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 64 69 73 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 22 3a 22 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 74 68 65 20 63 68 61 74 20 61 6e 79 74 69 6d 65 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 65 6e 61 62 6c 65 22 3a 22 45 6e 61 62 6c 65 20 43 6f 6f 6b 69 65 73 20 61 6e 64 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d Data Ascii: ement.cookies.disable_chat":"Disable Chat","embeddable_framework.chat.agreement.cookies.disable_chat_note":"You may disable the chat anytime.","embeddable_framework.chat.agreement.cookies.enable":"Enable Cookies and Chat","embeddable_framework.chat.agreem
2024-12-20 18:03:35 UTC	1369	IN	Data Raw: 61 6c 6c 6f 77 65 64 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 75 6e 6b 6e 6f 77 6e 5f 65 72 72 6f 72 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 Data Ascii: allowed":"Upload failed. File sending is not allowed.","embeddable_framework.chat.attachments.error.not_supported":"Upload failed. File sending is not supported on this browser.","embeddable_framework.chat.attachments.error.unknown_error":"Upload failed.
2024-12-20 18:03:35 UTC	1369	IN	Data Raw: 22 25 28 61 67 65 6e 74 31 29 73 20 61 6e 64 20 25 28 61 67 65 6e 74 32 29 73 20 61 72 65 20 74 79 70 69 6e 67 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 61 64 69 6e 67 49 6d 61 67 65 22 3a 22 4c 6f 61 64 69 6e 67 20 69 6d 61 67 65 20 28 25 28 61 74 74 61 63 68 6d 65 6e 74 53 69 7a 65 29 73 29 2e 2e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 67 69 6e 2e 75 70 64 61 74 65 49 6e 66 6f 22 3a 22 50 6c 65 61 73 65 20 75 70 64 61 74 65 20 79 6f 75 72 20 69 6e 66 6f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 71 75 65 75 65 50 6f 73 69 74 69 6f 6e Data Ascii: "%(agent1)s and %(agent2)s are typing","embeddable_framework.chat.chatLog.loadingImage":"Loading image (%(attachmentSize)s)...","embeddable_framework.chat.chatLog.login.updateInfo":"Please update your info","embeddable_framework.chat.chatLog.queuePosition
2024-12-20 18:03:35 UTC	1369	IN	Data Raw: 73 75 63 63 65 73 73 5f 6d 65 73 73 61 67 65 22 3a 22 45 6d 61 69 6c 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 25 28 65 6d 61 69 6c 29 73 20 77 68 65 6e 20 74 68 65 20 63 68 61 74 20 65 6e 64 73 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 69 74 6c 65 22 3a 22 45 6d 61 69 6c 20 63 68 61 74 20 74 72 61 6e 73 63 72 69 70 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 72 79 5f 61 67 61 69 6e 22 3a 22 54 72 79 20 61 67 61 69 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 66 65 74 63 68 69 6e 67 5f 68 69 73 74 6f 72 79 22 Data Ascii: success_message":"Email will be sent to %(email)s when the chat ends.","embeddable_framework.chat.emailtranscript.title":"Email chat transcript","embeddable_framework.chat.emailtranscript.try_again":"Try again","embeddable_framework.chat.fetching_history"
2024-12-20 18:03:35 UTC	1369	IN	Data Raw: 61 74 2e 69 63 6f 6e 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 41 74 74 61 63 68 20 66 69 6c 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 65 6e 64 43 68 61 74 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 45 6e 64 20 63 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 6d 65 6e 75 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 4f 70 74 69 6f 6e 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c 65 64 2e 66 61 69 6c 65 64 5f 74 77 69 63 65 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f Data Ascii: at.icon.attachments.hover.label":"Attach file","embeddable_framework.chat.icon.endChat.hover.label":"End chat","embeddable_framework.chat.icon.menu.hover.label":"Options","embeddable_framework.chat.messagefailed.failed_twice":"Failed to send","embeddable_
2024-12-20 18:03:35 UTC	1369	IN	Data Raw: 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 65 70 61 72 61 74 6f 72 2e 72 61 6e 67 65 22 3a 22 20 e2 80 94 20 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 75 6e 64 61 79 22 3a 22 53 75 6e 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 68 75 72 73 64 61 79 22 3a 22 54 68 75 72 73 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 Data Ascii: embeddable_framework.chat.operatingHours.label.separator.range":" ","embeddable_framework.chat.operatingHours.label.sunday":"Sunday","embeddable_framework.chat.operatingHours.label.thursday":"Thursday","embeddable_framework.chat.operatingHours.label.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49767	216.198.53.1	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:35 UTC	541	OUT	GET /embeddable/config HTTP/1.1 Host: inboxhealth.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://patient.inboxhealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:36 UTC	1230	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:36 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-6fb8575dc-hhl6b x-runtime: 0.001847 vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 8f518bfbb8f1429d-IAD X-Cached: STALE Last-Modified: Fri, 20 Dec 2024 18:03:02 GMT CF-Cache-Status: HIT Age: 34 Set-Cookie: __cf_bm=_PayJRCLy72WRbJMaElgIvUgQ45zWXX.yOqMsafeCCE-1734717816-1.0.1.1-HRtgYELJfSwt6SGGLROpbgx42XHhC78K.n248a7OB4MWCXKsjUYzRlhFoyLsnjSevKMVWRTguZe7asL2wAdXZQ; path=/; expires=Fri, 20-Dec-24 18:33:36 GMT; domain=.inboxhealth.zendesk.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Du1dlT%2F7ZVK5TYkbkmcyBMyOgRRtG7omKI5OdpzufuqJ%2B26YP%2FB7NNGsQQ5OxBntX4m1SBZaftWLeUPJBNG4vuhzcqmmnY4XXg2m3oYXbHulQWjkyqy2iZP5inf0GxBxMPMkgEeLD8B%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-12-20 18:03:36 UTC	371	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 72 75 69 64 3d 63 30 37 61 61 64 65 65 38 31 39 66 65 64 31 32 63 39 65 33 34 31 37 66 63 66 61 39 35 63 33 63 33 38 31 36 34 64 31 36 2d 31 37 33 34 37 31 37 38 31 36 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 69 6e 62 6f 78 68 65 61 6c 74 68 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 49 59 72 44 76 32 58 77 31 44 50 66 77 38 6c 55 44 2e 52 51 78 39 5a 6a 5a 76 37 41 5a 5f 4d 5a 65 35 36 6d 59 4a 31 4d 55 70 73 2d 31 37 33 34 37 31 37 38 31 36 30 32 30 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f Data Ascii: Set-Cookie: __cfruid=c07aadee819fed12c9e3417fcfa95c3c38164d16-1734717816; path=/; domain=.inboxhealth.zendesk.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: _cfuvid=IYrDv2Xw1DPfw8lUD.RQx9ZjZv7AZ_MZe56mYJ1MUps-1734717816020-0.0.1.1-604800000; path=/; do
2024-12-20 18:03:36 UTC	610	IN	Data Raw: 32 35 62 0d 0a 7b 22 62 72 61 6e 64 22 3a 22 49 6e 62 6f 78 20 48 65 61 6c 74 68 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 31 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 41 33 30 30 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 73 75 62 6d 69 74 54 69 63 6b 65 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 37 38 41 33 30 30 22 2c 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 30 2c 22 6e 61 6d 65 46 69 65 6c 64 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 63 68 61 74 22 3a 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 Data Ascii: 25b{"brand":"Inbox Health","brandCount":1,"color":"#78A300","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#78A300","attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled":true}},"chat":{"embed":"chat","props":{"c
2024-12-20 18:03:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49764	13.227.8.2	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:35 UTC	555	OUT	GET /modules.60031afbf51fb3e88a5b.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:36 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 228108 Connection: close Date: Wed, 18 Dec 2024 12:13:51 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "51f0735cf6390af81e4cb97c3cde2cb7" Last-Modified: Wed, 18 Dec 2024 11:50:24 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5d8f90037465fc1f7bd2f356871e7d64.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: wI2HDR3KDlmHXpSeY40Bs0bX2qvhX8fr66dAf9suH_fE6-gjhsOn1A== Age: 193785
2024-12-20 18:03:36 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 30 30 33 31 61 66 62 66 35 31 66 62 33 65 38 38 61 35 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.60031afbf51fb3e88a5b.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-12-20 18:03:36 UTC	16384	IN	Data Raw: 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 6c 69 63 65 28 2d 31 30 29 29 7c 7c 22 22 2c 31 36 29 2b 31 29 2f 4d 61 74 68 2e 70 6f 77 28 32 2c 34 30 29 7d 2c 63 6f 6d 70 61 72 65 52 61 74 69 6f 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 41 73 4e 75 6d 62 65 72 28 29 2a 28 74 3f 31 30 30 3a 31 29 3c 3d 65 7d 29 2c 22 69 64 65 6e 74 69 66 69 65 72 2e 63 6f 6d 70 61 72 65 52 61 74 69 6f 22 29 7d 2c 61 3d 6e 28 34 38 30 38 29 2c 73 3d 5b 22 61 66 22 2c 22 61 72 22 2c 22 62 67 22 2c 22 63 61 22 2c 22 63 73 22 2c 22 63 79 22 2c 22 64 61 22 2c 22 64 65 22 2c 22 65 6c 22 2c 22 65 6e 22 2c 22 65 73 22 2c 22 65 74 22 2c 22 66 61 22 2c 22 66 69 22 2c 22 66 72 22 2c 22 68 65 22 2c 22 68 72 22 2c Data Ascii: =e?void 0:e.slice(-10))\|\|"",16)+1)/Math.pow(2,40)},compareRatio:hj.tryCatch((function(e,t){return i.getAsNumber()*(t?100:1)<=e}),"identifier.compareRatio")},a=n(4808),s=["af","ar","bg","ca","cs","cy","da","de","el","en","es","et","fa","fi","fr","he","hr",
2024-12-20 18:03:36 UTC	16384	IN	Data Raw: 30 31 43 7c 53 48 57 2d 4d 31 38 30 53 7c 53 47 48 2d 54 38 34 39 7c 53 43 48 2d 49 38 30 30 7c 53 48 57 2d 4d 31 38 30 4c 7c 53 50 48 2d 50 31 30 30 7c 53 47 48 2d 49 39 38 37 7c 7a 74 31 38 30 7c 48 54 43 28 2e 46 6c 79 65 72 7c 5c 5f 46 6c 79 65 72 29 7c 53 70 72 69 6e 74 2e 41 54 50 35 31 7c 56 69 65 77 50 61 64 37 7c 70 61 6e 64 69 67 69 74 61 6c 28 73 70 72 6e 6f 76 61 7c 6e 6f 76 61 29 7c 49 64 65 6f 73 2e 53 37 7c 44 65 6c 6c 2e 53 74 72 65 61 6b 2e 37 7c 41 64 76 65 6e 74 2e 56 65 67 61 7c 41 31 30 31 49 54 7c 41 37 30 42 48 54 7c 4d 49 44 37 30 31 35 7c 4e 65 78 74 32 7c 6e 6f 6f 6b 2f 69 29 7c 7c 74 28 2f 4d 42 35 31 31 2f 69 29 26 26 74 28 2f 52 55 54 45 4d 2f 69 29 3f 22 74 61 62 6c 65 74 22 3a 74 28 2f 42 4f 4c 54 7c 46 65 6e 6e 65 63 7c 49 Data Ascii: 01C\|SHW-M180S\|SGH-T849\|SCH-I800\|SHW-M180L\|SPH-P100\|SGH-I987\|zt180\|HTC(.Flyer\|\_Flyer)\|Sprint.ATP51\|ViewPad7\|pandigital(sprnova\|nova)\|Ideos.S7\|Dell.Streak.7\|Advent.Vega\|A101IT\|A70BHT\|MID7015\|Next2\|nook/i)\|\|t(/MB511/i)&&t(/RUTEM/i)?"tablet":t(/BOLT\|Fennec\|I
2024-12-20 18:03:37 UTC	15182	IN	Data Raw: 3d 65 2e 63 68 61 72 41 74 28 30 29 2c 6e 3d 65 2e 63 68 61 72 41 74 28 31 29 3b 72 65 74 75 72 6e 2f 5c 64 2f 2e 74 65 73 74 28 6e 29 3f 74 2b 22 5c 5c 33 22 2b 6e 2b 22 20 22 2b 65 2e 73 6c 69 63 65 28 32 29 3a 65 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 22 2d 22 3d 3d 3d 65 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 22 29 29 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 65 2e 69 6e 64 65 78 4f 66 28 22 79 75 69 5f 22 29 3e 2d 31 7c 7c 77 28 65 29 29 26 26 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 Data Ascii: =e.charAt(0),n=e.charAt(1);return/\d/.test(n)?t+"\\3"+n+" "+e.slice(2):e},w=function(e){return 1===e.length&&"-"===e},S=function(e){var r=[];return!(void 0===(e=hj.hq.trim((e\|\|"").replace(/\s\s+/g," ")))\|\|""===e\|\|e.indexOf("yui_")>-1\|\|w(e))&&((e=e.replace
2024-12-20 18:03:37 UTC	16384	IN	Data Raw: 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 46 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 76 61 72 20 47 3d 21 31 2c 59 3d 28 30 2c 57 2e 74 55 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 61 3b 28 30 2c 63 2e 4e 29 28 28 61 3d 7b 7d 2c 61 5b 69 2e 73 2e 52 45 43 4f 52 44 49 4e 47 5f 48 45 4c 4f 5d Data Ascii: ):function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},F.apply(this,arguments)}var G=!1,Y=(0,W.tU)((function(e,t,n,r,o){var a;(0,c.N)((a={},a[i.s.RECORDING_HELO]
2024-12-20 18:03:37 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 6e 6f 64 65 49 64 28 65 29 69 6e 20 74 2e 6e 6f 64 65 73 7d 29 2c 22 4e 6f 64 65 4d 61 70 2e 68 61 73 22 29 2c 74 68 69 73 2e 64 65 6c 65 74 65 4e 6f 64 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 2e 6e 6f 64 65 49 64 28 65 29 3b 64 65 6c 65 74 65 20 74 2e 6e 6f 64 65 73 5b 6e 5d 2c 64 65 6c 65 74 65 20 74 2e 76 61 6c 75 65 73 5b 6e 5d 7d 29 2c 22 4e 6f 64 65 4d 61 70 2e 64 65 6c 65 74 65 4e 6f 64 65 22 29 2c 74 68 69 73 2e 6b 65 79 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 2e 6e 6f 64 65 73 29 74 2e 69 73 49 6e 64 65 78 28 6e 29 26 26 65 Data Ascii: nction(e){return t.nodeId(e)in t.nodes}),"NodeMap.has"),this.deleteNode=hj.tryCatch((function(e){var n=t.nodeId(e);delete t.nodes[n],delete t.values[n]}),"NodeMap.deleteNode"),this.keys=hj.tryCatch((function(){var e=[];for(var n in t.nodes)t.isIndex(n)&&e
2024-12-20 18:03:37 UTC	16384	IN	Data Raw: 6c 65 53 68 65 65 74 73 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 6f 3d 74 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 6f 3d 5b 5d 2c 69 3d 30 3b 69 3c 72 2e 63 73 73 52 75 6c 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6f 2e 70 75 73 68 28 72 2e 63 73 73 52 75 6c 65 73 5b 69 5d 2e 63 73 73 54 65 78 74 29 3b 76 61 72 20 61 3d 6e 28 29 3b 72 65 74 75 72 6e 20 72 2e 6f 77 6e 65 72 48 6f 73 74 4e 6f 64 65 3d 74 2e 68 6f 73 74 2c 72 2e 73 68 65 65 74 49 64 3d 61 2c 65 2e 70 75 73 68 28 7b 69 64 3a 61 2c 72 75 6c 65 73 3a 6f 7d 29 2c 65 7d 29 2c 5b 5d 29 3b 72 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 52 75 6c 65 73 3d 6f 7d 72 65 74 75 72 Data Ascii: leSheets.length>0){var o=t.adoptedStyleSheets.reduce((function(e,r){for(var o=[],i=0;i<r.cssRules.length;i++)o.push(r.cssRules[i].cssText);var a=n();return r.ownerHostNode=t.host,r.sheetId=a,e.push({id:a,rules:o}),e}),[]);r.adoptedStyleSheetsRules=o}retur
2024-12-20 18:03:37 UTC	16384	IN	Data Raw: 2c 69 3d 30 2c 61 3d 65 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 69 2b 2b 29 6e 2e 70 75 73 68 28 7b 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 3a 72 2c 72 75 6c 65 3a 65 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 5b 69 5d 2e 63 73 73 54 65 78 74 2c 6e 6f 64 65 49 64 3a 6f 2c 69 6e 64 65 78 3a 61 2b 69 7d 29 3b 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 6e 29 7d 29 29 7d 29 2c 31 30 30 29 7d 29 2c 22 68 6a 2e 63 73 73 42 6c 6f 62 73 2e 61 70 70 6c 79 22 29 2c 65 29 7d 29 2c 22 68 6a 2e 63 73 73 42 6c 6f 62 73 22 29 28 29 7d 2c 32 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 35 35 34 37 29 Data Ascii: ,i=0,a=e.sheet.cssRules.length;i<a;i++)n.push({parentSelector:r,rule:e.sheet.cssRules[i].cssText,nodeId:o,index:a+i});t.forEach((function(e){e(n)}))}),100)}),"hj.cssBlobs.apply"),e)}),"hj.cssBlobs")()},219:function(e,t,n){"use strict";n.r(t);var r=n(5547)
2024-12-20 18:03:37 UTC	16384	IN	Data Raw: 20 77 69 6e 64 6f 77 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 28 29 3b 28 6e 3d 6e 65 77 20 52 65 61 64 61 62 6c 65 53 74 72 65 61 6d 28 7b 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 6e 71 75 65 75 65 28 65 29 2c 74 2e 63 6c 6f 73 65 28 29 7d 7d 29 2e 70 69 70 65 54 68 72 6f 75 67 68 28 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 53 74 72 65 61 6d 29 2e 70 69 70 65 54 68 72 6f 75 67 68 28 6e 65 77 20 43 6f 6d 70 72 65 73 73 69 6f 6e 53 74 72 65 61 6d 28 22 67 7a 69 70 22 29 29 2c 72 3d 6e 2e 67 65 74 52 65 61 64 65 72 28 29 2c 6f 3d 5b 5d 2c 69 3d 68 6a 2e 6d 65 74 72 69 63 73 2e 74 69 6d 65 57 61 74 63 68 65 72 28 29 2c 72 2e 72 65 61 64 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 Data Ascii: window}catch(e){return!1}}())return a();(n=new ReadableStream({start:function(t){t.enqueue(e),t.close()}}).pipeThrough(new TextEncoderStream).pipeThrough(new CompressionStream("gzip")),r=n.getReader(),o=[],i=hj.metrics.timeWatcher(),r.read().then((functi
2024-12-20 18:03:37 UTC	16384	IN	Data Raw: 6f 6e 74 65 78 74 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 22 74 72 75 65 22 29 2c 65 2e 73 72 63 3d 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 2c 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 2c 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 77 69 64 74 68 22 2c 22 31 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 2c 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 68 65 69 67 68 74 22 2c 22 31 70 78 22 2c 22 69 6d 70 6f 72 74 61 6e 74 22 29 2c 65 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 6f 70 61 63 69 74 79 22 2c 22 Data Ascii: ontext",e.tabIndex=-1,e.setAttribute("aria-hidden","true"),e.src="about:blank",e.style.setProperty("display","none","important"),e.style.setProperty("width","1px","important"),e.style.setProperty("height","1px","important"),e.style.setProperty("opacity","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49768	13.59.75.255	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:36 UTC	618	OUT	GET /api/patient/v1/enterprises/unauthenticated/info?id=7272 HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://patient.inboxhealth.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:36 UTC	666	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, DELETE, POST, OPTIONS, PATCH Access-Control-Allow-Origin: https://patient.inboxhealth.com Access-Control-Expose-Headers: Authorization, Content-Disposition, X-Amzn-Remapped-Authorization Access-Control-Max-Age: 7200 Cache-Control: max-age=0, private, must-revalidate Content-Length: 237 Content-Type: application/json Date: Fri, 20 Dec 2024 18:03:36 GMT Etag: W/"c7a729206cb54757f2ab5fddb3a83cb4" Strict-Transport-Security: max-age=315360000; preload Vary: Origin X-Request-Id: a168542d-5a4d-4666-bebb-06d1e251c9c0 X-Runtime: 0.008771 Connection: close
2024-12-20 18:03:36 UTC	237	IN	Data Raw: 7b 22 65 6e 74 65 72 70 72 69 73 65 22 3a 7b 22 69 64 22 3a 37 32 37 32 2c 22 6e 61 6d 65 22 3a 22 46 6f 6f 74 20 5c 75 30 30 32 36 20 41 6e 6b 6c 65 20 43 65 6e 74 65 72 20 6f 66 20 43 61 63 68 65 20 56 61 6c 6c 65 79 20 61 6e 64 20 74 68 65 20 57 69 6e 64 20 43 6c 69 6e 69 63 22 2c 22 73 75 70 70 6f 72 74 5f 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 22 3a 22 28 38 34 34 29 20 39 30 30 2d 34 39 30 39 22 2c 22 68 61 73 5f 6c 6f 67 6f 5f 62 61 73 65 36 34 22 3a 74 72 75 65 2c 22 6c 6f 67 6f 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 6e 75 6c 6c 2c 22 70 6f 73 74 5f 63 68 65 63 6b 69 6e 5f 6d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 66 72 69 65 6e 64 6c 79 5f 6e 61 6d 65 22 3a 6e 75 6c 6c 7d 7d Data Ascii: {"enterprise":{"id":7272,"name":"Foot \u0026 Ankle Center of Cache Valley and the Wind Clinic","support_phone_number":"(844) 900-4909","has_logo_base64":true,"logo_background_color":null,"post_checkin_message":null,"friendly_name":null}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49769	216.198.53.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:36 UTC	395	OUT	GET /web_widget/classic/latest/web-widget-main-bcac9f6.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:36 UTC	1194	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:36 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 849701 Connection: close x-amz-id-2: ANlVXEFR0AIxaTC/oZtgoabAupi9TapvseAJpIAEQc9a5CIYqzj/QiSrP9AVhRdLoEH/Fj+oEBJj+3hvmIEwag== x-amz-request-id: 6RTEDAXCSHJMA1XY x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Dec 2024 09:50:44 GMT ETag: "419802576603f417f149fc475b138e7e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Wed, 17 Dec 2025 09:50:43 GMT x-amz-version-id: HSsYuF0DBd0RIN7zCStOoTZG9o.DjzRZ CF-Cache-Status: HIT Age: 163 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UgHp%2BcyTsiu4CusfYv8myLBLf40X9njBpKyNJyH7x10nTHqydxeA%2FFbYrMEXTB5KOjgeLtmO1ALAtnAx%2F8Q0KJKBdlwXOaol5u4JT6rqjQkrDUe2A%2Fx%2BU903oue3qbW2p7gdGI8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518cd22fb1182d-EWR
2024-12-20 18:03:36 UTC	175	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic
2024-12-20 18:03:36 UTC	1369	IN	Data Raw: 2d 77 65 62 2d 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 36 34 37 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b Data Ascii: -web-widget-sdks/web-widget/getting-started/legal/ */(()=>{var e,t,n,r,o={6470:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){
2024-12-20 18:03:36 UTC	1369	IN	Data Raw: 2e 32 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 35 34 35 2e 32 38 36 48 36 2e 32 61 2e 37 34 38 2e 37 34 38 20 30 20 30 20 31 2d 2e 35 33 2d 2e 32 32 4c 33 2e 39 37 20 37 2e 39 33 61 2e 37 35 2e 37 35 20 30 20 31 20 31 20 31 2e 30 36 2d 31 2e 30 36 6c 31 2e 31 30 33 20 31 2e 31 30 32 4c 38 2e 39 31 20 34 2e 34 33 37 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 31 2e 31 38 2e 39 32 36 7a 22 7d 29 29 29 7d 2c 33 31 34 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 Data Ascii: .2a.75.75 0 0 1-.545.286H6.2a.748.748 0 0 1-.53-.22L3.97 7.93a.75.75 0 1 1 1.06-1.06l1.103 1.102L8.91 4.437a.75.75 0 0 1 1.18.926z"})))},31498:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object
2024-12-20 18:03:36 UTC	1369	IN	Data Raw: 74 7d 2c 6e 29 2c 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 39 20 31 31 4c 35 20 37 6c 34 2d 34 22 7d 29 29 29 7d 2c 35 38 34 37 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 Data Ascii: t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M9 11L5 7l4-4"})))},58478:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var
2024-12-20 18:03:36 UTC	1369	IN	Data Raw: 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 31 31 20 31 2e 35 4c 34 2e 39 20 37 2e 36 63 2d 2e 32 2e 32 2d 2e 32 2e 35 20 30 20 2e 37 6c 36 2e 31 20 36 2e 31 22 7d 29 29 29 7d 2c 33 34 38 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 Data Ascii: ntColor",strokeLinecap:"round",strokeWidth:2,d:"M11 1.5L4.9 7.6c-.2.2-.2.5 0 .7l6.1 6.1"})))},34890:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<ar
2024-12-20 18:03:36 UTC	1369	IN	Data Raw: 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 37 2e 35 20 33 76 35 2e 35 48 31 31 22 7d 29 29 29 29 7d 2c 37 33 36 30 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 Data Ascii: createElement("path",{strokeLinecap:"round",strokeLinejoin:"round",d:"M7.5 3v5.5H11"}))))},73606:(e,t,n)=>{"use strict";n.d(t,{A:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t
2024-12-20 18:03:36 UTC	1369	IN	Data Raw: 35 2e 31 35 2d 35 2e 31 35 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 31 20 30 6c 33 2e 32 39 20 33 2e 32 39 61 2e 35 2e 35 20 30 20 30 20 30 20 2e 37 31 20 30 6c 31 2e 32 39 2d 31 2e 32 39 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 31 20 30 4c 31 35 2e 35 20 31 34 22 7d 29 29 29 2c 6f 7c 7c 28 6f 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 69 72 63 6c 65 22 2c 7b 63 78 3a 31 31 2e 35 2c 63 79 3a 35 2e 35 2c 72 3a 31 2e 35 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 29 29 29 7d 2c 31 38 37 30 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f Data Ascii: 5.15-5.15a.5.5 0 0 1 .71 0l3.29 3.29a.5.5 0 0 0 .71 0l1.29-1.29a.5.5 0 0 1 .71 0L15.5 14"}))),o\|\|(o=a.createElement("circle",{cx:11.5,cy:5.5,r:1.5,fill:"currentColor"})))},18709:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);functio
2024-12-20 18:03:36 UTC	1369	IN	Data Raw: 2f 32 30 30 30 2f 73 76 67 22 2c 77 69 64 74 68 3a 31 36 2c 68 65 69 67 68 74 3a 31 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 74 7d 2c 6e 29 2c 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 31 34 2e 35 20 36 2e 35 61 Data Ascii: /2000/svg",width:16,height:16,focusable:"false",viewBox:"0 0 16 16","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("g",{fill:"none",stroke:"currentColor"},o.createElement("path",{strokeLinejoin:"round",d:"M14.5 6.5a
2024-12-20 18:03:36 UTC	1369	IN	Data Raw: 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 61 2e 61 70 70 6c 79 Data Ascii: strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply
2024-12-20 18:03:36 UTC	1369	IN	Data Raw: 35 2d 2e 35 2e 35 7a 6d 30 2d 33 68 2d 31 31 63 2d 2e 32 38 20 30 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 73 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 31 31 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 73 2d 2e 32 32 2e 35 2d 2e 35 2e 35 7a 6d 30 2d 33 68 2d 31 31 63 2d 2e 32 38 20 30 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 73 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 31 31 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 73 2d 2e 32 32 2e 35 2d 2e 35 2e 35 7a 4d 31 35 20 37 61 32 20 32 20 30 20 30 20 31 2d 32 2d 32 56 31 6c 36 20 36 68 2d 34 7a 22 7d 29 29 29 7d 2c 39 30 36 30 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e Data Ascii: 5-.5.5zm0-3h-11c-.28 0-.5-.22-.5-.5s.22-.5.5-.5h11c.28 0 .5.22.5.5s-.22.5-.5.5zm0-3h-11c-.28 0-.5-.22-.5-.5s.22-.5.5-.5h11c.28 0 .5.22.5.5s-.22.5-.5.5zM15 7a2 2 0 0 1-2-2V1l6 6h-4z"})))},90604:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49773	3.132.245.25	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:36 UTC	490	OUT	GET /api/patient/v1/unauthenticated_patients?confirmation_token=XHcUtg HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1
2024-12-20 18:03:37 UTC	367	IN	HTTP/1.1 200 OK Cache-Control: max-age=0, private, must-revalidate Content-Length: 1143 Content-Type: application/json Date: Fri, 20 Dec 2024 18:03:37 GMT Etag: W/"e6244b60ae07b59d955f81bed86a05cb" Strict-Transport-Security: max-age=315360000; preload Vary: Origin X-Request-Id: bb97a456-8f37-4fa7-98ae-c5dcc9e966d5 X-Runtime: 0.031921 Connection: close
2024-12-20 18:03:37 UTC	819	IN	Data Raw: 7b 22 75 6e 61 75 74 68 65 6e 74 69 63 61 74 65 64 5f 70 61 74 69 65 6e 74 22 3a 7b 22 69 64 22 3a 33 36 33 30 34 34 39 31 2c 22 75 73 65 72 5f 69 64 22 3a 6e 75 6c 6c 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 4a 4f 48 4e 22 2c 22 66 69 72 73 74 5f 6e 61 6d 65 5f 6c 65 67 61 6c 22 3a 22 4a 4f 48 4e 22 2c 22 6d 69 64 64 6c 65 5f 6e 61 6d 65 22 3a 22 49 22 2c 22 6c 61 73 74 5f 6e 61 6d 65 22 3a 22 57 45 41 56 45 52 22 2c 22 62 61 6c 61 6e 63 65 5f 63 65 6e 74 73 22 3a 36 30 30 30 2c 22 63 61 63 68 65 64 5f 62 61 6c 61 6e 63 65 5f 63 65 6e 74 73 22 3a 36 30 30 30 2c 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 3a 37 32 37 32 2c 22 61 6c 6c 6f 77 5f 73 65 6c 66 5f 64 69 72 65 63 74 65 64 5f 70 61 79 6d 65 6e 74 5f 70 6c 61 6e 22 3a 66 61 6c 73 65 2c 22 65 Data Ascii: {"unauthenticated_patient":{"id":36304491,"user_id":null,"first_name":"JOHN","first_name_legal":"JOHN","middle_name":"I","last_name":"WEAVER","balance_cents":6000,"cached_balance_cents":6000,"enterprise_id":7272,"allow_self_directed_payment_plan":false,"e
2024-12-20 18:03:37 UTC	324	IN	Data Raw: 65 6e 74 5f 77 65 6c 63 6f 6d 65 5f 6d 65 73 73 61 67 65 22 3a 22 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 69 73 20 72 65 61 64 79 20 66 6f 72 20 79 6f 75 72 20 72 65 76 69 65 77 20 61 6e 64 20 70 61 79 6d 65 6e 74 2e 20 54 68 61 6e 6b 20 79 6f 75 21 22 2c 22 70 61 74 69 65 6e 74 5f 77 65 6c 63 6f 6d 65 5f 6d 65 73 73 61 67 65 5f 7a 65 72 6f 5f 62 61 6c 61 6e 63 65 22 3a 22 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 68 61 73 20 62 65 65 6e 20 66 75 6c 6c 79 20 70 61 69 64 21 22 2c 22 65 6e 61 62 6c 65 5f 6c 69 76 65 5f 63 68 61 74 22 3a 74 72 75 65 2c 22 63 68 75 72 6e 65 64 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 5f 61 64 76 61 6e 63 65 64 5f 70 61 79 6d 65 6e 74 5f 72 6f 75 74 69 6e 67 22 3a 66 61 6c 73 65 7d 2c 22 6f 75 74 73 74 61 6e 64 69 6e 67 5f 69 Data Ascii: ent_welcome_message":"Your account is ready for your review and payment. Thank you!","patient_welcome_message_zero_balance":"Your account has been fully paid!","enable_live_chat":true,"churned":false,"enable_advanced_payment_routing":false},"outstanding_i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49776	44.217.82.191	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:37 UTC	694	OUT	POST /pusher/app/1811ca2096d3867b6a5f/198/emh0oob8/xhr_streaming?protocol=7&client=js&version=3.0.0&t=1734717814538&n=1 HTTP/1.1 Host: sockjs.pusher.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://patient.inboxhealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:37 UTC	403	IN	HTTP/1.1 200 OK cache-control: no-store, no-cache, must-revalidate, max-age=0 access-control-allow-origin: https://patient.inboxhealth.com vary: Origin access-control-allow-credentials: true content-type: application/javascript; charset=UTF-8 date: Fri, 20 Dec 2024 18:03:37 GMT keep-alive: timeout=5 transfer-encoding: chunked strict-transport-security: max-age=15768000 connection: close
2024-12-20 18:03:37 UTC	2060	IN	Data Raw: 38 30 35 0d 0a 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 Data Ascii: 805hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
2024-12-20 18:03:37 UTC	144	IN	Data Raw: 38 41 0d 0a 61 5b 22 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 70 75 73 68 65 72 3a 63 6f 6e 6e 65 63 74 69 6f 6e 5f 65 73 74 61 62 6c 69 73 68 65 64 5c 22 2c 5c 22 64 61 74 61 5c 22 3a 5c 22 7b 5c 5c 5c 22 73 6f 63 6b 65 74 5f 69 64 5c 5c 5c 22 3a 5c 5c 5c 22 37 39 33 36 39 30 2e 31 36 36 34 33 38 36 36 32 5c 5c 5c 22 2c 5c 5c 5c 22 61 63 74 69 76 69 74 79 5f 74 69 6d 65 6f 75 74 5c 5c 5c 22 3a 31 32 30 7d 5c 22 7d 22 5d 0a 0d 0a Data Ascii: 8Aa["{\"event\":\"pusher:connection_established\",\"data\":\"{\\\"socket_id\\\":\\\"793690.166438662\\\",\\\"activity_timeout\\\":120}\"}"]
2024-12-20 18:04:02 UTC	7	IN	Data Raw: 32 0d 0a 68 0a 0d 0a Data Ascii: 2h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49775	44.217.82.191	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:37 UTC	684	OUT	POST /pusher/app/1811ca2096d3867b6a5f/962/4jprl9gh/xhr?protocol=7&client=js&version=3.0.0&t=1734717814811&n=2 HTTP/1.1 Host: sockjs.pusher.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://patient.inboxhealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:37 UTC	403	IN	HTTP/1.1 200 OK cache-control: no-store, no-cache, must-revalidate, max-age=0 access-control-allow-origin: https://patient.inboxhealth.com vary: Origin access-control-allow-credentials: true content-type: application/javascript; charset=UTF-8 date: Fri, 20 Dec 2024 18:03:37 GMT keep-alive: timeout=5 transfer-encoding: chunked strict-transport-security: max-age=15768000 connection: close
2024-12-20 18:03:37 UTC	14	IN	Data Raw: 34 0d 0a 6f 7b 7d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 4o{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49777	216.198.53.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:37 UTC	417	OUT	GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-bcac9f6.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:37 UTC	1216	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:37 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 25703 Connection: close x-amz-id-2: McAtkxEpUwldq/USWm1Cq/Sf0dAlHUDCvgWeRsQpXTLoAbCKXEyIXD2R56LDY+kFSFLvlmgCHZZAZPBVAOjGskGiM7xhGk/me+Ck1D2j6fQ= x-amz-request-id: 0WWG2MJCSWWBAW7J x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Dec 2024 09:50:46 GMT ETag: "ef48436bf7997a9fed0856cd3df28c0f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Wed, 17 Dec 2025 09:50:45 GMT x-amz-version-id: ZNY1FVImW6VU1ojAeCi38kHzm.pPRRmF CF-Cache-Status: HIT Age: 192866 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pyRhYtAzV63ukdUdOCUlnktsIhsWl3C5P8XCL5eXPB%2FWbEVx9EfUwC1XxsNRwG0c5Aq9%2FadWPaBlxKS1tcSOeKQJ7pkIUA93%2FG2PcsXWC%2BqK06XBf%2FyFv9D87QcQsTNjyGNtxwI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518cd88b658c2d-EWR
2024-12-20 18:03:37 UTC	153	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 39 33 5d 2c 7b 34 36 39 33 33 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9393],{46933:e=>{e.export
2024-12-20 18:03:37 UTC	1369	IN	Data Raw: 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 6c 6f 63 61 6c 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 75 73 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 6e 65 65 64 5f 68 65 6c 70 22 3a 22 4e 6f 2c 20 49 20 6e 65 65 64 20 68 65 6c 70 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 72 65 61 73 6f 6e 2e 72 65 6c 61 74 65 64 22 3a 22 49 74 5c 27 73 20 72 65 6c 61 74 65 64 2c 20 62 75 74 20 69 74 20 64 69 64 6e 5c 27 74 20 61 6e 73 77 65 Data Ascii: s=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answe
2024-12-20 18:03:37 UTC	1369	IN	Data Raw: 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 67 65 74 5f 69 6e 5f 74 6f 75 63 68 22 3a 22 48 6f 77 20 64 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 65 74 20 69 6e 20 74 6f 75 63 68 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 72 65 71 75 65 73 74 5f 63 61 6c 6c 62 61 63 6b 5f 6f 6e 6c 79 2e 74 69 74 6c 65 22 3a 22 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 68 65 20 74 65 61 6d 20 74 6f 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 72 65 67 61 72 64 69 6e 67 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 Data Ascii: work.answerBot.msg.channel_choice.get_in_touch":"How do you want to get in touch?","embeddable_framework.answerBot.msg.channel_choice.request_callback_only.title":"Would you like the team to contact you regarding your question?","embeddable_framework.answ
2024-12-20 18:03:37 UTC	1369	IN	Data Raw: 61 6e 20 66 69 6e 64 20 66 6f 72 20 79 6f 75 2c 20 6a 75 73 74 20 74 79 70 65 20 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 70 72 6f 6d 70 74 5f 61 67 61 69 6e 5f 6e 6f 5f 63 68 61 6e 6e 65 6c 73 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 59 6f 75 20 63 61 6e 20 61 73 6b 20 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 79 65 73 5f 61 63 6b 6e 6f 77 6c 65 64 67 65 6d 65 6e 74 22 3a 22 4e 69 63 65 2e 20 4b 6e 6f 77 6c 65 64 67 65 20 69 73 20 70 6f 77 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 Data Ascii: an find for you, just type another question.","embeddable_framework.answerBot.msg.prompt_again_no_channels_available":"You can ask another question.","embeddable_framework.answerBot.msg.yes_acknowledgement":"Nice. Knowledge is power.","embeddable_framewor
2024-12-20 18:03:37 UTC	1369	IN	Data Raw: 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 64 69 73 61 62 6c 65 5f 63 68 61 74 22 3a 22 44 69 73 61 62 6c 65 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 64 69 73 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 22 3a 22 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 74 68 65 20 63 68 61 74 20 61 6e 79 74 69 6d 65 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 65 6e 61 62 6c 65 22 3a 22 45 6e 61 62 6c 65 20 43 6f 6f 6b 69 65 73 20 61 6e 64 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 Data Ascii: reement.cookies.disable_chat":"Disable Chat","embeddable_framework.chat.agreement.cookies.disable_chat_note":"You may disable the chat anytime.","embeddable_framework.chat.agreement.cookies.enable":"Enable Cookies and Chat","embeddable_framework.chat.agre
2024-12-20 18:03:37 UTC	1369	IN	Data Raw: 74 5f 61 6c 6c 6f 77 65 64 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 75 6e 6b 6e 6f 77 6e 5f 65 72 72 6f 72 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 Data Ascii: t_allowed":"Upload failed. File sending is not allowed.","embeddable_framework.chat.attachments.error.not_supported":"Upload failed. File sending is not supported on this browser.","embeddable_framework.chat.attachments.error.unknown_error":"Upload failed
2024-12-20 18:03:37 UTC	1369	IN	Data Raw: 22 3a 22 25 28 61 67 65 6e 74 31 29 73 20 61 6e 64 20 25 28 61 67 65 6e 74 32 29 73 20 61 72 65 20 74 79 70 69 6e 67 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 61 64 69 6e 67 49 6d 61 67 65 22 3a 22 4c 6f 61 64 69 6e 67 20 69 6d 61 67 65 20 28 25 28 61 74 74 61 63 68 6d 65 6e 74 53 69 7a 65 29 73 29 2e 2e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 67 69 6e 2e 75 70 64 61 74 65 49 6e 66 6f 22 3a 22 50 6c 65 61 73 65 20 75 70 64 61 74 65 20 79 6f 75 72 20 69 6e 66 6f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 71 75 65 75 65 50 6f 73 69 74 69 Data Ascii: ":"%(agent1)s and %(agent2)s are typing","embeddable_framework.chat.chatLog.loadingImage":"Loading image (%(attachmentSize)s)...","embeddable_framework.chat.chatLog.login.updateInfo":"Please update your info","embeddable_framework.chat.chatLog.queuePositi
2024-12-20 18:03:37 UTC	1369	IN	Data Raw: 74 2e 73 75 63 63 65 73 73 5f 6d 65 73 73 61 67 65 22 3a 22 45 6d 61 69 6c 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 25 28 65 6d 61 69 6c 29 73 20 77 68 65 6e 20 74 68 65 20 63 68 61 74 20 65 6e 64 73 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 69 74 6c 65 22 3a 22 45 6d 61 69 6c 20 63 68 61 74 20 74 72 61 6e 73 63 72 69 70 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 72 79 5f 61 67 61 69 6e 22 3a 22 54 72 79 20 61 67 61 69 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 66 65 74 63 68 69 6e 67 5f 68 69 73 74 6f 72 Data Ascii: t.success_message":"Email will be sent to %(email)s when the chat ends.","embeddable_framework.chat.emailtranscript.title":"Email chat transcript","embeddable_framework.chat.emailtranscript.try_again":"Try again","embeddable_framework.chat.fetching_histor
2024-12-20 18:03:37 UTC	1369	IN	Data Raw: 63 68 61 74 2e 69 63 6f 6e 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 41 74 74 61 63 68 20 66 69 6c 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 65 6e 64 43 68 61 74 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 45 6e 64 20 63 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 6d 65 6e 75 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 4f 70 74 69 6f 6e 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c 65 64 2e 66 61 69 6c 65 64 5f 74 77 69 63 65 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 2c 22 65 6d 62 65 64 64 61 62 6c Data Ascii: chat.icon.attachments.hover.label":"Attach file","embeddable_framework.chat.icon.endChat.hover.label":"End chat","embeddable_framework.chat.icon.menu.hover.label":"Options","embeddable_framework.chat.messagefailed.failed_twice":"Failed to send","embeddabl
2024-12-20 18:03:37 UTC	1369	IN	Data Raw: 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 65 70 61 72 61 74 6f 72 2e 72 61 6e 67 65 22 3a 22 20 e2 80 94 20 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 75 6e 64 61 79 22 3a 22 53 75 6e 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 68 75 72 73 64 61 79 22 3a 22 54 68 75 72 73 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c Data Ascii: ,"embeddable_framework.chat.operatingHours.label.separator.range":" ","embeddable_framework.chat.operatingHours.label.sunday":"Sunday","embeddable_framework.chat.operatingHours.label.thursday":"Thursday","embeddable_framework.chat.operatingHours.label

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49774	108.158.81.56	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:37 UTC	353	OUT	GET /3.0.0/xhr.min.js HTTP/1.1 Host: js.pusher.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:38 UTC	565	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4929 Connection: close Date: Fri, 20 Dec 2024 18:03:39 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Tue, 06 Nov 2018 11:41:00 GMT ETag: "761e2756ba190ae948cdcb431d1faf03" Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7e8852d9b996c81997a19f87da8cc9fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: qTfpX8EtN1DJn6bYP1zGtnncXbLsTzd-aF2UHZTmigL-DLJBVPIuCQ==
2024-12-20 18:03:38 UTC	4929	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 75 73 68 65 72 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 30 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 75 73 68 65 72 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 50 75 73 68 65 72 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 63 65 2e 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 62 2c 61 2c 63 29 7b 50 75 73 68 65 72 2e 45 76 65 6e 74 73 44 69 73 70 61 74 63 68 65 72 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 68 6f 6f 6b 73 3d 62 3b 74 68 69 73 2e 6d 65 74 68 6f 64 3d 61 3b 74 68 69 73 2e 75 72 6c 3d 63 7d 76 61 72 20 61 3d 63 2e 70 72 6f 74 6f 74 79 70 65 3b 50 75 73 Data Ascii: /! Pusher JavaScript Library v3.0.0 * http://pusher.com/ * * Copyright 2014, Pusher * Released under the MIT licence. */(function(){function c(b,a,c){Pusher.EventsDispatcher.call(this);this.hooks=b;this.method=a;this.url=c}var a=c.prototype;Pus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49778	216.198.54.1	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:37 UTC	364	OUT	GET /embeddable/config HTTP/1.1 Host: inboxhealth.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:38 UTC	1230	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:37 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-6fb8575dc-hhl6b x-runtime: 0.001847 vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 8f518bfbb8f1429d-IAD X-Cached: STALE Last-Modified: Fri, 20 Dec 2024 18:03:02 GMT CF-Cache-Status: HIT Age: 35 Set-Cookie: __cf_bm=EZ71jn5G.uq5mEtuo.Q0te8FhtQMpanzm7rbdC9T.dA-1734717817-1.0.1.1-.onhzVqztZw5NaKtD6lGlRS0UylDeH_p5b2pzMqYrWsNvejiWwa.95PQLtj0q8Ry2m1u7EAgVVDSfmAkFnKyrg; path=/; expires=Fri, 20-Dec-24 18:33:37 GMT; domain=.inboxhealth.zendesk.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GF191ayCMKc5owvTCIkyk1ITXStDY%2Fpe%2BMSTmYOiESjqa1K1e0MPoUaJInoAprFY8PaiQuLqfMS12mx3Z4BrqIDrZsO%2FxYz%2FAT43WcHToql5zoMH5tNcgW8WLfDScI5hE1iXOvLVdpwO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-12-20 18:03:38 UTC	371	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 72 75 69 64 3d 34 33 62 32 66 61 63 33 36 32 34 33 66 30 61 63 65 37 33 34 64 63 65 39 63 32 64 31 33 35 32 37 61 64 38 64 30 33 66 65 2d 31 37 33 34 37 31 37 38 31 37 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 69 6e 62 6f 78 68 65 61 6c 74 68 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 35 65 53 46 65 42 53 61 37 62 71 36 4f 42 61 48 30 77 59 39 6a 36 52 36 63 56 52 37 56 70 32 66 34 77 50 64 39 44 68 4c 5f 71 73 2d 31 37 33 34 37 31 37 38 31 37 38 35 31 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f Data Ascii: Set-Cookie: __cfruid=43b2fac36243f0ace734dce9c2d13527ad8d03fe-1734717817; path=/; domain=.inboxhealth.zendesk.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: _cfuvid=5eSFeBSa7bq6OBaH0wY9j6R6cVR7Vp2f4wPd9DhL_qs-1734717817851-0.0.1.1-604800000; path=/; do
2024-12-20 18:03:38 UTC	610	IN	Data Raw: 32 35 62 0d 0a 7b 22 62 72 61 6e 64 22 3a 22 49 6e 62 6f 78 20 48 65 61 6c 74 68 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 31 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 41 33 30 30 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 73 75 62 6d 69 74 54 69 63 6b 65 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 37 38 41 33 30 30 22 2c 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 30 2c 22 6e 61 6d 65 46 69 65 6c 64 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 63 68 61 74 22 3a 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 Data Ascii: 25b{"brand":"Inbox Health","brandCount":1,"color":"#78A300","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#78A300","attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled":true}},"chat":{"embed":"chat","props":{"c
2024-12-20 18:03:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49780	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:37 UTC	863	OUT	GET /assets/ih-logo-white4-58cda4a1a0dab88ce4a456751874e449.png HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1
2024-12-20 18:03:38 UTC	767	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 30857 Connection: close Date: Fri, 20 Dec 2024 18:03:39 GMT Last-Modified: Wed, 24 Feb 2021 01:52:03 GMT ETag: "0701abc12c3b92c3ba42c9cfece5a744" Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 5f65ac90cb02aca3a5a0a2a19c3c6812.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: Gk3Vdq0HHYtHe-7EAvPoQoCh8RmnmTMH5PvSJ1fsI_--3uWb4oz5Hw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:38 UTC	15617	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 bb 67 54 53 5b d7 30 9a 10 8a 88 84 a6 a0 40 00 a9 16 7a 0d 84 22 bd 49 ef 4a ef 48 49 68 a1 43 22 22 41 04 14 a4 37 a5 8a 28 12 40 7a 89 1a 40 a4 09 82 74 88 a0 80 12 29 22 4d da dd 9c e7 39 9e f3 7d e3 de 77 bc 7f 6e 06 09 c9 5a 73 cd 35 7b d9 6b ef 04 63 43 6d fa d3 ec a7 41 20 10 bd ae 8e 86 29 08 44 d3 0b 7c df 39 45 0d 7c e6 84 be 72 07 fe d1 a2 74 6c 02 41 20 51 be 93 37 38 b4 54 05 0d 02 51 83 bc cc ad 83 ac 0d ae 2b b8 20 7d 45 9d 5c 91 ce 6e a2 a1 be 28 d0 c9 4b 51 25 14 e5 e4 e2 ed 16 c4 e3 ec e6 e1 e5 a7 c4 bb d6 d2 c1 cb e3 e5 aa c4 6b 25 63 20 6e 80 52 77 f3 f4 d2 09 0f 70 33 0b 37 34 77 09 f7 76 91 77 e5 55 51 e6 51 0c 55 00 10 f8 ba 05 39 f1 84 fa fa f8 05 2a 84 2a f1 fe 85 57 01 f8 7e 32 2c c6 cb f3 17 48 Data Ascii: gTS[0@z"IJHIhC""A7(@z@t)"M9}wnZs5{kcCmA )D\|9E\|rtlA Q78TQ+ }E\n(KQ%k%c nRwp374wvwUQQU9**W~2,H
2024-12-20 18:03:39 UTC	1838	IN	Data Raw: 3c 43 21 44 b9 5a 35 6e 6c 0e d3 58 be 15 f8 90 7f 8b 6d cd a0 d2 2c d8 ea 7c d2 b5 9b f7 be 76 70 84 ea a4 06 5c ef dc 5e 88 ad e2 1f a8 b4 e3 41 e0 c2 07 6a df 6b 2f ee 13 ca 71 f5 8f 0d 6a 15 f0 88 95 87 f7 aa 8e 25 1d 4d 35 c7 44 9f 7c 43 94 ea b7 e4 ee de af d1 47 3f 80 fa 02 96 a9 ef 40 33 4b e9 93 07 2b 11 98 a5 9b 06 e2 cc 20 d0 c0 5d 4b aa 06 b2 6f 01 a5 e8 15 e9 8c e6 4d 23 d2 db 73 f6 31 86 f3 8d ac 29 8a b4 2e 18 37 6c 3a f6 1c f6 2b a6 13 2b 80 d9 c3 ee 61 c2 a8 db d1 f6 ce fe 1b 1f 21 2a 31 a7 43 29 b2 24 df 2e 44 17 99 8d fd 80 a8 cc de ee 2e d4 79 16 9f 5b 03 a9 b3 b6 08 34 66 8f ab 3f 0b b8 72 53 55 91 9d c7 71 b0 0b 3b 3e 27 26 9e cc f3 bd 42 1f 7b ec 16 ef 89 43 24 40 e9 6e 02 25 e3 87 70 82 ca 95 66 74 da 94 a5 bd ec fa 87 e5 c8 c2 45 Data Ascii: <C!DZ5nlXm,\|vp\^Ajk/qj%M5D\|CG?@3K+ ]KoM#s1).7l:++a!*1C)$.D.y[4f?rSUq;>'&B{C$@n%pftE
2024-12-20 18:03:39 UTC	9000	IN	Data Raw: 36 c4 de 3c 03 f0 61 9a 6d 39 80 6d 4a 51 a6 ff 3d cc 63 79 7a e9 60 14 7c 41 09 3a c2 12 ac 04 37 7c f4 09 f3 d5 c7 a8 db a5 ca 2e b0 d2 09 05 72 0a 21 09 4e ec da d5 85 44 4f d3 09 7f 63 13 35 b2 3c 43 43 7e f1 e2 eb 3b ae 40 9e 87 6b 36 df b6 92 aa cd fe f0 e3 75 4f d6 1d 19 9f e5 80 e0 02 6f 7a b6 2e 36 8b 91 41 c2 42 b5 ae e1 f2 17 3b e2 68 97 65 bd c3 94 7c 90 33 3d 49 c3 a9 f0 97 e0 a1 b3 0c c5 8b b4 42 c8 a0 cd c5 f6 8b ff e2 68 e9 08 88 a3 ac 89 4f 1e ca 75 31 db 9a a3 e0 3b 8b ad c0 2f dc c3 aa 04 49 8c 7f cc e1 7f 17 a2 27 d1 45 c0 30 96 bf 00 d6 16 80 5b 9a 1d 85 ca f5 a3 15 d1 85 5c 8a 7f 4a 21 68 97 4a 27 39 23 f7 94 8d 51 30 ed 50 bc 3b 3b 0d 84 ec 34 9b 87 0e 00 03 8d cc ef 31 ba bd 7e 13 a9 fd e7 93 e8 ca 47 14 d9 3a 05 be eb d8 ce 8b fe Data Ascii: 6<am9mJQ=cyz`\|A:7\|.r!NDOc5<CC~;@k6uOoz.6AB;he\|3=IBhOu1;/I'E0[\J!hJ'9#Q0P;;41~G:
2024-12-20 18:03:39 UTC	4402	IN	Data Raw: 1f 70 36 c6 a6 ac 7e 7b f7 ed c4 6c 8b 57 2c 3a 4f db b4 59 7b c2 60 c0 19 70 6f be f5 ab 7d 31 a6 cf 1c d0 12 ad e1 df 81 05 1f 42 9e 06 f7 8e fb 3d 75 cc 4e 7d eb b1 a6 42 71 a9 e8 56 a6 cc c9 63 3a 22 1e 4f 5d 13 94 b8 7c 11 be d9 9e b5 28 7c 36 32 e8 c0 04 40 85 98 d6 4f 71 b7 27 4b 86 10 b3 ae 3e 2c ce 2f 7f ce 11 3a 88 72 4f 57 a2 57 30 67 4c 76 2e 1d 5c e8 0d c1 a8 88 c6 83 2f 82 4b b9 2e aa a9 14 9c 45 aa d6 75 bf 24 bc a6 2d 6b 77 00 75 b5 ab f7 d5 28 f7 7d d3 4b 23 a2 9b 33 e4 73 ca 81 67 ab e2 97 65 70 65 ee a5 3e 5c 4d bf 97 27 3e 2e ba cd 8e 14 bd 71 d7 05 10 51 08 3c 65 ee c0 d2 e5 80 c8 72 73 39 e8 21 9f b3 cc 0b a6 1b 49 84 39 78 17 8d 86 7b 4d ca 6a 53 f8 30 0b 19 db e1 0f b2 0f 00 f9 62 33 dc 11 a4 ab a9 ab c1 7b ac 7f 38 0f 6f 80 06 4f Data Ascii: p6~{lW,:OY{`po}1B=uN}BqVc:"O]\|(\|62@Oq'K>,/:rOWW0gLv.\/K.Eu$-kwu(}K#3sgepe>\M'>.qQ<ers9!I9x{MjS0b3{8oO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49779	3.132.245.25	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:38 UTC	480	OUT	GET /api/patient/v1/enterprises/unauthenticated/info?id=7272 HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1
2024-12-20 18:03:38 UTC	366	IN	HTTP/1.1 200 OK Cache-Control: max-age=0, private, must-revalidate Content-Length: 237 Content-Type: application/json Date: Fri, 20 Dec 2024 18:03:38 GMT Etag: W/"c7a729206cb54757f2ab5fddb3a83cb4" Strict-Transport-Security: max-age=315360000; preload Vary: Origin X-Request-Id: fb244ed0-ce21-4abc-8e09-bcca4a8fbc74 X-Runtime: 0.032551 Connection: close
2024-12-20 18:03:38 UTC	237	IN	Data Raw: 7b 22 65 6e 74 65 72 70 72 69 73 65 22 3a 7b 22 69 64 22 3a 37 32 37 32 2c 22 6e 61 6d 65 22 3a 22 46 6f 6f 74 20 5c 75 30 30 32 36 20 41 6e 6b 6c 65 20 43 65 6e 74 65 72 20 6f 66 20 43 61 63 68 65 20 56 61 6c 6c 65 79 20 61 6e 64 20 74 68 65 20 57 69 6e 64 20 43 6c 69 6e 69 63 22 2c 22 73 75 70 70 6f 72 74 5f 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 22 3a 22 28 38 34 34 29 20 39 30 30 2d 34 39 30 39 22 2c 22 68 61 73 5f 6c 6f 67 6f 5f 62 61 73 65 36 34 22 3a 74 72 75 65 2c 22 6c 6f 67 6f 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 6e 75 6c 6c 2c 22 70 6f 73 74 5f 63 68 65 63 6b 69 6e 5f 6d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 66 72 69 65 6e 64 6c 79 5f 6e 61 6d 65 22 3a 6e 75 6c 6c 7d 7d Data Ascii: {"enterprise":{"id":7272,"name":"Foot \u0026 Ankle Center of Cache Valley and the Wind Clinic","support_phone_number":"(844) 900-4909","has_logo_base64":true,"logo_background_color":null,"post_checkin_message":null,"friendly_name":null}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49781	13.59.75.255	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:38 UTC	722	OUT	GET /api/patient/v1/enterprises/unauthenticated/logo?id=7272 HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1
2024-12-20 18:03:38 UTC	390	IN	HTTP/1.1 200 OK Cache-Control: max-age=0, private, must-revalidate Content-Disposition: inline Content-Length: 57284 Content-Type: image/png Date: Fri, 20 Dec 2024 18:03:38 GMT Etag: W/"08fe136e3cf736a032ef3eaa188068dd" Strict-Transport-Security: max-age=315360000; preload Vary: Origin X-Request-Id: b501142d-d9d2-4047-904b-76a3fc89fc48 X-Runtime: 0.014083 Connection: close
2024-12-20 18:03:38 UTC	796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 0e 00 00 02 d0 08 02 00 00 00 9f 58 a5 72 00 00 df 8b 49 44 41 54 78 9c ec dd 05 74 54 d7 de 36 f0 cc 4c 5c 88 0b 21 40 04 12 20 40 70 87 52 8a b4 a5 2d a5 d0 de 1a 55 2a 58 b9 2d d6 e2 c5 29 56 9c 52 b4 42 71 77 0b 10 22 c4 dd dd dd 33 c9 f8 77 28 f7 eb 5b c2 90 8c 9c 73 f6 99 c9 f3 5b ac 77 bd f7 de 64 ef ff e4 0c 61 3f b3 8d af 00 00 00 00 00 00 78 06 df 00 00 00 00 00 00 e0 19 88 0a 00 00 00 00 00 a0 04 a2 02 00 00 00 00 00 28 81 a8 00 00 00 00 00 00 4a 20 2a 00 00 00 00 00 80 12 88 0a 00 00 00 00 00 a0 04 a2 02 00 00 00 00 00 28 81 a8 00 00 00 00 00 00 4a 20 2a 00 00 00 00 00 80 12 88 0a 00 00 00 00 00 a0 04 a2 02 00 00 00 00 00 28 81 a8 00 00 00 00 00 00 4a 20 2a 00 00 00 00 00 80 12 88 0a 00 Data Ascii: PNGIHDRXrIDATxtT6L\!@ @pR-UX-)VRBqw"3w([s[wda?x(J (J (J
2024-12-20 18:03:38 UTC	2372	IN	Data Raw: bf 7c 67 40 02 f5 95 57 93 72 65 72 c2 03 6f 91 54 76 28 34 e5 bf e7 83 2f 26 e4 50 39 a7 e5 2f ce 28 af dd 76 3f 6e c5 f5 70 2a 3f b0 53 1e 00 00 00 00 68 00 51 81 43 ca 1a 9a d6 dc 8a 3a 19 9d 29 51 79 ae 40 28 96 fe 19 91 be f8 6a 68 52 49 35 a3 b5 b5 a0 b8 4e 48 8d fb ef a4 16 48 d5 99 e2 a0 02 c3 92 6b 61 37 53 f2 99 2b 0c 00 00 00 00 b4 81 a8 c0 15 e1 79 65 8b af 84 a6 94 6a 32 e2 cf af 6e 58 73 3b f2 48 58 8a fc 79 d3 10 8c 89 c8 2f 5f 76 2d 3c 4f a3 f9 01 2a 5a 1c 0d 4b 3d 1c 4a a0 6c 00 00 00 00 68 15 a2 02 27 24 95 54 ed 7c 98 20 6c 6d e9 4e 4b 14 06 b7 52 0a b6 dc 8b 6d 92 ca e8 ab ab 15 21 39 a5 db ee c7 6a 55 b6 81 c1 ed d4 82 5f 43 92 11 16 00 00 00 00 b8 06 51 81 bc 82 9a 86 6d f7 e3 d4 5a bd f3 3c d1 05 15 ab 6f 46 56 35 8a b4 6f aa 55 19 Data Ascii: \|g@WreroTv(4/&P9/(v?np?ShQC:)Qy@(jhRI5NHHka7S+yej2nXs;HXy/_v-<OZK=Jlh'$T\| lmNKRm!9jU_CQmZ<oFV5oU
2024-12-20 18:03:38 UTC	538	IN	Data Raw: fe 8a cc d8 f5 30 e1 db f3 c1 0b 2e 85 5c 49 cc 65 e7 ec 57 00 00 00 80 96 71 28 2a 50 c3 be 7a b1 4e ae ee 38 13 9b d5 a4 e6 b1 42 83 3a 39 32 54 4c cb 78 bc c7 77 c0 69 f0 8d 1d ac 2d 58 be 0e c2 dd ce 8a c7 6b e5 ae ba 06 d6 df 30 26 86 02 41 6b 55 3d 8f 48 2a 3b 19 9d 39 f7 7c d0 e9 98 cc e2 e7 9c f4 55 58 23 3c 16 99 fe dd c5 e0 fb 19 45 5a 94 09 00 00 00 40 03 0e 45 85 9a 26 b1 81 6e de 84 5b d3 28 f6 4f 57 6f 62 c1 d1 d2 cc 8b c4 1a 24 27 4b 33 23 4d b7 49 f8 75 b0 a7 b7 98 96 f5 71 6d bd bb 7a 11 db 9f be 5b 9a 68 78 12 54 46 45 ed 0f 57 42 2f c4 67 ab 72 5e 53 5d 93 64 7f 70 d2 ee c0 04 b1 8c bd c3 9d 00 00 00 00 9a e1 50 54 90 e8 f2 a8 e8 5a 52 9e ba 3b 16 c6 74 75 65 a8 98 16 68 b3 3b 79 98 bb 33 8d 95 b4 8c cf e3 0d f7 70 69 f5 cb d8 9f 86 b2 Data Ascii: 0.\IeWq(PzN8B:92TLxwi-Xk0&AkU=H;9\|UX#<EZ@E&n[(OWob$'K3#MIuqmz[hxTFEWB/gr^S]dpPTZR;tueh;y3pi
2024-12-20 18:03:38 UTC	4744	IN	Data Raw: a4 65 0b d4 33 1a ef c3 78 c1 6f f8 76 36 51 ed 9e 38 2b 13 63 a6 8b 69 a6 93 8d aa 59 ab b6 49 bc 2b 30 81 96 b9 32 91 54 76 3c 2a 43 fb 76 00 00 00 00 d4 c2 a1 a8 60 61 a4 f3 51 21 38 bb 44 dd cd d9 af fb 76 b6 67 eb 10 d2 51 9e ed b5 6f 84 2a d8 da 8c c1 01 ba 93 95 d9 cb 2a c7 27 2b f5 77 0e 68 c9 4b 85 0b a4 9f 38 f0 28 b9 a6 91 b6 fb da 1e e5 94 16 3d e7 7c 55 00 00 00 00 86 70 28 2a 98 19 19 f2 35 3d b1 9e 23 1a c4 d2 88 fc 72 b5 be c5 c4 50 30 ad 7f 57 86 ea f9 37 6f 27 6b 2d 57 1f 3d 61 66 24 78 b7 8f 97 f6 ed 3c cf 7b 7d bd 54 3f ce d5 ca 94 d5 a8 e0 6c 65 a6 62 ae 8b cc 2f 8f c8 53 ef 9d d0 32 b9 42 71 2b 35 9f c6 06 01 00 00 00 5a c5 a1 a8 40 c5 04 96 47 7e 4c 08 cf 2b 53 f7 5b 06 76 72 54 71 17 af 36 de ec e9 4e 57 53 a3 bc da f7 65 e6 8e 85 Data Ascii: e3xov6Q8+ciYI+02Tv<Cv`aQ!8DvgQo'+whK8(=\|Up(5=#rP0W7o'k-W=af$x<{}T?leb/S2Bq+5Z@G~L+S[vrTq6NWSe
2024-12-20 18:03:38 UTC	5930	IN	Data Raw: 99 b1 80 cf 23 fd 5a ff 27 a6 a0 e2 fb cb a1 d1 05 15 a4 0b 01 00 00 00 50 15 a2 02 83 52 4a ab 37 fb c7 8a a5 6d 37 27 f0 79 3c 97 76 66 bd 5c ed 5e ec e2 3a d5 cf f3 eb 61 3d 96 8c eb bb ed cd a1 47 de 1b bd 7b ca 88 0d 13 07 2d 1b d7 ef db 17 7a 7d 39 a4 fb fb fd ba 50 03 fd 97 ba 76 18 d2 d9 a9 9f 9b 83 9f ab bd af 8b ad 8f 93 8d 97 43 3b 77 3b 2b 37 6b 0b 17 2b 73 ea 0f 15 00 3c ec ac ba 3a 5a 77 77 b6 ed dd de 8e fa ca 41 9d 9c 86 bb 3b bf e0 d5 fe 95 ee 1d a9 b0 f1 f9 e0 6e 73 47 f5 5a 3a ae 1f 15 2a f6 4c 19 f1 db fb 2f fe fa ce a8 ad 93 86 52 c1 e3 8b a1 dd de ec e5 3e dc c3 d9 db d1 9a 0a 2a 3c d6 43 44 6d 93 78 f3 bd 98 df c2 53 11 1d 01 00 00 40 27 20 2a 30 25 a3 bc 76 93 7f 8c 48 2a 23 5d 08 7b a8 c1 b7 93 a5 59 5f 37 87 d7 7d 3b cf 18 de 63 Data Ascii: #Z'PRJ7m7'y<vf\^:a=G{-z}9PvC;w;+7k+s<:ZwwA;nsGZ:L/R><CDmxS@' 0%vH#]{Y_7};c
2024-12-20 18:03:38 UTC	1664	IN	Data Raw: 37 bf fc b2 2f 23 23 43 cb 46 a6 4e 7d db cb d3 8b 96 7a f4 0f f5 4f f9 e7 9f 7f 61 63 63 c3 50 fb e9 e5 b5 4c ac 3e e2 f3 79 5f 0f eb f1 d1 00 6f 13 43 95 e6 43 ba 38 b4 5b f3 ca c0 5e ae 76 b4 57 42 c9 ac a8 ad 10 8a 98 68 19 74 0e a2 c2 53 d8 9e 55 10 49 14 18 71 e9 2c bf de 7e 0b 17 2c e2 c2 9f 95 2b 7e 3c 72 e4 68 8f 1e 3d 98 7e c9 4f 3e 63 ae ad ab 65 ba a3 36 c8 ff 9e ff b5 6b 57 49 57 f1 94 b0 b0 d0 53 a7 4f 91 ae 42 0f 89 25 e2 75 eb d6 08 85 5a dd 75 6d 65 65 b5 63 c7 ae 8d 1b 7e 5a b4 f0 7b 86 7e b1 b8 38 bb d0 f5 92 9f f5 c6 eb 93 18 2a 7b f1 0f 4b 0f 1d 3a fa e6 9b 93 99 2b be ac 9e 91 39 c0 69 fd bb 8e f4 54 ef 67 6e 61 6c f8 dd a8 5e 5e 0e ed 98 a8 a7 a4 0e d7 b1 c3 63 88 0a 4f 61 79 af 82 5c ae 60 f9 7e 68 a0 91 ab ab eb 98 31 2f 71 e1 cf Data Ascii: 7/##CFN}zOaccPL>y_oCC8[^vWBhtSUIq,~,+~<rh=~O>ce6kWIWSOB%uZumeec~Z{~8*{K:+9iTgnal^^cOay\`~h1/q
2024-12-20 18:03:38 UTC	8302	IN	Data Raw: 8c dc b9 73 57 4f df 5e ec 77 7d fb f6 ed ac 2c f6 ae 59 a8 aa aa 3a 4d e2 c2 35 2f 4f af 1d 3b 76 8e 1d 3b 8e f8 39 54 76 76 76 73 e7 fe 77 c1 82 85 ec ef 6e 97 48 a5 47 8e 1c 62 b9 53 d0 18 ed 67 0d d1 f2 89 61 11 dd 37 a6 21 2a c0 13 88 0a 4f b1 33 d7 ea b4 32 cd e4 20 2a 00 27 55 57 57 5f bf ce f6 fd c1 e6 e6 e6 2b 57 ae 9a 34 e9 4d 96 fb 6d 41 bb 76 d6 eb d7 6f 18 37 76 3c cb fd 2a 0c 14 c7 8f ff c5 5a 77 67 cf 9e 11 89 d9 de c5 38 74 c8 d0 2d 5b b6 39 38 30 be 2d 41 75 63 c6 bc b4 61 c3 46 1b 6b 9a 77 88 b6 2a 38 24 38 3b 3b 8b e5 4e 41 33 96 26 34 df 77 96 54 4a c3 6a c3 47 39 a5 da 37 f2 6f 88 0a f0 04 a2 c2 53 4c 8d 04 e6 0c 5c 79 d8 b2 64 3a 7e 47 00 d0 ee dc b9 b3 4d 22 56 c7 8e ce 4e ce 5b b7 fc 3c 70 e0 40 36 3b 55 85 91 91 d1 bc 79 f3 3f fb Data Ascii: sWO^w},Y:M5/O;v;9TvvvswnHGbSga7!O32 'UWW_+W4MmAvo7v<Zwg8t-[980-AucaFkw8$8;;NA3&4wTJjG97oSL\yd:~GM"VN[<p@6;Uy?
2024-12-20 18:03:38 UTC	8082	IN	Data Raw: 53 31 5f 3b fe f0 c3 64 79 01 81 c6 29 c9 c9 49 13 c6 8f db b5 eb 47 cc eb bb fe 29 25 25 65 c6 8c 69 6b d6 ae ae aa ae c2 1f dd d5 c5 ad 53 27 38 76 8d 41 d0 cd 2a 50 f2 2b 6a ce a7 66 a1 1b ff 3d aa 0a 82 45 dd da da eb e3 ee 3e c4 e5 72 be 61 ea c5 0f 68 14 28 15 70 e8 69 6f ea 6e aa 4b 3a 8b 0f 7b f9 a6 6a 75 f8 fd 2a 64 8d e1 00 db 8d 1d 1b a8 a6 4a e6 8e d4 f3 ac e7 4b 97 2d 5e b8 70 c1 b3 67 4f 71 c6 15 8b c5 17 2e 9c 1f 33 66 d4 89 13 c7 a9 a2 05 67 e8 77 ba 75 eb e6 e4 e4 8c 39 a8 89 89 c9 90 21 43 31 07 7d 4b 24 16 9d bf 70 8e 7a ce 4f 9d 3a 59 57 87 75 aa 33 fb 45 f6 f2 a0 65 f3 e7 cf 79 fc 84 cc b2 37 01 5f 30 65 ca 14 22 a1 c1 c7 20 9d 55 a0 fc f6 30 3b e7 0d 8e c3 bf df 52 12 f0 e7 77 71 73 32 d2 c6 16 51 ee af 05 d8 d8 ba 30 03 a4 a0 54 c0 Data Ascii: S1_;dy)IG)%%eikS'8vAP+jf=E>rah(pionK:{judJK-^pgOq.3fgwu9!C1}K$pzO:YWu3Eey7_0e" U0;Rwqs2Q0T
2024-12-20 18:03:38 UTC	10674	IN	Data Raw: 4b 7b b4 6d db 16 fc eb 32 e5 05 f2 cb 97 07 99 98 98 62 8f 0c 00 a0 1f 94 0a 80 1e 2a f2 fc 39 9d 5c 55 15 04 64 d3 b8 f8 30 bb 5a 24 9b 67 03 d3 28 31 31 b1 f4 4d 29 fe b8 11 24 1a ba cb b0 d8 d8 db 29 29 c9 a4 b3 00 0c 55 58 58 18 1a 1a 52 87 bd 59 16 47 8e 33 6b d6 1c 47 47 27 cc 71 01 00 88 40 a9 00 68 63 a8 a6 34 bd 83 13 d9 86 48 95 42 11 34 4e fd 2c 52 fd 88 22 a3 22 89 f4 6a 94 55 52 39 b9 bd 7b f7 48 e1 50 11 f0 1f 42 a1 30 24 24 a8 a4 b4 04 7f e8 51 a3 46 77 ea d4 09 7f 5c 00 00 22 50 2a 00 3a b5 31 d0 ea ef 64 41 36 87 df d3 72 ca 6a eb c8 e6 c0 64 35 35 35 77 ee dc 26 12 ba b8 b8 38 39 39 89 48 68 59 95 f1 34 03 36 81 80 ff da b4 69 03 f5 de c0 1f f7 8b 9e bd 86 0d 1b 8e 3f 2e 00 00 1d 28 15 00 cd fa 3b 5b d8 e8 aa 13 4c 40 28 ae 3f ff 20 8b Data Ascii: K{m2b9\Ud0Z$g(11M)$))UXXRYG3kGG'q@hc4HB4N,R""jUR9{HPB0$$QFw\"P:1dA6rjd555w&899HhY46i?.(;[L@(?
2024-12-20 18:03:38 UTC	5710	IN	Data Raw: fa fa ad 5d bb 4e 2e 93 f3 b3 bb cc c9 99 f1 f1 09 1c bd f8 5d 77 dd cd e9 cd c5 95 2b 57 3a 39 99 ef 6d 0e 67 67 e7 e7 9f 7f c1 d9 c9 99 b7 3d 8a 45 e2 90 90 50 23 5f 64 d6 ac d9 a1 46 bf 88 c5 b9 ed b6 db 4d 38 bc 64 ea d4 69 d1 51 d1 a6 7a 35 8b 43 32 fc 9d 77 de 29 74 29 cc 1d a2 02 e8 a4 b9 a7 ff 44 25 1f bd ed 59 90 2a 99 85 46 85 b9 73 e7 6d 7c f9 95 a5 4b 96 ce 9e 35 67 f6 ac d9 a6 dd ae 5f b0 f0 f1 c7 9e 78 e3 8d cd b6 b6 76 42 bf 51 53 7a e4 91 47 5f 7c e1 0f 4b 16 73 74 d0 ae 5f fd c4 9a 35 6b d6 1a 59 48 f2 c9 be f1 fa 9b cb 96 de 48 5e 73 d6 4c 53 6e 4b 16 2f d9 b8 f1 d5 15 2b 6e 32 c9 c1 e4 ce f4 e9 33 3e f8 e0 af 77 fe fa ae b9 73 e6 99 f6 08 8c dd 16 cc 5f f0 e4 9a b5 cf 3d b7 81 bb 37 42 f2 fc db 6f bf b3 62 f9 0a 93 9f 6f 8b 6e 58 fc c2 Data Ascii: ]N.]w+W:9mgg=EP#_dFM8diQz5C2w)t)D%Y*Fsm\|K5g_xvBQSzG_\|Kst_5kYHH^sLSnK/+n23>ws_=7BobonX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49786	44.217.82.191	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:38 UTC	444	OUT	GET /pusher/app/1811ca2096d3867b6a5f/962/4jprl9gh/xhr?protocol=7&client=js&version=3.0.0&t=1734717814811&n=2 HTTP/1.1 Host: sockjs.pusher.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:39 UTC	209	IN	HTTP/1.1 405 Method Not Allowed allow: POST, OPTIONS date: Fri, 20 Dec 2024 18:03:39 GMT keep-alive: timeout=5 transfer-encoding: chunked strict-transport-security: max-age=15768000 connection: close
2024-12-20 18:03:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49784	3.160.212.126	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:39 UTC	601	OUT	GET /sessions/1820622?s=0.25&r=0.19162409593672747 HTTP/1.1 Host: vc.hotjar.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://patient.inboxhealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:39 UTC	337	IN	HTTP/1.1 204 No Content Connection: close Access-Control-Allow-Origin: * Cache-Control: no-store Date: Fri, 20 Dec 2024 18:03:39 GMT X-Cache: Miss from cloudfront Via: 1.1 0eff2818c4b79b630461542cc0251178.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: kKbv4cTXmkcs_aqL2HwlPISC0x2qtIqaHA5J7Piank_XLlbHxrSYbw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49783	13.227.8.2	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:39 UTC	372	OUT	GET /modules.60031afbf51fb3e88a5b.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:39 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 228108 Connection: close Date: Wed, 18 Dec 2024 12:13:51 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "51f0735cf6390af81e4cb97c3cde2cb7" Last-Modified: Wed, 18 Dec 2024 11:50:24 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fbc5f2955f79f794420a05d758f224f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: 2VvTRE-D-e_MDXvUD6FmiuQ-cgPamh5zQE2Z_ZRxFRMHMexFD8KZyg== Age: 193788
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 30 30 33 31 61 66 62 66 35 31 66 62 33 65 38 38 61 35 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.60031afbf51fb3e88a5b.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 6c 69 63 65 28 2d 31 30 29 29 7c 7c 22 22 2c 31 36 29 2b 31 29 2f 4d 61 74 68 2e 70 6f 77 28 32 2c 34 30 29 7d 2c 63 6f 6d 70 61 72 65 52 61 74 69 6f 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 41 73 4e 75 6d 62 65 72 28 29 2a 28 74 3f 31 30 30 3a 31 29 3c 3d 65 7d 29 2c 22 69 64 65 6e 74 69 66 69 65 72 2e 63 6f 6d 70 61 72 65 52 61 74 69 6f 22 29 7d 2c 61 3d 6e 28 34 38 30 38 29 2c 73 3d 5b 22 61 66 22 2c 22 61 72 22 2c 22 62 67 22 2c 22 63 61 22 2c 22 63 73 22 2c 22 63 79 22 2c 22 64 61 22 2c 22 64 65 22 2c 22 65 6c 22 2c 22 65 6e 22 2c 22 65 73 22 2c 22 65 74 22 2c 22 66 61 22 2c 22 66 69 22 2c 22 66 72 22 2c 22 68 65 22 2c 22 68 72 22 2c Data Ascii: =e?void 0:e.slice(-10))\|\|"",16)+1)/Math.pow(2,40)},compareRatio:hj.tryCatch((function(e,t){return i.getAsNumber()*(t?100:1)<=e}),"identifier.compareRatio")},a=n(4808),s=["af","ar","bg","ca","cs","cy","da","de","el","en","es","et","fa","fi","fr","he","hr",
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 30 31 43 7c 53 48 57 2d 4d 31 38 30 53 7c 53 47 48 2d 54 38 34 39 7c 53 43 48 2d 49 38 30 30 7c 53 48 57 2d 4d 31 38 30 4c 7c 53 50 48 2d 50 31 30 30 7c 53 47 48 2d 49 39 38 37 7c 7a 74 31 38 30 7c 48 54 43 28 2e 46 6c 79 65 72 7c 5c 5f 46 6c 79 65 72 29 7c 53 70 72 69 6e 74 2e 41 54 50 35 31 7c 56 69 65 77 50 61 64 37 7c 70 61 6e 64 69 67 69 74 61 6c 28 73 70 72 6e 6f 76 61 7c 6e 6f 76 61 29 7c 49 64 65 6f 73 2e 53 37 7c 44 65 6c 6c 2e 53 74 72 65 61 6b 2e 37 7c 41 64 76 65 6e 74 2e 56 65 67 61 7c 41 31 30 31 49 54 7c 41 37 30 42 48 54 7c 4d 49 44 37 30 31 35 7c 4e 65 78 74 32 7c 6e 6f 6f 6b 2f 69 29 7c 7c 74 28 2f 4d 42 35 31 31 2f 69 29 26 26 74 28 2f 52 55 54 45 4d 2f 69 29 3f 22 74 61 62 6c 65 74 22 3a 74 28 2f 42 4f 4c 54 7c 46 65 6e 6e 65 63 7c 49 Data Ascii: 01C\|SHW-M180S\|SGH-T849\|SCH-I800\|SHW-M180L\|SPH-P100\|SGH-I987\|zt180\|HTC(.Flyer\|\_Flyer)\|Sprint.ATP51\|ViewPad7\|pandigital(sprnova\|nova)\|Ideos.S7\|Dell.Streak.7\|Advent.Vega\|A101IT\|A70BHT\|MID7015\|Next2\|nook/i)\|\|t(/MB511/i)&&t(/RUTEM/i)?"tablet":t(/BOLT\|Fennec\|I
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 3d 65 2e 63 68 61 72 41 74 28 30 29 2c 6e 3d 65 2e 63 68 61 72 41 74 28 31 29 3b 72 65 74 75 72 6e 2f 5c 64 2f 2e 74 65 73 74 28 6e 29 3f 74 2b 22 5c 5c 33 22 2b 6e 2b 22 20 22 2b 65 2e 73 6c 69 63 65 28 32 29 3a 65 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 22 2d 22 3d 3d 3d 65 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 22 29 29 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 65 2e 69 6e 64 65 78 4f 66 28 22 79 75 69 5f 22 29 3e 2d 31 7c 7c 77 28 65 29 29 26 26 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 Data Ascii: =e.charAt(0),n=e.charAt(1);return/\d/.test(n)?t+"\\3"+n+" "+e.slice(2):e},w=function(e){return 1===e.length&&"-"===e},S=function(e){var r=[];return!(void 0===(e=hj.hq.trim((e\|\|"").replace(/\s\s+/g," ")))\|\|""===e\|\|e.indexOf("yui_")>-1\|\|w(e))&&((e=e.replace
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 65 74 28 22 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 22 29 3b 6c 2e 6c 65 6e 67 74 68 26 26 28 28 30 2c 63 2e 4e 29 28 69 2e 73 2e 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 2c 6c 2c 21 30 29 2e 66 6c 75 73 68 28 29 2c 42 2e 79 2e 73 65 74 28 22 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 22 2c 5b 5d 29 29 2c 68 6a 2e 73 65 74 74 69 6e 67 73 2e 75 73 65 72 5f 61 74 74 72 69 62 75 74 65 73 5f 65 6e 61 62 6c 65 64 26 26 61 2e 72 2e 66 6c 75 73 68 28 29 7d 29 2c 22 62 65 68 61 76 69 6f 72 2d 64 61 74 61 2e 72 65 63 6f 72 64 69 6e 67 2e 73 74 61 72 74 22 29 2c 73 65 74 41 6e 64 53 65 6e 64 50 61 67 65 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7a 2e 51 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 41 Data Ascii: et("autoTagsToProcess");l.length&&((0,c.N)(i.s.AUTOTAG_RECORDING,l,!0).flush(),B.y.set("autoTagsToProcess",[])),hj.settings.user_attributes_enabled&&a.r.flush()}),"behavior-data.recording.start"),setAndSendPageContent:function(e,t){var n=z.Q.get("sessionA
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 61 74 74 72 69 62 75 74 65 73 3d 21 30 2c 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 3d 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 7c 7c 7b 7d 2c 65 20 69 6e 20 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 7c 7c 28 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 5b 65 5d 3d 74 29 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 61 74 74 72 69 62 75 74 65 4d 75 74 61 74 65 64 22 29 2c 74 68 69 73 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 4d 75 74 61 74 65 64 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 7c 7c 28 6e 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 3d 21 30 2c 6e 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 4f 6c 64 56 Data Ascii: attributes=!0,n.attributeOldValues=n.attributeOldValues\|\|{},e in n.attributeOldValues\|\|(n.attributeOldValues[e]=t)}),"NodeChange.attributeMutated"),this.characterDataMutated=hj.tryCatch((function(e){n.characterData\|\|(n.characterData=!0,n.characterDataOldV
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 65 2e 6b 65 79 73 28 29 3b 6e 2e 6c 65 6e 67 74 68 3b 29 7b 66 6f 72 28 76 61 72 20 72 3d 6e 5b 30 5d 3b 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 26 26 65 2e 68 61 73 28 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 3b 29 72 3d 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3b 66 6f 72 28 3b 72 26 26 65 2e 68 61 73 28 72 29 3b 29 7b 76 61 72 20 69 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 72 29 3b 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 26 26 28 69 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 29 3b 76 61 72 20 73 3d 72 2e 70 61 72 65 6e Data Ascii: function(e){for(var t,n=e.keys();n.length;){for(var r=n[0];r.previousSibling&&e.has(r.previousSibling);)r=r.previousSibling;for(;r&&e.has(r);){var i=o.serializeNode(r);r.previousSibling&&(i.previousSibling=o.serializeNode(r.previousSibling));var s=r.paren
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 2c 6e 29 7b 6e 28 35 34 32 29 2c 6e 28 32 31 39 29 2c 6e 28 32 38 39 29 2c 6e 28 36 33 32 36 29 7d 2c 35 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 35 35 34 37 29 3b 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 69 6e 73 65 72 74 65 64 52 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 7b 7d 2c 6e 3d 5b 5d 2c 6f 3d 21 31 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 69 73 4f 6e 44 6f 63 75 6d 65 6e 74 3d 6f 2c 61 2e 72 75 6c 65 3d 74 2c 61 2e 69 6e 64 65 78 3d 6e 2c 61 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 3d 6f Data Ascii: ,n){n(542),n(219),n(289),n(6326)},542:function(e,t,n){"use strict";n.r(t);var r=n(5547);hj.tryCatch((function(){hj.insertedRules=function(){var e,t={},n=[],o=!1,i=function(e,t,n,r,o){var i,a={};return a.isOnDocument=o,a.rule=t,a.index=n,a.parentSelector=o
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 72 50 61 67 65 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 29 2c 75 2e 79 2e 73 65 74 28 22 70 61 67 65 43 6f 6e 74 65 6e 74 22 2c 76 6f 69 64 20 30 29 7d 2c 73 65 74 43 75 72 72 65 6e 74 50 61 67 65 56 69 73 69 74 4b 65 79 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 70 21 3d 3d 65 26 26 28 70 3d 65 2c 74 28 29 29 2c 53 2e 66 6c 75 73 68 28 29 7d 29 2c 22 64 61 74 61 22 29 2c 77 72 69 74 65 4e 65 77 46 72 61 6d 65 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 28 6e 29 2c 53 2e 77 72 69 74 65 28 65 29 2c 74 28 29 2c 53 7d 29 29 2c 77 72 69 74 65 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 Data Ascii: rPageContent:function(){g(),u.y.set("pageContent",void 0)},setCurrentPageVisitKey:hj.tryCatch((function(e){p!==e&&(p=e,t()),S.flush()}),"data"),writeNewFrame:hj.tryCatch((function(e,n){return t(n),S.write(e),t(),S})),write:hj.tryCatch((function(e,t,n,r){v
2024-12-20 18:03:40 UTC	16384	IN	Data Raw: 74 6f 72 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 74 2e 73 65 73 73 69 6f 6e 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6e 3d 68 6a 2e 73 74 6f 72 65 2e 73 65 73 73 69 6f 6e 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 2e 63 72 65 61 74 65 64 22 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 72 2e 66 5f 2e 6e 6f 77 28 29 2b 61 3e 6e 2b 69 29 7b 76 61 72 20 6f 3d 69 2d 28 72 2e 66 5f 2e 6e 6f 77 28 29 2d 6e 29 3b 6f 3c 30 26 26 28 6f 3d 30 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 65 28 29 2c 68 6a 2e 73 74 6f 72 65 2e 73 65 73 73 69 6f 6e 2e 73 65 74 28 22 73 65 73 73 69 6f 6e 22 2c 6e 75 6c 6c 29 2c 68 6a 2e 65 76 65 6e 74 53 74 72 65 61 6d 2e 63 6c 6f 73 65 28 29 2c 68 6a 2e 6d Data Ascii: tore)\|\|void 0===t\|\|!t.session)return!0;var n=hj.store.session.get("session.created");if("number"==typeof n&&r.f_.now()+a>n+i){var o=i-(r.f_.now()-n);o<0&&(o=0),setTimeout((function(){try{e(),hj.store.session.set("session",null),hj.eventStream.close(),hj.m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49789	142.250.181.130	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:39 UTC	996	OUT	GET /td/ga/rul?tid=G-H07SGNNMD6&gacid=697303844.1734717810&gtm=45je4cc1v9126439587za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2138611330 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:40 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 20 Dec 2024 18:03:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 20-Dec-2024 18:18:39 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 18:03:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-12-20 18:03:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49788	172.217.19.238	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:39 UTC	1387	OUT	POST /g/collect?v=2&tid=G-H07SGNNMD6&gtm=45je4cc1v9126439587za200&_p=1734717812972&_gaz=1&gcd=13l3l3l3l2l1&npa=0&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&ul=en-us&sr=1280x1024&cid=697303844.1734717810&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&dt=Inbox%20Health&sid=1734717816&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=23261 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://patient.inboxhealth.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:40 UTC	854	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://patient.inboxhealth.com Date: Fri, 20 Dec 2024 18:03:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49790	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:39 UTC	731	OUT	GET /v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:40 UTC	1356	IN	HTTP/1.1 200 OK Connection: close Content-Length: 200 Last-Modified: Fri, 11 Oct 2024 20:56:26 GMT ETag: "3437aaddcdf6922d623e172c2d6f9278" Cache-Control: max-age=31536000 Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report content-security-policy-report-only: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report origin-agent-cluster: ?1 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 299518 Date: Fri, 20 Dec 2024 18:03:40 GMT Via: 1.1 varnish X-Request-ID: ae1f9c70-2f79-4cee-8f86-083010b3b772 X-Served-By: cache-ewr-kewr1740078-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: *
2024-12-20 18:03:40 UTC	75	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 37 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:40 UTC	200	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 6a 73 2f 6d 2d 6f 75 74 65 72 2d 31 35 61 32 62 34 30 61 30 35 38 64 64 66 66 31 63 66 66 64 62 36 33 37 37 39 66 65 33 64 65 31 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js"></script></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49792	52.222.144.10	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:40 UTC	851	OUT	GET /assets/ih-logo-white4-58cda4a1a0dab88ce4a456751874e449.png HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717816.60.0.0
2024-12-20 18:03:41 UTC	767	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 30857 Connection: close Date: Fri, 20 Dec 2024 18:03:42 GMT Last-Modified: Wed, 24 Feb 2021 01:52:03 GMT ETag: "0701abc12c3b92c3ba42c9cfece5a744" Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7277af1f0e97793d2cf0976629e553ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: ZSdAQSajcuc9BD7_wnLZe18gg9tpJ53BNf59EIrOeTpIu-MaKpw48A== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:41 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 bb 67 54 53 5b d7 30 9a 10 8a 88 84 a6 a0 40 00 a9 16 7a 0d 84 22 bd 49 ef 4a ef 48 49 68 a1 43 22 22 41 04 14 a4 37 a5 8a 28 12 40 7a 89 1a 40 a4 09 82 74 88 a0 80 12 29 22 4d da dd 9c e7 39 9e f3 7d e3 de 77 bc 7f 6e 06 09 c9 5a 73 cd 35 7b d9 6b ef 04 63 43 6d fa d3 ec a7 41 20 10 bd ae 8e 86 29 08 44 d3 0b 7c df 39 45 0d 7c e6 84 be 72 07 fe d1 a2 74 6c 02 41 20 51 be 93 37 38 b4 54 05 0d 02 51 83 bc cc ad 83 ac 0d ae 2b b8 20 7d 45 9d 5c 91 ce 6e a2 a1 be 28 d0 c9 4b 51 25 14 e5 e4 e2 ed 16 c4 e3 ec e6 e1 e5 a7 c4 bb d6 d2 c1 cb e3 e5 aa c4 6b 25 63 20 6e 80 52 77 f3 f4 d2 09 0f 70 33 0b 37 34 77 09 f7 76 91 77 e5 55 51 e6 51 0c 55 00 10 f8 ba 05 39 f1 84 fa fa f8 05 2a 84 2a f1 fe 85 57 01 f8 7e 32 2c c6 cb f3 17 48 Data Ascii: gTS[0@z"IJHIhC""A7(@z@t)"M9}wnZs5{kcCmA )D\|9E\|rtlA Q78TQ+ }E\n(KQ%k%c nRwp374wvwUQQU9**W~2,H
2024-12-20 18:03:41 UTC	1071	IN	Data Raw: d6 c9 57 6a 47 c7 99 0a 2b 72 f2 83 6c f7 42 87 96 b8 4e b6 be 59 fe 01 3e 38 ef 4c 2a 6b c2 cf af 0c d2 09 3b 6c 9c 2f 15 3e c3 a9 75 36 33 06 d2 9a 8c ee cb 14 a3 8f cc b2 fe 15 45 b5 51 d0 ee 78 8b 57 d7 60 a9 35 eb c6 0b 7a e4 51 6a 49 24 d0 b6 3c cd ee ae 81 3c 2d f7 7b 0f fd 60 0c f4 2d cb 1f f8 9f c9 3b 34 3f e3 8d a4 8d 01 86 50 1f 3d 57 6f c7 5a 60 fd 81 d4 fa e5 12 a9 95 cc 48 5f c3 66 88 73 ab b5 ae 9a b0 79 f1 01 2e c7 6c a7 30 c2 29 a0 40 f1 c2 c4 f1 fe 15 11 08 a7 c1 81 5d d4 5d cf b6 59 cb 15 d0 1c 3f 2b 25 27 fd f3 bc 1c 2d 53 33 83 41 28 8f 45 cf 5f e7 0e c2 d0 8e 0f c5 13 e0 11 b3 82 de 91 ec 63 d0 0e a0 48 e3 73 2c 3a a5 82 75 11 3f 98 14 cb eb d8 8e 32 60 8f d5 59 3c 07 07 f0 5e 04 ae f1 e4 28 fe 76 86 bc 6c 98 9a 62 2e ec da 2b 59 b0 Data Ascii: WjG+rlBNY>8L*k;l/>u63EQxW`5zQjI$<<-{`-;4?P=WoZ`H_fsy.l0)@]]Y?+%'-S3A(E_cHs,:u?2`Y<^(vlb.+Y
2024-12-20 18:03:41 UTC	13402	IN	Data Raw: 36 c4 de 3c 03 f0 61 9a 6d 39 80 6d 4a 51 a6 ff 3d cc 63 79 7a e9 60 14 7c 41 09 3a c2 12 ac 04 37 7c f4 09 f3 d5 c7 a8 db a5 ca 2e b0 d2 09 05 72 0a 21 09 4e ec da d5 85 44 4f d3 09 7f 63 13 35 b2 3c 43 43 7e f1 e2 eb 3b ae 40 9e 87 6b 36 df b6 92 aa cd fe f0 e3 75 4f d6 1d 19 9f e5 80 e0 02 6f 7a b6 2e 36 8b 91 41 c2 42 b5 ae e1 f2 17 3b e2 68 97 65 bd c3 94 7c 90 33 3d 49 c3 a9 f0 97 e0 a1 b3 0c c5 8b b4 42 c8 a0 cd c5 f6 8b ff e2 68 e9 08 88 a3 ac 89 4f 1e ca 75 31 db 9a a3 e0 3b 8b ad c0 2f dc c3 aa 04 49 8c 7f cc e1 7f 17 a2 27 d1 45 c0 30 96 bf 00 d6 16 80 5b 9a 1d 85 ca f5 a3 15 d1 85 5c 8a 7f 4a 21 68 97 4a 27 39 23 f7 94 8d 51 30 ed 50 bc 3b 3b 0d 84 ec 34 9b 87 0e 00 03 8d cc ef 31 ba bd 7e 13 a9 fd e7 93 e8 ca 47 14 d9 3a 05 be eb d8 ce 8b fe Data Ascii: 6<am9mJQ=cyz`\|A:7\|.r!NDOc5<CC~;@k6uOoz.6AB;he\|3=IBhOu1;/I'E0[\J!hJ'9#Q0P;;41~G:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49791	3.132.245.25	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:40 UTC	845	OUT	GET /api/patient/v1/enterprises/unauthenticated/logo?id=7272 HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717816.60.0.0
2024-12-20 18:03:41 UTC	390	IN	HTTP/1.1 200 OK Cache-Control: max-age=0, private, must-revalidate Content-Disposition: inline Content-Length: 57284 Content-Type: image/png Date: Fri, 20 Dec 2024 18:03:41 GMT Etag: W/"08fe136e3cf736a032ef3eaa188068dd" Strict-Transport-Security: max-age=315360000; preload Vary: Origin X-Request-Id: 11b90c8b-0f8b-42b2-a88d-4eea551a210f X-Runtime: 0.011076 Connection: close
2024-12-20 18:03:41 UTC	796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 0e 00 00 02 d0 08 02 00 00 00 9f 58 a5 72 00 00 df 8b 49 44 41 54 78 9c ec dd 05 74 54 d7 de 36 f0 cc 4c 5c 88 0b 21 40 04 12 20 40 70 87 52 8a b4 a5 2d a5 d0 de 1a 55 2a 58 b9 2d d6 e2 c5 29 56 9c 52 b4 42 71 77 0b 10 22 c4 dd dd dd 33 c9 f8 77 28 f7 eb 5b c2 90 8c 9c 73 f6 99 c9 f3 5b ac 77 bd f7 de 64 ef ff e4 0c 61 3f b3 8d af 00 00 00 00 00 00 78 06 df 00 00 00 00 00 00 e0 19 88 0a 00 00 00 00 00 a0 04 a2 02 00 00 00 00 00 28 81 a8 00 00 00 00 00 00 4a 20 2a 00 00 00 00 00 80 12 88 0a 00 00 00 00 00 a0 04 a2 02 00 00 00 00 00 28 81 a8 00 00 00 00 00 00 4a 20 2a 00 00 00 00 00 80 12 88 0a 00 00 00 00 00 a0 04 a2 02 00 00 00 00 00 28 81 a8 00 00 00 00 00 00 4a 20 2a 00 00 00 00 00 80 12 88 0a 00 Data Ascii: PNGIHDRXrIDATxtT6L\!@ @pR-UX-)VRBqw"3w([s[wda?x(J (J (J
2024-12-20 18:03:41 UTC	2372	IN	Data Raw: bf 7c 67 40 02 f5 95 57 93 72 65 72 c2 03 6f 91 54 76 28 34 e5 bf e7 83 2f 26 e4 50 39 a7 e5 2f ce 28 af dd 76 3f 6e c5 f5 70 2a 3f b0 53 1e 00 00 00 00 68 00 51 81 43 ca 1a 9a d6 dc 8a 3a 19 9d 29 51 79 ae 40 28 96 fe 19 91 be f8 6a 68 52 49 35 a3 b5 b5 a0 b8 4e 48 8d fb ef a4 16 48 d5 99 e2 a0 02 c3 92 6b 61 37 53 f2 99 2b 0c 00 00 00 00 b4 81 a8 c0 15 e1 79 65 8b af 84 a6 94 6a 32 e2 cf af 6e 58 73 3b f2 48 58 8a fc 79 d3 10 8c 89 c8 2f 5f 76 2d 3c 4f a3 f9 01 2a 5a 1c 0d 4b 3d 1c 4a a0 6c 00 00 00 00 68 15 a2 02 27 24 95 54 ed 7c 98 20 6c 6d e9 4e 4b 14 06 b7 52 0a b6 dc 8b 6d 92 ca e8 ab ab 15 21 39 a5 db ee c7 6a 55 b6 81 c1 ed d4 82 5f 43 92 11 16 00 00 00 00 b8 06 51 81 bc 82 9a 86 6d f7 e3 d4 5a bd f3 3c d1 05 15 ab 6f 46 56 35 8a b4 6f aa 55 19 Data Ascii: \|g@WreroTv(4/&P9/(v?np?ShQC:)Qy@(jhRI5NHHka7S+yej2nXs;HXy/_v-<OZK=Jlh'$T\| lmNKRm!9jU_CQmZ<oFV5oU
2024-12-20 18:03:41 UTC	538	IN	Data Raw: fe 8a cc d8 f5 30 e1 db f3 c1 0b 2e 85 5c 49 cc 65 e7 ec 57 00 00 00 80 96 71 28 2a 50 c3 be 7a b1 4e ae ee 38 13 9b d5 a4 e6 b1 42 83 3a 39 32 54 4c cb 78 bc c7 77 c0 69 f0 8d 1d ac 2d 58 be 0e c2 dd ce 8a c7 6b e5 ae ba 06 d6 df 30 26 86 02 41 6b 55 3d 8f 48 2a 3b 19 9d 39 f7 7c d0 e9 98 cc e2 e7 9c f4 55 58 23 3c 16 99 fe dd c5 e0 fb 19 45 5a 94 09 00 00 00 40 03 0e 45 85 9a 26 b1 81 6e de 84 5b d3 28 f6 4f 57 6f 62 c1 d1 d2 cc 8b c4 1a 24 27 4b 33 23 4d b7 49 f8 75 b0 a7 b7 98 96 f5 71 6d bd bb 7a 11 db 9f be 5b 9a 68 78 12 54 46 45 ed 0f 57 42 2f c4 67 ab 72 5e 53 5d 93 64 7f 70 d2 ee c0 04 b1 8c bd c3 9d 00 00 00 00 9a e1 50 54 90 e8 f2 a8 e8 5a 52 9e ba 3b 16 c6 74 75 65 a8 98 16 68 b3 3b 79 98 bb 33 8d 95 b4 8c cf e3 0d f7 70 69 f5 cb d8 9f 86 b2 Data Ascii: 0.\IeWq(PzN8B:92TLxwi-Xk0&AkU=H;9\|UX#<EZ@E&n[(OWob$'K3#MIuqmz[hxTFEWB/gr^S]dpPTZR;tueh;y3pi
2024-12-20 18:03:41 UTC	4744	IN	Data Raw: a4 65 0b d4 33 1a ef c3 78 c1 6f f8 76 36 51 ed 9e 38 2b 13 63 a6 8b 69 a6 93 8d aa 59 ab b6 49 bc 2b 30 81 96 b9 32 91 54 76 3c 2a 43 fb 76 00 00 00 00 d4 c2 a1 a8 60 61 a4 f3 51 21 38 bb 44 dd cd d9 af fb 76 b6 67 eb 10 d2 51 9e ed b5 6f 84 2a d8 da 8c c1 01 ba 93 95 d9 cb 2a c7 27 2b f5 77 0e 68 c9 4b 85 0b a4 9f 38 f0 28 b9 a6 91 b6 fb da 1e e5 94 16 3d e7 7c 55 00 00 00 00 86 70 28 2a 98 19 19 f2 35 3d b1 9e 23 1a c4 d2 88 fc 72 b5 be c5 c4 50 30 ad 7f 57 86 ea f9 37 6f 27 6b 2d 57 1f 3d 61 66 24 78 b7 8f 97 f6 ed 3c cf 7b 7d bd 54 3f ce d5 ca 94 d5 a8 e0 6c 65 a6 62 ae 8b cc 2f 8f c8 53 ef 9d d0 32 b9 42 71 2b 35 9f c6 06 01 00 00 00 5a c5 a1 a8 40 c5 04 96 47 7e 4c 08 cf 2b 53 f7 5b 06 76 72 54 71 17 af 36 de ec e9 4e 57 53 a3 bc da f7 65 e6 8e 85 Data Ascii: e3xov6Q8+ciYI+02Tv<Cv`aQ!8DvgQo'+whK8(=\|Up(5=#rP0W7o'k-W=af$x<{}T?leb/S2Bq+5Z@G~L+S[vrTq6NWSe
2024-12-20 18:03:41 UTC	5930	IN	Data Raw: 99 b1 80 cf 23 fd 5a ff 27 a6 a0 e2 fb cb a1 d1 05 15 a4 0b 01 00 00 00 50 15 a2 02 83 52 4a ab 37 fb c7 8a a5 6d 37 27 f0 79 3c 97 76 66 bd 5c ed 5e ec e2 3a d5 cf f3 eb 61 3d 96 8c eb bb ed cd a1 47 de 1b bd 7b ca 88 0d 13 07 2d 1b d7 ef db 17 7a 7d 39 a4 fb fb fd ba 50 03 fd 97 ba 76 18 d2 d9 a9 9f 9b 83 9f ab bd af 8b ad 8f 93 8d 97 43 3b 77 3b 2b 37 6b 0b 17 2b 73 ea 0f 15 00 3c ec ac ba 3a 5a 77 77 b6 ed dd de 8e fa ca 41 9d 9c 86 bb 3b bf e0 d5 fe 95 ee 1d a9 b0 f1 f9 e0 6e 73 47 f5 5a 3a ae 1f 15 2a f6 4c 19 f1 db fb 2f fe fa ce a8 ad 93 86 52 c1 e3 8b a1 dd de ec e5 3e dc c3 d9 db d1 9a 0a 2a 3c d6 43 44 6d 93 78 f3 bd 98 df c2 53 11 1d 01 00 00 40 27 20 2a 30 25 a3 bc 76 93 7f 8c 48 2a 23 5d 08 7b a8 c1 b7 93 a5 59 5f 37 87 d7 7d 3b cf 18 de 63 Data Ascii: #Z'PRJ7m7'y<vf\^:a=G{-z}9PvC;w;+7k+s<:ZwwA;nsGZ:L/R><CDmxS@' 0%vH#]{Y_7};c
2024-12-20 18:03:41 UTC	1664	IN	Data Raw: 37 bf fc b2 2f 23 23 43 cb 46 a6 4e 7d db cb d3 8b 96 7a f4 0f f5 4f f9 e7 9f 7f 61 63 63 c3 50 fb e9 e5 b5 4c ac 3e e2 f3 79 5f 0f eb f1 d1 00 6f 13 43 95 e6 43 ba 38 b4 5b f3 ca c0 5e ae 76 b4 57 42 c9 ac a8 ad 10 8a 98 68 19 74 0e a2 c2 53 d8 9e 55 10 49 14 18 71 e9 2c bf de 7e 0b 17 2c e2 c2 9f 95 2b 7e 3c 72 e4 68 8f 1e 3d 98 7e c9 4f 3e 63 ae ad ab 65 ba a3 36 c8 ff 9e ff b5 6b 57 49 57 f1 94 b0 b0 d0 53 a7 4f 91 ae 42 0f 89 25 e2 75 eb d6 08 85 5a dd 75 6d 65 65 b5 63 c7 ae 8d 1b 7e 5a b4 f0 7b 86 7e b1 b8 38 bb d0 f5 92 9f f5 c6 eb 93 18 2a 7b f1 0f 4b 0f 1d 3a fa e6 9b 93 99 2b be ac 9e 91 39 c0 69 fd bb 8e f4 54 ef 67 6e 61 6c f8 dd a8 5e 5e 0e ed 98 a8 a7 a4 0e d7 b1 c3 63 88 0a 4f 61 79 af 82 5c ae 60 f9 7e 68 a0 91 ab ab eb 98 31 2f 71 e1 cf Data Ascii: 7/##CFN}zOaccPL>y_oCC8[^vWBhtSUIq,~,+~<rh=~O>ce6kWIWSOB%uZumeec~Z{~8*{K:+9iTgnal^^cOay\`~h1/q
2024-12-20 18:03:41 UTC	8302	IN	Data Raw: 8c dc b9 73 57 4f df 5e ec 77 7d fb f6 ed ac 2c f6 ae 59 a8 aa aa 3a 4d e2 c2 35 2f 4f af 1d 3b 76 8e 1d 3b 8e f8 39 54 76 76 76 73 e7 fe 77 c1 82 85 ec ef 6e 97 48 a5 47 8e 1c 62 b9 53 d0 18 ed 67 0d d1 f2 89 61 11 dd 37 a6 21 2a c0 13 88 0a 4f b1 33 d7 ea b4 32 cd e4 20 2a 00 27 55 57 57 5f bf ce f6 fd c1 e6 e6 e6 2b 57 ae 9a 34 e9 4d 96 fb 6d 41 bb 76 d6 eb d7 6f 18 37 76 3c cb fd 2a 0c 14 c7 8f ff c5 5a 77 67 cf 9e 11 89 d9 de c5 38 74 c8 d0 2d 5b b6 39 38 30 be 2d 41 75 63 c6 bc b4 61 c3 46 1b 6b 9a 77 88 b6 2a 38 24 38 3b 3b 8b e5 4e 41 33 96 26 34 df 77 96 54 4a c3 6a c3 47 39 a5 da 37 f2 6f 88 0a f0 04 a2 c2 53 4c 8d 04 e6 0c 5c 79 d8 b2 64 3a 7e 47 00 d0 ee dc b9 b3 4d 22 56 c7 8e ce 4e ce 5b b7 fc 3c 70 e0 40 36 3b 55 85 91 91 d1 bc 79 f3 3f fb Data Ascii: sWO^w},Y:M5/O;v;9TvvvswnHGbSga7!O32 'UWW_+W4MmAvo7v<Zwg8t-[980-AucaFkw8$8;;NA3&4wTJjG97oSL\yd:~GM"VN[<p@6;Uy?
2024-12-20 18:03:41 UTC	8082	IN	Data Raw: 53 31 5f 3b fe f0 c3 64 79 01 81 c6 29 c9 c9 49 13 c6 8f db b5 eb 47 cc eb bb fe 29 25 25 65 c6 8c 69 6b d6 ae ae aa ae c2 1f dd d5 c5 ad 53 27 38 76 8d 41 d0 cd 2a 50 f2 2b 6a ce a7 66 a1 1b ff 3d aa 0a 82 45 dd da da eb e3 ee 3e c4 e5 72 be 61 ea c5 0f 68 14 28 15 70 e8 69 6f ea 6e aa 4b 3a 8b 0f 7b f9 a6 6a 75 f8 fd 2a 64 8d e1 00 db 8d 1d 1b a8 a6 4a e6 8e d4 f3 ac e7 4b 97 2d 5e b8 70 c1 b3 67 4f 71 c6 15 8b c5 17 2e 9c 1f 33 66 d4 89 13 c7 a9 a2 05 67 e8 77 ba 75 eb e6 e4 e4 8c 39 a8 89 89 c9 90 21 43 31 07 7d 4b 24 16 9d bf 70 8e 7a ce 4f 9d 3a 59 57 87 75 aa 33 fb 45 f6 f2 a0 65 f3 e7 cf 79 fc 84 cc b2 37 01 5f 30 65 ca 14 22 a1 c1 c7 20 9d 55 a0 fc f6 30 3b e7 0d 8e c3 bf df 52 12 f0 e7 77 71 73 32 d2 c6 16 51 ee af 05 d8 d8 ba 30 03 a4 a0 54 c0 Data Ascii: S1_;dy)IG)%%eikS'8vAP+jf=E>rah(pionK:{judJK-^pgOq.3fgwu9!C1}K$pzO:YWu3Eey7_0e" U0;Rwqs2Q0T
2024-12-20 18:03:41 UTC	10674	IN	Data Raw: 4b 7b b4 6d db 16 fc eb 32 e5 05 f2 cb 97 07 99 98 98 62 8f 0c 00 a0 1f 94 0a 80 1e 2a f2 fc 39 9d 5c 55 15 04 64 d3 b8 f8 30 bb 5a 24 9b 67 03 d3 28 31 31 b1 f4 4d 29 fe b8 11 24 1a ba cb b0 d8 d8 db 29 29 c9 a4 b3 00 0c 55 58 58 18 1a 1a 52 87 bd 59 16 47 8e 33 6b d6 1c 47 47 27 cc 71 01 00 88 40 a9 00 68 63 a8 a6 34 bd 83 13 d9 86 48 95 42 11 34 4e fd 2c 52 fd 88 22 a3 22 89 f4 6a 94 55 52 39 b9 bd 7b f7 48 e1 50 11 f0 1f 42 a1 30 24 24 a8 a4 b4 04 7f e8 51 a3 46 77 ea d4 09 7f 5c 00 00 22 50 2a 00 3a b5 31 d0 ea ef 64 41 36 87 df d3 72 ca 6a eb c8 e6 c0 64 35 35 35 77 ee dc 26 12 ba b8 b8 38 39 39 89 48 68 59 95 f1 34 03 36 81 80 ff da b4 69 03 f5 de c0 1f f7 8b 9e bd 86 0d 1b 8e 3f 2e 00 00 1d 28 15 00 cd fa 3b 5b d8 e8 aa 13 4c 40 28 ae 3f ff 20 8b Data Ascii: K{m2b9\Ud0Z$g(11M)$))UXXRYG3kGG'q@hc4HB4N,R""jUR9{HPB0$$QFw\"P:1dA6rjd555w&899HhY46i?.(;[L@(?
2024-12-20 18:03:41 UTC	5710	IN	Data Raw: fa fa ad 5d bb 4e 2e 93 f3 b3 bb cc c9 99 f1 f1 09 1c bd f8 5d 77 dd cd e9 cd c5 95 2b 57 3a 39 99 ef 6d 0e 67 67 e7 e7 9f 7f c1 d9 c9 99 b7 3d 8a 45 e2 90 90 50 23 5f 64 d6 ac d9 a1 46 bf 88 c5 b9 ed b6 db 4d 38 bc 64 ea d4 69 d1 51 d1 a6 7a 35 8b 43 32 fc 9d 77 de 29 74 29 cc 1d a2 02 e8 a4 b9 a7 ff 44 25 1f bd ed 59 90 2a 99 85 46 85 b9 73 e7 6d 7c f9 95 a5 4b 96 ce 9e 35 67 f6 ac d9 a6 dd ae 5f b0 f0 f1 c7 9e 78 e3 8d cd b6 b6 76 42 bf 51 53 7a e4 91 47 5f 7c e1 0f 4b 16 73 74 d0 ae 5f fd c4 9a 35 6b d6 1a 59 48 f2 c9 be f1 fa 9b cb 96 de 48 5e 73 d6 4c 53 6e 4b 16 2f d9 b8 f1 d5 15 2b 6e 32 c9 c1 e4 ce f4 e9 33 3e f8 e0 af 77 fe fa ae b9 73 e6 99 f6 08 8c dd 16 cc 5f f0 e4 9a b5 cf 3d b7 81 bb 37 42 f2 fc db 6f bf b3 62 f9 0a 93 9f 6f 8b 6e 58 fc c2 Data Ascii: ]N.]w+W:9mgg=EP#_dFM8diQz5C2w)t)D%Y*Fsm\|K5g_xvBQSzG_\|Kst_5kYHH^sLSnK/+n23>ws_=7BobonX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49794	216.198.54.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:40 UTC	539	OUT	GET /web_widget/classic/latest/web-widget-chat-sdk-bcac9f6.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:41 UTC	1183	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:41 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 222450 Connection: close x-amz-id-2: SJ0heefRJ0FVVVEv53+g+4ceyJiCBTGSKpG/mUIAKjrOTIgi0EfYOwVG0UVnJViZrQ1/s+0DeJE= x-amz-request-id: GHTNMSZN58NDTG50 x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Dec 2024 09:50:44 GMT ETag: "08a68a7308737a004b2991aa3dd00688" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Wed, 17 Dec 2025 09:50:43 GMT x-amz-version-id: FgS14LhTSz.Jo3JnWZecEkMthC.OfVgM CF-Cache-Status: HIT Age: 192870 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z%2BnjbqX3XgvBr4Belb3pVFXkT20JjEjwcDdvdkcx9caUIXuhaZ8TxGnGzFLi9PCJI5ayOhQfns0BkH9rxO5ibb4K%2BRBwrOEWx9ojWB7AKsTsG9csMRax%2FEhivO%2FThZYJTRcrw5Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518cee491c0c90-EWR
2024-12-20 18:03:41 UTC	186	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d 77 69 64 67 65 74 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget
2024-12-20 18:03:41 UTC	1369	IN	Data Raw: 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 35 38 5d 2c 7b 34 37 31 35 34 3a 65 3d 3e 7b 76 61 72 20 74 3b 77 69 6e 64 6f 77 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6f 29 7b 69 66 28 74 5b 6f 5d 29 72 65 74 75 Data Ascii: -sdks/web-widget/getting-started/legal/ */(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9758],{47154:e=>{var t;window,t=function(){return function(e){var t={};function r(o){if(t[o])retu
2024-12-20 18:03:41 UTC	1369	IN	Data Raw: 65 62 5f 73 64 6b 21 2e 2f 73 72 63 2f 77 65 62 5f 73 64 6b 2e 6a 73 22 29 7d 28 7b 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f Data Ascii: eb_sdk!./src/web_sdk.js")}({"./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/
2024-12-20 18:03:41 UTC	1369	IN	Data Raw: 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 73 72 63 2f 6a 78 2f 63 6f 72 65 2f 41 73 73 65 72 74 2e 6a 73 22 29 2c 6e 3d 72 28 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 Data Ascii: vendor/jxml/src/jx/core/Assert.js"),n=r("./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs/webpa
2024-12-20 18:03:41 UTC	1369	IN	Data Raw: 28 22 77 69 6e 33 32 22 29 2c 4c 3d 2d 31 21 3d 3d 73 2e 69 6e 64 65 78 4f 66 28 22 6d 61 63 69 6e 74 6f 73 68 22 29 7c 7c 2d 31 21 3d 3d 73 2e 69 6e 64 65 78 4f 66 28 22 6d 61 63 20 6f 73 20 78 22 29 2c 43 3d 22 68 74 74 70 73 3a 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 50 3d 72 2e 6c 61 6e 67 75 61 67 65 7c 7c 72 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 72 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 72 2e 73 79 73 74 65 6d 4c 61 6e 67 75 61 67 65 2c 41 3d 7b 6e 6f 42 6f 78 53 69 7a 69 6e 67 3a 45 3c 3d 37 2c 69 65 3a 7b 63 73 73 42 6f 74 74 6f 6d 52 69 67 68 74 3a 64 2c 63 73 73 46 69 78 65 64 3a 64 7c 7c 24 2c 62 75 67 67 79 43 53 53 3a 64 7c 7c 24 7d 7d 2c 44 3d 22 74 65 78 74 43 6f 6e Data Ascii: ("win32"),L=-1!==s.indexOf("macintosh")\|\|-1!==s.indexOf("mac os x"),C="https:"===document.location.protocol,P=r.language\|\|r.browserLanguage\|\|r.userLanguage\|\|r.systemLanguage,A={noBoxSizing:E<=7,ie:{cssBottomRight:d,cssFixed:d\|\|$,buggyCSS:d\|\|$}},D="textCon
2024-12-20 18:03:41 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 72 2e 70 6c 75 67 69 6e 73 26 26 72 2e 70 6c 75 67 69 6e 73 5b 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 5d 3b 69 66 28 74 29 72 65 74 75 72 6e 28 65 3d 72 2e 6d 69 6d 65 54 79 70 65 73 26 26 72 2e 6d 69 6d 65 54 79 70 65 73 5b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 5d 29 26 26 21 65 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 3f 6e 75 6c 6c 3a 74 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 29 74 72 79 7b 72 65 74 75 72 6e 28 74 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 2e 53 68 6f 63 6b 77 61 76 65 46 6c 61 Data Ascii: tion(){var e,t=r.plugins&&r.plugins["Shockwave Flash"];if(t)return(e=r.mimeTypes&&r.mimeTypes["application/x-shockwave-flash"])&&!e.enabledPlugin?null:t.description;if(window.ActiveXObject)try{return(t=new window.ActiveXObject("ShockwaveFlash.ShockwaveFla
2024-12-20 18:03:41 UTC	1369	IN	Data Raw: 73 6e 69 66 66 42 72 6f 77 73 65 72 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f Data Ascii: sniffBrowser=s,e.exports=a},"./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/
2024-12-20 18:03:41 UTC	1369	IN	Data Raw: 72 28 61 3d 30 3b 61 3c 6c 3b 61 2b 2b 29 69 5b 61 5d 7c 7c 28 61 3d 3d 6c 2d 31 3f 69 2e 70 6f 70 28 29 3a 69 5b 61 2d 2d 5d 3d 69 2e 70 6f 70 28 29 2c 6c 2d 2d 29 3b 69 2e 5f 64 69 72 74 79 3d 21 31 7d 69 66 28 21 31 3d 3d 3d 64 29 72 65 74 75 72 6e 20 73 26 26 28 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 73 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 29 2c 21 31 7d 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 73 5b 74 5d 2c 21 31 29 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 3d 73 5b 74 5d 3b 6f 26 26 28 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: r(a=0;a<l;a++)i[a]\|\|(a==l-1?i.pop():i[a--]=i.pop(),l--);i._dirty=!1}if(!1===d)return s&&(s.preventDefault(),s.returnValue=!1),!1},e.addEventListener&&e.addEventListener(t,s[t],!1))},l=function(t){var o=s[t];o&&(e.removeEventListener&&e.removeEventListener
2024-12-20 18:03:41 UTC	1369	IN	Data Raw: 65 5b 75 5d 3d 64 5b 75 5d 29 3b 72 65 74 75 72 6e 20 6f 2e 62 75 67 73 2e 6c 65 61 6b 73 4d 65 6d 6f 72 79 26 26 6f 2e 62 75 67 73 2e 6c 65 61 6b 73 4d 65 6d 6f 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 64 29 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 28 65 5b 74 5d 3d 6e 75 6c 6c 29 7d 29 29 2c 65 7d 6e 2e 65 78 74 65 6e 64 28 6e 29 3b 76 61 72 20 61 2c 69 3d 30 2c 6c 3d 5b 5b 5d 2c 5b 5d 2c 5b 5d 2c 5b 5d 5d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 65 3c 3d 69 3f 74 28 29 3a 6c 5b 65 5d 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 66 6f 72 28 3b 69 3c 65 3b 29 7b 69 2b 2b 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 6c 5b 69 5d 2e 6c 65 6e 67 74 68 3b 74 2b Data Ascii: e[u]=d[u]);return o.bugs.leaksMemory&&o.bugs.leaksMemory((function(){for(var t in d)d.hasOwnProperty(t)&&(e[t]=null)})),e}n.extend(n);var a,i=0,l=[[],[],[],[]];function c(e,t){e<=i?t():l[e].push(t)}function d(e){for(;i<e;){i++;for(var t=0;t<l[i].length;t+
2024-12-20 18:03:41 UTC	1369	IN	Data Raw: 28 22 46 75 6e 63 74 69 6f 6e 55 74 69 6c 73 2e 62 69 6e 64 20 2d 20 77 68 61 74 20 69 73 20 74 72 79 69 6e 67 20 74 6f 20 62 65 20 62 6f 75 6e 64 20 69 73 20 6e 6f 74 20 63 61 6c 6c 61 62 6c 65 22 29 3b 69 66 28 6f 28 65 2e 62 69 6e 64 29 26 26 21 28 22 70 72 6f 74 6f 74 79 70 65 22 69 6e 20 65 2e 62 69 6e 64 29 29 72 65 74 75 72 6e 20 65 2e 62 69 6e 64 2e 61 70 70 6c 79 28 65 2c 73 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 76 61 72 20 72 3d 73 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 26 26 74 3f 74 68 69 73 3a 74 2c 72 2e 63 6f 6e 63 61 74 28 Data Ascii: ("FunctionUtils.bind - what is trying to be bound is not callable");if(o(e.bind)&&!("prototype"in e.bind))return e.bind.apply(e,s.call(arguments,1));var r=s.call(arguments,2),n=function(){},a=function(){return e.apply(this instanceof n&&t?this:t,r.concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49797	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:41 UTC	622	OUT	GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:42 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 526 Last-Modified: Wed, 10 Jul 2024 20:09:27 GMT ETag: "d96c709017743c0759cf3853d1806ba5" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 806953 Date: Fri, 20 Dec 2024 18:03:41 GMT Via: 1.1 varnish X-Request-ID: b39f72b3-a5ee-47e7-85a8-9f9b3c0fda72 X-Served-By: cache-nyc-kteb1890029-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:42 UTC	526	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 68 74 74 70 73 3a 2f 2f 6d 2e 73 74 72 69 70 65 2e 6e 65 74 77 6f 72 6b 22 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 74 3d 2f 70 72 65 76 69 65 77 3d 74 72 75 65 2f 2e 74 65 73 74 28 6e 29 3f 22 69 6e 6e 65 72 2d 70 72 65 76 69 65 77 2e 68 74 6d 6c 22 3a 22 69 6e 6e 65 72 2e 68 74 6d 6c 22 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 6f 2e 73 72 63 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2e 63 6f 6e 63 61 74 28 6e 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 2e 6f 72 69 67 69 6e 3d 3d 3d 65 29 7b 76 61 Data Ascii: !function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49799	148.113.163.217	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:41 UTC	754	OUT	GET /usage.gif?token=f102e8a423c740618a77314a75eb71a6&correlationId=894e3009-6fff-4f1a-800c-409ff42aece2&application=inbox-patient-prod&x=a8625ea0-095d-4610-bd55-752f5d684afb& HTTP/1.1 Host: usage.trackjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:42 UTC	225	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:03:42 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Cross-Origin-Resource-Policy: cross-origin
2024-12-20 18:03:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49798	54.225.146.64	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:42 UTC	2160	OUT	GET /timeline/v2/jsonp/1?session=NDEwMTU4MjMy&bundle=MQ%3D%3D&key=MTgxMWNhMjA5NmQzODY3YjZhNWY%3D&lib=anM%3D&version=My4wLjA%3D&features=WyJ3cyJd&timeline=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 [TRUNCATED] Host: stats.pusher.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:42 UTC	167	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Fri, 20 Dec 2024 18:03:42 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49800	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:43 UTC	400	OUT	GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:43 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 526 Last-Modified: Mon, 07 Oct 2024 20:05:20 GMT ETag: "d96c709017743c0759cf3853d1806ba5" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 110788 Date: Fri, 20 Dec 2024 18:03:43 GMT Via: 1.1 varnish X-Request-ID: e3841072-a6ab-4574-abe7-0f5c95e1945a X-Served-By: cache-ewr-kewr1740031-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:43 UTC	526	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 68 74 74 70 73 3a 2f 2f 6d 2e 73 74 72 69 70 65 2e 6e 65 74 77 6f 72 6b 22 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 74 3d 2f 70 72 65 76 69 65 77 3d 74 72 75 65 2f 2e 74 65 73 74 28 6e 29 3f 22 69 6e 6e 65 72 2d 70 72 65 76 69 65 77 2e 68 74 6d 6c 22 3a 22 69 6e 6e 65 72 2e 68 74 6d 6c 22 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 6f 2e 73 72 63 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2e 63 6f 6e 63 61 74 28 6e 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 2e 6f 72 69 67 69 6e 3d 3d 3d 65 29 7b 76 61 Data Ascii: !function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49802	216.198.53.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:43 UTC	399	OUT	GET /web_widget/classic/latest/web-widget-chat-sdk-bcac9f6.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:43 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 222450 Connection: close x-amz-id-2: SJ0heefRJ0FVVVEv53+g+4ceyJiCBTGSKpG/mUIAKjrOTIgi0EfYOwVG0UVnJViZrQ1/s+0DeJE= x-amz-request-id: GHTNMSZN58NDTG50 x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Dec 2024 09:50:44 GMT ETag: "08a68a7308737a004b2991aa3dd00688" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Wed, 17 Dec 2025 09:50:43 GMT x-amz-version-id: FgS14LhTSz.Jo3JnWZecEkMthC.OfVgM CF-Cache-Status: HIT Age: 192872 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T6dVOMiqCOB%2BIYun0O4yk0bJeZOuvVwDNjicw%2BpfXVfYn1JMc%2FCJrDhJlOyy08lmIUb6iMip3OOtaThAlj%2FCqkVdfPOvVEqY1fJDojFagahoU1w6YOmBy%2Foh9YU%2B%2ByaefxvPyvA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518cfdea2543da-EWR
2024-12-20 18:03:43 UTC	180	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-
2024-12-20 18:03:43 UTC	1369	IN	Data Raw: 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 35 38 5d 2c 7b 34 37 31 35 34 3a 65 3d 3e 7b 76 61 72 20 74 3b 77 69 6e 64 6f 77 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6f 29 7b 69 66 28 74 5b 6f Data Ascii: widget-sdks/web-widget/getting-started/legal/ */(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9758],{47154:e=>{var t;window,t=function(){return function(e){var t={};function r(o){if(t[o
2024-12-20 18:03:43 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 77 65 62 5f 73 64 6b 21 2e 2f 73 72 63 2f 77 65 62 5f 73 64 6b 2e 6a 73 22 29 7d 28 7b 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f Data Ascii: name=web_sdk!./src/web_sdk.js")}({"./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs/webpack3/lo
2024-12-20 18:03:43 UTC	1369	IN	Data Raw: 65 72 74 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 73 72 63 2f 6a 78 2f 63 6f 72 65 2f 41 73 73 65 72 74 2e 6a 73 22 29 2c 6e 3d 72 28 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 Data Ascii: ert!./vendor/jxml/src/jx/core/Assert.js"),n=r("./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs
2024-12-20 18:03:43 UTC	1369	IN	Data Raw: 6e 64 65 78 4f 66 28 22 77 69 6e 33 32 22 29 2c 4c 3d 2d 31 21 3d 3d 73 2e 69 6e 64 65 78 4f 66 28 22 6d 61 63 69 6e 74 6f 73 68 22 29 7c 7c 2d 31 21 3d 3d 73 2e 69 6e 64 65 78 4f 66 28 22 6d 61 63 20 6f 73 20 78 22 29 2c 43 3d 22 68 74 74 70 73 3a 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 50 3d 72 2e 6c 61 6e 67 75 61 67 65 7c 7c 72 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 72 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 72 2e 73 79 73 74 65 6d 4c 61 6e 67 75 61 67 65 2c 41 3d 7b 6e 6f 42 6f 78 53 69 7a 69 6e 67 3a 45 3c 3d 37 2c 69 65 3a 7b 63 73 73 42 6f 74 74 6f 6d 52 69 67 68 74 3a 64 2c 63 73 73 46 69 78 65 64 3a 64 7c 7c 24 2c 62 75 67 67 79 43 53 53 3a 64 7c 7c 24 7d 7d 2c 44 3d 22 74 Data Ascii: ndexOf("win32"),L=-1!==s.indexOf("macintosh")\|\|-1!==s.indexOf("mac os x"),C="https:"===document.location.protocol,P=r.language\|\|r.browserLanguage\|\|r.userLanguage\|\|r.systemLanguage,A={noBoxSizing:E<=7,ie:{cssBottomRight:d,cssFixed:d\|\|$,buggyCSS:d\|\|$}},D="t
2024-12-20 18:03:43 UTC	1369	IN	Data Raw: 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 72 2e 70 6c 75 67 69 6e 73 26 26 72 2e 70 6c 75 67 69 6e 73 5b 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 5d 3b 69 66 28 74 29 72 65 74 75 72 6e 28 65 3d 72 2e 6d 69 6d 65 54 79 70 65 73 26 26 72 2e 6d 69 6d 65 54 79 70 65 73 5b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 5d 29 26 26 21 65 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 3f 6e 75 6c 6c 3a 74 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 29 74 72 79 7b 72 65 74 75 72 6e 28 74 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 2e 53 68 6f 63 6b 77 Data Ascii: h:function(){var e,t=r.plugins&&r.plugins["Shockwave Flash"];if(t)return(e=r.mimeTypes&&r.mimeTypes["application/x-shockwave-flash"])&&!e.enabledPlugin?null:t.description;if(window.ActiveXObject)try{return(t=new window.ActiveXObject("ShockwaveFlash.Shockw
2024-12-20 18:03:43 UTC	1369	IN	Data Raw: 73 28 29 3b 61 2e 73 6e 69 66 66 42 72 6f 77 73 65 72 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f Data Ascii: s();a.sniffBrowser=s,e.exports=a},"./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs/webpack3/lo
2024-12-20 18:03:43 UTC	1369	IN	Data Raw: 74 79 29 7b 66 6f 72 28 61 3d 30 3b 61 3c 6c 3b 61 2b 2b 29 69 5b 61 5d 7c 7c 28 61 3d 3d 6c 2d 31 3f 69 2e 70 6f 70 28 29 3a 69 5b 61 2d 2d 5d 3d 69 2e 70 6f 70 28 29 2c 6c 2d 2d 29 3b 69 2e 5f 64 69 72 74 79 3d 21 31 7d 69 66 28 21 31 3d 3d 3d 64 29 72 65 74 75 72 6e 20 73 26 26 28 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 73 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 29 2c 21 31 7d 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 73 5b 74 5d 2c 21 31 29 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 3d 73 5b 74 5d 3b 6f 26 26 28 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 Data Ascii: ty){for(a=0;a<l;a++)i[a]\|\|(a==l-1?i.pop():i[a--]=i.pop(),l--);i._dirty=!1}if(!1===d)return s&&(s.preventDefault(),s.returnValue=!1),!1},e.addEventListener&&e.addEventListener(t,s[t],!1))},l=function(t){var o=s[t];o&&(e.removeEventListener&&e.removeEventLi
2024-12-20 18:03:43 UTC	1369	IN	Data Raw: 28 75 29 26 26 28 65 5b 75 5d 3d 64 5b 75 5d 29 3b 72 65 74 75 72 6e 20 6f 2e 62 75 67 73 2e 6c 65 61 6b 73 4d 65 6d 6f 72 79 26 26 6f 2e 62 75 67 73 2e 6c 65 61 6b 73 4d 65 6d 6f 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 64 29 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 28 65 5b 74 5d 3d 6e 75 6c 6c 29 7d 29 29 2c 65 7d 6e 2e 65 78 74 65 6e 64 28 6e 29 3b 76 61 72 20 61 2c 69 3d 30 2c 6c 3d 5b 5b 5d 2c 5b 5d 2c 5b 5d 2c 5b 5d 5d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 65 3c 3d 69 3f 74 28 29 3a 6c 5b 65 5d 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 66 6f 72 28 3b 69 3c 65 3b 29 7b 69 2b 2b 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 6c 5b 69 5d 2e 6c 65 6e Data Ascii: (u)&&(e[u]=d[u]);return o.bugs.leaksMemory&&o.bugs.leaksMemory((function(){for(var t in d)d.hasOwnProperty(t)&&(e[t]=null)})),e}n.extend(n);var a,i=0,l=[[],[],[],[]];function c(e,t){e<=i?t():l[e].push(t)}function d(e){for(;i<e;){i++;for(var t=0;t<l[i].len
2024-12-20 18:03:43 UTC	1369	IN	Data Raw: 65 45 72 72 6f 72 28 22 46 75 6e 63 74 69 6f 6e 55 74 69 6c 73 2e 62 69 6e 64 20 2d 20 77 68 61 74 20 69 73 20 74 72 79 69 6e 67 20 74 6f 20 62 65 20 62 6f 75 6e 64 20 69 73 20 6e 6f 74 20 63 61 6c 6c 61 62 6c 65 22 29 3b 69 66 28 6f 28 65 2e 62 69 6e 64 29 26 26 21 28 22 70 72 6f 74 6f 74 79 70 65 22 69 6e 20 65 2e 62 69 6e 64 29 29 72 65 74 75 72 6e 20 65 2e 62 69 6e 64 2e 61 70 70 6c 79 28 65 2c 73 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 76 61 72 20 72 3d 73 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 26 26 74 3f 74 68 69 73 3a 74 2c 72 2e 63 Data Ascii: eError("FunctionUtils.bind - what is trying to be bound is not callable");if(o(e.bind)&&!("prototype"in e.bind))return e.bind.apply(e,s.call(arguments,1));var r=s.call(arguments,2),n=function(){},a=function(){return e.apply(this instanceof n&&t?this:t,r.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49803	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:43 UTC	686	OUT	GET /inner.html HTTP/1.1 Host: m.stripe.network Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:44 UTC	1100	IN	HTTP/1.1 200 OK Connection: close Content-Length: 930 Cache-Control: max-age=300, public Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src https://m.stripe.network https://m.stripe.com; default-src 'none'; font-src https://m.stripe.network https://fonts.gstatic.com; form-action 'none'; frame-src https://m.stripe.network https://js.stripe.com; img-src https://m.stripe.network https://m.stripe.com https://b.stripecdn.com; script-src https://m.stripe.network 'sha256-5DA+a07wxWmEka9IdoWjSPVHb17Cp5284/lJzfbl8KA=' 'sha256-/5Guo2nzv5n/w6ukZpOBZOtTJBJPSkJ6mhHpnBgm3Ls='; style-src https://m.stripe.network; report-uri https://q.stripe.com/csp-report strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff server: Fastly Accept-Ranges: bytes Age: 0 Date: Fri, 20 Dec 2024 18:03:44 GMT Via: 1.1 varnish X-Request-ID: 8757210d-26a8-4389-812f-542d6a39321d X-Served-By: cache-ewr-kewr1740068-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1734717824.682054,VS0,VE340 Vary: Accept-Encoding, Origin
2024-12-20 18:03:44 UTC	930	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 74 72 69 70 65 4d 2d 49 6e 6e 65 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 65 2e 64 65 66 65 72 3d 21 30 2c 65 2e 73 72 63 3d 22 6f 75 74 2d 34 2e 35 2e 34 34 2e 6a 73 22 2c 65 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 77 69 6e 64 6f 77 2e 53 74 72 69 70 65 4d 26 26 28 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 2f 70 69 6e 67 3d 66 Data Ascii: <!doctype html><html><head><meta charset="utf-8"><title>StripeM-Inner</title></head><body><script>!function(){var e=document.createElement("script");e.defer=!0,e.src="out-4.5.44.js",e.onload=function(){var e;window.StripeM&&(e=window.location.hash,/ping=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49804	66.102.1.156	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:43 UTC	906	OUT	POST /g/collect?v=2&tid=G-H07SGNNMD6&cid=697303844.1734717810&gtm=45je4cc1v9126439587za200&aip=1&dma=0&gcd=13l3l3l3l2l1&npa=0&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://patient.inboxhealth.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-12-20 18:03:44 UTC	854	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://patient.inboxhealth.com Date: Fri, 20 Dec 2024 18:03:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49806	148.113.163.217	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:43 UTC	511	OUT	GET /usage.gif?token=f102e8a423c740618a77314a75eb71a6&correlationId=894e3009-6fff-4f1a-800c-409ff42aece2&application=inbox-patient-prod&x=a8625ea0-095d-4610-bd55-752f5d684afb& HTTP/1.1 Host: usage.trackjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:44 UTC	225	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:03:43 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Cross-Origin-Resource-Policy: cross-origin
2024-12-20 18:03:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49785	44.217.82.191	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:44 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-12-20 18:03:44 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49805	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:44 UTC	551	OUT	GET /s/W/ws/Ov5-54Tk4fWLXRV2/c/1734717821195 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://patient.inboxhealth.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: w9NgD4kDNMpVsmRntHFU/Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-20 18:03:44 UTC	505	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:44 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=XyQUxDKAEXXmNN5sDIJiJH+krc3019ajgWUAPcyA2Cl1PB9RGGtiMthiSSxJ7gNPwMZjqUzeH5k5KRFtFsQ+Hzws0le4R4dG2AfNpXnOThfRVjss+n5CcKjq6bzk; Expires=Fri, 27 Dec 2024 18:03:44 GMT; Path=/ Set-Cookie: AWSALBCORS=XyQUxDKAEXXmNN5sDIJiJH+krc3019ajgWUAPcyA2Cl1PB9RGGtiMthiSSxJ7gNPwMZjqUzeH5k5KRFtFsQ+Hzws0le4R4dG2AfNpXnOThfRVjss+n5CcKjq6bzk; Expires=Fri, 27 Dec 2024 18:03:44 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49807	172.217.19.238	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:44 UTC	1533	OUT	POST /g/collect?v=2&tid=G-H07SGNNMD6&gtm=45je4cc1v9126439587za200&_p=1734717812972&gcd=13l3l3l3l2l1&npa=0&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&ul=en-us&sr=1280x1024&cid=697303844.1734717810&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EBAI&dl=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&dt=%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&sid=1734717816&sct=1&seg=1&_s=2&tfd=28286 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 458 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://patient.inboxhealth.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:44 UTC	458	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 26 5f 65 65 3d 31 26 5f 65 74 3d 36 26 64 70 3d 25 32 46 71 75 69 63 6b 50 61 79 25 33 46 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 74 6f 6b 65 6e 25 33 44 58 48 63 55 74 67 25 32 36 65 6e 74 65 72 70 72 69 73 65 5f 69 64 25 33 44 37 32 37 32 25 32 36 6c 61 6e 64 69 6e 67 5f 70 61 67 65 25 33 44 74 72 75 65 25 32 36 70 61 74 69 65 6e 74 5f 69 64 25 33 44 33 36 33 30 34 34 39 31 25 32 36 75 75 69 64 25 33 44 65 30 61 36 33 66 33 65 2d 63 64 36 62 2d 34 63 36 61 2d 62 37 33 37 2d 39 35 37 62 61 33 38 32 66 35 62 61 0d 0a 65 6e 3d 74 69 6d 69 6e 67 5f 63 6f 6d 70 6c 65 74 65 26 5f 65 65 3d 31 26 65 70 2e 6e 61 6d 65 3d 25 32 46 71 75 69 63 6b 50 61 79 25 33 46 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 74 6f 6b 65 6e 25 33 44 58 Data Ascii: en=page_view&_ee=1&_et=6&dp=%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5baen=timing_complete&_ee=1&ep.name=%2FquickPay%3Fconfirmation_token%3DX
2024-12-20 18:03:45 UTC	854	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://patient.inboxhealth.com Date: Fri, 20 Dec 2024 18:03:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49808	54.91.56.182	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:44 UTC	1977	OUT	GET /timeline/v2/jsonp/1?session=NDEwMTU4MjMy&bundle=MQ%3D%3D&key=MTgxMWNhMjA5NmQzODY3YjZhNWY%3D&lib=anM%3D&version=My4wLjA%3D&features=WyJ3cyJd&timeline=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 [TRUNCATED] Host: stats.pusher.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:44 UTC	167	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Fri, 20 Dec 2024 18:03:44 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49810	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:45 UTC	540	OUT	GET /out-4.5.44.js HTTP/1.1 Host: m.stripe.network Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.stripe.network/inner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:45 UTC	542	IN	HTTP/1.1 200 OK Connection: close Content-Length: 88793 Cache-Control: max-age=300, public Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff server: Fastly Accept-Ranges: bytes Age: 91 Date: Fri, 20 Dec 2024 18:03:45 GMT Via: 1.1 varnish X-Request-ID: 43c17a0b-0b41-4262-ba56-80deaa4db4b3 X-Served-By: cache-nyc-kteb1890073-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1734717826.700953,VS0,VE1 Vary: Accept-Encoding, Origin
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 76 61 72 20 53 74 72 69 70 65 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 5f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 5f 2e 65 78 70 6f 72 74 73 2c 5f 2c 5f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 5f 2e 6c 3d 21 30 2c 5f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 6f 28 65 29 7d 76 61 72 20 69 3d 6d 28 22 77 69 6e 22 29 2e 50 72 6f 6d 69 73 65 7c 7c 6d 28 22 50 50 72 6f 6d 69 73 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3d 6d 28 22 77 69 6e 22 29 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 6e 6f 77 3f 65 2e 6e 6f 77 28 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 74 3d 6d 28 22 6e 6f 77 22 29 28 29 3b 72 65 74 75 72 6e 7b 72 65 73 75 6c 74 3a 65 28 29 2c 64 75 72 61 74 69 6f 6e 3a 6d 28 22 6e 6f 77 22 29 28 29 2d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 65 3d 61 72 67 Data Ascii: l&&e!==Symbol.prototype?"symbol":typeof e},o(e)}var i=m("win").Promise\|\|m("PPromise");function c(){var e=m("win").performance;return e&&e.now?e.now():Date.now()}function u(e){var t=m("now")();return{result:e(),duration:m("now")()-t}}function a(){var e=arg
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 6e 3d 74 5b 65 5d 29 2c 6e 7d 28 45 3d 79 28 29 29 2e 5f 5f 72 65 77 69 72 65 5f 72 65 73 65 74 5f 61 6c 6c 5f 5f 7c 7c 28 45 2e 5f 5f 72 65 77 69 72 65 5f 72 65 73 65 74 5f 61 6c 6c 5f 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 45 2e 5f 5f 24 24 47 4c 4f 42 41 4c 5f 52 45 57 49 52 45 5f 52 45 47 49 53 54 52 59 5f 5f 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 29 3b 76 61 72 20 52 3d 22 5f 5f 49 4e 54 45 4e 54 49 4f 4e 41 4c 5f 55 4e 44 45 46 49 4e 45 44 5f 5f 22 2c 70 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 76 61 72 20 74 3d 62 28 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 5b 65 5d 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 Data Ascii: t.create(null),n=t[e]),n}(E=y()).__rewire_reset_all__\|\|(E.__rewire_reset_all__=function(){E.__$$GLOBAL_REWIRE_REGISTRY__=Object.create(null)});var R="__INTENTIONAL_UNDEFINED__",p={};function m(e){var t=b();if(void 0===t[e])return function(e){switch(e){cas
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 72 28 65 29 7d 6e 2e 64 28 74 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: r===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}n.d(t,"f",(function(){return _})),n.d(t,"c",(function(){return o})),n.d(t,"e",(function(){return i})),n.d(t,"a",(function(){return c})),n.d(t,"b",(function(){return u})),n.d(t,"d",(function(){return
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 6a 65 63 74 22 3d 3d 3d 72 28 65 29 3f 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 28 65 29 7d 29 29 7d 29 3a 28 6e 5b 65 5d 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 64 3a 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 28 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 76 61 72 20 74 3d 76 28 29 3b 64 65 6c 65 74 65 20 74 5b 65 5d 2c 30 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 68 28 29 5b 45 5d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 76 61 72 20 74 3d Data Ascii: ject"===r(e)?(Object.keys(e).forEach((function(t){n[t]=e[t]})),function(){Object.keys(e).forEach((function(t){O(e)}))}):(n[e]=void 0===t?d:t,function(){O(e)})}function O(e){var t=v();delete t[e],0==Object.keys(t).length&&delete h()[E]}function L(e){var t=
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3d 68 28 22 74 69 6d 65 72 22 29 28 74 68 69 73 2e 65 78 74 72 61 63 74 6f 72 29 2c 6e 3d 74 2e 72 65 73 75 6c 74 2c 72 3d 74 2e 64 75 72 61 74 69 6f 6e 2c 6f 3d 68 28 22 6e 6f 77 22 29 28 29 3b 72 65 74 75 72 6e 20 6e 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 68 28 22 6e 6f 77 22 29 28 29 2c 6e 3d 65 2e 61 73 79 6e 63 3f 74 2d 6f 3a 30 2c 69 3d 2b 28 72 2b 6e 29 2e 74 6f 50 72 65 63 69 73 69 6f 6e 28 35 29 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 3d 5f 28 65 29 3f 7b 76 61 6c 75 65 3a 65 2c 69 6e 74 65 72 6e 61 6c 56 61 6c 75 65 3a 65 2c 63 61 6c 63 75 6c 61 74 69 6f 6e 54 69 6d 65 4d 73 3a 69 7d 3a 7b 76 61 6c 75 65 3a 65 2e 76 Data Ascii: alue:function(e){if(e){var t=h("timer")(this.extractor),n=t.result,r=t.duration,o=h("now")();return n.then((function(e){var t=h("now")(),n=e.async?t-o:0,i=+(r+n).toPrecision(5);return"object"!==_(e)?{value:e,internalValue:e,calculationTimeMs:i}:{value:e.v
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 20 6e 3d 3d 3d 79 3f 76 6f 69 64 20 30 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6c 28 29 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 5f 28 65 29 3f 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 64 28 65 29 7d 29 29 7d 29 3a 28 6e 5b 65 5d 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 79 3a 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3d 6c 28 29 3b 64 65 6c 65 74 65 20 74 5b 65 5d 2c 30 3d 3d Data Ascii: return n===y?void 0:n}function v(e,t){var n=l();return"object"===_(e)?(Object.keys(e).forEach((function(t){n[t]=e[t]})),function(){Object.keys(e).forEach((function(t){d(e)}))}):(n[e]=void 0===t?y:t,function(){d(e)})}function d(e){var t=l();delete t[e],0==
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 29 29 3b 76 61 72 20 72 3d 6e 28 39 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 72 65 74 75 72 6e 20 5f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f Data Ascii: (function(){return m}));var r=n(9);function _(e){return _="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeo
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 68 61 73 68 65 64 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 66 75 6c 6c 48 61 73 68 4c 69 6d 69 74 3d 6e 2c 74 68 69 73 2e 74 6f 74 61 6c 48 61 73 68 4c 69 6d 69 74 3d 72 7d 72 65 74 75 72 6e 20 63 28 65 2c 5b 7b 6b 65 79 3a 22 73 68 6f 75 6c 64 48 61 73 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 68 65 64 43 6f 75 6e 74 3c 74 68 69 73 2e 74 6f 74 61 6c 48 61 73 68 4c 69 6d 69 74 7d 7d 2c 7b 6b 65 79 3a 22 69 73 4c 61 73 74 48 61 73 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 68 65 64 43 6f 75 6e 74 3d 3d 3d 74 68 69 73 2e 74 6f 74 61 6c 48 61 73 68 4c 69 6d 69 74 2d 31 7d 7d 2c 7b 6b 65 79 3a 22 73 68 6f 75 6c 64 50 61 72 74 69 61 6c 48 Data Ascii: hashedCount=0,this.fullHashLimit=n,this.totalHashLimit=r}return c(e,[{key:"shouldHash",value:function(){return this.hashedCount<this.totalHashLimit}},{key:"isLastHash",value:function(){return this.hashedCount===this.totalHashLimit-1}},{key:"shouldPartialH
2024-12-20 18:03:45 UTC	1378	IN	Data Raw: 53 5f 4c 49 4d 49 54 22 29 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 48 61 73 68 65 73 29 29 3b 63 61 73 65 22 71 75 65 72 79 22 3a 63 61 73 65 22 66 72 61 67 6d 65 6e 74 22 3a 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 61 78 28 31 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 48 61 73 68 65 73 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 30 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 70 6c 69 74 41 6e 64 48 61 73 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 61 75 74 68 6f 72 69 74 79 22 3d 3d 3d 74 26 26 65 26 26 6a 28 22 69 73 53 74 72 69 70 65 43 68 65 63 6b 6f 75 74 41 75 74 68 6f 72 69 74 79 22 29 28 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 6e 65 77 28 6a 28 Data Ascii: S_LIMIT"),this.remainingHashes));case"query":case"fragment":return Math.max(1,this.remainingHashes);default:return 0}}},{key:"splitAndHash",value:function(e,t,n){if("authority"===t&&e&&j("isStripeCheckoutAuthority")(e))return e;if(!e)return e;var r=new(j(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49811	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:46 UTC	530	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/c/1734717823807 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:46 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:46 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=pQwCjOlsMP9Y3Zr/0FQ59tQObiAevQMdCD1HRcZxFGVWRa9SyM/SrJrNx0hRjX8jbMqOjyEt+1VNBHT6uVmeeFIaqrPKE966DZ2MiCXtVVDgGYP5Mfo+XaUOM2OO; Expires=Fri, 27 Dec 2024 18:03:46 GMT; Path=/ Set-Cookie: AWSALBCORS=pQwCjOlsMP9Y3Zr/0FQ59tQObiAevQMdCD1HRcZxFGVWRa9SyM/SrJrNx0hRjX8jbMqOjyEt+1VNBHT6uVmeeFIaqrPKE966DZ2MiCXtVVDgGYP5Mfo+XaUOM2OO; Expires=Fri, 27 Dec 2024 18:03:46 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:46 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 32 36 35 30 33 5c 6e 32 36 39 36 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1734717826503\n2696\n1\n0\nn\n15000")
2024-12-20 18:03:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49812	108.158.75.118	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:48 UTC	353	OUT	GET /out-4.5.44.js HTTP/1.1 Host: m.stripe.network Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:49 UTC	650	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 88793 Connection: close Last-Modified: Mon, 09 Dec 2024 19:40:38 GMT Accept-Ranges: bytes Server: Cloudfront Date: Fri, 20 Dec 2024 18:03:50 GMT Cache-Control: max-age=300, public Etag: "fd35981a337052cd3ccd82dc674ff76d" Via: 1.1 bf5e4e5bee0509c4f1f20ab3dd60ae68.cloudfront.net (CloudFront) Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Vary: Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: S0Uj9YBB9nmXDKY7wHQaVe9nGoglUlp3E8VDPMhEkst6uGutI-weAQ==
2024-12-20 18:03:49 UTC	16384	IN	Data Raw: 76 61 72 20 53 74 72 69 70 65 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 5f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 5f 2e 65 78 70 6f 72 74 73 2c 5f 2c 5f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 5f 2e 6c 3d 21 30 2c 5f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!
2024-12-20 18:03:49 UTC	16384	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 68 28 65 29 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 6e 75 6c 6c 21 3d 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 68 28 65 2c 74 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 Data Ascii: (e){return function(e){if(Array.isArray(e))return h(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(!e)return;if("string"==typeof e)return h(e,t);var n=Object.pr
2024-12-20 18:03:49 UTC	16384	IN	Data Raw: 2c 22 2a 22 29 7d 63 61 74 63 68 28 6e 29 7b 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 6f 72 69 67 69 6e 61 74 69 6e 67 53 63 72 69 70 74 3a 22 6d 22 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 2c 22 2a 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 62 74 6f 61 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 Data Ascii: ,"")}catch(n){t.postMessage(JSON.stringify({originatingScript:"m",payload:e}),"")}}catch(e){}},f=function(){return window.btoa\|\|function(e){return e}},s=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:function(){},n=arguments.le
2024-12-20 18:03:49 UTC	16384	IN	Data Raw: 6f 62 6a 65 63 74 22 3d 3d 3d 69 28 65 29 3f 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 28 65 29 7d 29 29 7d 29 3a 28 6e 5b 65 5d 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 45 3a 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 79 28 29 3b 64 65 6c 65 74 65 20 74 5b 65 5d 2c 30 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 6c 28 29 5b 73 5d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 76 61 72 20 Data Ascii: object"===i(e)?(Object.keys(e).forEach((function(t){n[t]=e[t]})),function(){Object.keys(e).forEach((function(t){b(e)}))}):(n[e]=void 0===t?E:t,function(){b(e)})}function b(e){var t=y();delete t[e],0==Object.keys(t).length&&delete l()[s]}function R(e){var
2024-12-20 18:03:49 UTC	16384	IN	Data Raw: 45 78 74 65 6e 73 69 62 6c 65 28 61 29 7c 7c 28 4c 28 22 5f 5f 67 65 74 5f 5f 22 2c 62 29 2c 4c 28 22 5f 5f 47 65 74 44 65 70 65 6e 64 65 6e 63 79 5f 5f 22 2c 62 29 2c 4c 28 22 5f 5f 52 65 77 69 72 65 5f 5f 22 2c 52 29 2c 4c 28 22 5f 5f 73 65 74 5f 5f 22 2c 52 29 2c 4c 28 22 5f 5f 72 65 73 65 74 5f 5f 22 2c 70 29 2c 4c 28 22 5f 5f 52 65 73 65 74 44 65 70 65 6e 64 65 6e 63 79 5f 5f 22 2c 70 29 2c 4c 28 22 5f 5f 77 69 74 68 5f 5f 22 2c 6d 29 2c 4c 28 22 5f 5f 52 65 77 69 72 65 41 50 49 5f 5f 22 2c 64 29 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 28 33 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 6e 28 32 29 2c 5f 3d 6e 28 31 29 2c 6f 3d 6e 28 30 Data Ascii: Extensible(a)\|\|(L("__get__",b),L("__GetDependency__",b),L("__Rewire__",R),L("__set__",R),L("__reset__",p),L("__ResetDependency__",p),L("__with__",m),L("__RewireAPI__",d))}).call(this,n(3))},function(e,t,n){"use strict";(function(e){var r=n(2),_=n(1),o=n(0
2024-12-20 18:03:49 UTC	6873	IN	Data Raw: 22 77 69 6e 22 29 2e 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 3a 6e 65 77 28 68 28 22 77 69 6e 22 29 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 3b 74 72 79 7b 5f 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 6f 3b 6f 3d 22 68 74 74 70 73 3a 2f 2f 6d 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 22 2b 74 3b 76 61 72 20 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 29 7d 29 2c 32 65 33 29 3b 5f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 5f 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 44 4f 4e 45 26 26 68 28 22 77 69 6e 22 29 2e 53 74 72 69 70 65 4d 29 7b 63 6c 65 61 72 Data Ascii: "win").XDomainRequest):new(h("win").XMLHttpRequest);try{_.withCredentials=!0}catch(e){}var o;o="https://m.stripe.com/"+t;var i=setTimeout((function(){r()}),2e3);_.onreadystatechange=function(){if(_.readyState===XMLHttpRequest.DONE&&h("win").StripeM){clear

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49814	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:48 UTC	1582	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717825724/1734717825724%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%226FQXnIYg7b7AgsCqLoSQ70bWODubjdzL%22%2C%22mID%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22fe3feadc90d3b32f24ac083c22901e0970b582ac%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Quick%20Pay%20-%20Inbox%20Health%22%2C%22url%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=pQwCjOlsMP9Y3Zr/0FQ59tQObiAevQMdCD1HRcZxFGVWRa9SyM/SrJrNx0hRjX8jbMqOjyEt+1VNBHT6uVmeeFIaqrPKE966DZ2MiCXtVVDgGYP5Mfo+XaUOM2OO
2024-12-20 18:03:48 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:48 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=JVDaLfMZeCf/JhUk8EDNtatSrPqQPvPqw014huIKeBIvoxezY3LlMOuuOzTpjCvlZ2ZshtAT1EwKcVzNt7hLGWZjLv8uQXwsqllW65EAcUBlcPG8iKh16QEPWK/z; Expires=Fri, 27 Dec 2024 18:03:48 GMT; Path=/ Set-Cookie: AWSALBCORS=JVDaLfMZeCf/JhUk8EDNtatSrPqQPvPqw014huIKeBIvoxezY3LlMOuuOzTpjCvlZ2ZshtAT1EwKcVzNt7hLGWZjLv8uQXwsqllW65EAcUBlcPG8iKh16QEPWK/z; Expires=Fri, 27 Dec 2024 18:03:48 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:48 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-12-20 18:03:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49813	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:48 UTC	675	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717825725 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=pQwCjOlsMP9Y3Zr/0FQ59tQObiAevQMdCD1HRcZxFGVWRa9SyM/SrJrNx0hRjX8jbMqOjyEt+1VNBHT6uVmeeFIaqrPKE966DZ2MiCXtVVDgGYP5Mfo+XaUOM2OO
2024-12-20 18:03:48 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:48 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=/80bcRDttQJQAOdNcVmv7A+of99VTAwYl1bOkv8JWxWRQDun4kXBeNXSNr+NY9lA/7gh+kd+S218XXFE6M0OeKbWgTEF3JJs+Gp5i9nnDEOIbJHT/D8DAi7Rx9Zh; Expires=Fri, 27 Dec 2024 18:03:48 GMT; Path=/ Set-Cookie: AWSALBCORS=/80bcRDttQJQAOdNcVmv7A+of99VTAwYl1bOkv8JWxWRQDun4kXBeNXSNr+NY9lA/7gh+kd+S218XXFE6M0OeKbWgTEF3JJs+Gp5i9nnDEOIbJHT/D8DAi7Rx9Zh; Expires=Fri, 27 Dec 2024 18:03:48 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:48 UTC	336	IN	Data Raw: 31 34 39 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 32 38 34 32 31 5c 6e 32 36 39 36 5c 6e 32 5c 6e 30 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d 31 39 36 2d 34 37 2d 65 75 2d 63 65 6e 74 Data Ascii: 149$Loader && ($Loader.payload = "1734717828421\n2696\n2\n0\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-196-47-eu-cent
2024-12-20 18:03:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49815	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:48 UTC	1188	OUT	GET /assets/favicon.ico HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=true&patient_id=36304491&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717816.60.0.0
2024-12-20 18:03:49 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 498 Connection: close Date: Fri, 20 Dec 2024 18:03:49 GMT Last-Modified: Wed, 24 Feb 2021 01:52:02 GMT ETag: "5de40a04a3b2e1cad1d5660dc283fc15" Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b8924c6b1eac8fe7d9c9873915e5d06a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: QDoW54YbqR7x15ApvE8CvPxCwJClg9UOk85OonkE21wGRFoSj_OAeA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:49 UTC	498	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d d3 4d 4f 13 41 18 07 f0 21 60 08 52 d3 2d 0a 01 15 30 b1 11 c4 06 30 e1 20 d1 ea 41 43 d2 86 83 6d bd e8 41 4c 4c 84 6f 20 47 6e 5c 08 89 42 08 84 18 82 7c 0a 02 9a ad 91 dd 6e 96 97 70 e1 c5 56 38 8e 6e 59 03 01 a1 b1 94 f1 3f f4 a9 d9 14 0b cc e6 b7 b3 3b 33 cf 33 bb d9 7d 18 2b c2 a1 28 0c e7 1b ac a7 84 b1 2a c6 58 23 60 08 23 d9 f1 e3 86 b9 9b cd 59 b9 c6 f5 c7 b5 30 01 bb 70 48 32 70 04 07 90 a2 eb 8c 63 7e 07 c6 a0 06 26 69 4e 38 fc 86 0f 10 82 08 4c 51 2e e7 1a 99 67 04 f6 e8 5e f6 9b b0 0e 6f a1 14 18 29 83 3e f8 06 1b 8e 98 24 f5 db f0 92 eb 4f ae f2 58 47 25 37 02 c5 3c 16 70 be a3 74 01 aa e1 1a bc a6 1c 29 8a 5f 46 ac 87 ab 4d 97 79 f4 4e 0b 8f fa 5a 1d 3c 90 9f 4b e6 59 83 3f 14 bf c8 8d a0 0b eb ba c1 86 24 Data Ascii: MOA!`R-00 ACmALLo Gn\B\|npV8nY?;33}+(*X#`#Y0pH2pc~&iN8LQ.g^o)>$OXG%7<pt)_FMyNZ<KY?$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49817	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:48 UTC	535	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/c/1734717823807 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=pQwCjOlsMP9Y3Zr/0FQ59tQObiAevQMdCD1HRcZxFGVWRa9SyM/SrJrNx0hRjX8jbMqOjyEt+1VNBHT6uVmeeFIaqrPKE966DZ2MiCXtVVDgGYP5Mfo+XaUOM2OO
2024-12-20 18:03:48 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:48 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=9eVnyULoolePfPzEV4ReUv3CapCNRTelfMwNCvR5BZ3HAfc4t9gSsjQ+a+biIQ8vLZ6ELT2PN5kMEB3QYefhVwO6VM1WjbbfEVOmPmQz4tVtd60CVS3pGSTtsR1o; Expires=Fri, 27 Dec 2024 18:03:48 GMT; Path=/ Set-Cookie: AWSALBCORS=9eVnyULoolePfPzEV4ReUv3CapCNRTelfMwNCvR5BZ3HAfc4t9gSsjQ+a+biIQ8vLZ6ELT2PN5kMEB3QYefhVwO6VM1WjbbfEVOmPmQz4tVtd60CVS3pGSTtsR1o; Expires=Fri, 27 Dec 2024 18:03:48 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:48 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 32 38 35 35 30 5c 6e 32 36 39 39 5c 6e 33 5c 6e 31 5c 6e 70 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1734717828550\n2699\n3\n1\np\n15000")
2024-12-20 18:03:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49818	108.158.75.116	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:48 UTC	540	OUT	GET /widget/xx016tyt HTTP/1.1 Host: widget.intercom.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:50 UTC	728	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2668 Connection: close Date: Fri, 20 Dec 2024 18:03:50 GMT Last-Modified: Wed, 18 Dec 2024 17:20:48 GMT ETag: "fb9dd20d50e77901db8c1f0c55dec795" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: 0A7oOq3mGzdF__rrh8nK3vP9eVGkjQr8 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 62a7d6ea94ae2f98c2d066a2588642be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: t9MhNi-o6CvWbgxIv9xB3eX0ZPU8TrnFwfshJZfuTl0CDAh0761rsA== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-12-20 18:03:50 UTC	2668	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 0d 73 da 38 1a fe 2b c6 77 43 ec 89 31 90 af 36 a4 6e 2f 4d d3 db cc 35 9b 4e e9 ec ed 4d 9a 63 84 2d 40 ad 91 bc b2 08 61 81 ff 7e 8f e4 0f 6c 20 d9 dd 99 eb b4 89 fd ea fd d2 ab f7 e3 91 db 18 cd 78 a8 98 e0 8e bb 7c 24 d2 a2 c1 f2 d5 59 f7 a4 db 2b e9 d4 5d 52 9f 3e 25 42 aa 34 58 a6 62 26 43 3a 98 92 a4 67 4f 58 14 51 de ca 48 2d 90 6c 8f 24 6c 30 24 29 c5 a2 52 49 da 6b b7 41 69 31 32 f5 19 57 54 86 02 0f c2 f6 92 d9 30 66 e1 20 21 6a b2 e1 fc 9e 96 4c 61 c4 7d fc 6a db 5e 3a a1 54 a5 83 44 8a a7 c5 16 7f c1 dc ca 78 8c 40 95 1d c2 94 2b b9 d8 2b 3c 9f cf 4b 6b 2d 49 f5 ee 18 1f 67 3a 8c 14 d4 47 f4 c9 9f a8 69 6c 7b 8c a7 8a c4 f1 60 2a 22 ba b3 bf 64 b3 37 fc 2b ad 46 29 df 70 8d 8e 3b a7 11 3d 3b 0f 49 78 76 42 Data Ascii: Ys8+wC16n/M5NMc-@a~l x\|$Y+]R>%B4Xb&C:gOXQH-l$l0$)RIkAi12WT0f !jLa}j^:TDx@++<Kk-Ig:Gil{`*"d7+F)p;=;IxvB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49816	34.215.94.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:48 UTC	606	OUT	POST /6 HTTP/1.1 Host: m.stripe.com Connection: keep-alive Content-Length: 3868 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://m.stripe.network Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://m.stripe.network/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:48 UTC	3868	OUT	Data Raw: 4a 54 64 43 4a 54 49 79 64 6a 49 6c 4d 6a 49 6c 4d 30 45 78 4a 54 4a 44 4a 54 49 79 61 57 51 6c 4d 6a 49 6c 4d 30 45 6c 4d 6a 49 79 5a 44 6c 6d 4f 54 52 6d 4d 7a 55 34 59 6a 55 32 5a 57 45 30 5a 54 67 32 4d 7a 63 77 4f 44 45 34 59 6a 52 6d 4d 32 49 31 59 79 55 79 4d 69 55 79 51 79 55 79 4d 6e 51 6c 4d 6a 49 6c 4d 30 45 7a 4d 7a 51 75 4e 53 55 79 51 79 55 79 4d 6e 52 68 5a 79 55 79 4d 69 55 7a 51 53 55 79 4d 69 55 79 4e 47 35 77 62 56 39 77 59 57 4e 72 59 57 64 6c 58 33 5a 6c 63 6e 4e 70 62 32 34 6c 4d 6a 49 6c 4d 6b 4d 6c 4d 6a 4a 7a 63 6d 4d 6c 4d 6a 49 6c 4d 30 45 6c 4d 6a 4a 71 63 79 55 79 4d 69 55 79 51 79 55 79 4d 6d 45 6c 4d 6a 49 6c 4d 30 45 6c 4e 30 49 6c 4d 6a 4a 68 4a 54 49 79 4a 54 4e 42 4a 54 64 43 4a 54 49 79 64 69 55 79 4d 69 55 7a 51 53 55 Data Ascii: JTdCJTIydjIlMjIlM0ExJTJDJTIyaWQlMjIlM0ElMjIyZDlmOTRmMzU4YjU2ZWE0ZTg2MzcwODE4YjRmM2I1YyUyMiUyQyUyMnQlMjIlM0EzMzQuNSUyQyUyMnRhZyUyMiUzQSUyMiUyNG5wbV9wYWNrYWdlX3ZlcnNpb24lMjIlMkMlMjJzcmMlMjIlM0ElMjJqcyUyMiUyQyUyMmElMjIlM0ElN0IlMjJhJTIyJTNBJTdCJTIydiUyMiUzQSU
2024-12-20 18:03:49 UTC	914	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:03:48 GMT Content-Length: 156 Connection: close set-cookie: m=62896bb2-7db4-4293-a3fc-9b10e71478eb8d08dc;Expires=Sun, 20-Dec-2026 18:03:48 GMT;Secure;HttpOnly; SameSite=None x-content-type-options: nosniff x-stripe-inbound-proxy-type: mesh-proxy x-stripe-proxy-response: upstream x-stripe-server-envoy-upstream-service-time-ms: 2 x-stripe-server-envoy-start-time-us: 1734717828896891 x-envoy-attempt-count: 1 x-stripe-bg-intended-route-color: green x-stripe-outbound-proxy-type: envoy x-stripe-client-envoy-start-time-us: 1734717828896341 x-stripe-upstream-host: 10.73.196.131:1643 Access-Control-Allow-Origin: https://m.stripe.network Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Content-Type: application/json;charset=utf-8
2024-12-20 18:03:49 UTC	156	IN	Data Raw: 7b 22 6d 75 69 64 22 3a 22 32 63 62 65 63 37 36 66 2d 63 63 30 32 2d 34 61 30 30 2d 61 31 30 35 2d 37 61 63 65 61 31 64 35 39 34 32 31 61 30 31 61 63 33 22 2c 22 67 75 69 64 22 3a 22 36 32 38 39 36 62 62 32 2d 37 64 62 34 2d 34 32 39 33 2d 61 33 66 63 2d 39 62 31 30 65 37 31 34 37 38 65 62 38 64 30 38 64 63 22 2c 22 73 69 64 22 3a 22 38 38 66 37 34 37 31 39 2d 66 37 61 38 2d 34 38 39 64 2d 61 32 31 63 2d 66 36 65 65 66 39 36 30 66 33 36 66 34 64 34 34 65 31 22 7d Data Ascii: {"muid":"2cbec76f-cc02-4a00-a105-7acea1d59421a01ac3","guid":"62896bb2-7db4-4293-a3fc-9b10e71478eb8d08dc","sid":"88f74719-f7a8-489d-a21c-f6eef960f36f4d44e1"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49820	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:50 UTC	675	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717827644 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=/80bcRDttQJQAOdNcVmv7A+of99VTAwYl1bOkv8JWxWRQDun4kXBeNXSNr+NY9lA/7gh+kd+S218XXFE6M0OeKbWgTEF3JJs+Gp5i9nnDEOIbJHT/D8DAi7Rx9Zh
2024-12-20 18:03:50 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:50 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=l6nfHVrEMYVlKVgnogfQxTuo9jattv7OAVR7GyY8aI9i5ENmKWqdAj+F0EPN0H8Tnj76U2Ri3TUjWApSLrjfVstwMseDwSPSgcfITUpIYUn390QqcNkhZ6xMNOJZ; Expires=Fri, 27 Dec 2024 18:03:50 GMT; Path=/ Set-Cookie: AWSALBCORS=l6nfHVrEMYVlKVgnogfQxTuo9jattv7OAVR7GyY8aI9i5ENmKWqdAj+F0EPN0H8Tnj76U2Ri3TUjWApSLrjfVstwMseDwSPSgcfITUpIYUn390QqcNkhZ6xMNOJZ; Expires=Fri, 27 Dec 2024 18:03:50 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:50 UTC	6293	IN	Data Raw: 31 38 38 64 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 33 30 33 36 32 5c 6e 32 37 30 30 5c 6e 34 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 32 30 7d 2c 5c 22 73 65 71 5c 22 3a 32 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 64 67 5f 6d 61 70 70 69 6e 67 73 5c 22 3a 7b 5c 22 32 31 34 37 35 32 30 30 37 37 5c 22 3a 7b 5c 22 67 72 6f 75 70 5f 69 64 24 69 6e 74 5c 22 3a 32 33 39 37 37 39 33 35 37 33 39 37 39 36 7d 2c 5c 22 32 31 34 37 35 36 32 35 30 37 5c 22 3a 7b 5c 22 67 Data Ascii: 188d$Loader && ($Loader.payload = "1734717830362\n2700\n4\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":20},\"seq\":2}\n{\"path\":\"livechat\",\"update\":{\"dg_mappings\":{\"2147520077\":{\"group_id$int\":23977935739796},\"2147562507\":{\"g
2024-12-20 18:03:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49819	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:50 UTC	535	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717825725 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=/80bcRDttQJQAOdNcVmv7A+of99VTAwYl1bOkv8JWxWRQDun4kXBeNXSNr+NY9lA/7gh+kd+S218XXFE6M0OeKbWgTEF3JJs+Gp5i9nnDEOIbJHT/D8DAi7Rx9Zh
2024-12-20 18:03:50 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:50 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=E/ZFR+n+q8EaKTnou8OrvJlGIMGlIbNCDlXc9ExKj2enUH7oYhU7LzRu2pHCc+HKGAvercMZf9jBLo4PHHbY7mQ5G3ZQOGWB2WjA0NvSkRrTrCKtRzjiYKsfucAh; Expires=Fri, 27 Dec 2024 18:03:50 GMT; Path=/ Set-Cookie: AWSALBCORS=E/ZFR+n+q8EaKTnou8OrvJlGIMGlIbNCDlXc9ExKj2enUH7oYhU7LzRu2pHCc+HKGAvercMZf9jBLo4PHHbY7mQ5G3ZQOGWB2WjA0NvSkRrTrCKtRzjiYKsfucAh; Expires=Fri, 27 Dec 2024 18:03:50 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:50 UTC	149	IN	Data Raw: 38 66 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 33 30 35 30 38 5c 6e 32 37 30 37 5c 6e 35 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 73 68 75 74 64 6f 77 6e 5c 22 7d 2c 5c 22 73 65 71 5c 22 3a 32 30 7d 22 29 0d 0a Data Ascii: 8f$Loader && ($Loader.payload = "1734717830508\n2707\n5\n1\nd\n{\"path\":\"connection\",\"update\":{\"status$string\":\"shutdown\"},\"seq\":20}")
2024-12-20 18:03:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49821	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:50 UTC	1442	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717825724/1734717825724%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%226FQXnIYg7b7AgsCqLoSQ70bWODubjdzL%22%2C%22mID%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22fe3feadc90d3b32f24ac083c22901e0970b582ac%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Quick%20Pay%20-%20Inbox%20Health%22%2C%22url%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=JVDaLfMZeCf/JhUk8EDNtatSrPqQPvPqw014huIKeBIvoxezY3LlMOuuOzTpjCvlZ2ZshtAT1EwKcVzNt7hLGWZjLv8uQXwsqllW65EAcUBlcPG8iKh16QEPWK/z
2024-12-20 18:03:50 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:50 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=Y2ZRrhY6svH8UCWu04IuCWgRG3BRSYoKTUYo65LoAhR6seQw8VEzTi8wjqn0svBF2342vfl9PQyxhhRzbVO0zx+kitZzDCAPy4Hho7IZYwIy+RO1gOaVZf4WjBEf; Expires=Fri, 27 Dec 2024 18:03:50 GMT; Path=/ Set-Cookie: AWSALBCORS=Y2ZRrhY6svH8UCWu04IuCWgRG3BRSYoKTUYo65LoAhR6seQw8VEzTi8wjqn0svBF2342vfl9PQyxhhRzbVO0zx+kitZzDCAPy4Hho7IZYwIy+RO1gOaVZf4WjBEf; Expires=Fri, 27 Dec 2024 18:03:50 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:50 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-12-20 18:03:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49823	52.222.144.10	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:50 UTC	811	OUT	GET /assets/favicon.ico HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717825.51.0.0
2024-12-20 18:03:51 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 498 Connection: close Date: Fri, 20 Dec 2024 18:03:52 GMT Last-Modified: Wed, 24 Feb 2021 01:52:02 GMT ETag: "5de40a04a3b2e1cad1d5660dc283fc15" Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 cad42ad8223e04d99ff047e13149db54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: Ix6EY6DYelCJ16r1Ms-7qanuNwVuDlTAjCOMFTmg4sJUyd9KWdWahw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:51 UTC	498	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d d3 4d 4f 13 41 18 07 f0 21 60 08 52 d3 2d 0a 01 15 30 b1 11 c4 06 30 e1 20 d1 ea 41 43 d2 86 83 6d bd e8 41 4c 4c 84 6f 20 47 6e 5c 08 89 42 08 84 18 82 7c 0a 02 9a ad 91 dd 6e 96 97 70 e1 c5 56 38 8e 6e 59 03 01 a1 b1 94 f1 3f f4 a9 d9 14 0b cc e6 b7 b3 3b 33 cf 33 bb d9 7d 18 2b c2 a1 28 0c e7 1b ac a7 84 b1 2a c6 58 23 60 08 23 d9 f1 e3 86 b9 9b cd 59 b9 c6 f5 c7 b5 30 01 bb 70 48 32 70 04 07 90 a2 eb 8c 63 7e 07 c6 a0 06 26 69 4e 38 fc 86 0f 10 82 08 4c 51 2e e7 1a 99 67 04 f6 e8 5e f6 9b b0 0e 6f a1 14 18 29 83 3e f8 06 1b 8e 98 24 f5 db f0 92 eb 4f ae f2 58 47 25 37 02 c5 3c 16 70 be a3 74 01 aa e1 1a bc a6 1c 29 8a 5f 46 ac 87 ab 4d 97 79 f4 4e 0b 8f fa 5a 1d 3c 90 9f 4b e6 59 83 3f 14 bf c8 8d a0 0b eb ba c1 86 24 Data Ascii: MOA!`R-00 ACmALLo Gn\B\|npV8nY?;33}+(*X#`#Y0pH2pc~&iN8LQ.g^o)>$OXG%7<pt)_FMyNZ<KY?$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49824	34.215.94.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:51 UTC	391	OUT	GET /6 HTTP/1.1 Host: m.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=62896bb2-7db4-4293-a3fc-9b10e71478eb8d08dc
2024-12-20 18:03:51 UTC	439	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 20 Dec 2024 18:03:51 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://stripe.com Access-Control-Allow-Origin: https://m.stripe.network Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Content-Type: application/json;charset=utf-8
2024-12-20 18:03:51 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49829	216.198.54.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:51 UTC	565	OUT	GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-bcac9f6.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:52 UTC	1174	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:52 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 236 Connection: close x-amz-id-2: 6nW+kcNFzrdPltw0abUt5BBnVE+X/TVkfixXL35UDcxRkF76lRUi7A6XEsTHXX7ylpQZrZ4L3Zs= x-amz-request-id: NB46EG4TVC5FK2VC x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Dec 2024 09:50:44 GMT ETag: "e9d8b92096016dfd74d2f2500556464e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Wed, 17 Dec 2025 09:50:43 GMT x-amz-version-id: F1M8cLXSzn_4BeTVgaJOh2jq0PmHYWeX CF-Cache-Status: HIT Age: 192880 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e7EcdhrtjSvH64rP95q9KmUtCpRCiZ57BCthqDJ3k54tBQECISl1NNqYfzro5p1Bnn3QCIRHWPoYtKob4mXKHzbp0hzwfO738OQRK5CrcdEGIosYk%2BvOvkvqGHjkHePUURoavLI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518d329c117ca8-EWR
2024-12-20 18:03:52 UTC	195	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 38 34 5d 2c 7b 33 33 32 37 39 3a 28 65 2c 73 2c 64 29 3d 3e 7b 64 2e 72 28 73 29 2c 64 2e 64 28 73 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 63 7d 29 3b 63 6f 6e 73 74 20 63 3d 64 2e 70 2b 22 66 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9084],{33279:(e,s,d)=>{d.r(s),d.d(s,{default:()=>c});const c=d.p+"f
2024-12-20 18:03:52 UTC	41	IN	Data Raw: 64 61 36 63 64 33 35 34 39 35 63 37 35 66 38 33 35 30 38 64 39 64 32 65 37 37 65 65 33 33 64 2e 6d 70 33 22 7d 7d 5d 29 3b Data Ascii: da6cd35495c75f83508d9d2e77ee33d.mp3"}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49825	108.158.75.33	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:51 UTC	357	OUT	GET /widget/xx016tyt HTTP/1.1 Host: widget.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:53 UTC	728	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2668 Connection: close Date: Fri, 20 Dec 2024 18:03:53 GMT Last-Modified: Wed, 18 Dec 2024 17:20:48 GMT ETag: "fb9dd20d50e77901db8c1f0c55dec795" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: 0A7oOq3mGzdF__rrh8nK3vP9eVGkjQr8 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 eb2f49b78dae5a2d3df4afb2aa3e99b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Rfwf0ezJkYhn_Jo-ZqreFhH9PQfShBQh4RkGwazvVm0d6xPgV-2jYA== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-12-20 18:03:53 UTC	2668	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 0d 73 da 38 1a fe 2b c6 77 43 ec 89 31 90 af 36 a4 6e 2f 4d d3 db cc 35 9b 4e e9 ec ed 4d 9a 63 84 2d 40 ad 91 bc b2 08 61 81 ff 7e 8f e4 0f 6c 20 d9 dd 99 eb b4 89 fd ea fd d2 ab f7 e3 91 db 18 cd 78 a8 98 e0 8e bb 7c 24 d2 a2 c1 f2 d5 59 f7 a4 db 2b e9 d4 5d 52 9f 3e 25 42 aa 34 58 a6 62 26 43 3a 98 92 a4 67 4f 58 14 51 de ca 48 2d 90 6c 8f 24 6c 30 24 29 c5 a2 52 49 da 6b b7 41 69 31 32 f5 19 57 54 86 02 0f c2 f6 92 d9 30 66 e1 20 21 6a b2 e1 fc 9e 96 4c 61 c4 7d fc 6a db 5e 3a a1 54 a5 83 44 8a a7 c5 16 7f c1 dc ca 78 8c 40 95 1d c2 94 2b b9 d8 2b 3c 9f cf 4b 6b 2d 49 f5 ee 18 1f 67 3a 8c 14 d4 47 f4 c9 9f a8 69 6c 7b 8c a7 8a c4 f1 60 2a 22 ba b3 bf 64 b3 37 fc 2b ad 46 29 df 70 8d 8e 3b a7 11 3d 3b 0f 49 78 76 42 Data Ascii: Ys8+wC16n/M5NMc-@a~l x\|$Y+]R>%B4Xb&C:gOXQH-l$l0$)RIkAi12WT0f !jLa}j^:TDx@++<Kk-Ig:Gil{`*"d7+F)p;=;IxvB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49828	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:51 UTC	668	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717827644 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9eVnyULoolePfPzEV4ReUv3CapCNRTelfMwNCvR5BZ3HAfc4t9gSsjQ+a+biIQ8vLZ6ELT2PN5kMEB3QYefhVwO6VM1WjbbfEVOmPmQz4tVtd60CVS3pGSTtsR1o; AWSALBCORS=l6nfHVrEMYVlKVgnogfQxTuo9jattv7OAVR7GyY8aI9i5ENmKWqdAj+F0EPN0H8Tnj76U2Ri3TUjWApSLrjfVstwMseDwSPSgcfITUpIYUn390QqcNkhZ6xMNOJZ
2024-12-20 18:03:52 UTC	536	IN	HTTP/1.1 404 Not Found Date: Fri, 20 Dec 2024 18:03:52 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=OGKf2oOD56IrKQc/BCfInG5f3fv51e2wYbY2vBaJG3gbh+JppzYHjVfjqMBJkjWZbZzzx2+r++Kn2eQJVQ5y+y+5IVw+kSTjC2RQsOsPPRSiJOEVnhOQkuf58bFZ; Expires=Fri, 27 Dec 2024 18:03:52 GMT; Path=/ Set-Cookie: AWSALBCORS=OGKf2oOD56IrKQc/BCfInG5f3fv51e2wYbY2vBaJG3gbh+JppzYHjVfjqMBJkjWZbZzzx2+r++Kn2eQJVQ5y+y+5IVw+kSTjC2RQsOsPPRSiJOEVnhOQkuf58bFZ; Expires=Fri, 27 Dec 2024 18:03:52 GMT; Path=/; SameSite=None; Secure Server: nginx
2024-12-20 18:03:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49830	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:51 UTC	675	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717829613 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=l6nfHVrEMYVlKVgnogfQxTuo9jattv7OAVR7GyY8aI9i5ENmKWqdAj+F0EPN0H8Tnj76U2Ri3TUjWApSLrjfVstwMseDwSPSgcfITUpIYUn390QqcNkhZ6xMNOJZ
2024-12-20 18:03:52 UTC	536	IN	HTTP/1.1 404 Not Found Date: Fri, 20 Dec 2024 18:03:52 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=I7m5ObHT6s8C4d99ZpeSZrL5UkiV+ZJ1adS8xPBiR9bbqPwL1ZRVpVJUwKXUWttv04cPt4Ysy6sdutZ8HF6yNq1xqDkdx6lB7QdI0pkJ7TH+9o4NILXzgCsMVb95; Expires=Fri, 27 Dec 2024 18:03:52 GMT; Path=/ Set-Cookie: AWSALBCORS=I7m5ObHT6s8C4d99ZpeSZrL5UkiV+ZJ1adS8xPBiR9bbqPwL1ZRVpVJUwKXUWttv04cPt4Ysy6sdutZ8HF6yNq1xqDkdx6lB7QdI0pkJ7TH+9o4NILXzgCsMVb95; Expires=Fri, 27 Dec 2024 18:03:52 GMT; Path=/; SameSite=None; Secure Server: nginx
2024-12-20 18:03:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49831	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:51 UTC	1560	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717829616/1734717829616%0A-779.3196208628339%0A2%0A4%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1734717821198%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22title%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%7D%2C%22__messageID%22%3A1%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A30%7D%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=l6nfHVrEMYVlKVgnogfQxTuo9jattv7OAVR7GyY8aI9i5ENmKWqdAj+F0EPN0H8Tnj76U2Ri3TUjWApSLrjfVstwMseDwSPSgcfITUpIYUn390QqcNkhZ6xMNOJZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49832	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:52 UTC	770	OUT	GET /v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:52 UTC	1274	IN	HTTP/1.1 200 OK Connection: close Content-Length: 651 Last-Modified: Thu, 19 Dec 2024 21:09:02 GMT ETag: "aab8b94fc04611f86646ae67152acdce" Cache-Control: max-age=60, stale-while-revalidate=900 Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src 'self' https://api.stripe.com https://merchant-ui-api.stripe.com https://stripe.com/cookie-settings/enforcement-mode https://errors.stripe.com https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src 'self'; img-src 'self' https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'sha256-0hAheEzaMe6uXIKV4EehS9pu1am1lj/KnnzrOYqckXk='; worker-src 'none'; report-uri https://q.stripe.com/csp-report origin-agent-cluster: ?1 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 200 Date: Fri, 20 Dec 2024 18:03:52 GMT Via: 1.1 varnish X-Request-ID: 3ef255df-3da5-4def-a42f-941744ffe02a X-Served-By: cache-nyc-kteb1890066-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:52 UTC	651	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 73 74 72 69 70 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 2f 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 74 44 30 57 72 6e 4d 77 41 50 49 34 6e 57 57 43 76 72 65 45 2b 76 70 67 50 56 7a 34 35 53 4f 2f 31 66 47 31 49 5a 52 4e 70 42 73 64 57 5a 4f 5a 4e 36 53 4b 72 30 79 6e 43 31 31 4b 75 7a 72 76 54 39 30 33 57 72 45 55 2b 4e 39 49 6b 2f 52 70 69 43 52 54 41 45 41 41 41 42 62 65 79 4a 76 63 6d Data Ascii: <!doctype html><html><head><link rel="preconnect" href="https://api.stripe.com" crossorigin/><meta charset="utf-8"/><meta http-equiv="origin-trial" content="AtD0WrnMwAPI4nWWCvreE+vpgPVz45SO/1fG1IZRNpBsdWZOZN6SKr0ynC11KuzrvT903WrEU+N9Ik/RpiCRTAEAAABbeyJvcm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49826	108.158.75.52	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:52 UTC	499	OUT	GET /frame.ac03c723.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:53 UTC	836	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 188818 Connection: close Date: Fri, 20 Dec 2024 18:03:54 GMT Last-Modified: Wed, 18 Dec 2024 17:16:49 GMT ETag: "fe9467159bfe3c3a6aebdb7f6c7f017a" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: SEU84kxNaHr1y1e8uTaxvLjh1tUr.4cK Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c1fb60c3ad4cc738424d038649c0fa90.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7CcAGDSY3dBM1cVjIsvvwHD5F1zg3NYR5WQWWjt0daj_BXu_7-jWfg== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-12-20 18:03:53 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 79 77 1b 37 d2 2f fc ff fb 29 da cc 1c 3f e4 4d b3 d3 00 7a a5 46 e3 ab 28 ce c8 73 a5 d8 13 3b 9a c5 d7 af 4e 8b 6a 89 8c b9 c8 dc 64 c9 e6 77 bf f5 2b a0 57 b6 64 39 71 32 76 86 c7 16 d9 44 63 47 a1 36 54 15 be f9 5f 0f ac ef a7 33 6b 34 ec a7 93 79 6a 0d 27 e7 d3 d9 38 59 0c a7 13 eb 72 94 26 94 34 4f 53 eb 7c 96 8c 53 27 e9 bb aa 1f 4a e5 fc 3c 77 0e 9f ec 3f fe e1 f9 63 67 f1 76 61 fd af 6f fe bf 07 e7 cb 49 1f a5 da 9d 77 ab 64 66 2d ec d4 9e d8 33 7b 6a 0f 77 df 85 4a 2a b7 97 e7 e0 77 3a db 6c f7 5d cb f9 e6 3c 19 8e d2 33 67 7c a9 5a 3d 25 a3 40 d9 94 38 99 2e 86 e7 c3 3e 77 45 bf 8a 63 e5 09 bc 9a 5e a6 b3 64 31 9d 99 12 91 f4 3c 24 cf 97 a7 e3 e1 42 27 7a 9e f0 83 f5 4e d6 a6 35 6d 2f 74 8b e9 ee 90 1e 77 66 Data Ascii: yw7/)?MzF(s;Njdw+Wd9q2vDcG6T_3k4yj'8Yr&4OS\|S'J<w?cgvaoIwdf-3{jwJ*w:l]<3g\|Z=%@8.>wEc^d1<$B'zN5m/twf
2024-12-20 18:03:53 UTC	405	IN	Data Raw: 7d eb e5 0d da 18 d7 3a 1f e5 8a a6 7e b5 bb b9 0e e9 9a 57 81 b6 c3 ee bb 35 ed 51 83 34 f2 9a 6d 5a 9f 1a 47 40 eb 64 72 d1 7e 1c 4e d2 2c fd fd fb fa ee 5a 10 8b 41 c5 57 c9 68 99 12 bc de 3e b9 8f f4 57 8f ba 90 10 be cf 66 f4 fd fb d6 ff fe df d9 8f 16 2d 3f 71 d5 f3 eb 49 ff 49 f9 7d 25 85 48 09 65 5a 4c 9f 2f 70 e3 fb 8b e4 82 b3 94 7e b7 8a 85 9f 67 dd cc 40 bb 69 50 9c e7 1d 8f a0 37 b1 d3 09 31 37 b3 e4 94 28 d5 03 d7 a6 f5 39 1f 5e 2c f3 df 57 b3 e1 c2 3c af 3b 36 06 bf 5e cc ae df cd 89 ab b2 5b 84 85 fa c9 a2 cf d0 36 df ad cf 54 06 11 3c 61 eb 62 d9 46 06 e3 cf 34 36 1d ee a6 0f 1f a6 c5 ea 10 d7 36 5f 24 93 3e 66 f2 f4 51 da 3b b5 73 c6 51 d3 bb f6 b0 c8 cc fb 27 bd b2 5e b4 69 e2 5e be ea ec 64 b2 47 3b b1 5b 27 c3 c9 0a ae 82 d9 58 9f 50 Data Ascii: }:~W5Q4mZG@dr~N,ZAWh>Wf-?qII}%HeZL/p~g@iP717(9^,W<;6^[6T<abF466_$>fQ;sQ'^i^dG;['XP
2024-12-20 18:03:53 UTC	16384	IN	Data Raw: b7 f7 77 1f 3f 7c f8 b8 fd b8 fd ac 4d 93 4b 99 f7 1f 3e dc a7 bd 3a 79 f8 70 a6 27 64 df 4e c0 44 3f df dd d7 35 bd dd 3d 29 56 67 f7 b4 f4 5c 5d c3 e7 25 6c b5 87 a9 7c d9 9a a4 6f 69 5a b2 69 6c e9 6e b6 5e 39 c4 cf 3f 4e 68 be 8b 31 a4 04 6e bc 6a ed 26 0c 44 e3 72 cc d2 d3 7a 11 c2 e8 f0 ff bc b9 a7 28 4a d2 45 f6 9b f8 06 04 9b 20 c0 60 78 24 7a 4f 32 01 f8 06 7b d8 d9 19 9e b7 4d 8f 68 d8 7d 87 61 8e b3 cd e9 17 2d 35 e1 e7 b9 46 06 19 e8 01 ab 4e 79 ac 84 11 06 ed 51 27 9f ab 11 81 e4 49 72 95 0c 89 7c 3f 4a 9d 59 3a 9f 8e 56 69 7b e4 98 d4 8e b3 18 a4 93 76 65 50 93 b6 99 97 05 f7 90 40 b7 fe da cc 57 f6 be d3 2b d5 dc 54 a3 e9 ee 2e 15 68 cf 37 2a 34 83 68 a8 77 bd 6c f3 88 3b 0c 5b c3 9d 69 1b 33 bd b9 cb 4a 68 60 56 9a e5 69 01 79 d8 b0 69 79 Data Ascii: w?\|MK>:yp'dND?5=)Vg\]%l\|oiZiln^9?Nh1nj&Drz(JE `x$zO2{Mh}a-5FNyQ'Ir\|?JY:Vi{veP@W+T.h7*4hwl;[i3Jh`Viyiy
2024-12-20 18:03:53 UTC	16384	IN	Data Raw: e6 d3 fe bb e7 d3 fe 79 f8 98 32 9f f6 cf cc a7 6d 95 f9 b4 4b 7c 4c 89 8f 29 f3 69 ff bd f0 31 65 3e ed 12 1f 53 e2 63 7e 16 3e c6 fa 25 f1 31 65 3e ed 32 9f f6 f7 c7 c7 94 f9 b4 4b 7c 4c 89 8f 29 f1 31 25 3e a6 c4 c7 94 f8 98 12 1f 53 e2 63 7e 16 3e 66 f0 b3 f0 31 63 95 3d f7 7b e2 63 06 4b e0 63 06 cb e6 d3 9e d2 e4 d3 55 c7 83 65 01 7a 31 58 4c e1 50 e4 01 7e 12 b1 00 6f 61 55 ea c5 f0 e1 cc 96 63 6d 54 c4 b9 04 c0 85 5d 1e 10 87 0c c8 98 0c 93 ac c8 87 69 5e 64 72 43 8e d3 94 84 05 f4 4b 90 47 bf 04 4c 38 0c 94 e8 97 01 8f 22 a5 59 2d 17 ea ca c5 03 d6 93 b8 8d 56 cb 32 32 e1 48 92 f8 8d 96 31 76 42 07 93 07 f1 86 ea 18 45 58 c3 e4 57 43 8a 9f 99 c0 bf 02 53 d3 81 bf 69 54 9f 36 fc 91 0f 3e 7c c8 3e 28 04 f1 a4 69 90 4d 91 06 59 95 54 37 a6 09 22 ed Data Ascii: y2mK\|L)i1e>Sc~>%1e>2K\|L)1%>Sc~>f1c={cKcUez1XLP~oaUcmT]i^drCKGL8"Y-V22H1vBEXWCSiT6>\|>(iMYT7"
2024-12-20 18:03:53 UTC	16384	IN	Data Raw: 39 60 6a 34 73 f6 f7 53 3c 6e 30 d7 8f f3 c8 e8 85 0d b4 3e 8c 7c 2f b4 a9 f3 a6 8d 97 00 6a 0f cb c2 fc 4c 9f 07 33 76 87 0e a7 f4 f3 78 e4 22 b5 db 07 73 a9 ed 94 50 49 e7 a0 70 a6 35 7f 67 6f 54 27 3d 67 95 cd 3f e7 17 61 c2 c0 23 ea 44 5c af af 2f e5 bf 79 35 52 b8 4b 3a 33 f2 4e e5 46 69 cd c8 c5 b6 e2 79 3f e3 5e c9 9c 17 f1 da 63 6b a3 b1 bd c1 de 30 cd b0 00 56 29 60 9e 65 03 70 62 27 e1 e7 39 ba be d8 93 ca 7e 10 98 53 34 a3 f9 ad da ae ff 1f 6f d7 7f fc 58 0f de fb 1f d2 0f e0 87 00 83 16 81 37 dc 96 c2 f6 25 09 f4 c4 ea 6a b7 f2 36 1e 9b d3 33 08 7f b8 ba bd 9c 9b 08 49 80 07 40 a7 d0 19 b5 dd a7 d7 f2 8d fd 29 0b 36 91 40 a1 9f c4 ff a5 e7 29 fb b4 a7 93 c7 8f cd ff b4 10 5c 94 e9 5d 9a 51 89 ca ff 81 e1 a3 94 82 f6 88 0e 15 48 a8 f4 fc d8 a1 Data Ascii: 9`j4sS<n0>\|/jL3vx"sPIp5goT'=g?a#D\/y5RK:3NFiy?^ck0V)`epb'9~S4oX7%j63I@)6@)\]QH
2024-12-20 18:03:53 UTC	3072	IN	Data Raw: 8d 1a c0 77 e1 7a 4d 7f a9 5e e3 3b 47 f8 5f a5 26 c0 9c a2 43 09 97 c6 70 1f 3d 71 18 a4 6e 27 e2 d6 9e f6 53 c2 17 94 12 c0 aa 44 8e e8 6b a9 63 31 7a 7e eb 26 82 ef cb 16 57 89 4e 50 a7 52 b6 61 35 42 3d 8c 48 ed 93 8d ea 95 5f 79 bd 45 70 12 5d a3 52 19 20 e0 4f 11 77 b0 7b c4 71 c4 4a 10 54 f6 05 cb 6d e9 94 89 36 a9 0f 5f ad e8 d0 41 10 a1 30 a3 93 86 95 5a e3 87 0f af ae 73 52 42 a0 07 34 ed c6 32 c1 0a f8 fa 4a b5 3f 11 c1 31 ed 2b 60 e6 2b 84 7a b4 31 28 b0 f5 d1 ba 12 ee d1 dd 94 70 d3 fb 29 e1 ae 6b 0e e7 ba c6 d1 06 75 6c 97 0a 72 54 d6 b3 5e d7 ee 75 6c 5f a3 4b ce 27 46 09 86 5e 1b 73 28 20 9d 8f 59 39 df 2d d3 0d 95 43 47 3e 53 d8 99 3b 48 13 e5 e3 5d d4 17 37 82 d2 f4 ee 00 5a 85 62 27 7b 93 4f 3c ed 3e 1e 7b 5d b4 d0 22 ef 5a 10 da 24 c2 Data Ascii: wzM^;G_&Cp=qn'SDkc1z~&WNPRa5B=H_yEp]R Ow{qJTm6_A0ZsRB42J?1+`+z1(p)kulrT^ul_K'F^s( Y9-CG>S;H]7Zb'{O<>{]"Z$
2024-12-20 18:03:53 UTC	16384	IN	Data Raw: 6a f6 08 28 2e 51 97 ef d3 57 a7 f4 d4 f2 87 9d 56 dd 3b a6 47 bf db 19 52 03 87 e3 77 55 36 7a ad 2a 72 11 e1 97 99 5c a4 87 b2 c8 93 93 b4 a6 18 bd cc f3 b9 c0 54 78 d5 24 3c a2 bd 8a eb a9 aa f6 20 8e 47 07 d5 89 06 cb 0e dd b9 02 27 25 5a 7d ef 5d fc 67 75 54 3c ff d0 83 31 d5 a8 be cf 41 61 92 a3 a0 49 51 37 7b bb f0 d6 38 a4 9d 50 ab 17 64 15 5a 3d 37 1c fb 8f c2 7f 18 19 b9 72 6f f9 28 fc f1 47 cd eb 98 bc 77 e1 fb a2 56 6f 54 af 5d 11 e9 ee 52 ea c5 e6 44 cc 38 e8 ed 42 79 d7 6c 29 3a 1e 26 4a 3a cf 47 8a 25 9d 37 e3 3a f8 0f 50 2f 46 dd 4f c6 6d 6f d7 81 ef 19 3d cd d3 e7 31 91 92 a1 da f1 35 22 07 4f 39 01 21 f2 aa a3 2a fe ae bc 4f e3 ab 35 47 ed 84 6e 60 f2 bd cb 16 df 3a 91 49 c8 7c 69 77 14 8a 13 d6 e7 d0 bb f0 26 b2 1e 07 de 27 6f e7 91 c1 Data Ascii: j(.QWV;GRwU6zr\Tx$< G'%Z}]guT<1AaIQ7{8PdZ=7ro(GwVoT]RD8Byl):&J:G%7:P/FOmo=15"O9!O5Gn`:I\|iw&'o
2024-12-20 18:03:53 UTC	1024	IN	Data Raw: 1d e9 70 c8 c2 cc c3 57 bd ae c4 50 f5 27 22 0e 71 af 26 04 cf 01 4f d3 dc 8c b2 ec 73 02 f0 ac d3 91 2b 8b 4c 63 e4 b7 ba e5 75 02 04 64 d3 7c b7 77 a0 69 03 51 73 cd 48 71 3d dc f1 74 a8 75 0f 06 f0 df df 1f 4f ff 7e f6 c7 fd de c7 8f c5 1f b5 dd 38 c5 89 fd f1 dd eb 1a aa 60 0d fb 39 46 c0 1c c5 dd e7 a7 1f f7 3e f6 3f ee 7e fc e3 d9 f3 2b 5d fb f8 f1 f7 cf b4 de ae 86 45 3f 7e 1c e2 4f f7 f4 ef fb 67 7f ec f5 ff f8 fb de e3 df e1 af a6 e7 c0 04 4e a3 72 74 dd 85 ed d3 79 17 5f 1d dd cd ba 69 af 87 9c 23 8b 9a 87 f9 b3 67 cc a3 e1 f3 a9 79 56 c9 4c c7 f1 4a 67 e8 33 9c 86 79 d2 8e ab 2b 56 8f 2b 81 29 4e 51 6e 39 7c 68 d6 08 56 27 87 79 00 08 48 e1 38 cc fb 88 07 e1 24 cc 91 ad 4a f2 b8 00 dc 95 f7 81 d6 9e e7 31 a0 20 78 04 f6 f2 04 9a 00 fc 51 ee 6a Data Ascii: pWP'"q&Os+Lcud\|wiQsHq=tuO~8`9F>?~+]E?~OgNrty_i#gyVLJg3y+V+)NQn9\|hV'yH8$J1 xQj
2024-12-20 18:03:53 UTC	16384	IN	Data Raw: e9 59 73 1f dc 8d 74 ed 3c 49 6f c8 fc 48 8c f5 35 34 9c ea f3 1e 5e aa 35 dd b9 ac 57 16 c6 c5 c5 1f b0 6a 34 ad c8 a7 d1 04 45 a1 57 e8 9e 1f e1 15 33 2e 9a 41 4b d9 cb 6b f2 d2 4a b9 17 78 cd 7b 9b 47 b3 e1 84 60 71 0c bc c8 bc 40 91 49 3c 3e 29 a3 bc d4 f4 eb 56 d2 df 92 78 32 d6 f4 fb a1 16 df 01 3d 56 12 93 3c 45 b9 0a cb d0 e0 db 15 6a 08 d4 9d be 00 68 6f 86 70 2b bd 9d e3 1b 36 7a 82 45 8a ee 89 1e e9 dd d5 5d 82 74 d5 a2 c7 d8 f6 a8 9a 61 38 bd 7e a8 e6 f6 ed a5 7e 38 3c 7a f6 ec a8 7b d4 fd a1 0b 93 0b 99 0f 9f 3d 3b dc 21 02 38 e7 09 39 d4 23 dc c0 27 c3 43 ae e9 6e 78 de ac ce f0 a2 f5 2c af e1 49 0b 0b bf c4 a9 3c 85 43 ee 8e 54 55 78 1a 35 41 c9 9c a1 ca c9 51 04 f3 dd 8c 01 ce 76 06 74 95 6a 05 d1 8b 62 e9 61 bd ca 9e d0 08 a9 9b 7b cb d4 Data Ascii: Yst<IoH54^5Wj4EW3.AKkJx{G`q@I<>)Vx2=V<Ejhop+6zE]ta8~~8<z{=;!89#'Cnx,I<CTUx5AQvtjba{
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 3e 3b 2f b2 2c 85 1a b3 27 0e 57 aa 27 cb 3f f3 38 9a 0a 36 8f bc 5d 7a 9a d1 15 c1 65 d6 14 de 32 01 ed d2 e8 8c 19 70 38 cd 46 d6 12 24 15 92 9c 36 ea bf 87 43 72 0e 78 1e ef ce 5a 5c ed 44 91 6d b4 9a 8d 44 17 95 cb 71 81 f3 e4 e9 1e 34 69 cd dc d5 6e c6 93 69 3c 81 ed fe 35 9c 0f da 7e 93 53 4c d2 72 b6 b7 39 85 40 6d 65 ac 26 64 39 e7 9f 48 90 bc ec 78 bb 4d ae 69 2d 77 9b e3 7f 6e 14 ef 69 15 be e1 b6 36 0c 83 f3 fd c4 89 6f d3 bf 01 68 6f 18 0a e7 7e 57 c1 f4 f2 58 e4 46 91 e1 70 7d 27 7c 9a cc fc 67 15 21 3f 07 6e 4d e5 f8 6f 04 4c d0 2f 6a 6c 74 a3 72 fc 77 09 88 36 53 62 b5 16 43 20 d0 0f 5d df b8 56 e0 32 4b c0 37 39 0d ac 46 2d c2 22 fa 0f 8a d1 11 49 31 3a e6 4b e4 d3 b0 91 cb 36 8e a4 23 0a 55 85 ee 79 2f e2 c9 81 f8 6d dd 4d 0c 96 65 c0 74 Data Ascii: >;/,'W'?86]ze2p8F$6CrxZ\DmDq4ini<5~SLr9@me&d9HxMi-wni6oho~WXFp}'\|g!?nMoL/jltrw6SbC ]V2K79F-"I1:K6#Uy/mMet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49834	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:52 UTC	776	OUT	GET /v3/payment-request-inner-google-pay-3e5f7756d6176660c979cc629f258eab.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:52 UTC	1367	IN	HTTP/1.1 200 OK Connection: close Content-Length: 408 Last-Modified: Thu, 19 Dec 2024 21:09:17 GMT ETag: "3e5f7756d6176660c979cc629f258eab" Cache-Control: max-age=31536000 Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src 'self' https://r.stripe.com https://google.com/pay https://www.google.com/pay https://pay.google.com; default-src 'none'; form-action 'none'; frame-src https://pay.google.com; img-src https://q.stripe.com https://www.gstatic.com; script-src 'self' https://pay.google.com; style-src 'self'; report-uri https://q.stripe.com/csp-report content-security-policy-report-only: base-uri 'none'; connect-src 'self' https://r.stripe.com https://google.com/pay https://www.google.com/pay https://pay.google.com; default-src 'none'; form-action 'none'; frame-src https://pay.google.com; img-src https://q.stripe.com https://www.gstatic.com; script-src 'self' https://pay.google.com; style-src 'self'; report-uri https://q.stripe.com/csp-report origin-agent-cluster: ?1 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 22299 Date: Fri, 20 Dec 2024 18:03:52 GMT Via: 1.1 varnish X-Request-ID: 89d1231a-1df9-4fae-b603-0203269a36a6 X-Served-By: cache-ewr-kewr1740064-EWR
2024-12-20 18:03:52 UTC	153	IN	Data Raw: 58 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 37 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: X-Cache: HITX-Cache-Hits: 0Vary: Accept-EncodingTiming-Allow-Origin: *alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:52 UTC	408	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 70 2f 70 2f 6a 73 2f 70 61 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 6a 73 2f 73 68 61 72 65 64 2d 66 64 39 61 34 62 39 32 61 66 63 31 65 38 33 30 66 33 35 33 33 65 34 65 39 35 63 35 33 61 63 63 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 Data Ascii: <!doctype html><html><head><meta charset="utf-8"/><script src="https://pay.google.com/gp/p/js/pay.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js"></script><script defer="defer"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49833	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:52 UTC	773	OUT	GET /v3/payment-request-inner-browser-57a5abf2116f0f98c3257286b4b1c74d.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:52 UTC	1372	IN	HTTP/1.1 200 OK Connection: close Content-Length: 344 Last-Modified: Thu, 19 Dec 2024 21:09:17 GMT ETag: "57a5abf2116f0f98c3257286b4b1c74d" Cache-Control: max-age=60, stale-while-revalidate=900 Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src 'self' https://api.stripe.com https://errors.stripe.com https://r.stripe.com https://google.com/pay https://www.google.com/pay https://pay.google.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src 'self'; img-src 'self' https://q.stripe.com https://www.gstatic.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report content-security-policy-report-only: base-uri 'none'; connect-src 'self' https://api.stripe.com https://errors.stripe.com https://r.stripe.com https://google.com/pay https://www.google.com/pay https://pay.google.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src 'self'; img-src 'self' https://q.stripe.com https://www.gstatic.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report origin-agent-cluster: ?1 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: *
2024-12-20 18:03:52 UTC	348	IN	Data Raw: 73 65 72 76 65 72 3a 20 46 61 73 74 6c 79 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 67 65 3a 20 31 39 38 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 30 20 44 65 63 20 32 30 32 34 20 31 38 3a 30 33 3a 35 32 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 58 2d 52 65 71 75 65 73 74 2d 49 44 3a 20 37 66 61 63 33 30 38 31 2d 61 39 36 35 2d 34 39 31 61 2d 62 36 36 31 2d 39 34 64 66 36 64 62 36 64 36 64 35 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 34 32 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 69 6d 69 6e 67 Data Ascii: server: FastlyAccept-Ranges: bytesAge: 198Date: Fri, 20 Dec 2024 18:03:52 GMTVia: 1.1 varnishX-Request-ID: 7fac3081-a965-491a-b661-94df6db6d6d5X-Served-By: cache-nyc-kteb1890042-NYCX-Cache: HITX-Cache-Hits: 0Vary: Accept-EncodingTiming
2024-12-20 18:03:52 UTC	344	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 6a 73 2f 73 68 61 72 65 64 2d 66 64 39 61 34 62 39 32 61 66 63 31 65 38 33 30 66 33 35 33 33 65 34 65 39 35 63 35 33 61 63 63 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 6a 73 2f 70 61 79 6d 65 6e 74 2d 72 65 71 75 65 73 Data Ascii: <!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/payment-reques

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49836	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:52 UTC	763	OUT	GET /v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:52 UTC	1303	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1058 Last-Modified: Thu, 19 Dec 2024 21:09:02 GMT ETag: "82b73398e11598b9ad92559cae1c986b" Cache-Control: max-age=31536000 Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src 'self' https://api.stripe.com https://errors.stripe.com https://r.stripe.com https://ppm.stripe.com; default-src 'self'; font-src data: https:; form-action 'none'; frame-src 'self' https://www.affirm.com https://checkout.link.com https://b.stripecdn.com; img-src 'self' https://q.stripe.com https://b.stripecdn.com https://js.stripe.com https://files.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; worker-src 'none'; report-uri https://q.stripe.com/csp-report origin-agent-cluster: ?1 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 18752 Date: Fri, 20 Dec 2024 18:03:52 GMT Via: 1.1 varnish X-Request-ID: fe2f7d07-1089-4dbf-b558-f5c9f38e5a72 X-Served-By: cache-ewr-kewr1740072-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:52 UTC	1058	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 74 44 30 57 72 6e 4d 77 41 50 49 34 6e 57 57 43 76 72 65 45 2b 76 70 67 50 56 7a 34 35 53 4f 2f 31 66 47 31 49 5a 52 4e 70 42 73 64 57 5a 4f 5a 4e 36 53 4b 72 30 79 6e 43 31 31 4b 75 7a 72 76 54 39 30 33 57 72 45 55 2b 4e 39 49 6b 2f 52 70 69 43 52 54 41 45 41 41 41 42 62 65 79 4a 76 Data Ascii: <!doctype html><html><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta http-equiv="origin-trial" content="AtD0WrnMwAPI4nWWCvreE+vpgPVz45SO/1fG1IZRNpBsdWZOZN6SKr0ynC11KuzrvT903WrEU+N9Ik/RpiCRTAEAAABbeyJv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49827	108.158.75.52	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:52 UTC	500	OUT	GET /vendor.6349e54f.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:53 UTC	836	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 196869 Connection: close Date: Fri, 20 Dec 2024 18:03:54 GMT Last-Modified: Wed, 18 Dec 2024 17:16:50 GMT ETag: "72afb86f841a4306b6702132c561fde7" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: GuDsX6Z4KP_mQArh2diVEcG1Hg9x4Mw. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b7aa42be707be92c6f559d499f72dcc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: alyNfteB-7LCCcjbA88hoG5pJWZqjvSg5XZrh3gv3e5YL7GYobaSAA== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-12-20 18:03:53 UTC	8192	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 7b 7f db 38 ae 30 fc ff fb 29 1c 6d 27 23 d5 8a 63 3b 71 2e 72 55 9f b4 4d a7 3d db db 69 d2 b9 ac eb c9 ca 12 6d 6b 22 4b 1e 49 76 92 89 fd 7c f6 17 00 49 89 ba 38 4d 67 cf fb 7b de 9d 6d 2c 51 bc 80 20 08 80 20 08 ee 3f dd 69 bc 8e e2 46 e0 bb 2c 4c 58 c3 0f 27 51 3c 77 52 3f 0a 1b 8b 80 39 90 94 30 d6 58 b1 d0 8b e2 d6 d1 c1 e1 29 eb 1d 4e 5a 7f 24 ad 77 6f 5f 9e 7f b8 38 6f a5 b7 69 e3 e9 fe ff a3 27 2c 98 b4 6e d8 78 e1 b8 d7 2f 67 cb f0 da 0f 53 16 bb d1 fc ea 8f c4 7e e8 e3 7a 3d 1c 19 ad c5 32 99 e9 c3 e1 61 a7 db 19 99 f7 dd de 49 a7 67 4d 96 a1 8b 90 e8 cc 4c cd d0 b8 d7 96 08 4e 1a fb 6e aa f5 c3 96 a7 a7 e6 fd 59 9e cb b8 8f 59 ba 8c c3 c6 7c b3 31 fa 2b 27 6e c4 76 a8 1f 9d b4 4f 3a 86 19 c1 e3 61 fb e0 b4 Data Ascii: {80)m'#c;q.rUM=imk"KIv\|I8Mg{m,Q ?iF,LX'Q<wR?90X)NZ$wo_8oi',nx/gS~z=2aIgMLNnYY\|1+'nvO:a
2024-12-20 18:03:53 UTC	8617	IN	Data Raw: c9 4b f2 77 a5 b0 48 10 e5 e7 c9 4f 59 ab d9 b3 c8 cd df b3 da d5 57 91 23 3f 10 00 2f e8 c2 fa 46 be 08 b7 71 7c 12 bd 8b e2 c5 cc 21 84 a5 ce 18 8f 1d c0 d3 8d ef 45 37 98 f4 17 ad ca f1 21 8a 70 0f ea 17 36 be f6 53 f4 ee 7d 19 38 73 c4 be 72 28 82 d0 96 9f 72 80 57 c5 05 99 de 0a 9e c4 85 14 ee 4b 9c 25 e5 0e c3 59 52 b9 1e 41 29 40 d7 a4 eb 3d 4c d7 5c 1d 13 d4 5d e7 25 98 6c cc a4 26 d9 91 44 5f 50 45 77 76 f4 78 bd d6 69 9f 53 8f cc ae 01 53 0e 5a 7b 2b d7 98 dc 7b 17 75 ad 6f e7 02 75 d6 07 c6 56 a3 9a a3 4e 9d e0 47 92 82 ef 9c bb 68 99 f2 32 1b 93 94 de 47 4d e5 cf d7 b5 73 d9 bc 78 5d 93 1e 41 8b 75 f9 e9 80 ac ea 94 5a b2 94 e6 d6 d5 ec 04 7f cd b2 03 4b e4 76 a9 70 04 4a 11 b7 25 60 18 40 54 70 d0 0e 18 a2 f0 45 5d 30 16 41 0e ea 55 0d 96 c9 Data Ascii: KwHOYW#?/Fq\|!E7!p6S}8sr(rWK%YRA)@=L\]%l&D_PEwvxiSSZ{+{uouVNGh2GMsx]AuZKvpJ%`@TpE]0AU
2024-12-20 18:03:53 UTC	16384	IN	Data Raw: c0 cb 39 a4 58 95 1e 35 65 58 22 5e b1 08 a6 c0 5f a8 5a ca 52 6c 8d a1 82 f2 dd cd 51 a9 6f 34 98 e7 e1 d7 1d 1a e2 aa 5c 2d c4 d1 71 69 74 f6 fe 48 5a 1a e8 3a f7 7e e8 c6 a5 73 c4 00 0a 0c ab 3f 2f c6 94 40 3b c6 46 52 e7 f2 db 23 7a 95 f8 e1 b5 9d d4 0d 25 8c cc 05 7e ac 8c 0b 2f 53 1a 96 0a 09 17 aa 2f 8d a0 e8 cc 96 aa f3 0c ba 53 19 10 de e3 92 e5 46 29 cb bf 63 41 3a 36 4c 98 55 ef 8e 2f de ae 9b c7 f9 a4 2a fc d0 4f 7d 27 78 e1 24 ec 15 0b 9c 3b 19 19 1c a4 75 9e 26 ef 7a 85 a5 71 34 99 bc 07 96 e6 2f 60 b4 80 b8 45 66 3f fc cc 8f 16 c7 59 69 91 10 f1 04 c2 95 6e d4 21 bd 1e 8d 78 8b cb db 32 6c b5 10 17 91 85 e5 4a 42 72 6b 7d cf 2b 3d 35 14 19 28 61 36 69 69 ca c3 d5 56 0a f0 08 5f fc 5c 35 77 48 2e 22 a4 84 0e 43 ca 80 72 9d 75 e0 7d 7f dd 2a Data Ascii: 9X5eX"^_ZRlQo4\-qitHZ:~s?/@;FR#z%~/S/SF)cA:6LU/O}'x$;u&zq4/`Ef?Yin!x2lJBrk}+=5(a6iiV_\5wH."Cru}
2024-12-20 18:03:53 UTC	16384	IN	Data Raw: 0d c5 b9 3c 67 b6 bd d2 09 2d 85 16 c6 c2 de 69 fd 17 3d 54 c3 a9 f2 06 0a 0b 7a 44 c9 33 1f 14 f3 2a 92 0f 0d 50 58 ff 4b e8 28 37 b8 76 6e 27 55 75 5b 07 c5 40 3e 7a 05 7d 5a 64 a4 46 79 5d 9c 3b 78 40 ca e1 d2 f1 bf 2b 8e 47 b9 ba e3 00 ea f5 5c 8f 25 b4 0a d7 d4 eb 5f ac 6f da 4f f0 f3 b4 6a f7 94 21 aa d8 b7 ee 0c da 90 c8 ff 5c ea a8 7b 2e 2e ca 30 c3 d8 3e f3 ae 95 d6 5e dd d8 57 78 f8 17 d4 c4 29 0a 93 08 38 73 92 a7 cb e7 66 c8 0a e3 7a 2a 25 0d 0c ad 38 b9 2f 5a 59 ac a6 88 cb 70 ea 7f 0c 1d d4 7b 5f 0b 52 7e d3 70 4e 59 3d 01 87 eb fe a5 3e 4c 0a 16 ef 3a f4 60 59 dd 3f c3 ee 5a 51 28 6b 0d 4d f1 4e b9 38 55 a9 82 34 7f d0 9d 01 f3 a5 08 df 3d 75 fe 8e 26 fe 3e 6a e2 71 cd ae c5 10 d6 6d 5f f4 00 ff f5 c2 69 cd 7f 68 97 f6 89 e1 06 3a 88 87 aa Data Ascii: <g-i=TzD3PXK(7vn'Uu[@>z}ZdFy];x@+G\%_oOj!\{..0>^Wx)8sfz%8/ZYp{_R~pNY=>L:`Y?ZQ(kMN8U4=u&>jqm_ih:
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: dc 75 97 6a 6e 4d fb 0b e0 1b e4 93 3a 41 fc ad 32 3d c4 ae 27 4f 12 3f 33 b1 72 e8 23 e1 8c 2c 7f 48 4c 82 89 42 0a 26 56 fc b7 0f 7f f9 b8 a7 ed 84 81 2f a9 3a 0c 12 4f 38 49 e1 30 08 aa 4d f1 dd 82 87 04 a9 a8 0a 25 05 a8 e2 7d 3e 77 4d 02 e8 84 a5 08 04 06 ac 84 8d 29 c0 30 5b 2b b9 03 15 8e 14 71 ed a4 8d 71 16 d3 f1 38 45 42 a2 df 5e b1 3d 1b 0a 15 72 f6 7f 3f 3c 39 3d f1 32 c1 45 2c bc 91 b0 4b 58 78 5d 9c 7e 73 7d 5e 14 36 75 ce 9e f0 04 b1 dc 1e 53 10 ea 9f 59 0d c2 5f 9d f8 ac 10 ee 8e 1e 78 88 34 e7 a5 db 14 c7 6d b2 e7 3d 51 e1 50 ed 19 2e b3 5d 78 0e 71 2b ab 5b e6 f5 f7 78 8e 32 21 80 32 3c 30 64 4a 1a 23 a2 a2 17 5f 50 15 75 30 0d c1 91 3e 64 45 74 be 09 c0 f8 fd ae 0e ec 40 f5 1c bd 29 87 46 be 58 6b 63 d8 2c b2 86 98 1f a3 ad 42 68 5c 2f Data Ascii: ujnM:A2='O?3r#,HLB&V/:O8I0M%}>wM)0[+qq8EB^=r?<9=2E,KXx]~s}^6uSY_x4m=QP.]xq+[x2!2<0dJ#_Pu0>dEt@)FXkc,Bh\/
2024-12-20 18:03:54 UTC	1654	IN	Data Raw: 4f c9 d4 fa 74 84 d1 29 49 c7 e2 f3 f0 12 0f a7 2c a9 e7 20 aa 60 27 db ab e9 e2 12 e6 a1 5b da 5e ed 50 0c 13 fa 8d 89 5b 44 35 c4 51 13 75 f8 25 2e c1 df 9c ce 09 36 4a d3 72 79 2c 98 61 23 74 e5 2f c9 df 4e ae f7 48 5d 0a 77 3b 8f f2 89 f3 1e 33 e5 13 60 22 37 3b af 97 92 12 81 10 af 13 74 92 91 18 a5 53 91 f3 07 11 7a 54 11 09 95 44 9c 61 e6 81 11 8f d7 29 3a fc 0f a7 1e 6e e4 09 a3 85 2a d6 58 39 71 45 c7 cc 15 a6 d1 37 5b 5f 61 12 35 9a 1d a3 c8 2b 07 f0 ca f0 85 09 06 f3 a7 31 bc aa b4 c5 04 7f ab 07 e2 ea 6b 55 b4 99 33 7f 9d 75 04 17 50 8b cd 36 74 92 df 66 17 b5 1b af b7 06 64 4f 4a b3 2d 48 1e 99 73 24 b2 d9 60 7f 71 a5 cd ba 3d c4 cf 1d 57 4d a2 45 25 35 aa 05 63 c6 e0 97 41 bb 10 4b 70 30 96 55 12 e1 87 73 6d d4 39 b6 b2 e1 28 4d 48 e0 0e b1 Data Ascii: Ot)I, `'[^P[D5Qu%.6Jry,a#t/NH]w;3`"7;tSzTDa):n*X9qE7[_a5+1kU3uP6tfdOJ-Hs$`q=WME%5cAKp0Usm9(MH
2024-12-20 18:03:54 UTC	1418	IN	Data Raw: 94 e4 2a cd 2e 7e 52 90 b9 16 e6 ac 9f 66 3f 62 ef 05 d4 7b ac 11 b0 fb 3a bd e6 4b 00 44 a2 b7 54 85 c7 e5 14 0a 14 76 5f f2 c3 64 af 63 31 0a a3 28 e7 c7 2b 9c 37 7c 19 59 7c 8d 1f c7 64 2e 9a 85 1f 4d bc 31 ea 3f bf 83 27 46 dc ec 95 ce 18 7e d9 57 f9 63 08 f0 e7 61 91 f5 ca c0 94 e9 0f ab 55 0e c0 3e b5 87 95 b0 3f 24 bd 67 10 9f 4f 11 98 64 78 69 81 76 a4 4f 99 1e 89 67 a1 05 33 86 85 69 4c 9e 9c b1 3c ce c6 97 8f b2 17 07 9e 44 d2 bb 5b 6f 17 65 6f ce 04 05 c1 b2 cd 8a ef 02 32 1b 6b 50 ac 5c 35 37 15 d8 4e 1a f2 69 35 40 88 fe 16 17 ab 14 bf 65 e8 5b f2 eb bd 75 62 f7 e9 81 95 5b 01 c6 c9 04 31 a3 10 af 56 3f 3a 1f 35 5e a3 88 a8 df 38 18 71 bf 94 b1 c9 0e 72 ef 61 1c 1c 9f 7e 62 06 48 ce 9a 65 e2 37 93 d3 82 5d 94 33 90 32 d1 60 09 d3 91 ab f4 7c Data Ascii: *.~Rf?b{:KDTv_dc1(+7\|Y\|d.M1?'F~WcaU>?$gOdxivOg3iL<D[oeo2kP\57Ni5@e[ub[1V?:5^8qra~bHe7]32`\|
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: f4 45 78 8b 67 bb 8d 85 8d b0 22 4c 35 2b b1 b6 a7 9a 55 10 6f 7b 75 7a f5 4e ab 59 94 1c 21 e3 5e a9 9b 66 3a 76 af 23 d1 2b f3 e0 ee c9 6f c0 6a a8 eb cd 68 dc c6 bb a2 5e b8 eb a8 e4 87 32 f7 1a 6c ec c0 d0 79 49 3a e4 37 2f a3 ce dc 1e 3b ef 3f 7d 57 3f 7a f6 3d a7 3f 37 ea 39 2f ea 1e 1c 1c 24 29 c1 f1 a0 61 56 c9 31 54 a9 b5 10 c5 d1 6a d4 b9 5f a8 f3 15 09 37 9d 76 c7 e8 25 6d 2a 8b 03 6c 5f 2e 0e 9e 7e 6b 59 00 78 a0 dd 18 9a 2d 66 f6 13 13 3b 50 51 c1 86 89 5a 11 7c f6 38 5f f7 d4 78 37 da 05 dd 71 57 8d f6 ea 7c f2 f6 da 45 29 48 b6 3e e8 c5 17 0e 84 ac 72 ef e7 33 13 5e 97 fe 32 95 d1 ec b5 5e f2 b0 89 47 3e dd 99 63 02 50 c7 94 ba 66 d7 ac 33 83 e1 eb c6 d3 64 35 0f e2 9c 51 ff bc 2c da 80 86 28 a1 6a 1f a0 ec d5 d1 3f 97 c8 5f ba f9 86 f7 31 Data Ascii: Exg"L5+Uo{uzNY!^f:v#+ojh^2lyI:7/;?}W?z=?79/$)aV1Tj_7v%m*l_.~kYx-f;PQZ\|8_x7qW\|E)H>r3^2^G>cPf3d5Q,(j?_1
2024-12-20 18:03:54 UTC	1024	IN	Data Raw: b5 ba 81 88 e4 38 d7 c5 e2 31 db f8 3b ce 61 b1 78 45 0e 34 a2 b2 76 b5 52 bd cf f4 93 ec a5 ab 55 f2 ec ae df 67 66 94 c4 9c c4 59 f6 6f 8d 3b c9 dc 92 a1 19 5a f7 56 8b ea 4e 31 c5 3a f7 99 95 dc ed 9d 2e ec 75 33 bc 5d 33 41 54 d0 1d 29 3c 46 61 89 3e a1 1c 9a e8 3c 4e db 34 18 61 c4 2a 03 67 f2 81 b1 ef 0c fe f8 32 2e ed b8 db df 86 3b 3e 70 f7 9d c1 97 f8 4b f0 65 f2 25 da 1a 96 76 4e 81 cb ef 0c 9c e1 2d e8 2c ab 27 3b c0 ea 7d 34 a2 0d 4f 08 88 39 2f a6 d5 29 7b 90 48 d4 90 93 8c 83 c9 31 dc cf 04 1a de 95 93 0b 0e 82 d8 20 37 a6 b1 45 a0 96 b0 1a 14 16 99 1d 1d c3 e5 47 87 4e e1 0a e6 1c d0 da da 2b f4 fc 5c 3d 47 13 c3 1b 75 2c a1 3b 91 9c f8 01 fa 8c d8 9a ef 6f 62 53 7f b5 5c 5e 2f 97 87 cb e5 39 05 b2 0c 4f d6 b9 cf da f1 14 8c 0d 7e 90 c4 e0 Data Ascii: 81;axE4vRUgfYo;ZVN1:.u3]3AT)<Fa><N4a*g2.;>pKe%vN-,';}4O9/){H1 7EGN+\=Gu,;obS\^/9O~
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 1f 0d 4d e3 2a 8c ce bd e8 18 38 9e e7 8e e7 86 55 4e bf 65 59 65 dc b7 a8 c2 ef 3c 16 8f 48 1e 17 ca a1 b6 ef 40 b1 bc d0 1e 8c e5 e7 5a 13 37 20 28 90 b1 e4 d7 9e ee 4d 8c 5b 13 a0 af ee 17 8b fb 1a 0d ec 39 e7 29 6d f5 44 84 43 3b d1 90 73 ae 51 e1 44 0c c4 d1 39 ea d2 e7 98 f0 35 4f 9d 1e 9b 17 36 0a fc 17 03 6f 58 be e8 d3 9f 51 b7 b2 b2 df e9 9b 85 7c 38 64 bf dd 84 36 61 c7 18 37 ea 59 55 7a 4f a5 5d af 03 7a 58 5b 7f 58 1d da 6a 60 22 e7 ab c9 71 21 53 c1 d4 ae 19 16 2b b0 2f b8 63 bb b1 cd f1 d3 40 6e 3f 46 dd 0f cf d8 a9 47 03 d2 44 ca e2 3d 87 31 5c a9 6f 1d 54 c9 24 fe c8 39 9a 16 85 fc c9 b5 3d 52 b8 86 d8 53 f6 c2 ac da a7 66 58 a6 5b c4 b8 c5 0d 83 b7 ce 3b cd e1 7b 8e a1 e6 0e 72 ba f2 36 bd 1e e4 79 54 7b 90 db ab bc 51 38 c8 83 0b 12 01 Data Ascii: M*8UNeYe<H@Z7 (M[9)mDC;sQD95O6oXQ\|8d6a7YUzO]zX[Xj`"q!S+/c@n?FGD=1\oT$9=RSfX[;{r6yT{Q8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49835	13.59.75.255	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:52 UTC	580	OUT	OPTIONS /api/patient/v1/unauthenticated_patients/attempted_checkout_at HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive Accept: / Access-Control-Request-Method: PUT Access-Control-Request-Headers: content-type Origin: https://patient.inboxhealth.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:53 UTC	493	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET, PUT, DELETE, POST, OPTIONS, PATCH Access-Control-Allow-Origin: https://patient.inboxhealth.com Access-Control-Expose-Headers: Authorization, Content-Disposition, X-Amzn-Remapped-Authorization Access-Control-Max-Age: 7200 Content-Length: 0 Date: Fri, 20 Dec 2024 18:03:52 GMT Strict-Transport-Security: max-age=315360000; preload Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49840	34.252.74.21	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:52 UTC	334	OUT	GET / HTTP/1.1 Host: stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:53 UTC	4598	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:03:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2061706 Connection: close Content-Security-Policy: report-uri /csp-report?p=; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://stripe-camo.global.ssl.fastly.net https://images.ctfassets.net https://images.stripeassets.com https://assets.ctfassets.net https://assets.stripeassets.com data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1/indexes/mkt_partners/query; font-src 'self' h [TRUNCATED] Content-Security-Policy-Report-Only: report-uri /csp-report?p=; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://stripe-camo.global.ssl.fastly.net https://images.ctfassets.net https://images.stripeassets.com https://assets.ctfassets.net https://assets.stripeassets.com data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1/indexes/mkt_partners/query; font- [TRUNCATED] Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop" Referrer-Policy: no-referrer-when-downgrade Report-To: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true} Reporting-Endpoints: coop="https://q.stripe.com/coop-report" Set-Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9; domain=stripe.com; path=/; expires=Thu, 20 Mar 2025 18:03:53 GMT; secure; SameSite=Lax X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Mkt-Cache: HIT X-Stripe-Proxy-Response: upstream X-Wc: AC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-12-20 18:03:53 UTC	11786	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 63 6c 61 73 73 3d 22 4d 6b 74 52 6f 6f 74 22 0a 20 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 0a 20 20 64 61 74 61 2d 6a 73 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 50 61 67 65 22 0a 20 20 64 61 74 61 2d 70 61 67 65 2d 69 64 3d 22 48 6f 6d 65 22 0a 20 20 64 61 74 61 2d 70 61 67 65 2d 74 69 74 6c 65 3d 22 53 74 72 69 70 65 20 7c 20 46 69 6e 61 6e 63 69 61 6c 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 74 6f 20 47 72 6f 77 20 59 6f 75 72 20 52 65 76 65 6e 75 65 22 0a 20 20 64 61 74 61 2d 6c 6f 61 64 69 6e 67 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 5f 5f 63 61 70 74 75 72 65 64 45 72 72 6f 72 73 20 3d 20 5b 5d 3b 0a 77 69 6e 64 6f 77 2e Data Ascii: <!DOCTYPE html><html class="MktRoot" lang="en-US" data-js-controller="Page" data-page-id="Home" data-page-title="Stripe \| Financial Infrastructure to Grow Your Revenue" data-loading> <head> <script>window.__capturedErrors = [];window.
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 6f 47 72 69 64 20 2e 53 65 63 74 69 6f 6e 5f 5f 6c 61 79 6f 75 74 7b 2d 2d 73 65 63 74 69 6f 6e 50 61 64 64 69 6e 67 54 6f 70 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 3e 2e 53 69 74 65 48 65 61 64 65 72 7b 2d 2d 73 69 74 65 4d 65 6e 75 54 72 61 6e 73 69 74 69 6f 6e 3a 32 35 30 6d 73 3b 2d 2d 73 69 74 65 4d 65 6e 75 41 72 72 6f 77 53 70 61 63 69 6e 67 3a 31 33 70 78 3b 2d 2d 73 69 74 65 4d 65 6e 75 41 72 72 6f 77 4f 66 66 73 65 74 3a 30 3b 2d 2d 75 73 65 72 4c 6f 67 6f 43 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 61 76 43 6f 6c 6f 72 29 3b 2d 2d 74 61 62 6c 65 74 4f 76 65 72 6c 61 79 44 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: oGrid .Section__layout{--sectionPaddingTop:0}</style><style>.SiteHeader{--siteMenuTransition:250ms;--siteMenuArrowSpacing:13px;--siteMenuArrowOffset:0;--userLogoColor:var(--navColor);--tabletOverlayDisplay:none;position:relative;z-index:100;background-co
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 73 74 79 6c 65 3e 2e 4d 6f 62 69 6c 65 4d 65 6e 75 7b 2d 2d 73 69 74 65 4d 6f 62 69 6c 65 4d 65 6e 75 48 65 61 64 65 72 48 65 69 67 68 74 3a 36 30 70 78 3b 2d 2d 73 69 74 65 4d 6f 62 69 6c 65 4d 65 6e 75 46 6f 6f 74 65 72 48 65 69 67 68 74 3a 36 34 70 78 3b 2d 2d 73 69 74 65 4d 6f 62 69 6c 65 4d 65 6e 75 50 61 64 64 69 6e 67 3a 34 70 78 3b 2d 2d 73 69 74 65 4d 6f 62 69 6c 65 4d 65 6e 75 4e 61 76 4c 69 73 74 54 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 70 78 29 3b 2d 2d 73 69 74 65 4d 6f 62 69 6c 65 4d 65 6e 75 53 65 63 74 69 6f 6e 54 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 70 78 29 3b 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 34 30 30 6d 73 3b 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 45 61 73 69 Data Ascii: style>.MobileMenu{--siteMobileMenuHeaderHeight:60px;--siteMobileMenuFooterHeight:64px;--siteMobileMenuPadding:4px;--siteMobileMenuNavListTransform:translateY(0px);--siteMobileMenuSectionTransform:translateY(0px);--transitionDuration:400ms;--transitionEasi
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 7a 2d 69 6e 64 65 78 3a 31 3b 2d 2d 63 61 72 64 53 68 61 64 6f 77 3a 76 61 72 28 2d 2d 63 61 72 64 53 68 61 64 6f 77 58 4c 61 72 67 65 29 3b 2d 2d 63 61 72 64 53 68 61 64 6f 77 4d 61 72 67 69 6e 3a 76 61 72 28 2d 2d 63 61 72 64 53 68 61 64 6f 77 58 4c 61 72 67 65 4d 61 72 67 69 6e 29 7d 2e 53 69 74 65 4d 65 6e 75 5f 5f 73 65 63 74 69 6f 6e 7b 2d 2d 73 69 74 65 4d 65 6e 75 53 65 63 74 69 6f 6e 4f 66 66 73 65 74 3a 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 20 74 72 61 6e 73 6c 61 74 65 58 28 76 61 72 28 2d 2d 73 69 74 65 4d 65 6e 75 53 65 63 74 69 6f 6e 4f Data Ascii: z-index:1;--cardShadow:var(--cardShadowXLarge);--cardShadowMargin:var(--cardShadowXLargeMargin)}.SiteMenu__section{--siteMenuSectionOffset:0;display:inline-block;position:absolute;top:0;left:50%;transform:translateX(-50%) translateX(var(--siteMenuSectionO
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 75 63 68 65 64 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 2b 2e 45 6d 61 69 6c 49 6e 70 75 74 5f 5f 65 72 72 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 45 6d 61 69 6c 49 6e 70 75 74 5f 5f 69 6e 70 75 74 2d 2d 6d 75 6c 74 69 6c 69 6e 65 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 34 70 78 3b 72 65 73 69 7a 65 3a 76 65 72 74 69 63 61 6c 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 3e 2e 43 6f 70 79 7b 2d 2d 70 61 64 64 69 6e 67 4c 65 66 74 3a 76 61 72 28 2d 2d 63 6f 6c 75 6d 6e 50 61 64 64 69 6e 67 4e 6f 72 6d 61 6c 29 3b 2d 2d 70 61 64 64 69 6e 67 52 69 67 68 74 3a 76 61 72 28 2d 2d 63 6f 6c 75 6d 6e 50 61 64 64 69 6e 67 4d 65 64 69 75 6d 29 3b 2d 2d 68 65 61 64 65 72 50 61 64 64 69 6e 67 4c 65 66 74 3a 76 61 72 28 2d 2d 70 61 64 64 69 6e 67 4c 65 66 Data Ascii: uched:invalid:focus+.EmailInput__error{display:none}.EmailInput__input--multiline{min-height:64px;resize:vertical}</style><style>.Copy{--paddingLeft:var(--columnPaddingNormal);--paddingRight:var(--columnPaddingMedium);--headerPaddingLeft:var(--paddingLef
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 70 61 67 65 44 61 73 68 62 6f 61 72 64 47 72 61 70 68 69 63 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 3a 61 75 74 6f 2f 31 33 32 70 78 20 31 66 72 3b 67 61 70 3a 32 34 70 78 3b 77 69 64 74 68 3a 39 37 35 70 78 3b 70 61 64 64 69 6e 67 3a 32 34 70 78 20 30 20 32 34 70 78 20 32 34 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 33 29 20 32 35 25 2c 72 67 62 61 28 32 34 36 2c 32 34 39 2c 32 35 32 2c 2e 33 29 20 35 30 25 2c 23 66 36 66 39 66 63 20 36 30 25 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 30 20 68 Data Ascii: pageDashboardGraphic{display:grid;grid:auto/132px 1fr;gap:24px;width:975px;padding:24px 0 24px 24px;border-radius:8px;background:linear-gradient(hsla(0,0%,100%,.4),hsla(0,0%,100%,.3) 25%,rgba(246,249,252,.3) 50%,#f6f9fc 60%);box-shadow:inset 0 1px 1px 0 h
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 75 62 50 61 67 65 20 2e 43 6f 6c 75 6d 6e 4c 61 79 6f 75 74 5b 64 61 74 61 2d 63 6f 6c 75 6d 6e 73 3d 22 31 2c 31 2c 31 22 5d 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 29 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 73 70 61 6e 20 34 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 3e 2e 53 65 63 74 69 6f 6e 7b 2d 2d 73 65 63 74 69 6f 6e 41 6e 67 6c 65 53 69 6e 3a 76 61 72 28 2d 2d 61 6e 67 6c 65 4e 6f 72 6d 61 6c 53 69 6e 29 3b 2d 2d 73 65 63 74 69 6f 6e 41 6e 67 6c 65 3a 30 3b 2d 2d 73 65 63 74 69 6f 6e 50 61 64 64 69 6e 67 53 6d 61 6c 6c 4d 61 78 3a 31 31 30 3b 2d 2d 73 65 63 74 69 6f 6e 50 61 64 64 69 6e 67 58 53 6d 61 6c 6c 4d 61 78 3a 37 32 3b 2d 2d 73 65 63 74 69 6f 6e 50 61 64 64 69 6e 67 4d 69 6e 3a 37 32 3b 2d 2d 73 65 63 74 69 6f 6e 50 61 64 64 69 6e 67 Data Ascii: ubPage .ColumnLayout[data-columns="1,1,1"]>:nth-child(n){grid-column:span 4}</style><style>.Section{--sectionAngleSin:var(--angleNormalSin);--sectionAngle:0;--sectionPaddingSmallMax:110;--sectionPaddingXSmallMax:72;--sectionPaddingMin:72;--sectionPadding
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 65 72 6d 69 6e 61 6c 7b 2d 2d 69 63 6f 6e 48 6f 76 65 72 4c 69 67 68 74 43 6f 6c 6f 72 3a 23 38 37 62 62 66 64 3b 2d 2d 69 63 6f 6e 48 6f 76 65 72 44 61 72 6b 43 6f 6c 6f 72 3a 23 35 35 35 61 62 66 7d 2e 74 68 65 6d 65 2d 2d 4c 65 67 61 63 79 44 61 72 6b 20 2e 50 72 6f 64 75 63 74 49 63 6f 6e 2d 2d 52 61 64 61 72 2c 2e 74 68 65 6d 65 2d 2d 4c 65 67 61 63 79 4c 69 67 68 74 20 2e 50 72 6f 64 75 63 74 49 63 6f 6e 2d 2d 52 61 64 61 72 7b 2d 2d 69 63 6f 6e 48 6f 76 65 72 4c 69 67 68 74 43 6f 6c 6f 72 3a 23 66 36 61 34 65 62 3b 2d 2d 69 63 6f 6e 48 6f 76 65 72 44 61 72 6b 43 6f 6c 6f 72 3a 23 39 32 35 31 61 63 7d 2e 74 68 65 6d 65 2d 2d 4c 65 67 61 63 79 44 61 72 6b 20 2e 50 72 6f 64 75 63 74 49 63 6f 6e 2d 2d 53 69 67 6d 61 2c 2e 74 68 65 6d 65 2d 2d 4c 65 67 Data Ascii: erminal{--iconHoverLightColor:#87bbfd;--iconHoverDarkColor:#555abf}.theme--LegacyDark .ProductIcon--Radar,.theme--LegacyLight .ProductIcon--Radar{--iconHoverLightColor:#f6a4eb;--iconHoverDarkColor:#9251ac}.theme--LegacyDark .ProductIcon--Sigma,.theme--Leg
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 2f 76 61 72 28 2d 2d 63 6f 6c 75 6d 6e 43 6f 75 6e 74 4d 61 78 29 29 3b 2d 2d 63 6f 6c 75 6d 6e 4d 61 78 57 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6c 61 79 6f 75 74 57 69 64 74 68 4d 61 78 29 2a 30 2e 32 35 29 3b 2d 2d 63 6f 70 79 4d 61 78 57 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 6f 6c 75 6d 6e 4d 61 78 57 69 64 74 68 29 2a 33 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 68 74 6d 6c 7b 2d 2d 63 6f 6c 75 6d 6e 50 61 64 64 69 6e 67 4d 65 64 69 75 6d 3a 33 32 70 78 3b 2d 2d 63 6f 6c 75 6d 6e 50 61 64 64 69 6e 67 4c 61 72 67 65 3a 36 34 70 78 3b 2d 2d 63 6f 6c 75 6d 6e 50 61 64 64 69 6e 67 58 4c 61 72 67 65 3a 36 34 70 78 3b 2d 2d 63 6f 6c 75 6d 6e 43 6f 75 6e 74 4d 61 78 3a 32 7d 7d 40 6d 65 64 69 61 Data Ascii: /var(--columnCountMax));--columnMaxWidth:calc(var(--layoutWidthMax)0.25);--copyMaxWidth:calc(var(--columnMaxWidth)3)}@media (min-width:600px){html{--columnPaddingMedium:32px;--columnPaddingLarge:64px;--columnPaddingXLarge:64px;--columnCountMax:2}}@media
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 2e 73 74 72 69 70 65 63 64 6e 2e 63 6f 6d 2f 6d 6b 74 2d 73 74 61 74 69 63 73 2d 73 72 76 2f 61 73 73 65 74 73 2f 46 72 6f 6e 74 64 6f 6f 72 43 6f 6e 6e 65 63 74 69 6f 6e 2d 31 39 32 63 36 30 64 35 66 66 34 61 63 32 37 64 65 63 34 66 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 2e 73 74 72 69 70 65 63 64 6e 2e 63 6f 6d 2f 6d 6b 74 2d 73 74 61 74 69 63 73 2d 73 72 76 2f 61 73 73 65 74 73 2f 46 72 6f 6e 74 64 6f 6f 72 49 63 6f 6e 2d 66 32 32 66 33 36 30 64 61 64 66 37 32 63 61 36 31 61 34 37 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 Data Ascii: heet" href="https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnection-192c60d5ff4ac27dec4f.css"><link rel="stylesheet" href="https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIcon-f22f360dadf72ca61a47.css"><link rel="stylesheet" href="htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49842	172.217.19.238	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:53 UTC	1410	OUT	POST /g/collect?v=2&tid=G-H07SGNNMD6&gtm=45je4cc1v9126439587za200&_p=1734717812972&gcd=13l3l3l3l2l1&npa=0&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&ul=en-us&sr=1280x1024&cid=697303844.1734717810&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EBAI&dl=https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dtrue%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&dt=Quick%20Pay%20-%20Inbox%20Health&sid=1734717816&sct=1&seg=1&_s=3&tfd=37373 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 1399 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://patient.inboxhealth.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:53 UTC	1399	OUT	Data Raw: 65 6e 3d 74 69 6d 69 6e 67 5f 63 6f 6d 70 6c 65 74 65 26 5f 65 65 3d 31 26 5f 65 74 3d 39 30 36 39 0d 0a 65 6e 3d 70 61 67 65 5f 76 69 65 77 26 5f 65 65 3d 31 26 5f 65 74 3d 34 31 38 36 26 64 70 3d 25 32 46 71 75 69 63 6b 50 61 79 25 33 46 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 74 6f 6b 65 6e 25 33 44 58 48 63 55 74 67 25 32 36 65 6e 74 65 72 70 72 69 73 65 5f 69 64 25 33 44 37 32 37 32 25 32 36 6c 61 6e 64 69 6e 67 5f 70 61 67 65 25 33 44 66 61 6c 73 65 25 32 36 70 61 74 69 65 6e 74 5f 69 64 25 33 44 33 36 33 30 34 34 39 31 25 32 36 75 75 69 64 25 33 44 65 30 61 36 33 66 33 65 2d 63 64 36 62 2d 34 63 36 61 2d 62 37 33 37 2d 39 35 37 62 61 33 38 32 66 35 62 61 26 64 74 3d 25 32 46 71 75 69 63 6b 50 61 79 25 33 46 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 74 Data Ascii: en=timing_complete&_ee=1&_et=9069en=page_view&_ee=1&_et=4186&dp=%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba&dt=%2FquickPay%3Fconfirmation_t
2024-12-20 18:03:54 UTC	854	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://patient.inboxhealth.com Date: Fri, 20 Dec 2024 18:03:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49844	216.198.53.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:53 UTC	425	OUT	GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-bcac9f6.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:54 UTC	1174	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:53 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 236 Connection: close x-amz-id-2: 6nW+kcNFzrdPltw0abUt5BBnVE+X/TVkfixXL35UDcxRkF76lRUi7A6XEsTHXX7ylpQZrZ4L3Zs= x-amz-request-id: NB46EG4TVC5FK2VC x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Dec 2024 09:50:44 GMT ETag: "e9d8b92096016dfd74d2f2500556464e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Wed, 17 Dec 2025 09:50:43 GMT x-amz-version-id: F1M8cLXSzn_4BeTVgaJOh2jq0PmHYWeX CF-Cache-Status: HIT Age: 192881 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wScvs3O2pUwSWKfsh85oV%2Fa6HCylVfOyN5uiifEWQD9yIABR56vnffOBgsCcIW0Y9TP28r82UDmEviOcFvnzIedCAGtd1aBbgd9LzgpMvduMRwXfh96L5gKhvWUT9xiFfVeqS6g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518d3d6beb6a56-EWR
2024-12-20 18:03:54 UTC	195	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 38 34 5d 2c 7b 33 33 32 37 39 3a 28 65 2c 73 2c 64 29 3d 3e 7b 64 2e 72 28 73 29 2c 64 2e 64 28 73 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 63 7d 29 3b 63 6f 6e 73 74 20 63 3d 64 2e 70 2b 22 66 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9084],{33279:(e,s,d)=>{d.r(s),d.d(s,{default:()=>c});const c=d.p+"f
2024-12-20 18:03:54 UTC	41	IN	Data Raw: 64 61 36 63 64 33 35 34 39 35 63 37 35 66 38 33 35 30 38 64 39 64 32 65 37 37 65 65 33 33 64 2e 6d 70 33 22 7d 7d 5d 29 3b Data Ascii: da6cd35495c75f83508d9d2e77ee33d.mp3"}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49845	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:53 UTC	652	OUT	GET /v3/fingerprinted/css/ui-shared-57e28d4968898653fd9bd0ad9d7f138b.css HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:54 UTC	708	IN	HTTP/1.1 200 OK Connection: close Content-Length: 26244 Last-Modified: Fri, 13 Dec 2024 21:02:48 GMT ETag: "f9b783f2e57f825dc7742ecf27119f84" Cache-Control: max-age=31536000 Content-Type: text/css; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 382250 Date: Fri, 20 Dec 2024 18:03:54 GMT Via: 1.1 varnish X-Request-ID: 7e88a21f-6382-4c82-9ec4-4da9c0297e4b X-Served-By: cache-nyc-kteb1890043-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 43 6f 6e 74 61 69 6e 65 72 7b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 6e 6f 72 6d 61 6c 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 48 65 61 64 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: .LightboxModalContainer{color-scheme:normal;height:100%;left:0;position:absolute;top:0;width:100%}.LightboxModalHeader{-ms-flex-align:center;-ms-flex-pack:end;-webkit-align-items:center;align-items:center;display:-webkit-flex;display:-ms-flexbox;display:f
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 43 6c 6f 73 65 3a 61 63 74 69 76 65 2c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 43 6c 6f 73 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 43 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 4c 6f 61 64 69 6e 67 49 6e 64 69 63 61 74 6f 72 7b 6c 65 66 74 3a 35 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 Data Ascii: transform:opacity .3s ease;-ms-transform:opacity .3s ease;transform:opacity .3s ease}.LightboxModalClose:active,.LightboxModalClose:hover{color:white}.LightboxModalContent{height:100%;position:relative}.LightboxModalLoadingIndicator{left:50%;overflow:hidd
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 35 37 76 68 20 2b 20 33 38 30 70 78 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 33 36 30 78 36 34 30 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 35 37 76 68 20 2b 20 33 39 30 70 78 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 33 39 30 78 34 30 30 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 35 37 76 68 20 2b 20 32 37 30 70 78 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 33 34 30 78 32 34 30 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 35 37 76 68 20 2b 20 31 39 30 70 78 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 50 6f 73 69 74 69 6f 6e 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b Data Ascii: {height:calc(57vh + 380px)}.LightboxModal-360x640.LightboxModal{height:calc(57vh + 390px)}.LightboxModal-390x400.LightboxModal{height:calc(57vh + 270px)}.LightboxModal-340x240.LightboxModal{height:calc(57vh + 190px)}.LightboxModalPosition{max-height:100%;
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 65 7b 6c 65 66 74 3a 35 30 25 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 30 70 78 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 66 75 6c 6c 53 63 72 65 65 6e 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 53 69 7a 65 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 Data Ascii: e{left:50%;max-height:100%;max-width:calc(100% - 20px);position:relative;top:50%;-webkit-transform:translate(-50%,-50%);-ms-transform:translate(-50%,-50%);transform:translate(-50%,-50%)}.LightboxModal-fullScreen .LightboxModalSize{height:100%;max-width:10
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 36 30 30 78 37 30 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 53 69 7a 65 2c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 36 30 30 78 39 30 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 53 69 7a 65 7b 77 69 64 74 68 3a 36 30 30 70 78 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 35 30 78 37 35 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 53 69 7a 65 7b 77 69 64 74 68 3a 34 35 30 70 78 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 30 30 78 35 35 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 53 69 7a 65 2c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 30 30 78 36 30 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 53 69 7a 65 7b 77 69 64 74 68 3a 34 30 30 70 78 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 34 30 78 36 30 30 20 2e Data Ascii: 600x700 .LightboxModalSize,.LightboxModal-600x900 .LightboxModalSize{width:600px}.LightboxModal-450x750 .LightboxModalSize{width:450px}.LightboxModal-400x550 .LightboxModalSize,.LightboxModal-400x600 .LightboxModalSize{width:400px}.LightboxModal-440x600 .
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 30 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 53 69 7a 65 2c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 31 31 30 30 78 38 30 30 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 31 31 30 30 78 38 30 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 42 6f 64 79 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 35 35 70 78 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 31 31 30 30 78 38 30 30 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 63 6c 6f 73 65 48 69 64 64 65 6e 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 42 6f 64 79 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 33 30 Data Ascii: 00 .LightboxModalSize,.LightboxModal-1100x800.LightboxModal{height:100%;width:100%}.LightboxModal-1100x800 .LightboxModalBody{height:calc(100% - 55px)}.LightboxModal.LightboxModal-1100x800.LightboxModal-closeHidden .LightboxModalBody{height:calc(100% - 30
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 74 62 6f 78 4d 6f 64 61 6c 53 69 7a 65 2c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 36 30 30 78 39 30 30 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 36 30 30 78 39 30 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 42 6f 64 79 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 35 35 70 78 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 36 30 30 78 39 30 30 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 63 6c 6f 73 65 48 69 64 64 65 6e 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 42 6f 64 79 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 33 30 70 78 29 7d 2e 4c 69 67 68 74 62 Data Ascii: tboxModalSize,.LightboxModal-600x900.LightboxModal{height:100%;width:100%}.LightboxModal-600x900 .LightboxModalBody{height:calc(100% - 55px)}.LightboxModal.LightboxModal-600x900.LightboxModal-closeHidden .LightboxModalBody{height:calc(100% - 30px)}.Lightb
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 37 30 70 78 29 7b 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 6f 70 65 6e 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 35 30 78 36 30 30 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 70 78 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 35 30 78 36 30 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 50 6f 73 69 74 69 6f 6e 2c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 35 30 78 36 30 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 53 69 7a 65 2c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 35 30 78 36 30 30 Data Ascii: }}@media (max-width:470px){.LightboxModal.LightboxModal-open.LightboxModal-450x600{-webkit-backdrop-filter:blur(10px);backdrop-filter:blur(10px)}.LightboxModal-450x600 .LightboxModalPosition,.LightboxModal-450x600 .LightboxModalSize,.LightboxModal-450x600
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 62 6f 78 4d 6f 64 61 6c 43 6c 6f 73 65 7b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 35 30 78 37 35 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 42 6f 64 79 2c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 35 30 78 37 35 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 43 6f 6e 74 65 6e 74 2c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 34 35 30 78 37 35 30 3a 6e 6f 74 28 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 6e 6f 4e 65 73 74 65 64 54 61 72 67 65 74 69 6e 67 29 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 43 6f 6e 74 65 6e 74 20 2a 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 32 30 70 78 29 7b 2e 4c 69 67 68 74 62 6f Data Ascii: boxModalClose{text-shadow:none}.LightboxModal-450x750 .LightboxModalBody,.LightboxModal-450x750 .LightboxModalContent,.LightboxModal-450x750:not(.LightboxModal-noNestedTargeting) .LightboxModalContent *{border-radius:8px}}@media (max-width:420px){.Lightbo
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 28 31 30 30 25 20 2d 20 35 35 70 78 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 33 37 35 78 35 33 30 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 63 6c 6f 73 65 48 69 64 64 65 6e 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 42 6f 64 79 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 33 30 70 78 29 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 33 37 35 78 35 33 30 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 63 6c 6f 73 65 48 69 64 64 65 6e 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 48 65 61 64 65 72 7b 68 65 69 67 68 74 3a 31 35 70 78 7d 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 2d 33 37 35 78 35 33 30 20 2e 4c 69 67 68 74 62 6f 78 4d 6f 64 61 6c 43 Data Ascii: (100% - 55px)}.LightboxModal.LightboxModal-375x530.LightboxModal-closeHidden .LightboxModalBody{height:calc(100% - 30px)}.LightboxModal.LightboxModal-375x530.LightboxModal-closeHidden .LightboxModalHeader{height:15px}.LightboxModal-375x530 .LightboxModalC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49846	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:53 UTC	662	OUT	GET /v3/fingerprinted/css/elements-inner-card-53aa57bec7f6d40d72327654fd43a92e.css HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:54 UTC	708	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14142 Last-Modified: Tue, 17 Dec 2024 22:17:37 GMT ETag: "87bf0041cf7ae5e77d770c423e25828a" Cache-Control: max-age=31536000 Content-Type: text/css; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 184647 Date: Fri, 20 Dec 2024 18:03:54 GMT Via: 1.1 varnish X-Request-ID: 6ed242a3-d5d2-41d0-b1c4-1070a51cc750 X-Served-By: cache-ewr-kewr1740027-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 32 65 6d 7d 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 63 62 63 2d 65 6c 69 67 69 62 6c 65 7b 77 69 64 74 68 3a 32 2e 37 35 65 6d 7d 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 Data Ascii: .CardBrandIcon-container{height:100%;position:absolute;top:0;width:2em}.CardBrandIcon-container.is-cbc-eligible{width:2.75em}.CardBrandIcon-wrapper{display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:row;-ms-flex-direction:row;fle
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 29 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 38 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 39 2c 31 2c 2e 32 32 2c 31 29 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 38 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 39 2c 31 2c 2e 32 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 32 73 7d 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 73 74 79 6c 65 3a 70 72 65 73 65 72 76 65 2d 33 64 3b 74 72 61 6e 73 66 6f 72 6d 2d 73 74 79 6c 65 3a 70 72 65 73 65 72 76 65 2d 33 64 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 35 73 20 63 75 Data Ascii: ),transform .8s cubic-bezier(.19,1,.22,1),-webkit-transform .8s cubic-bezier(.19,1,.22,1);transition-delay:.2s}.CardBrandIcon{height:100%;position:relative;-webkit-transform-style:preserve-3d;transform-style:preserve-3d;transition:-webkit-transform .5s cu
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 28 2e 30 37 35 2c 2e 38 32 2c 2e 31 36 35 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 37 35 2c 2e 38 32 2c 2e 31 36 35 2c 31 29 2c 6f 70 61 63 69 74 79 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 37 35 2c 2e 38 32 2c 2e 31 36 35 2c 31 29 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 37 35 2c 2e 38 32 2c 2e 31 36 35 2c 31 29 7d 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 68 69 64 64 65 6e 20 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2e 69 73 2d 6c 6f 61 64 65 64 20 69 6d 67 2c 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 Data Ascii: (.075,.82,.165,1);transition:transform .4s cubic-bezier(.075,.82,.165,1),opacity .7s cubic-bezier(.075,.82,.165,1),-webkit-transform .4s cubic-bezier(.075,.82,.165,1)}.CardBrandIcon-container.is-hidden .CardBrandIcon.is-loaded img,.CardBrandIcon-container
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 63 62 63 2d 64 69 73 70 6c 61 79 65 64 20 2e 43 61 72 64 42 72 61 6e 64 43 68 6f 69 63 65 44 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 37 35 2c 2e 38 32 2c 2e 31 36 35 2c 31 29 7d 2e 43 61 72 64 42 72 61 6e 64 43 68 6f 69 63 65 44 72 6f 70 64 6f 77 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a Data Ascii: -ms-flexbox;display:flex}.CardBrandIcon-container.is-cbc-displayed .CardBrandChoiceDropdown-container{opacity:1;transition:opacity .7s cubic-bezier(.075,.82,.165,1)}.CardBrandChoiceDropdown{border:none;border-radius:4px;cursor:default;display:none;height:
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 72 7b 6c 65 66 74 3a 32 2e 37 35 65 6d 7d 2e 43 61 72 64 4e 75 6d 62 65 72 46 69 65 6c 64 2d 2d 72 74 6c 20 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 63 62 63 2d 65 6c 69 67 69 62 6c 65 2b 2e 43 61 72 64 4e 75 6d 62 65 72 46 69 65 6c 64 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 7b 72 69 67 68 74 3a 32 2e 37 35 65 6d 7d 2e 43 61 72 64 4e 75 6d 62 65 72 46 69 65 6c 64 20 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 68 69 64 64 65 6e 2b 2e 43 61 72 64 4e 75 6d 62 65 72 46 69 65 6c 64 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 7b 6c 65 66 74 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 43 61 72 64 46 69 65 6c 64 2e 69 73 2d Data Ascii: r{left:2.75em}.CardNumberField--rtl .CardBrandIcon-container.is-cbc-eligible+.CardNumberField-input-wrapper{right:2.75em}.CardNumberField .CardBrandIcon-container.is-hidden+.CardNumberField-input-wrapper{left:auto;position:static;right:auto}.CardField.is-
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 39 2c 31 2c 2e 32 32 2c 31 29 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 38 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 39 2c 31 2c 2e 32 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 32 38 73 7d 2e 43 61 72 64 46 69 65 6c 64 20 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 43 61 72 64 46 69 65 6c 64 20 2e 43 61 72 64 42 72 61 6e 64 49 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 63 62 63 2d 64 69 73 70 6c 61 79 65 64 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 43 61 72 64 46 69 65 6c 64 3a 68 6f 76 65 72 7b 63 75 72 Data Ascii: cubic-bezier(.19,1,.22,1),-webkit-transform .8s cubic-bezier(.19,1,.22,1);transition-delay:.28s}.CardField .CardBrandIcon-container{pointer-events:none;z-index:2}.CardField .CardBrandIcon-container.is-cbc-displayed{pointer-events:auto}.CardField:hover{cur
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 43 61 72 64 46 69 65 6c 64 2d 6e 75 6d 62 65 72 20 69 6e 70 75 74 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 34 36 2c 2e 34 35 2c 2e 39 34 29 7d 2e 43 61 72 64 46 69 65 6c 64 2d 63 76 63 20 69 6e 70 75 74 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 2c 2e 43 61 72 64 46 69 65 6c 64 2d 65 78 70 69 72 79 20 69 6e 70 75 74 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 2c 2e 43 61 72 64 46 69 65 6c 64 2d 6e 75 6d 62 65 72 20 69 6e 70 75 74 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 73 20 31 30 30 30 30 30 30 30 30 73 2c 6f 70 61 63 69 74 79 20 2e 33 73 20 63 75 62 69 63 Data Ascii: CardField-number input{transition:opacity .3s cubic-bezier(.25,.46,.45,.94)}.CardField-cvc input:-webkit-autofill,.CardField-expiry input:-webkit-autofill,.CardField-number input:-webkit-autofill{transition:background-color 0s 100000000s,opacity .3s cubic
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 6e 61 67 65 20 2e 43 61 72 64 46 69 65 6c 64 2d 72 65 73 74 57 72 61 70 70 65 72 2c 2e 69 73 2d 6c 69 6e 6b 2d 70 61 79 20 2e 43 61 72 64 46 69 65 6c 64 2d 72 65 73 74 57 72 61 70 70 65 72 2c 2e 69 73 2d 6c 69 6e 6b 2d 75 73 65 20 2e 43 61 72 64 46 69 65 6c 64 2d 72 65 73 74 57 72 61 70 70 65 72 7b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 34 70 78 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 34 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 34 70 78 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 34 73 3b 2d 77 65 62 6b 69 74 2d Data Ascii: nage .CardField-restWrapper,.is-link-pay .CardField-restWrapper,.is-link-use .CardField-restWrapper{opacity:0;pointer-events:none;-webkit-transform:translateX(-4px);-ms-transform:translateX(-4px);transform:translateX(-4px);transition-duration:.4s;-webkit-
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 2e 32 35 2c 2e 34 36 2c 2e 34 35 2c 2e 39 34 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 35 35 2c 2e 36 37 35 2c 2e 31 39 29 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 34 36 2c 2e 34 35 2c 2e 39 34 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 35 35 2c 2e 36 37 35 2c 2e 31 39 29 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 34 36 2c 2e 34 35 2c 2e 39 34 29 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e Data Ascii: .25,.46,.45,.94);transition:opacity .4s cubic-bezier(.55,.055,.675,.19),transform .4s cubic-bezier(.25,.46,.45,.94);transition:opacity .4s cubic-bezier(.55,.055,.675,.19),transform .4s cubic-bezier(.25,.46,.45,.94),-webkit-transform .4s cubic-bezier(.25,.
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 66 6f 72 6d 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 34 36 2c 2e 34 35 2c 2e 39 34 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 34 36 2c 2e 34 35 2c 2e 39 34 29 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 34 36 2c 2e 34 35 2c 2e 39 34 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 34 36 2c 2e 34 35 2c 2e 39 34 29 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 34 36 2c 2e 34 35 2c 2e 39 34 29 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 20 Data Ascii: form .4s cubic-bezier(.25,.46,.45,.94);transition:opacity .4s cubic-bezier(.25,.46,.45,.94),transform .4s cubic-bezier(.25,.46,.45,.94);transition:opacity .4s cubic-bezier(.25,.46,.45,.94),transform .4s cubic-bezier(.25,.46,.45,.94),-webkit-transform .4s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49848	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:53 UTC	640	OUT	GET /v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:54 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 692436 Last-Modified: Thu, 19 Dec 2024 21:09:15 GMT ETag: "6d16910aeb4b18a9b40adeaeccb60a40" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 72413 Date: Fri, 20 Dec 2024 18:03:54 GMT Via: 1.1 varnish X-Request-ID: e6549ff8-d704-4326-a67d-535de9a5cef8 X-Served-By: cache-nyc-kteb1890070-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 37 31 32 5d 2c 7b 31 30 37 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 63 2e 6c 65 6e 67 74 68 7c 7c 28 69 28 29 2c 21 30 29 2c 63 5b 63 2e 6c 65 6e 67 74 68 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 66 6f 72 28 3b 70 3c 63 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 65 3d 70 3b 69 66 28 70 2b 3d 31 2c 63 5b 65 5d 2e 63 61 6c 6c 28 29 2c 70 3e 31 30 32 34 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 63 2e 6c 65 6e 67 Data Ascii: (window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[3712],{10723:function(e,t,n){"use strict";function a(e){c.length\|\|(i(),!0),c[c.length]=e}function o(){for(;p<c.length;){var e=p;if(p+=1,c[e].call(),p>1024){for(var t=0,n=c.leng
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 2c 75 3d 69 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 75 3f 6e 3a 6f 28 75 2c 6e 29 3b 6c 3e 73 3b 29 74 5b 73 2b 2b 5d 3d 65 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 38 32 35 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 39 35 33 32 39 29 2c 6f 3d 61 28 7b 7d 2e 74 6f 53 74 72 69 6e 67 29 2c 72 3d 61 28 22 22 2e 73 6c 69 63 65 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 6f 28 65 29 2c 38 2c 2d 31 29 7d 7d 2c 33 32 30 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 35 35 37 34 36 29 2c 6f 3d 6e 28 36 35 39 38 38 29 2c 72 3d 6e 28 33 31 38 38 37 29 3b 65 2e 65 78 70 6f 72 74 73 3d Data Ascii: ,u=i>2?arguments[2]:void 0,l=void 0===u?n:o(u,n);l>s;)t[s++]=e;return t}},82532:function(e,t,n){var a=n(95329),o=a({}.toString),r=a("".slice);e.exports=function(e){return r(o(e),8,-1)}},32029:function(e,t,n){var a=n(55746),o=n(65988),r=n(31887);e.exports=
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 6e 29 7b 76 61 72 20 61 3d 6e 28 36 32 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 37 36 38 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 32 31 38 39 39 29 2c 6f 3d 6e 28 37 39 37 33 30 29 2c 72 3d 6e 28 39 37 34 38 34 29 2c 69 3d 6e 28 35 37 34 37 35 29 2c 73 3d 6e 28 34 39 36 37 37 29 2e 66 2c 75 3d 6e 28 33 37 32 35 32 29 2c 6c 3d 6e 28 35 34 30 35 38 29 2c 63 3d 6e 28 38 36 38 34 33 29 2c 70 3d 6e 28 33 32 30 32 39 29 2c 64 3d 6e 28 39 30 39 35 33 29 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 61 2c 72 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: n){var a=n(626);e.exports=a},76887:function(e,t,n){"use strict";var a=n(21899),o=n(79730),r=n(97484),i=n(57475),s=n(49677).f,u=n(37252),l=n(54058),c=n(86843),p=n(32029),d=n(90953),m=function(e){var t=function(n,a,r){if(this instanceof t){switch(arguments.
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 39 35 39 38 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 21 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 62 69 6e 64 28 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 74 6f 74 79 70 65 22 29 7d 29 29 7d 2c 37 38 38 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 31 38 32 38 35 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 3b 65 2e 65 78 70 6f 72 74 73 3d 61 3f 6f 2e 62 69 6e 64 28 6f 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 39 37 34 38 34 3a 66 75 6e Data Ascii: 95981);e.exports=!a((function(){var e=function(){}.bind();return"function"!=typeof e\|\|e.hasOwnProperty("prototype")}))},78834:function(e,t,n){var a=n(18285),o=Function.prototype.call;e.exports=a?o.bind(o):function(){return o.apply(o,arguments)}},97484:fun
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 7d 29 29 7d 2c 33 37 30 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 39 35 33 32 39 29 2c 6f 3d 6e 28 39 35 39 38 31 29 2c 72 3d 6e 28 38 32 35 33 32 29 2c 69 3d 4f 62 6a 65 63 74 2c 73 3d 61 28 22 22 2e 73 70 6c 69 74 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 69 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 72 28 65 29 3f 73 28 65 2c 22 22 29 3a 69 28 65 29 7d 3a 69 7d 2c 35 37 34 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 37 36 36 31 36 29 2c 6f 3d 61 2e 61 6c 6c 3b 65 2e 65 78 70 6f 72 74 Data Ascii: }))},37026:function(e,t,n){var a=n(95329),o=n(95981),r=n(82532),i=Object,s=a("".split);e.exports=o((function(){return!i("z").propertyIsEnumerable(0)}))?function(e){return"String"==r(e)?s(e,""):i(e)}:i},57475:function(e,t,n){var a=n(76616),o=a.all;e.export
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 63 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 70 3d 22 65 6e 75 6d 65 72 61 62 6c 65 22 2c 64 3d 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 2c 6d 3d 22 77 72 69 74 61 62 6c 65 22 3b 74 2e 66 3d 61 3f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 69 28 65 29 2c 74 3d 73 28 74 29 2c 69 28 6e 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 70 72 6f 74 6f 74 79 70 65 22 3d 3d 3d 74 26 26 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 6d 20 69 6e 20 6e 26 26 21 6e 2e 77 72 69 74 61 62 6c 65 29 7b 76 61 72 20 61 3d 63 28 65 2c 74 29 3b 61 26 26 61 2e 77 72 69 74 61 62 6c 65 26 26 28 65 5b 74 5d 3d 6e 2e 76 Data Ascii: Object.defineProperty,c=Object.getOwnPropertyDescriptor,p="enumerable",d="configurable",m="writable";t.f=a?r?function(e,t,n){if(i(e),t=s(t),i(n),"function"==typeof e&&"prototype"===t&&"value"in n&&m in n&&!n.writable){var a=c(e,t);a&&a.writable&&(e[t]=n.v
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 34 38 32 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 38 32 31 31 39 29 2c 6f 3d 54 79 70 65 45 72 72 6f 72 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 61 28 65 29 29 74 68 72 6f 77 20 6f 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 36 33 30 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 32 31 38 39 39 29 2c 6f 3d 6e 28 37 35 36 30 39 29 2c 72 3d 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 2c 69 3d 61 5b 72 5d 7c 7c 6f 28 72 2c 7b 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 36 38 37 32 36 3a 66 75 6e Data Ascii: ion(e){e.exports={}},48219:function(e,t,n){var a=n(82119),o=TypeError;e.exports=function(e){if(a(e))throw o("Can't call method on "+e);return e}},63030:function(e,t,n){var a=n(21899),o=n(75609),r="__core-js_shared__",i=a[r]\|\|o(r,{});e.exports=i},68726:fun
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 54 79 70 65 45 72 72 6f 72 2c 63 3d 75 28 22 74 6f 50 72 69 6d 69 74 69 76 65 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 6f 28 65 29 7c 7c 72 28 65 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 2c 75 3d 69 28 65 2c 63 29 3b 69 66 28 75 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 64 65 66 61 75 6c 74 22 29 2c 6e 3d 61 28 75 2c 65 2c 74 29 2c 21 6f 28 6e 29 7c 7c 72 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6c 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 6e 75 6d 62 65 72 22 29 2c 73 28 65 2c 74 29 7d 7d 2c 38 33 38 39 Data Ascii: TypeError,c=u("toPrimitive");e.exports=function(e,t){if(!o(e)\|\|r(e))return e;var n,u=i(e,c);if(u){if(void 0===t&&(t="default"),n=a(u,e,t),!o(n)\|\|r(n))return n;throw l("Can't convert object to primitive value")}return void 0===t&&(t="number"),s(e,t)}},8389
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 62 67 2d 66 66 38 36 62 36 32 34 33 35 36 35 37 32 66 34 33 36 31 33 61 66 65 39 39 61 33 33 32 32 34 36 2e 6a 73 6f 6e 22 7d 2c 35 37 31 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 73 2d 64 63 36 39 34 37 65 35 64 31 33 66 65 62 64 35 34 38 35 32 32 35 35 61 38 38 33 34 62 32 35 63 2e 6a 73 6f 6e 22 7d 2c 36 33 36 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 64 61 2d 37 63 38 34 36 39 65 32 36 38 61 Data Ascii: n(e,t,n){e.exports=n.p+"fingerprinted/data/bg-ff86b624356572f43613afe99a332246.json"},57128:function(e,t,n){e.exports=n.p+"fingerprinted/data/cs-dc6947e5d13febd54852255a8834b25c.json"},63645:function(e,t,n){e.exports=n.p+"fingerprinted/data/da-7c8469e268a
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 6e 22 7d 2c 36 37 37 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 68 72 2d 31 61 33 35 39 32 31 33 61 32 66 33 65 33 33 33 38 32 32 30 64 38 61 39 30 32 33 34 32 65 32 63 2e 6a 73 6f 6e 22 7d 2c 32 32 38 34 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 68 75 2d 32 34 38 61 33 63 36 35 63 31 33 32 63 30 33 36 36 36 61 36 65 63 63 61 61 30 30 30 61 63 38 39 2e 6a 73 6f 6e 22 7d 2c 36 31 35 37 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 Data Ascii: n"},6771:function(e,t,n){e.exports=n.p+"fingerprinted/data/hr-1a359213a2f3e3338220d8a902342e2c.json"},22844:function(e,t,n){e.exports=n.p+"fingerprinted/data/hu-248a3c65c132c03666a6eccaa000ac89.json"},61579:function(e,t,n){e.exports=n.p+"fingerprinted/dat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49847	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:54 UTC	675	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/c/1734717831665 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=I7m5ObHT6s8C4d99ZpeSZrL5UkiV+ZJ1adS8xPBiR9bbqPwL1ZRVpVJUwKXUWttv04cPt4Ysy6sdutZ8HF6yNq1xqDkdx6lB7QdI0pkJ7TH+9o4NILXzgCsMVb95
2024-12-20 18:03:54 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:54 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=dxvpdg0KqIsJNk9hU37Kcs6rSpmYxT5HzjRlZpZvzN+py3gBh3OK2phoTVOE1vjNqu1ZVmYvYd14qLGnEwikxErNnGI7ZvOnJ0dcE5jE7de/vMaV4EHA9+mJ69Le; Expires=Fri, 27 Dec 2024 18:03:54 GMT; Path=/ Set-Cookie: AWSALBCORS=dxvpdg0KqIsJNk9hU37Kcs6rSpmYxT5HzjRlZpZvzN+py3gBh3OK2phoTVOE1vjNqu1ZVmYvYd14qLGnEwikxErNnGI7ZvOnJ0dcE5jE7de/vMaV4EHA9+mJ69Le; Expires=Fri, 27 Dec 2024 18:03:54 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:54 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 33 34 35 32 36 5c 6e 32 38 36 31 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1734717834526\n2861\n1\n0\nn\n15000")
2024-12-20 18:03:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49851	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:54 UTC	644	OUT	GET /v3/fingerprinted/js/controller-e1865ca26c58947a4c41ae602ceeabce.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:54 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 941993 Last-Modified: Thu, 19 Dec 2024 21:09:13 GMT ETag: "ebbf36fc6d459bb3ad1f2ad4904b7ddf" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 72864 Date: Fri, 20 Dec 2024 18:03:54 GMT Via: 1.1 varnish X-Request-ID: 19b8e696-bd0b-4fc3-b035-fa72d7c4d145 X-Served-By: cache-ewr-kewr1740078-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 69 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 69 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 2c 61 3d 7b 39 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 Data Ascii: !function(){function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return a[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arg
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 6f 6d 22 2c 22 63 6f 6d 2e 61 75 22 2c 22 63 6f 6d 2e 74 77 22 2c 22 63 61 22 2c 22 63 6f 2e 6e 7a 22 2c 22 63 6f 2e 75 6b 22 2c 22 64 65 22 2c 22 66 72 22 2c 22 69 74 22 2c 22 72 75 22 2c 22 6e 65 74 22 2c 22 6f 72 67 22 2c 22 65 64 75 22 2c 22 67 6f 76 22 2c 22 6a 70 22 2c 22 6e 6c 22 2c 22 6b 72 22 2c 22 73 65 22 2c 22 65 75 22 2c 22 69 65 22 2c 22 63 6f 2e 69 6c 22 2c 22 75 73 22 2c 22 61 74 22 2c 22 62 65 22 2c 22 64 6b 22 2c 22 68 6b 22 2c 22 65 73 22 2c 22 67 72 22 2c 22 63 68 22 2c 22 6e 6f 22 2c 22 63 7a 22 2c 22 69 6e 22 2c 22 6e 65 74 22 2c 22 6e 65 74 2e 61 75 22 2c 22 69 6e 66 6f 22 2c 22 62 69 7a 22 2c 22 6d 69 6c 22 2c 22 63 6f 2e 6a 70 22 2c 22 73 67 22 2c 22 68 75 22 5d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 64 6f 6d 61 Data Ascii: om","com.au","com.tw","ca","co.nz","co.uk","de","fr","it","ru","net","org","edu","gov","jp","nl","kr","se","eu","ie","co.il","us","at","be","dk","hk","es","gr","ch","no","cz","in","net","net.au","info","biz","mil","co.jp","sg","hu"],run:function(e){e.doma
2024-12-20 18:03:54 UTC	16384	IN	Data Raw: 6e 2e 70 75 73 68 28 72 29 3b 72 65 74 75 72 6e 20 6e 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 3b 6e 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 72 3d 6e 2e 70 6f 70 28 29 3b 69 66 28 72 20 69 6e 20 74 29 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 3d 72 2c 65 2e 64 6f 6e 65 3d 21 31 2c 65 7d 72 65 74 75 72 6e 20 65 2e 64 6f 6e 65 3d 21 30 2c 65 7d 7d 2c 5f 2e 76 61 6c 75 65 73 3d 66 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6d 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3d 30 2c 74 68 69 73 2e 6e 65 78 74 3d 30 2c 74 68 69 73 2e 73 65 6e 74 3d 74 68 69 73 2e 5f 73 65 6e 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 64 6f 6e 65 3d 21 31 Data Ascii: n.push(r);return n.reverse(),function e(){for(;n.length;){var r=n.pop();if(r in t)return e.value=r,e.done=!1,e}return e.done=!0,e}},_.values=f,m.prototype={constructor:m,reset:function(e){if(this.prev=0,this.next=0,this.sent=this._sent=void 0,this.done=!1
2024-12-20 18:03:55 UTC	16384	IN	Data Raw: 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 50 65 72 6d 69 73 73 69 6f 6e 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 2e 67 65 74 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 50 65 72 6d 69 73 73 69 6f 6e 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 6c 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 6c 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 74 2e 70 72 65 76 3d 74 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 6a 2e 73 65 74 28 65 29 29 3b 63 61 73 65 20 Data Ascii: }},{key:"getPermissions",value:function(){return j.get()}},{key:"setPermissions",value:function(e){return v(this,void 0,void 0,l().mark((function t(){return l().wrap((function(t){for(;;)switch(t.prev=t.next){case 0:return t.abrupt("return",j.set(e));case
2024-12-20 18:03:55 UTC	16384	IN	Data Raw: 72 69 70 65 2e 63 6f 6d 22 2c 22 2e 73 74 72 69 70 65 2e 65 76 65 6e 74 73 22 2c 22 2e 67 6f 2e 73 74 72 69 70 65 2e 67 6c 6f 62 61 6c 22 5d 2c 6c 69 66 65 74 69 6d 65 3a 36 33 30 37 32 65 33 2c 73 65 63 75 72 65 3a 21 30 2c 68 74 74 70 4f 6e 6c 79 3a 21 31 2c 73 61 6d 65 53 69 74 65 3a 22 4c 61 78 22 7d 2c 22 73 61 6d 6c 5f 73 63 61 5f 73 75 63 63 65 73 73 5f 66 6f 72 5f 2a 22 3a 7b 63 61 74 65 67 6f 72 79 3a 22 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 22 2c 64 6f 6d 61 69 6e 73 3a 5b 22 64 61 73 68 62 6f 61 72 64 2e 73 74 72 69 70 65 2e 63 6f 6d 22 5d 2c 6c 69 66 65 74 69 6d 65 3a 33 30 2c 73 65 63 75 72 65 3a 21 30 2c 68 74 74 70 4f 6e 6c 79 3a 21 30 2c 73 61 6d 65 53 69 74 65 3a 22 4c 61 78 22 7d 2c 73 61 6d 6c 69 74 5f 65 6d 61 69 6c 3a 7b 63 61 74 Data Ascii: ripe.com",".stripe.events",".go.stripe.global"],lifetime:63072e3,secure:!0,httpOnly:!1,sameSite:"Lax"},"saml_sca_success_for_*":{category:"authentication",domains:["dashboard.stripe.com"],lifetime:30,secure:!0,httpOnly:!0,sameSite:"Lax"},samlit_email:{cat
2024-12-20 18:03:55 UTC	16384	IN	Data Raw: 69 6f 6e 73 3a 7b 63 61 74 65 67 6f 72 79 3a 22 66 75 6e 63 74 69 6f 6e 61 6c 22 7d 2c 22 74 77 69 6c 69 6f 5f 63 68 61 74 5f 2a 22 3a 7b 63 61 74 65 67 6f 72 79 3a 22 65 73 73 65 6e 74 69 61 6c 22 7d 2c 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 3a 7b 63 61 74 65 67 6f 72 79 3a 22 61 64 76 65 72 74 69 73 69 6e 67 22 7d 2c 22 79 74 2d 72 65 6d 6f 74 65 2d 64 65 76 69 63 65 2d 69 64 22 3a 7b 63 61 74 65 67 6f 72 79 3a 22 61 64 76 65 72 74 69 73 69 6e 67 22 7d 2c 22 79 74 2e 69 6e 6e 65 72 74 75 62 65 3a 3a 6e 65 78 74 49 64 22 3a 7b 63 61 74 65 67 6f 72 79 3a 22 61 64 76 65 72 74 69 73 69 6e 67 22 7d 2c 22 79 74 2e 69 6e 6e 65 72 74 75 62 65 3a 3a 72 65 71 75 65 73 74 73 22 3a 7b 63 61 74 65 67 6f 72 79 3a 22 61 Data Ascii: ions:{category:"functional"},"twilio_chat_*":{category:"essential"},"yt-remote-connected-devices":{category:"advertising"},"yt-remote-device-id":{category:"advertising"},"yt.innertube::nextId":{category:"advertising"},"yt.innertube::requests":{category:"a
2024-12-20 18:03:55 UTC	16384	IN	Data Raw: 6d 62 65 72 3a 22 65 72 72 6f 72 73 2e 63 6f 64 65 2e 69 6e 63 6f 6d 70 6c 65 74 65 5f 6e 7a 5f 62 61 6e 6b 5f 61 63 63 6f 75 6e 74 5f 61 63 63 6f 75 6e 74 5f 6e 75 6d 62 65 72 22 2c 69 6e 76 61 6c 69 64 5f 6e 7a 5f 62 61 6e 6b 5f 61 63 63 6f 75 6e 74 5f 6e 75 6d 62 65 72 3a 22 65 72 72 6f 72 73 2e 63 6f 64 65 2e 69 6e 76 61 6c 69 64 5f 6e 7a 5f 62 61 6e 6b 5f 61 63 63 6f 75 6e 74 5f 6e 75 6d 62 65 72 22 2c 69 6e 63 6f 6d 70 6c 65 74 65 5f 6d 61 6e 64 61 74 65 5f 63 68 65 63 6b 62 6f 78 3a 22 65 72 72 6f 72 73 2e 63 6f 64 65 2e 69 6e 63 6f 6d 70 6c 65 74 65 5f 6d 61 6e 64 61 74 65 5f 63 68 65 63 6b 62 6f 78 22 2c 22 69 6e 76 61 6c 69 64 5f 70 61 79 6d 65 6e 74 5f 76 69 65 77 2e 61 64 64 22 3a 22 65 72 72 6f 72 73 2e 63 6f 64 65 2e 69 6e 76 61 6c 69 64 5f Data Ascii: mber:"errors.code.incomplete_nz_bank_account_account_number",invalid_nz_bank_account_number:"errors.code.invalid_nz_bank_account_number",incomplete_mandate_checkbox:"errors.code.incomplete_mandate_checkbox","invalid_payment_view.add":"errors.code.invalid_
2024-12-20 18:03:55 UTC	14113	IN	Data Raw: 63 6f 6d 70 61 6e 79 3a 28 30 2c 4d 2e 6a 74 29 28 28 30 2c 4d 2e 63 69 29 28 7b 6e 61 6d 65 3a 28 30 2c 4d 2e 6a 74 29 28 4d 2e 5a 5f 29 2c 6e 61 6d 65 5f 6b 61 6e 61 3a 28 30 2c 4d 2e 6a 74 29 28 4d 2e 5a 5f 29 2c 6e 61 6d 65 5f 6b 61 6e 6a 69 3a 28 30 2c 4d 2e 6a 74 29 28 4d 2e 5a 5f 29 2c 70 68 6f 6e 65 3a 28 30 2c 4d 2e 6a 74 29 28 4d 2e 5a 5f 29 2c 74 61 78 5f 69 64 3a 28 30 2c 4d 2e 6a 74 29 28 4d 2e 5a 5f 29 2c 74 61 78 5f 69 64 5f 72 65 67 69 73 74 72 61 72 3a 28 30 2c 4d 2e 6a 74 29 28 4d 2e 5a 5f 29 2c 76 61 74 5f 69 64 3a 28 30 2c 4d 2e 6a 74 29 28 4d 2e 5a 5f 29 2c 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 6e 75 6d 62 65 72 3a 28 30 2c 4d 2e 6a 74 29 28 4d 2e 5a 5f 29 2c 73 74 72 75 63 74 75 72 65 3a 28 30 2c 4d 2e 6a 74 29 28 28 30 2c 4d 2e 6b Data Ascii: company:(0,M.jt)((0,M.ci)({name:(0,M.jt)(M.Z_),name_kana:(0,M.jt)(M.Z_),name_kanji:(0,M.jt)(M.Z_),phone:(0,M.jt)(M.Z_),tax_id:(0,M.jt)(M.Z_),tax_id_registrar:(0,M.jt)(M.Z_),vat_id:(0,M.jt)(M.Z_),registration_number:(0,M.jt)(M.Z_),structure:(0,M.jt)((0,M.k
2024-12-20 18:03:55 UTC	16384	IN	Data Raw: 6f 22 2c 22 41 63 6b 6c 69 6e 73 22 2c 22 41 6e 64 72 6f 73 22 2c 22 42 65 72 72 79 20 49 73 6c 61 6e 64 73 22 2c 22 42 69 6d 69 6e 69 22 2c 22 43 61 74 20 49 73 6c 61 6e 64 22 2c 22 43 72 6f 6f 6b 65 64 20 49 73 6c 61 6e 64 22 2c 22 45 6c 65 75 74 68 65 72 61 22 2c 22 45 78 75 6d 61 22 2c 22 47 72 61 6e 64 20 42 61 68 61 6d 61 22 2c 22 48 61 72 62 6f 75 72 20 49 73 6c 61 6e 64 22 2c 22 49 6e 61 67 75 61 22 2c 22 4c 6f 6e 67 20 49 73 6c 61 6e 64 22 2c 22 4d 61 79 61 67 75 61 6e 61 22 2c 22 4e 2e 50 2e 22 2c 22 52 61 67 67 65 64 20 49 73 6c 61 6e 64 22 2c 22 52 75 6d 20 43 61 79 22 2c 22 53 61 6e 20 53 61 6c 76 61 64 6f 72 22 2c 22 53 70 61 6e 69 73 68 20 57 65 6c 6c 73 22 5d 2c 73 75 62 5f 6c 61 62 65 6c 73 3a 5b 22 41 62 61 63 6f 20 49 73 6c 61 6e 64 73 Data Ascii: o","Acklins","Andros","Berry Islands","Bimini","Cat Island","Crooked Island","Eleuthera","Exuma","Grand Bahama","Harbour Island","Inagua","Long Island","Mayaguana","N.P.","Ragged Island","Rum Cay","San Salvador","Spanish Wells"],sub_labels:["Abaco Islands
2024-12-20 18:03:55 UTC	16384	IN	Data Raw: 46 34 45 32 22 7d 2c 49 4c 3a 7b 63 6f 75 6e 74 72 79 3a 22 49 4c 22 2c 66 6d 74 3a 22 25 4e 25 6e 25 4f 25 6e 25 41 25 6e 25 43 20 25 5a 22 2c 7a 69 70 3a 22 5c 5c 64 7b 35 7d 28 3f 3a 5c 5c 64 7b 32 7d 29 3f 22 2c 7a 69 70 65 78 3a 22 39 36 31 34 33 30 33 22 7d 2c 49 4d 3a 7b 63 6f 75 6e 74 72 79 3a 22 49 4d 22 2c 72 65 71 75 69 72 65 3a 22 41 43 5a 22 2c 66 6d 74 3a 22 25 4e 25 6e 25 4f 25 6e 25 41 25 6e 25 43 25 6e 25 5a 22 2c 7a 69 70 3a 22 49 4d 5c 5c 64 5b 5c 5c 64 41 2d 5a 5d 3f 20 3f 5c 5c 64 5b 41 42 44 2d 48 4a 4c 4e 2d 55 57 2d 5a 5d 7b 32 7d 22 2c 7a 69 70 65 78 3a 22 49 4d 32 20 31 41 41 2c 49 4d 39 39 20 31 50 53 22 7d 2c 49 4e 3a 7b 63 6f 75 6e 74 72 79 3a 22 49 4e 22 2c 6c 61 6e 67 3a 22 65 6e 22 2c 72 65 71 75 69 72 65 3a 22 41 43 53 5a Data Ascii: F4E2"},IL:{country:"IL",fmt:"%N%n%O%n%A%n%C %Z",zip:"\\d{5}(?:\\d{2})?",zipex:"9614303"},IM:{country:"IM",require:"ACZ",fmt:"%N%n%O%n%A%n%C%n%Z",zip:"IM\\d[\\dA-Z]? ?\\d[ABD-HJLN-UW-Z]{2}",zipex:"IM2 1AA,IM99 1PS"},IN:{country:"IN",lang:"en",require:"ACSZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49853	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:54 UTC	666	OUT	GET /v3/fingerprinted/js/payment-request-inner-browser-3e2bf1135aeec036ab34eb24b61d077f.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/payment-request-inner-browser-57a5abf2116f0f98c3257286b4b1c74d.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:54 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12826 Last-Modified: Sat, 07 Dec 2024 00:55:26 GMT ETag: "c702392565913c8105713dc87e945059" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 16535 Date: Fri, 20 Dec 2024 18:03:54 GMT Via: 1.1 varnish X-Request-ID: 533f5edf-3bb5-4e13-8831-a33970db1538 X-Served-By: cache-ewr-kewr1740033-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 69 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 69 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6f 5b 74 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 2c 6f 3d 7b 38 37 37 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 6e 28 34 35 39 38 37 29 2c 69 3d 6e 28 39 33 33 32 34 29 2c 61 3d 6e 28 31 34 31 33 29 2c 73 3d 6e 28 31 35 36 37 31 29 2c 75 3d Data Ascii: !function(){"use strict";function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return o[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,o={87729:function(e,t,n){var r,o=n(45987),i=n(93324),a=n(1413),s=n(15671),u=
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 68 69 70 70 69 6e 67 4f 70 74 69 6f 6e 73 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 72 3d 28 30 2c 45 2e 73 45 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 74 26 26 65 2e 69 64 3d 3d 3d 74 2e 73 68 69 70 70 69 6e 67 4f 70 74 69 6f 6e 7d 29 29 7c 7c 6e 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 6d 6f 75 6e 74 2c 72 3d 65 2e 6c 61 62 65 6c 2c 6f 3d 65 2e 64 65 74 61 69 6c 2c 69 3d 65 2e 69 64 2c 61 3d 74 2e 63 75 72 72 65 6e 63 79 3b 72 65 74 75 72 6e 7b 61 6d 6f 75 6e 74 3a 7b 76 61 6c 75 65 3a 28 30 2c 4f 2e 46 65 29 28 6e Data Ascii: ion(e,t){var n=e.shippingOptions;if(!n)return[];var r=(0,E.sE)(n,(function(e){return!!t&&e.id===t.shippingOption}))\|\|n[0];return n.map((function(t){var n=function(e,t){var n=e.amount,r=e.label,o=e.detail,i=e.id,a=t.currency;return{amount:{value:(0,O.Fe)(n
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 63 63 6f 75 6e 74 49 64 2c 6f 3d 72 3f 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 29 3a 6e 2c 69 3d 28 30 2c 50 2e 6c 4f 29 28 6f 29 3d 3d 3d 50 2e 4b 6c 2e 74 65 73 74 3f 7b 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 22 54 45 53 54 22 7d 3a 7b 7d 2c 73 3d 74 2e 63 6f 75 6e 74 72 79 2c 75 3d 74 2e 6a 63 62 45 6e 61 62 6c 65 64 2c 6c 3d 74 2e 77 61 6c 6c 65 74 73 2c 63 3d 74 2e 5f 5f 62 65 74 61 73 2c 70 3d 74 2e 62 6c 6f 63 6b 65 64 43 61 72 64 42 72 61 6e 64 73 3b 69 66 28 21 28 2d 31 3d 3d 3d 28 6e 75 6c 6c 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 2e 69 6e 64 65 78 4f 66 28 22 67 6f 6f 67 6c 65 50 61 79 22 29 29 29 26 26 21 4c 26 26 21 28 30 2c 71 2e 53 29 28 63 29 29 7b 76 61 72 20 64 3d 28 30 2c 6b 2e 76 70 29 28 73 2c 75 7c 7c 21 Data Ascii: ccountId,o=r?"".concat(n,"/").concat(r):n,i=(0,P.lO)(o)===P.Kl.test?{environment:"TEST"}:{},s=t.country,u=t.jcbEnabled,l=t.wallets,c=t.__betas,p=t.blockedCardBrands;if(!(-1===(null==l?void 0:l.indexOf("googlePay")))&&!L&&!(0,q.S)(c)){var d=(0,k.vp)(s,u\|\|!
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 77 61 6c 6c 65 74 4e 61 6d 65 3a 22 67 6f 6f 67 6c 65 50 61 79 22 2c 6d 65 74 68 6f 64 4e 61 6d 65 3a 65 2e 6d 65 74 68 6f 64 4e 61 6d 65 7d 3b 76 61 72 20 6e 7d 2c 7a 3d 6e 28 35 36 32 37 34 29 2e 50 72 6f 6d 69 73 65 2c 47 3d 5b 22 5f 5f 73 74 72 69 70 65 55 73 65 72 43 72 65 64 65 6e 74 69 61 6c 73 22 5d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 28 30 2c 73 2e 5a 29 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 5f 72 65 70 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 5f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 72 65 70 6f 72 74 28 65 2c 28 30 2c 61 2e 5a 29 28 28 30 2c 61 2e 5a 29 28 7b 7d 2c 74 29 2c 7b 7d 2c 7b 62 61 63 6b 69 6e 67 4c 69 62 72 61 72 79 3a 22 42 52 4f 57 53 Data Ascii: walletName:"googlePay",methodName:e.methodName};var n},z=n(56274).Promise,G=["__stripeUserCredentials"],K=function(){function e(t){var n=this;(0,s.Z)(this,e),this._report=function(e,t){n._controller.report(e,(0,a.Z)((0,a.Z)({},t),{},{backingLibrary:"BROWS
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 2e 5f 6c 65 67 61 63 79 52 65 70 6f 72 74 28 22 70 61 79 72 65 71 2e 70 61 79 6d 65 6e 74 61 75 74 68 6f 72 69 7a 65 64 22 2c 7b 6d 65 74 68 6f 64 3a 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 7d 29 2c 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 79 22 21 3d 3d 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 29 74 68 72 6f 77 20 6e 2e 5f 6c 65 67 61 63 79 52 65 70 6f 72 74 28 22 66 61 74 61 6c 2e 70 61 79 72 65 71 2e 75 6e 65 78 70 65 63 74 65 64 5f 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 22 2c 7b 6d 65 74 68 6f 64 3a 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 7d 29 2c 6e 65 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 50 61 79 6d 65 6e 74 52 65 71 75 65 73 74 20 70 61 79 6d 65 6e 74 20 6d 65 74 68 6f 64 Data Ascii: ction(t){if(n._legacyReport("payreq.paymentauthorized",{method:t.methodName}),"https://google.com/pay"!==t.methodName)throw n._legacyReport("fatal.payreq.unexpected_payment_method",{method:t.methodName}),new Error("Unexpected PaymentRequest payment method
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 3a 72 2e 6f 6e 42 65 68 61 6c 66 4f 66 2c 69 73 43 68 65 63 6b 6f 75 74 3a 21 31 2c 69 73 48 6f 73 74 65 64 49 6e 76 6f 69 63 65 50 61 67 65 3a 21 31 2c 61 6d 6f 75 6e 74 3a 72 2e 74 6f 74 61 6c 2e 61 6d 6f 75 6e 74 2c 63 75 72 72 65 6e 63 79 3a 72 2e 63 75 72 72 65 6e 63 79 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 61 76 61 69 6c 61 62 69 6c 69 74 79 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 21 31 29 7d 29 29 7d 29 29 2c 6e 2e 5f 73 65 74 75 70 50 61 79 6d 65 6e 74 52 65 71 75 65 73 74 28 72 29 7d 29 29 2c 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 66 72 61 6d 65 41 63 74 69 6f 6e 45 76 65 6e 74 73 2e 63 68 65 63 6b Data Ascii: :r.onBehalfOf,isCheckout:!1,isHostedInvoicePage:!1,amount:r.total.amount,currency:r.currency}).then((function(e){var n=e.availability;return t(n)})).catch((function(){return t(!1)}))})),n._setupPaymentRequest(r)})),this._controller.frameActionEvents.check
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 28 29 2c 74 68 69 73 2e 5f 70 61 79 6d 65 6e 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 3d 65 3b 76 61 72 20 6e 2c 72 3d 46 28 74 68 69 73 2e 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 74 68 69 73 2e 5f 70 61 79 6d 65 6e 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 2c 6e 75 6c 6c 29 2c 69 3d 72 2e 64 65 74 61 69 6c 73 2c 73 3d 72 2e 6f 70 74 69 6f 6e 73 2c 75 3d 72 2e 6d 65 74 68 6f 64 73 3b 69 66 28 62 29 74 72 79 7b 74 68 69 73 2e 5f 70 72 3d 6e 65 77 20 62 28 75 2c 69 2c 73 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 74 68 69 73 2e 5f 70 72 29 7b 6e 3d 74 68 69 73 2e 5f 70 72 2c 5b 22 73 68 69 70 70 69 6e 67 61 64 64 72 65 73 73 63 68 61 6e 67 65 22 2c 22 73 68 69 70 70 69 6e 67 6f 70 74 69 6f 6e 63 68 61 6e 67 65 22 5d 2e 66 6f 72 45 61 63 68 Data Ascii: (),this._paymentRequestOptions=e;var n,r=F(this._authentication,this._paymentRequestOptions,null),i=r.details,s=r.options,u=r.methods;if(b)try{this._pr=new b(u,i,s)}catch(e){}if(this._pr){n=this._pr,["shippingaddresschange","shippingoptionchange"].forEach
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 5b 32 5d 3b 66 6f 72 28 76 61 72 20 73 3d 21 30 2c 75 3d 30 3b 75 3c 72 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 28 21 31 26 69 7c 7c 61 3e 3d 69 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 4f 29 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 4f 5b 74 5d 28 72 5b 75 5d 29 7d 29 29 3f 72 2e 73 70 6c 69 63 65 28 75 2d 2d 2c 31 29 3a 28 73 3d 21 31 2c 69 3c 61 26 26 28 61 3d 69 29 29 3b 69 66 28 73 29 7b 74 2e 73 70 6c 69 63 65 28 63 2d 2d 2c 31 29 3b 76 61 72 20 6c 3d 6f 28 29 3b 76 6f 69 64 20 30 21 3d 3d 6c 26 26 28 6e 3d 6c 29 7d 7d 72 65 74 75 72 6e 20 6e 7d 69 3d 69 7c 7c 30 3b 66 6f 72 28 76 61 72 20 63 3d 74 2e 6c 65 6e 67 74 68 3b 63 3e 30 26 26 74 5b 63 2d 31 5d 5b 32 5d 3e 69 3b 63 2d 2d 29 74 5b 63 5d 3d Data Ascii: [2];for(var s=!0,u=0;u<r.length;u++)(!1&i\|\|a>=i)&&Object.keys(e.O).every((function(t){return e.O[t](r[u])}))?r.splice(u--,1):(s=!1,i<a&&(a=i));if(s){t.splice(c--,1);var l=o();void 0!==l&&(n=l)}}return n}i=i\|\|0;for(var c=t.length;c>0&&t[c-1][2]>i;c--)t[c]=
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 6c 3d 30 3b 6c 3c 75 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 75 5b 6c 5d 3b 69 66 28 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 74 7c 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 3d 3d 72 2b 69 29 7b 61 3d 63 3b 62 72 65 61 6b 7d 7d 61 7c 7c 28 73 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 65 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 65 2e 6e 63 29 Data Ascii: ument.getElementsByTagName("script"),l=0;l<u.length;l++){var c=u[l];if(c.getAttribute("src")==t\|\|c.getAttribute("data-webpack")==r+i){a=c;break}}a\|\|(s=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,e.nc&&a.setAttribute("nonce",e.nc)
2024-12-20 18:03:54 UTC	424	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 6f 2c 69 2c 61 3d 72 5b 30 5d 2c 73 3d 72 5b 31 5d 2c 75 3d 72 5b 32 5d 2c 6c 3d 30 3b 69 66 28 61 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 74 5b 65 5d 7d 29 29 29 7b 66 6f 72 28 6f 20 69 6e 20 73 29 65 2e 6f 28 73 2c 6f 29 26 26 28 65 2e 6d 5b 6f 5d 3d 73 5b 6f 5d 29 3b 69 66 28 75 29 76 61 72 20 63 3d 75 28 65 29 7d 66 6f 72 28 6e 26 26 6e 28 72 29 3b 6c 3c 61 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 69 3d 61 5b 6c 5d 2c 65 2e 6f 28 74 2c 69 29 26 26 74 5b 69 5d 26 26 74 5b 69 5d 5b 30 5d 28 29 2c 74 5b 69 5d 3d 30 3b 72 65 74 75 72 6e 20 65 2e 4f 28 63 29 7d 2c 72 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 Data Ascii: nction(n,r){var o,i,a=r[0],s=r[1],u=r[2],l=0;if(a.some((function(e){return 0!==t[e]}))){for(o in s)e.o(s,o)&&(e.m[o]=s[o]);if(u)var c=u(e)}for(n&&n(r);l<a.length;l++)i=a[l],e.o(t,i)&&t[i]&&t[i][0](),t[i]=0;return e.O(c)},r=window.webpackChunkStripeJSinner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49852	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:54 UTC	636	OUT	GET /v3/fingerprinted/js/ui-shared-4af9c6190c1d792bdbbe4e49904ee0f6.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:54 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 485590 Last-Modified: Thu, 19 Dec 2024 21:09:16 GMT ETag: "fc04feb50d7c22254c1ca4114d570bde" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 14017 Date: Fri, 20 Dec 2024 18:03:54 GMT Via: 1.1 varnish X-Request-ID: ed28e165-0442-4502-ab90-3e95b0e4a468 X-Served-By: cache-ewr-kewr1740062-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 30 33 35 5d 2c 7b 39 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 69 66 28 6e 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 69 7c 7c 22 6e 75 6d 62 65 72 Data Ascii: (window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[7035],{94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var i=typeof n;if("string"===i\|\|"number
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 73 2e 6c 6f 63 61 74 69 6f 6e 3d 61 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 53 79 6e 74 61 78 45 72 72 6f 72 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 26 26 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 6e 29 7d 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 6e 7d 28 6e 2c 45 72 72 6f 72 29 2c 6e 2e 62 75 69 6c 64 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b Data Ascii: s.location=a,this.name="SyntaxError","function"==typeof Error.captureStackTrace&&Error.captureStackTrace(this,n)}!function(e,t){function n(){this.constructor=e}n.prototype=t.prototype,e.prototype=new n}(n,Error),n.buildMessage=function(e,t){function n(e){
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 6e 3d 31 3b 74 3c 61 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 61 5b 74 2d 31 5d 21 3d 3d 61 5b 74 5d 26 26 28 61 5b 6e 5d 3d 61 5b 74 5d 2c 6e 2b 2b 29 3b 61 2e 6c 65 6e 67 74 68 3d 6e 7d 73 77 69 74 63 68 28 61 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 61 5b 30 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 61 5b 30 5d 2b 22 20 6f 72 20 22 2b 61 5b 31 5d 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 61 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2b 22 2c 20 6f 72 20 22 2b 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7d 7d 28 65 29 2b 22 20 62 75 74 20 22 2b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 27 22 27 2b 72 28 65 29 2b 27 22 27 3a 22 65 6e 64 20 6f 66 20 69 6e 70 75 74 22 7d 28 74 29 Data Ascii: n=1;t<a.length;t++)a[t-1]!==a[t]&&(a[n]=a[t],n++);a.length=n}switch(a.length){case 1:return a[0];case 2:return a[0]+" or "+a[1];default:return a.slice(0,-1).join(", ")+", or "+a[a.length-1]}}(e)+" but "+function(e){return e?'"'+r(e)+'"':"end of input"}(t)
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 29 3b 65 6c 73 65 20 72 3d 5f 3b 72 21 3d 3d 5f 3f 28 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 2c 72 2c 61 3b 65 3d 4e 2c 74 2e 73 75 62 73 74 72 28 4e 2c 37 29 3d 3d 3d 45 3f 28 6e 3d 45 2c 4e 2b 3d 37 29 3a 28 6e 3d 5f 2c 6c 28 78 29 29 3b 6e 21 3d 3d 5f 26 26 28 72 3d 6d 28 29 29 21 3d 3d 5f 3f 28 34 31 3d 3d 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 4e 29 3f 28 61 3d 43 2c 4e 2b 2b 29 3a 28 61 3d 5f 2c 6c 28 77 29 29 2c 61 21 3d 3d 5f 3f 28 65 2c 65 3d 6e 3d 72 29 3a 28 4e 3d 65 2c 65 3d 5f 29 29 3a 28 4e 3d 65 2c 65 3d 5f 29 3b 72 65 74 75 72 6e 20 65 7d 28 29 2c 61 21 3d 3d 5f 3f 28 65 2c 65 3d 6e 3d 7b 75 72 6c 3a 6e 2c 66 6f 72 6d 61 74 3a 61 7d 29 3a 28 4e 3d 65 2c 65 3d 5f 29 29 3a 28 4e 3d 65 2c 65 3d 5f 29 7d 65 6c 73 65 20 Data Ascii: );else r=_;r!==_?(a=function(){var e,n,r,a;e=N,t.substr(N,7)===E?(n=E,N+=7):(n=_,l(x));n!==_&&(r=m())!==_?(41===t.charCodeAt(N)?(a=C,N++):(a=_,l(w)),a!==_?(e,e=n=r):(N=e,e=_)):(N=e,e=_);return e}(),a!==_?(e,e=n={url:n,format:a}):(N=e,e=_)):(N=e,e=_)}else
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 20 66 72 6f 6d 20 72 75 6c 65 20 5c 22 22 2b 72 2e 73 74 61 72 74 52 75 6c 65 2b 27 22 2e 27 29 3b 79 3d 67 5b 72 2e 73 74 61 72 74 52 75 6c 65 5d 7d 76 61 72 20 4f 3d 65 28 22 2e 2e 2f 75 74 69 6c 22 29 3b 69 66 28 28 76 3d 79 28 29 29 21 3d 3d 5f 26 26 4e 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 3b 74 68 72 6f 77 20 76 21 3d 3d 5f 26 26 4e 3c 74 2e 6c 65 6e 67 74 68 26 26 6c 28 7b 74 79 70 65 3a 22 65 6e 64 22 7d 29 2c 75 28 52 2c 4d 3c 74 2e 6c 65 6e 67 74 68 3f 74 2e 63 68 61 72 41 74 28 4d 29 3a 6e 75 6c 6c 2c 4d 3c 74 2e 6c 65 6e 67 74 68 3f 73 28 4d 2c 4d 2b 31 29 3a 73 28 4d 2c 4d 29 29 7d 7d 7d 2c 7b 22 2e 2e 2f 75 74 69 6c 22 3a 33 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 28 22 2e Data Ascii: from rule \""+r.startRule+'".');y=g[r.startRule]}var O=e("../util");if((v=y())!==_&&N===t.length)return v;throw v!==_&&N<t.length&&l({type:"end"}),u(R,M<t.length?t.charAt(M):null,M<t.length?s(M,M+1):s(M,M))}}},{"../util":3}],2:[function(e,t,n){var r=e(".
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 36 34 62 36 33 32 39 37 33 64 30 33 65 64 35 33 2e 6a 73 6f 6e 22 7d 2c 37 36 38 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 64 65 2d 32 62 36 62 35 66 35 64 34 31 66 33 65 34 33 61 30 34 30 33 30 63 65 61 39 34 65 64 62 38 64 31 2e 6a 73 6f 6e 22 7d 2c 39 36 32 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 65 6c 2d 61 30 34 66 63 31 30 34 36 63 36 30 37 36 30 64 35 66 34 64 62 37 63 63 38 35 34 61 65 36 38 33 2e 6a 73 6f 6e 22 7d 2c 39 36 38 38 39 3a 66 75 6e 63 74 69 6f 6e Data Ascii: 64b632973d03ed53.json"},7689:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_de-2b6b5f5d41f3e43a04030cea94edb8d1.json"},96250:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_el-a04fc1046c60760d5f4db7cc854ae683.json"},96889:function
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 68 75 2d 63 39 61 65 36 35 31 61 34 34 62 32 62 38 38 36 33 65 34 35 64 37 34 63 32 32 63 64 62 38 61 32 2e 6a 73 6f 6e 22 7d 2c 34 31 37 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 69 64 2d 33 33 61 39 39 37 36 34 61 35 39 61 30 62 37 33 33 66 32 66 66 39 31 65 36 32 30 35 66 61 33 33 2e 6a 73 6f 6e 22 7d 2c 34 38 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 69 74 2d 38 64 62 38 34 Data Ascii: fingerprinted/data/countries_hu-c9ae651a44b2b8863e45d74c22cdb8a2.json"},41713:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_id-33a99764a59a0b733f2ff91e6205fa33.json"},48173:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_it-8db84
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 6e 22 7d 2c 35 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 70 74 2d 65 64 64 64 37 38 38 66 66 35 32 31 34 62 61 39 65 33 31 65 37 31 30 39 33 65 61 61 39 36 32 36 2e 6a 73 6f 6e 22 7d 2c 36 30 36 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 72 6f 2d 32 31 33 63 63 61 65 34 35 38 32 66 39 66 31 65 33 32 30 35 33 62 38 66 33 37 34 62 35 34 63 61 2e 6a 73 6f 6e 22 7d 2c 35 35 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b Data Ascii: n"},527:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_pt-eddd788ff5214ba9e31e71093eaa9626.json"},60613:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_ro-213ccae4582f9f1e32053b8f374b54ca.json"},5563:function(e,t,n){e.exports=n.p+
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 20 63 61 6e 6e 6f 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 65 29 7d 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 21 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 6e 65 Data Ascii: w TypeError("Object.assign cannot be called with null or undefined");return Object(e)}var n=Object.getOwnPropertySymbols,r=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=ne
2024-12-20 18:03:54 UTC	1378	IN	Data Raw: 28 76 61 72 20 61 20 69 6e 20 79 61 5b 6e 5d 3d 74 2c 6e 3d 74 2e 65 76 65 6e 74 54 79 70 65 73 29 7b 76 61 72 20 6f 3d 76 6f 69 64 20 30 2c 73 3d 6e 5b 61 5d 2c 6c 3d 74 2c 75 3d 61 3b 69 66 28 62 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 72 28 39 39 2c 75 29 29 3b 62 61 5b 75 5d 3d 73 3b 76 61 72 20 63 3d 73 2e 70 68 61 73 65 64 52 65 67 69 73 74 72 61 74 69 6f 6e 4e 61 6d 65 73 3b 69 66 28 63 29 7b 66 6f 72 28 6f 20 69 6e 20 63 29 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 69 28 63 5b 6f 5d 2c 6c 2c 75 29 3b 6f 3d 21 30 7d 65 6c 73 65 20 73 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 4e 61 6d 65 3f 28 69 28 73 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 4e 61 6d 65 2c 6c 2c 75 29 2c 6f 3d Data Ascii: (var a in ya[n]=t,n=t.eventTypes){var o=void 0,s=n[a],l=t,u=a;if(ba.hasOwnProperty(u))throw Error(r(99,u));ba[u]=s;var c=s.phasedRegistrationNames;if(c){for(o in c)c.hasOwnProperty(o)&&i(c[o],l,u);o=!0}else s.registrationName?(i(s.registrationName,l,u),o=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49850	108.177.14.92	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:54 UTC	618	OUT	GET /gp/p/js/pay.js HTTP/1.1 Host: pay.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:55 UTC	2462	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Expires: Fri, 20 Dec 2024 18:03:54 GMT Date: Fri, 20 Dec 2024 18:03:54 GMT Cache-Control: private, max-age=600 P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-nP22MWZCVsxWl0TMqwmJ0w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data:;report-uri /_/InstantbuyFrontendHttp/cspreport/fine-allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/gp/p/_/InstantbuyFrontendHttp/web-reports?context=eJzjKtDikmLw15BiWFYqxbBkphSDxNeXTBpA7JQ-gzUIiFtvnmOdCsRzA86zhmeeZzVae57VCYiT_p1nLQJiQ4VLrI5A_CvvEqtqzyVWUyAukrjC2gTE9aFXWbdcvcq6kfUa6yyLa6wBWddYhXg4uh5P280m8KJx0lFmJe2k_ML4zLziksS8kqTSyrSi_LyS1LyU4tSistSieCMDIxNDI0MjPQPj-AIDAOemQyA" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA; expires=Sat, 21-Jun-2025 18:03:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 37 66 66 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 5b 27 64 65 6e 79 6c 69 73 74 65 64 44 6f 6d 61 69 6e 73 48 61 73 68 65 64 56 61 6c 75 65 4c 69 73 74 46 6f 72 47 70 61 79 42 75 74 74 6f 6e 57 69 74 68 43 61 72 64 49 6e 66 6f 27 5d 20 3d 20 5b 2d 37 31 38 35 38 33 34 36 36 2c 2d 36 35 31 34 30 37 31 37 33 2c 31 35 30 31 30 35 33 30 32 30 2c 31 32 37 30 39 33 31 37 39 33 2c 31 38 37 38 39 36 35 32 30 33 2c 31 33 35 39 39 37 39 33 31 31 2c 2d 31 35 35 36 33 39 36 35 39 39 2c 2d 39 32 39 38 32 30 32 39 30 2c 2d 31 39 39 33 39 36 36 35 35 38 2c 39 36 39 33 36 39 34 38 37 2c 38 31 33 30 30 34 37 32 36 5d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 5b 27 77 68 69 74 65 6c 69 73 74 65 Data Ascii: 7ff2(function(){window['denylistedDomainsHashedValueListForGpayButtonWithCardInfo'] = [-718583466,-651407173,1501053020,1270931793,1878965203,1359979311,-1556396599,-929820290,-1993966558,969369487,813004726];}).call(this);(function(){window['whiteliste
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 62 3d 5b 22 67 6f 6f 67 6c 65 22 2c 22 70 61 79 6d 65 6e 74 73 22 2c 22 61 70 69 22 2c 22 45 6e 61 62 6c 65 44 79 6e 61 6d 69 63 47 70 61 79 42 75 74 74 6f 6e 22 5d 2c 63 3d 77 69 6e 64 6f 77 7c 7c 61 3b 62 5b 30 5d 69 6e 20 63 7c 7c 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 62 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 62 2e 6c 65 6e 67 74 68 26 26 28 64 3d 62 2e 73 68 69 66 74 28 29 29 3b 29 62 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: -Identifier: Apache-2.0*/var a=this\|\|self;var b=["google","payments","api","EnableDynamicGpayButton"],c=window\|\|a;b[0]in c\|\|typeof c.execScript=="undefined"\|\|c.execScript("var "+b[0]);for(var d;b.length&&(d=b.shift());)b.length?c=c[d]&&c[d]!==Object.pro
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 21 30 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 62 3d 5b 22 67 6f 6f 67 6c 65 22 2c 22 70 61 79 6d 65 6e 74 73 22 2c 22 61 70 69 22 2c 22 55 73 65 43 61 6e 4d 61 6b 65 50 61 79 6d 65 6e 74 46 6f 72 46 61 6c 6c 62 61 63 6b 4f Data Ascii: .length?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=!0;}).call(this);(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var a=this\|\|self;var b=["google","payments","api","UseCanMakePaymentForFallbackO
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 7c 7c 73 65 6c 66 3b 76 61 72 20 62 3d 5b 22 67 6f 6f 67 6c 65 22 2c 22 70 61 79 6d 65 6e 74 73 22 2c 22 61 70 69 22 2c 22 45 6e 61 62 6c 65 44 79 6e 61 6d 69 63 47 70 61 79 42 75 74 74 6f 6e 46 6f 72 50 6c 61 69 6e 42 75 74 74 6f 6e 22 5d 2c 63 3d 77 69 6e 64 6f 77 7c 7c 61 3b 62 5b 30 5d 69 6e 20 63 7c 7c 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 62 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 62 2e 6c 65 6e 67 74 68 26 26 28 64 3d 62 2e 73 68 69 66 74 28 29 29 3b 29 62 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a Data Ascii: \|\|self;var b=["google","payments","api","EnableDynamicGpayButtonForPlainButton"],c=window\|\|a;b[0]in c\|\|typeof c.execScript=="undefined"\|\|c.execScript("var "+b[0]);for(var d;b.length&&(d=b.shift());)b.length?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 64 5b 30 5d 3b 65 3d 21 61 26 26 65 20 69 6e 20 72 3f 72 3a 71 3b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 21 28 67 20 69 6e 20 65 29 29 62 72 65 61 6b 20 61 3b 65 3d 65 5b 67 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 64 61 26 26 63 3d 3d 3d 22 65 73 36 22 3f 65 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 Data Ascii: ull)return a[b];c=a[c];return c!==void 0?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0];e=!a&&e in r?r:q;for(var f=0;f<d.length-1;f++){var g=d[f];if(!(g in e))break a;e=e[g]}d=d[d.length-1];c=da&&c==="es6"?e[d]:null;b=b(c)
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 76 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 55 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 79 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 2e 55 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 55 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 7a 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6a 63 28 29 7d 29 7d 74 68 69 73 2e 55 2e 70 75 73 68 28 67 29 7d 3b 76 61 72 20 64 Data Ascii: [c];return b};v("Promise",function(a){function b(){this.U=null}function c(g){return g instanceof e?g:new e(function(h){h(g)})}if(a)return a;b.prototype.yb=function(g){if(this.U==null){this.U=[];var h=this;this.zb(function(){h.jc()})}this.U.push(g)};var d
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 51 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6b 2e 72 61 29 7b 63 61 73 65 20 31 3a 67 28 6b 2e 58 29 3b 0a 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6b 2e 58 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6b 2e 72 61 29 3b 7d 7d 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 71 61 3d 3d 6e 75 6c 6c 3f 66 2e 79 62 28 6c 29 3a 74 68 69 73 2e 71 61 2e 70 75 73 68 28 6c 29 3b 74 68 69 Data Ascii: e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Qa=function(g,h){function l(){switch(k.ra){case 1:g(k.X);break;case 2:h(k.X);break;default:throw Error("Unexpected state: "+k.ra);}}var k=this;this.qa==null?f.yb(l):this.qa.push(l);thi
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 53 3a 74 68 69 73 5b 31 5d 2e 53 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6c 7d 2c 6b 2e 6c 69 73 74 2e 70 75 73 68 28 6b 2e 76 29 2c 74 68 69 73 5b 31 5d 2e 53 2e 6e 65 78 74 3d 6b 2e 76 2c 74 68 69 73 5b 31 5d 2e 53 3d 6b 2e 76 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 76 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e Data Ascii: next:this[1],S:this[1].S,head:this[1],key:h,value:l},k.list.push(k.v),this[1].S.next=k.v,this[1].S=k.v,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.v&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 22 65 73 36 22 29 3b 76 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 79 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 0a 76 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 Data Ascii: l(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}},"es6");v("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)y(b,d)&&c.push(b[d]);return c}},"es8");v("Object.is",function(a){return a?a:function(b
2024-12-20 18:03:55 UTC	2462	IN	Data Raw: 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 41 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 7a 61 28 42 61 2c 41 61 29 3b 42 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 41 73 73 65 72 74 69 6f 6e 45 72 72 6f 72 22 3b 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 22 41 73 73 65 72 74 69 6f 6e 20 66 61 69 6c 65 64 22 3b 69 66 28 63 29 7b 65 2b 3d 22 3a 20 22 2b 63 3b 76 61 72 20 66 3d 64 7d 65 6c 73 65 20 61 26 26 28 65 2b 3d 22 3a 20 22 2b 61 2c 66 3d 62 29 3b 74 68 72 6f Data Ascii: (a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");Aa.call(this,c+a[d])}za(Ba,Aa);Ba.prototype.name="AssertionError";function Ca(a,b,c,d){var e="Assertion failed";if(c){e+=": "+c;var f=d}else a&&(e+=": "+a,f=b);thro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49854	13.59.75.255	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:55 UTC	734	OUT	PUT /api/patient/v1/unauthenticated_patients/attempted_checkout_at HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive Content-Length: 31 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://patient.inboxhealth.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:55 UTC	31	OUT	Data Raw: 7b 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 74 6f 6b 65 6e 22 3a 22 58 48 63 55 74 67 22 7d Data Ascii: {"confirmation_token":"XHcUtg"}
2024-12-20 18:03:55 UTC	664	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, DELETE, POST, OPTIONS, PATCH Access-Control-Allow-Origin: https://patient.inboxhealth.com Access-Control-Expose-Headers: Authorization, Content-Disposition, X-Amzn-Remapped-Authorization Access-Control-Max-Age: 7200 Cache-Control: max-age=0, private, must-revalidate Content-Length: 2 Content-Type: application/json Date: Fri, 20 Dec 2024 18:03:55 GMT Etag: W/"44136fa355b3678a1146ad16f7e8649e" Strict-Transport-Security: max-age=315360000; preload Vary: Origin X-Request-Id: 67bd381b-8311-4e05-9510-507bd4f71045 X-Runtime: 0.019594 Connection: close
2024-12-20 18:03:55 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49856	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:55 UTC	646	OUT	GET /v3/fingerprinted/js/elements-inner-card-244854405722882f318e50d94037ffbf.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/elements-inner-card-82b73398e11598b9ad92559cae1c986b.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:56 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 56584 Last-Modified: Mon, 16 Dec 2024 21:06:15 GMT ETag: "16553965860c27faf04865c26bd8d33f" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 277162 Date: Fri, 20 Dec 2024 18:03:56 GMT Via: 1.1 varnish X-Request-ID: 62d5d9b1-7eb5-400d-b536-27aac4ccc38e X-Served-By: cache-ewr-kewr1740068-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 6f 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 2c 61 3d 7b 31 34 36 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 61 6d 65 78 2d 61 34 39 62 38 32 66 34 36 63 35 Data Ascii: !function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var r=o[t]={id:t,loaded:!1,exports:{}};return a[t].call(r.exports,r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={14657:function(e,t,n){e.exports=n.p+"fingerprinted/img/amex-a49b82f46c5
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 76 3d 6e 2e 6e 28 66 29 2c 43 3d 6e 28 36 30 32 37 36 29 2c 67 3d 6e 28 36 31 37 36 31 29 2c 62 3d 6e 28 38 30 38 37 37 29 2c 79 3d 6e 28 31 34 37 39 38 29 2c 6b 3d 6e 2e 6e 28 79 29 2c 45 3d 6e 28 34 33 33 39 38 29 2c 4e 3d 6e 2e 6e 28 45 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 28 30 2c 75 2e 5a 29 28 74 68 69 73 2c 74 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 28 30 2c 68 2e 5a 29 28 74 2c 65 29 3b 76 61 72 20 6e 3d 28 30 2c 6d 2e 5a 29 28 74 29 3b 72 65 74 75 72 6e 28 30 2c 70 2e 5a 29 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 70 73 2e 73 6f 6c 69 Data Ascii: v=n.n(f),C=n(60276),g=n(61761),b=n(80877),y=n(14798),k=n.n(y),E=n(43398),N=n.n(E),w=function(e){function t(){return(0,u.Z)(this,t),n.apply(this,arguments)}(0,h.Z)(t,e);var n=(0,m.Z)(t);return(0,p.Z)(t,[{key:"render",value:function(){return this.props.soli
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 28 30 2c 75 2e 5a 29 28 74 68 69 73 2c 74 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 28 30 2c 68 2e 5a 29 28 74 2c 65 29 3b 76 61 72 20 6e 3d 28 30 2c 6d 2e 5a 29 28 74 29 3b 72 65 74 75 72 6e 28 30 2c 70 2e 5a 29 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 70 73 2e 73 6f 6c 69 64 3f 61 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 59 28 29 2c 6e 75 6c 6c 29 3a 61 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 7a 28 29 2c 6e 75 6c 6c 29 7d 7d 5d 29 2c 74 7d 28 61 28 29 2e 43 6f 6d 70 6f 6e 65 6e 74 29 2c 54 3d 6e 28 32 36 36 39 38 29 2c 55 3d 6e 28 33 39 35 38 31 29 2c 4b 3d 6e 28 39 34 38 Data Ascii: return(0,u.Z)(this,t),n.apply(this,arguments)}(0,h.Z)(t,e);var n=(0,m.Z)(t);return(0,p.Z)(t,[{key:"render",value:function(){return this.props.solid?a().createElement(Y(),null):a().createElement(z(),null)}}]),t}(a().Component),T=n(26698),U=n(39581),K=n(948
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 28 61 28 29 2e 43 6f 6d 70 6f 6e 65 6e 74 29 2c 6b 65 3d 6e 28 33 35 39 31 38 29 2c 45 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 68 6f 75 6c 64 44 69 73 70 6c 61 79 43 61 72 64 45 6c 65 6d 65 6e 74 43 42 43 2c 6e 3d 65 2e 63 61 72 64 4e 65 74 77 6f 72 6b 73 2c 61 3d 65 2e 6f 6e 52 65 70 6f 72 74 2c 6f 3d 65 2e 6c 6f 63 61 6c 65 2c 69 3d 28 30 2c 72 2e 75 73 65 52 65 66 29 28 7b 7d 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 4d 65 6d 6f 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 5b 5d 3b 72 65 74 75 72 6e 20 6e 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 30 2c 6b 65 2e 70 59 29 28 6f 2c 22 63 61 72 64 5f 62 72 61 6e 64 2e 22 2e 63 6f 6e 63 61 74 28 65 29 29 3b Data Ascii: (a().Component),ke=n(35918),Ee=function(e){var t=e.shouldDisplayCardElementCBC,n=e.cardNetworks,a=e.onReport,o=e.locale,i=(0,r.useRef)({});return(0,r.useMemo)((function(){if(!t)return[];return n.map((function(e){var t=(0,ke.pY)(o,"card_brand.".concat(e));
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 22 6f 70 74 69 6f 6e 22 2c 7b 76 61 6c 75 65 3a 74 2c 6b 65 79 3a 74 7d 2c 6e 7c 7c 74 29 7d 29 29 29 29 7d 2c 77 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 30 2c 75 2e 5a 29 28 74 68 69 73 2c 74 29 2c 28 72 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 2e 75 70 64 61 74 65 44 69 6d 65 6e 73 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 63 61 6c 63 75 6c 61 74 65 57 69 64 74 68 28 29 3b 72 2e 5f 77 69 64 74 68 21 3d 3d 65 26 26 28 72 2e 70 72 6f 70 73 2e 6f 6e 44 69 6d 65 6e 73 69 6f 6e 43 68 61 6e 67 65 28 7b 77 69 64 74 68 3a 65 7d 29 2c 72 2e 5f 77 69 64 74 68 3d 65 29 2c 72 2e 5f 75 6e 6d 6f 75 6e 74 65 64 7c 7c 72 65 71 75 65 73 74 41 6e 69 6d Data Ascii: "option",{value:t,key:t},n\|\|t)}))))},we=function(e){function t(e){var r;return(0,u.Z)(this,t),(r=n.call(this,e)).updateDimensions=function(){var e=r.calculateWidth();r._width!==e&&(r.props.onDimensionChange({width:e}),r._width=e),r._unmounted\|\|requestAnim
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 6c 3d 3d 3d 28 61 3d 65 2e 63 61 72 64 4e 65 74 77 6f 72 6b 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 5b 30 5d 29 7c 7c 6e 75 6c 6c 3b 74 3d 6f 3f 68 65 28 6f 29 3a 22 75 6e 6b 6e 6f 77 6e 22 7d 22 75 6e 6b 6e 6f 77 6e 22 3d 3d 3d 74 26 26 28 74 3d 54 2e 5a 50 2e 75 6e 69 66 69 65 64 42 72 61 6e 64 28 65 2e 63 61 72 64 4e 75 6d 62 65 72 7c 7c 22 22 29 29 7d 76 61 72 20 69 3d 22 61 6d 65 78 22 3d 3d 3d 74 2c 6c 3d 69 3f 22 65 72 72 6f 72 41 6d 65 78 22 3a 22 65 72 72 6f 72 22 3b 72 65 74 75 72 6e 7b 62 61 63 6b 49 63 6f 6e 4e 61 6d 65 3a 69 3f 22 63 76 63 41 6d 65 78 22 3a 22 63 76 63 22 2c 66 72 6f 6e 74 49 63 6f 6e 4e 61 6d 65 3a 65 2e 68 61 73 43 61 72 64 4e 75 6d 62 65 72 45 72 72 6f 72 3f 6c 3a 74 2c 62 72 61 6e 64 3a 74 7d Data Ascii: l===(a=e.cardNetworks)\|\|void 0===a?void 0:a[0])\|\|null;t=o?he(o):"unknown"}"unknown"===t&&(t=T.ZP.unifiedBrand(e.cardNumber\|\|""))}var i="amex"===t,l=i?"errorAmex":"error";return{backIconName:i?"cvcAmex":"cvc",frontIconName:e.hasCardNumberError?l:t,brand:t}
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 64 6f 77 6e 2c 64 3d 74 2e 6f 6e 53 65 6c 65 63 74 43 61 72 64 4e 65 74 77 6f 72 6b 2c 75 3d 74 2e 63 61 72 64 4e 65 74 77 6f 72 6b 73 2c 70 3d 74 2e 73 65 6c 65 63 74 65 64 4e 65 74 77 6f 72 6b 2c 68 3d 74 2e 64 65 66 61 75 6c 74 4e 65 74 77 6f 72 6b 2c 6d 3d 74 2e 6f 6e 4f 70 65 6e 43 61 72 64 42 72 61 6e 64 43 68 6f 69 63 65 44 72 6f 70 64 6f 77 6e 2c 66 3d 74 68 69 73 2e 67 65 74 42 72 61 6e 64 41 6e 64 49 63 6f 6e 73 28 74 68 69 73 2e 70 72 6f 70 73 29 2c 43 3d 66 2e 66 72 6f 6e 74 49 63 6f 6e 4e 61 6d 65 2c 67 3d 66 2e 62 61 63 6b 49 63 6f 6e 4e 61 6d 65 2c 62 3d 66 2e 62 72 61 6e 64 2c 79 3d 74 68 69 73 2e 70 72 6f 70 73 2e 73 68 6f 77 43 76 63 26 26 21 76 65 2e 4a 57 2c 6b 3d 74 68 69 73 2e 70 72 6f 70 73 2e 73 68 6f 75 6c 64 44 69 73 70 6c 61 79 Data Ascii: down,d=t.onSelectCardNetwork,u=t.cardNetworks,p=t.selectedNetwork,h=t.defaultNetwork,m=t.onOpenCardBrandChoiceDropdown,f=this.getBrandAndIcons(this.props),C=f.frontIconName,g=f.backIconName,b=f.brand,y=this.props.showCvc&&!ve.JW,k=this.props.shouldDisplay
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 28 65 29 3f 6e 75 6c 6c 3a 28 30 2c 78 65 2e 5a 29 28 22 69 6e 76 61 6c 69 64 5f 6e 75 6d 62 65 72 22 29 3a 6e 3f 6e 75 6c 6c 3a 28 30 2c 78 65 2e 5a 29 28 22 69 6e 63 6f 6d 70 6c 65 74 65 5f 6e 75 6d 62 65 72 22 29 7d 2c 50 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 74 2e 69 67 6e 6f 72 65 49 6e 63 6f 6d 70 6c 65 74 65 2c 72 3d 44 65 28 65 29 2c 61 3d 72 2e 73 61 6e 69 74 69 7a 65 64 2c 6f 3d 72 2e 6d 69 6e 4c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 4c 65 28 61 2c 6f 2c 6e 29 7d 2c 41 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 Data Ascii: (e)?null:(0,xe.Z)("invalid_number"):n?null:(0,xe.Z)("incomplete_number")},Pe=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=t.ignoreIncomplete,r=De(e),a=r.sanitized,o=r.minLength;return Le(a,o,n)},Ae=function(e){var t=argume
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 3b 28 30 2c 75 2e 5a 29 28 74 68 69 73 2c 74 29 3b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 61 3d 6e 65 77 20 41 72 72 61 79 28 72 29 2c 6f 3d 30 3b 6f 3c 72 3b 6f 2b 2b 29 61 5b 6f 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 72 65 74 75 72 6e 28 65 3d 6e 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 61 29 29 29 2e 5f 61 75 74 6f 63 6f 72 72 65 63 74 43 6f 6d 70 6c 65 74 65 3d 21 31 2c 65 2e 68 61 6e 64 6c 65 43 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 28 30 2c 64 2e 5a 29 28 28 30 2c 64 2e 5a 29 28 28 30 2c 64 2e 5a 29 28 7b 7d 2c 65 2e 70 72 6f 70 73 2e 6d 65 74 61 29 2c 6e 29 2c 7b 7d 2c 7b 62 72 61 6e 64 3a 54 2e 5a 50 2e 75 6e 69 Data Ascii: ;(0,u.Z)(this,t);for(var r=arguments.length,a=new Array(r),o=0;o<r;o++)a[o]=arguments[o];return(e=n.call.apply(n,[this].concat(a)))._autocorrectComplete=!1,e.handleChange=function(t,n,r){var a=(0,d.Z)((0,d.Z)((0,d.Z)({},e.props.meta),n),{},{brand:T.ZP.uni
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 65 6e 74 28 5a 65 2c 28 30 2c 63 2e 5a 29 28 7b 6f 6e 52 65 70 6f 72 74 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 52 65 70 6f 72 74 2c 6c 6f 63 61 6c 65 3a 6e 2c 6f 6e 43 6c 69 63 6b 44 72 6f 70 64 6f 77 6e 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 43 6c 69 63 6b 44 72 6f 70 64 6f 77 6e 2c 6f 6e 53 65 6c 65 63 74 43 61 72 64 4e 65 74 77 6f 72 6b 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 53 65 6c 65 63 74 43 61 72 64 4e 65 74 77 6f 72 6b 7d 2c 74 68 69 73 2e 70 72 6f 70 73 2e 63 61 72 64 42 72 61 6e 64 43 68 6f 69 63 65 2c 7b 63 61 72 64 4e 75 6d 62 65 72 3a 6f 2c 64 69 73 61 62 6c 65 64 3a 74 68 69 73 2e 70 72 6f 70 73 2e 69 6e 70 75 74 50 72 6f 70 73 2e 64 69 73 61 62 6c 65 64 7c 7c 21 31 2c 68 69 64 65 49 63 6f 6e 3a 21 6c 2c 69 63 6f 6e 53 74 79 6c 65 Data Ascii: ent(Ze,(0,c.Z)({onReport:this.props.onReport,locale:n,onClickDropdown:this.props.onClickDropdown,onSelectCardNetwork:this.props.onSelectCardNetwork},this.props.cardBrandChoice,{cardNumber:o,disabled:this.props.inputProps.disabled\|\|!1,hideIcon:!l,iconStyle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49857	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:55 UTC	472	OUT	GET /v3/fingerprinted/js/payment-request-inner-browser-3e2bf1135aeec036ab34eb24b61d077f.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
2024-12-20 18:03:56 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12826 Last-Modified: Sat, 07 Dec 2024 00:55:26 GMT ETag: "c702392565913c8105713dc87e945059" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Fri, 20 Dec 2024 18:03:56 GMT Via: 1.1 varnish Age: 16537 X-Request-ID: d3e13801-9102-47a1-a57e-b6f6a221e6fc X-Served-By: cache-ewr-kewr1740021-EWR X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 69 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 69 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6f 5b 74 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 2c 6f 3d 7b 38 37 37 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 6e 28 34 35 39 38 37 29 2c 69 3d 6e 28 39 33 33 32 34 29 2c 61 3d 6e 28 31 34 31 33 29 2c 73 3d 6e 28 31 35 36 37 31 29 2c 75 3d Data Ascii: !function(){"use strict";function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return o[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,o={87729:function(e,t,n){var r,o=n(45987),i=n(93324),a=n(1413),s=n(15671),u=
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 68 69 70 70 69 6e 67 4f 70 74 69 6f 6e 73 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 72 3d 28 30 2c 45 2e 73 45 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 74 26 26 65 2e 69 64 3d 3d 3d 74 2e 73 68 69 70 70 69 6e 67 4f 70 74 69 6f 6e 7d 29 29 7c 7c 6e 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 6d 6f 75 6e 74 2c 72 3d 65 2e 6c 61 62 65 6c 2c 6f 3d 65 2e 64 65 74 61 69 6c 2c 69 3d 65 2e 69 64 2c 61 3d 74 2e 63 75 72 72 65 6e 63 79 3b 72 65 74 75 72 6e 7b 61 6d 6f 75 6e 74 3a 7b 76 61 6c 75 65 3a 28 30 2c 4f 2e 46 65 29 28 6e Data Ascii: ion(e,t){var n=e.shippingOptions;if(!n)return[];var r=(0,E.sE)(n,(function(e){return!!t&&e.id===t.shippingOption}))\|\|n[0];return n.map((function(t){var n=function(e,t){var n=e.amount,r=e.label,o=e.detail,i=e.id,a=t.currency;return{amount:{value:(0,O.Fe)(n
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 63 63 6f 75 6e 74 49 64 2c 6f 3d 72 3f 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 29 3a 6e 2c 69 3d 28 30 2c 50 2e 6c 4f 29 28 6f 29 3d 3d 3d 50 2e 4b 6c 2e 74 65 73 74 3f 7b 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 22 54 45 53 54 22 7d 3a 7b 7d 2c 73 3d 74 2e 63 6f 75 6e 74 72 79 2c 75 3d 74 2e 6a 63 62 45 6e 61 62 6c 65 64 2c 6c 3d 74 2e 77 61 6c 6c 65 74 73 2c 63 3d 74 2e 5f 5f 62 65 74 61 73 2c 70 3d 74 2e 62 6c 6f 63 6b 65 64 43 61 72 64 42 72 61 6e 64 73 3b 69 66 28 21 28 2d 31 3d 3d 3d 28 6e 75 6c 6c 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 2e 69 6e 64 65 78 4f 66 28 22 67 6f 6f 67 6c 65 50 61 79 22 29 29 29 26 26 21 4c 26 26 21 28 30 2c 71 2e 53 29 28 63 29 29 7b 76 61 72 20 64 3d 28 30 2c 6b 2e 76 70 29 28 73 2c 75 7c 7c 21 Data Ascii: ccountId,o=r?"".concat(n,"/").concat(r):n,i=(0,P.lO)(o)===P.Kl.test?{environment:"TEST"}:{},s=t.country,u=t.jcbEnabled,l=t.wallets,c=t.__betas,p=t.blockedCardBrands;if(!(-1===(null==l?void 0:l.indexOf("googlePay")))&&!L&&!(0,q.S)(c)){var d=(0,k.vp)(s,u\|\|!
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 77 61 6c 6c 65 74 4e 61 6d 65 3a 22 67 6f 6f 67 6c 65 50 61 79 22 2c 6d 65 74 68 6f 64 4e 61 6d 65 3a 65 2e 6d 65 74 68 6f 64 4e 61 6d 65 7d 3b 76 61 72 20 6e 7d 2c 7a 3d 6e 28 35 36 32 37 34 29 2e 50 72 6f 6d 69 73 65 2c 47 3d 5b 22 5f 5f 73 74 72 69 70 65 55 73 65 72 43 72 65 64 65 6e 74 69 61 6c 73 22 5d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 28 30 2c 73 2e 5a 29 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 5f 72 65 70 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 5f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 72 65 70 6f 72 74 28 65 2c 28 30 2c 61 2e 5a 29 28 28 30 2c 61 2e 5a 29 28 7b 7d 2c 74 29 2c 7b 7d 2c 7b 62 61 63 6b 69 6e 67 4c 69 62 72 61 72 79 3a 22 42 52 4f 57 53 Data Ascii: walletName:"googlePay",methodName:e.methodName};var n},z=n(56274).Promise,G=["__stripeUserCredentials"],K=function(){function e(t){var n=this;(0,s.Z)(this,e),this._report=function(e,t){n._controller.report(e,(0,a.Z)((0,a.Z)({},t),{},{backingLibrary:"BROWS
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 2e 5f 6c 65 67 61 63 79 52 65 70 6f 72 74 28 22 70 61 79 72 65 71 2e 70 61 79 6d 65 6e 74 61 75 74 68 6f 72 69 7a 65 64 22 2c 7b 6d 65 74 68 6f 64 3a 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 7d 29 2c 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 79 22 21 3d 3d 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 29 74 68 72 6f 77 20 6e 2e 5f 6c 65 67 61 63 79 52 65 70 6f 72 74 28 22 66 61 74 61 6c 2e 70 61 79 72 65 71 2e 75 6e 65 78 70 65 63 74 65 64 5f 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 22 2c 7b 6d 65 74 68 6f 64 3a 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 7d 29 2c 6e 65 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 50 61 79 6d 65 6e 74 52 65 71 75 65 73 74 20 70 61 79 6d 65 6e 74 20 6d 65 74 68 6f 64 Data Ascii: ction(t){if(n._legacyReport("payreq.paymentauthorized",{method:t.methodName}),"https://google.com/pay"!==t.methodName)throw n._legacyReport("fatal.payreq.unexpected_payment_method",{method:t.methodName}),new Error("Unexpected PaymentRequest payment method
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 3a 72 2e 6f 6e 42 65 68 61 6c 66 4f 66 2c 69 73 43 68 65 63 6b 6f 75 74 3a 21 31 2c 69 73 48 6f 73 74 65 64 49 6e 76 6f 69 63 65 50 61 67 65 3a 21 31 2c 61 6d 6f 75 6e 74 3a 72 2e 74 6f 74 61 6c 2e 61 6d 6f 75 6e 74 2c 63 75 72 72 65 6e 63 79 3a 72 2e 63 75 72 72 65 6e 63 79 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 61 76 61 69 6c 61 62 69 6c 69 74 79 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 21 31 29 7d 29 29 7d 29 29 2c 6e 2e 5f 73 65 74 75 70 50 61 79 6d 65 6e 74 52 65 71 75 65 73 74 28 72 29 7d 29 29 2c 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 66 72 61 6d 65 41 63 74 69 6f 6e 45 76 65 6e 74 73 2e 63 68 65 63 6b Data Ascii: :r.onBehalfOf,isCheckout:!1,isHostedInvoicePage:!1,amount:r.total.amount,currency:r.currency}).then((function(e){var n=e.availability;return t(n)})).catch((function(){return t(!1)}))})),n._setupPaymentRequest(r)})),this._controller.frameActionEvents.check
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 28 29 2c 74 68 69 73 2e 5f 70 61 79 6d 65 6e 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 3d 65 3b 76 61 72 20 6e 2c 72 3d 46 28 74 68 69 73 2e 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 74 68 69 73 2e 5f 70 61 79 6d 65 6e 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 2c 6e 75 6c 6c 29 2c 69 3d 72 2e 64 65 74 61 69 6c 73 2c 73 3d 72 2e 6f 70 74 69 6f 6e 73 2c 75 3d 72 2e 6d 65 74 68 6f 64 73 3b 69 66 28 62 29 74 72 79 7b 74 68 69 73 2e 5f 70 72 3d 6e 65 77 20 62 28 75 2c 69 2c 73 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 74 68 69 73 2e 5f 70 72 29 7b 6e 3d 74 68 69 73 2e 5f 70 72 2c 5b 22 73 68 69 70 70 69 6e 67 61 64 64 72 65 73 73 63 68 61 6e 67 65 22 2c 22 73 68 69 70 70 69 6e 67 6f 70 74 69 6f 6e 63 68 61 6e 67 65 22 5d 2e 66 6f 72 45 61 63 68 Data Ascii: (),this._paymentRequestOptions=e;var n,r=F(this._authentication,this._paymentRequestOptions,null),i=r.details,s=r.options,u=r.methods;if(b)try{this._pr=new b(u,i,s)}catch(e){}if(this._pr){n=this._pr,["shippingaddresschange","shippingoptionchange"].forEach
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 5b 32 5d 3b 66 6f 72 28 76 61 72 20 73 3d 21 30 2c 75 3d 30 3b 75 3c 72 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 28 21 31 26 69 7c 7c 61 3e 3d 69 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 4f 29 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 4f 5b 74 5d 28 72 5b 75 5d 29 7d 29 29 3f 72 2e 73 70 6c 69 63 65 28 75 2d 2d 2c 31 29 3a 28 73 3d 21 31 2c 69 3c 61 26 26 28 61 3d 69 29 29 3b 69 66 28 73 29 7b 74 2e 73 70 6c 69 63 65 28 63 2d 2d 2c 31 29 3b 76 61 72 20 6c 3d 6f 28 29 3b 76 6f 69 64 20 30 21 3d 3d 6c 26 26 28 6e 3d 6c 29 7d 7d 72 65 74 75 72 6e 20 6e 7d 69 3d 69 7c 7c 30 3b 66 6f 72 28 76 61 72 20 63 3d 74 2e 6c 65 6e 67 74 68 3b 63 3e 30 26 26 74 5b 63 2d 31 5d 5b 32 5d 3e 69 3b 63 2d 2d 29 74 5b 63 5d 3d Data Ascii: [2];for(var s=!0,u=0;u<r.length;u++)(!1&i\|\|a>=i)&&Object.keys(e.O).every((function(t){return e.O[t](r[u])}))?r.splice(u--,1):(s=!1,i<a&&(a=i));if(s){t.splice(c--,1);var l=o();void 0!==l&&(n=l)}}return n}i=i\|\|0;for(var c=t.length;c>0&&t[c-1][2]>i;c--)t[c]=
2024-12-20 18:03:56 UTC	1378	IN	Data Raw: 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 6c 3d 30 3b 6c 3c 75 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 75 5b 6c 5d 3b 69 66 28 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 74 7c 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 3d 3d 72 2b 69 29 7b 61 3d 63 3b 62 72 65 61 6b 7d 7d 61 7c 7c 28 73 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 65 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 65 2e 6e 63 29 Data Ascii: ument.getElementsByTagName("script"),l=0;l<u.length;l++){var c=u[l];if(c.getAttribute("src")==t\|\|c.getAttribute("data-webpack")==r+i){a=c;break}}a\|\|(s=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,e.nc&&a.setAttribute("nonce",e.nc)
2024-12-20 18:03:56 UTC	424	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 6f 2c 69 2c 61 3d 72 5b 30 5d 2c 73 3d 72 5b 31 5d 2c 75 3d 72 5b 32 5d 2c 6c 3d 30 3b 69 66 28 61 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 74 5b 65 5d 7d 29 29 29 7b 66 6f 72 28 6f 20 69 6e 20 73 29 65 2e 6f 28 73 2c 6f 29 26 26 28 65 2e 6d 5b 6f 5d 3d 73 5b 6f 5d 29 3b 69 66 28 75 29 76 61 72 20 63 3d 75 28 65 29 7d 66 6f 72 28 6e 26 26 6e 28 72 29 3b 6c 3c 61 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 69 3d 61 5b 6c 5d 2c 65 2e 6f 28 74 2c 69 29 26 26 74 5b 69 5d 26 26 74 5b 69 5d 5b 30 5d 28 29 2c 74 5b 69 5d 3d 30 3b 72 65 74 75 72 6e 20 65 2e 4f 28 63 29 7d 2c 72 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 Data Ascii: nction(n,r){var o,i,a=r[0],s=r[1],u=r[2],l=0;if(a.some((function(e){return 0!==t[e]}))){for(o in s)e.o(s,o)&&(e.m[o]=s[o]);if(u)var c=u(e)}for(n&&n(r);l<a.length;l++)i=a[l],e.o(t,i)&&t[i]&&t[i][0](),t[i]=0;return e.O(c)},r=window.webpackChunkStripeJSinner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49861	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:56 UTC	1980	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717833762/1734717833762%0A-779.3196208628339%0A3%0A4%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22title%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%7D%2C%22__messageID%22%3A2%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b- [TRUNCATED] Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=dxvpdg0KqIsJNk9hU37Kcs6rSpmYxT5HzjRlZpZvzN+py3gBh3OK2phoTVOE1vjNqu1ZVmYvYd14qLGnEwikxErNnGI7ZvOnJ0dcE5jE7de/vMaV4EHA9+mJ69Le
2024-12-20 18:03:56 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:56 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=OpKzsCj8OxWGcfQUUhjm8euDKXifMJpG1E+4voOpeHhCIZ1d2jzBXDfnQgMhexbHbsxk3hny+970D9jIYTnnpzISjSTS2EcgbgNiDtndDa5Q0LA5LseqPOAKypng; Expires=Fri, 27 Dec 2024 18:03:56 GMT; Path=/ Set-Cookie: AWSALBCORS=OpKzsCj8OxWGcfQUUhjm8euDKXifMJpG1E+4voOpeHhCIZ1d2jzBXDfnQgMhexbHbsxk3hny+970D9jIYTnnpzISjSTS2EcgbgNiDtndDa5Q0LA5LseqPOAKypng; Expires=Fri, 27 Dec 2024 18:03:56 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:56 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-12-20 18:03:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49860	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:56 UTC	668	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/c/1734717831665 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=OGKf2oOD56IrKQc/BCfInG5f3fv51e2wYbY2vBaJG3gbh+JppzYHjVfjqMBJkjWZbZzzx2+r++Kn2eQJVQ5y+y+5IVw+kSTjC2RQsOsPPRSiJOEVnhOQkuf58bFZ; AWSALBCORS=dxvpdg0KqIsJNk9hU37Kcs6rSpmYxT5HzjRlZpZvzN+py3gBh3OK2phoTVOE1vjNqu1ZVmYvYd14qLGnEwikxErNnGI7ZvOnJ0dcE5jE7de/vMaV4EHA9+mJ69Le
2024-12-20 18:03:56 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:56 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=NFi9H2AerJmk9MMmqOENTTutpf5e7lIjR1prDRiKDGnyK1q65SY7MUDpK8Yh2STNWgiDSmmZxHZwbolu/gx2ANi6BJKLCiVW2QAm0/gbwGTHeOZ3CGN62P5fawR9; Expires=Fri, 27 Dec 2024 18:03:56 GMT; Path=/ Set-Cookie: AWSALBCORS=NFi9H2AerJmk9MMmqOENTTutpf5e7lIjR1prDRiKDGnyK1q65SY7MUDpK8Yh2STNWgiDSmmZxHZwbolu/gx2ANi6BJKLCiVW2QAm0/gbwGTHeOZ3CGN62P5fawR9; Expires=Fri, 27 Dec 2024 18:03:56 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:56 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 33 36 34 37 33 5c 6e 32 39 34 32 5c 6e 32 5c 6e 30 5c 6e 70 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1734717836473\n2942\n2\n0\np\n15000")
2024-12-20 18:03:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49862	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:56 UTC	675	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717833768 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=dxvpdg0KqIsJNk9hU37Kcs6rSpmYxT5HzjRlZpZvzN+py3gBh3OK2phoTVOE1vjNqu1ZVmYvYd14qLGnEwikxErNnGI7ZvOnJ0dcE5jE7de/vMaV4EHA9+mJ69Le
2024-12-20 18:03:56 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:56 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=gC5JpJfCPqDL+7PTWjIMd6Gn5SM0gl7tPypin/nHDX6/Wxyq01Y+5EuvRFpg5/pPWFRHbRYijzcj5fb9WKKmI8naXLKvka6s+gFwBnrzH3T/h/vlxcEwF7bOi5XJ; Expires=Fri, 27 Dec 2024 18:03:56 GMT; Path=/ Set-Cookie: AWSALBCORS=gC5JpJfCPqDL+7PTWjIMd6Gn5SM0gl7tPypin/nHDX6/Wxyq01Y+5EuvRFpg5/pPWFRHbRYijzcj5fb9WKKmI8naXLKvka6s+gFwBnrzH3T/h/vlxcEwF7bOi5XJ; Expires=Fri, 27 Dec 2024 18:03:56 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:56 UTC	336	IN	Data Raw: 31 34 39 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 33 36 34 37 38 5c 6e 32 39 34 32 5c 6e 33 5c 6e 30 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d 31 39 36 2d 34 37 2d 65 75 2d 63 65 6e 74 Data Ascii: 149$Loader && ($Loader.payload = "1734717836478\n2942\n3\n0\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-196-47-eu-cent
2024-12-20 18:03:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49859	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:56 UTC	1314	OUT	GET /assets/icons/quickpay/hipaa_compliance-e7c73a7f11cecccd5088195f38aa751e.png HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __zlcmid=1PJnG4DSWUQIpQ8; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717830.46.0.0
2024-12-20 18:03:57 UTC	806	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 123155 Connection: close Date: Fri, 20 Dec 2024 18:03:57 GMT Last-Modified: Thu, 13 Jun 2024 20:08:50 GMT ETag: "406812922decfb2e52314c5f2b01279e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 10d2a8ed16cfc3caec8568475f7286fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: A6UHjHIbUrVCV1NFjdJ26xksgcBgY0-TBnE6uIoW5AI7RCKp5YIE1Q== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:03:57 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bb f7 5b 54 49 f3 3e 8c eb 2a ab 22 66 05 01 51 19 40 04 05 44 65 c8 18 71 88 22 49 24 2a 49 40 c9 51 a2 22 28 8a a0 33 e4 ac 08 48 1a 14 44 72 4e 0e 59 14 90 0c 32 64 01 25 67 be dd 7d d0 75 3f ef 2f ef 1f f0 3c d7 b5 cf ee 3a e7 74 57 57 dd 75 d7 5d d5 67 bd af ca 4b 6d df 7a 70 2b 0d 0d cd 76 c2 95 8b d7 68 68 b6 94 c1 bf fe d9 0c fe e4 a4 f5 8c 18 f8 db 16 8b 2b ea d6 e0 df d8 e0 5f 1b 1c 62 25 ec 68 68 0e d3 10 2e 9e 53 76 08 ff de e9 96 dc d9 7f b3 fb 67 fd 4c 3e 7e d6 b6 66 a6 a7 62 e6 ca b7 6d cd fb d9 1e 3e 6d bf fa d2 8a e5 ca 5f f5 07 f4 37 9e 34 c9 f9 fb e2 de aa db d2 55 c2 a7 76 4b 29 95 bd bf f2 d0 ed 14 7b 0c b7 c9 d1 33 4a dc 77 9f c4 a9 aa ec 3f b8 33 dc fc 38 1f c7 e7 ab e9 3e 8d 8f 1f aa 6c 08 57 f6 89 Data Ascii: [TI>"fQ@Deq"I$I@Q"(3HDrNY2d%g}u?/<:tWWu]gKmzp+vhh+_b%hh.SvgL>~fbm>m_74UvK){3Jw?38>lW
2024-12-20 18:03:57 UTC	1284	IN	Data Raw: 82 3e 27 15 9a d7 92 78 22 e7 6f 6a db 4c 55 c0 7b c2 9c ad f4 e5 46 49 aa 33 5e b8 d4 e4 f6 19 32 5a d0 06 2d 78 1d a8 53 12 75 44 d4 f2 d5 c6 9c aa 65 3d 85 8f 25 9f eb ed f6 03 d5 e0 50 52 b6 7a a7 7e f9 8e c4 cc 33 50 c3 a7 26 97 c8 f5 f0 d2 92 fc c0 c3 f6 1e 31 45 25 49 38 de ac 45 d0 df 77 03 8d bb 0e fc 18 c9 dd 17 58 3b c7 0e da 62 7a 3c 43 dd ab bf c0 e9 6f 81 83 2d be b1 a5 7c e2 b5 97 0f 30 3b cd 4b 99 51 49 ba e7 d6 49 76 cb 84 ea 70 19 29 00 61 69 c8 99 e4 a7 7b 12 6c 5e b4 6e ab 9c 0c 0f 8a e8 e5 01 d1 b4 b0 70 1d 0f 1f f9 55 db d4 8a ef df b3 6f 4a 04 d4 dd 94 a3 a5 80 36 8d 62 f8 5a e8 e6 36 0c c0 7d 05 4e d9 ce 11 dd 1e 83 35 bc d7 03 15 7e 69 d3 bd 2e 4e 6d e7 8b c3 7f 5f 21 2e 77 09 7e 18 d0 0a 63 05 32 9d 2f f6 60 ed cf e4 4e 57 d3 83 Data Ascii: >'x"ojLU{FI3^2Z-xSuDe=%PRz~3P&1E%I8EwX;bz<Co-\|0;KQIIvp)ai{l^npUoJ6bZ6}N5~i.Nm_!.w~c2/`NW
2024-12-20 18:03:57 UTC	16384	IN	Data Raw: e2 75 81 ef 3f f1 ea 09 9a d7 91 b8 d7 71 d8 d7 d8 be 34 bf 2e f6 2f 9b f0 9f 2b d9 37 6d 1c d3 cc 1c ff 1b 33 71 18 b3 2b 51 3c 2c 7f d1 48 9a ff 84 04 08 bf 33 02 a5 eb 46 8e c7 38 bf 75 dd ed fd 05 3f 62 43 ac db b8 81 cf 1b 36 89 3b 37 2e c3 5b 8a ba 68 3f cd f9 58 91 b4 9f 51 3e df 68 84 b5 ad 0f 27 d9 75 43 44 05 c2 ab db 96 06 ad cb e8 16 0d c2 b4 14 b9 ec c3 5c 00 7d b4 88 c3 76 f0 7f 9d 05 53 95 8e 94 57 40 a2 4c bf 78 b6 63 f5 8d cd 5f a0 ce 38 bb 15 88 e5 f1 08 cd 3c d3 7e d6 a7 9b cf 4b 69 97 91 02 18 12 41 18 7a 0d 92 3b 1c e7 e7 3f 1e 6d ed 08 16 58 8a 10 15 66 0b 3a 24 18 0f 7b ee 44 11 3b 6a 53 8b 19 57 c4 86 a2 97 93 26 cc b4 66 66 9d 64 fb 20 5f a0 34 05 51 2d a0 4c 07 36 6e b0 89 fb 6f f1 c7 cb 76 2f 7c f2 9b 62 ea 5b 8a 90 33 b8 e1 bc Data Ascii: u?q4./+7m3q+Q<,H3F8u?bC6;7.[h?XQ>h'uCD\}vSW@Lxc_8<~KiAz;?mXf:${D;jSW&ffd _4Q-L6nov/\|b[3
2024-12-20 18:03:57 UTC	16384	IN	Data Raw: ff 1e e5 f7 82 fb f5 4f 39 b9 f7 02 a3 0d 86 bc e9 2d 07 20 e8 58 69 ec 55 d1 58 49 9f 0b 64 51 d5 f7 7e a7 2b 97 0d f8 d5 0b 00 e8 47 e6 d1 24 51 70 ad 16 52 a1 3e 9c f6 17 bf 31 24 98 d1 f9 d8 71 72 f2 85 ac 3c fd fc e9 3e f4 7f 8d 62 c2 41 02 2b 6f 95 36 00 29 36 78 7c 80 28 83 53 16 6d f6 1f f5 72 98 03 28 d3 09 c8 30 b9 9e 5c cd a2 d4 4a 90 c4 72 fc 1c 42 70 3d 7f 9a fa af 9a c3 36 d2 ac 4f fe f9 7f 79 56 cb 5d 21 ec 2f 39 22 8f fb b1 0a 1c 91 e9 b7 b1 10 b2 72 f5 bb 3d c4 80 a7 df c8 81 7b e8 bb 91 17 7b 71 45 7e 75 e1 23 3f ea b1 90 25 20 d4 d9 8a bf 23 85 a3 8e ff 53 27 3f 7f e4 8d 90 de 0d 56 9f a7 40 d3 74 cd 11 19 64 05 7d 09 30 e3 c3 fe 59 f4 23 14 f0 5a 7a 6b b8 ea 2e 6f c4 08 35 04 58 db 35 31 ec 41 54 0e 48 3d e9 80 fb cb df 76 c7 34 4f b0 Data Ascii: O9- XiUXIdQ~+G$QpR>1$qr<>bA+o6)6x\|(Smr(0\JrBp=6OyV]!/9"r={{qE~u#?% #S'?V@td}0Y#Zzk.o5X51ATH=v4O
2024-12-20 18:03:57 UTC	16384	IN	Data Raw: 9a fd 2c 35 2a 1b 14 dd 4f 51 74 bf 45 d1 7d af 6b ff e9 0c f4 47 65 c0 81 8c 97 72 9b a9 3d 8f b6 d6 97 26 3e b7 5e de 32 90 b8 33 2f b1 c2 14 a9 ff c0 64 6c d8 76 e3 a4 b4 62 34 52 21 0a b0 c8 40 40 e0 48 1d 95 a1 4c b5 e6 8f b6 0a 4c 80 b0 74 16 8c 29 5d 94 98 82 e1 7e 6f 8e e6 96 cd b0 5c c3 01 12 2a 6b b9 21 d8 63 93 76 97 69 22 67 7f 49 dd f6 a1 8e 37 d4 e9 27 41 86 ba ef f7 6d f4 88 2f 46 4d 68 71 e1 18 36 72 69 2b 08 ea 02 0f 75 a1 41 49 40 7a 43 4d e8 4b df 9e 95 ac f9 9b a5 c6 fa 83 fb 61 0f 13 dd eb f4 39 8e 5a 26 be 38 4c 54 57 ea 12 e3 66 9f 96 31 44 9b 83 ba 38 66 3f 5f 7c 91 79 f9 c0 95 90 51 04 1d 50 3b 13 bf b3 b5 e4 3c 5d fb f2 48 a0 0b 92 73 dd 40 fe 06 6e f4 40 bb 1d b4 c4 f3 14 d6 62 8c 97 8a 22 51 4a 1b 7f b4 9c f0 4a f0 0c 71 41 cd Data Ascii: ,5OQtE}kGer=&>^23/dlvb4R!@@HLLt)]~o\k!cvi"gI7'Am/FMhq6ri+uAI@zCMKa9Z&8LTWf1D8f?_\|yQP;<]Hs@n@b"QJJqA
2024-12-20 18:03:57 UTC	4802	IN	Data Raw: ba 76 1c b7 bc 88 12 3d 46 20 4a 4d 7c 54 52 cf 2f 3c a3 77 94 44 7a 5a 86 8f 1c ae 42 27 25 ea 31 9d b2 d6 85 41 73 27 30 c9 7b ea af 83 58 87 b4 55 a6 28 7f 06 d0 e7 3d 58 d1 e1 5e 22 16 ac 7b 6b 30 ec 30 dc 5f 3c 14 08 75 46 bb 99 69 70 16 bf 6f 41 31 ac 12 23 c7 9a f3 0f a4 24 ae 23 71 c1 ab 7d 7c ab 30 61 03 04 e1 0b 00 83 10 bd d3 0a f5 9d bb b0 4f ae da 07 05 72 a7 3e 51 19 3a e7 b0 0f 55 77 3a 59 59 66 52 9d 7b 6c b3 1d e1 fa 2e 84 0e 43 ca bd 2e 4c 18 70 5d e9 17 be d3 cf 6a 6b ed b5 22 02 62 0b 75 94 0f e4 96 c8 b0 20 c2 dd ad b9 12 cd 35 0d 35 95 db 22 e5 d9 d1 8b 29 a8 5c f2 2e be d5 59 37 7e 40 bb 08 1c 87 11 55 54 6f 0c 28 c1 58 f6 32 b0 5a e3 fb ce be 94 b2 c3 f1 20 0f e2 8d 2e 36 36 fe 0c 6d 35 79 8e 85 ca 06 1a 81 2a 57 55 94 d7 b1 83 75 Data Ascii: v=F JM\|TR/<wDzZB'%1As'0{XU(=X^"{k00_<uFipoA1#$#q}\|0aOr>Q:Uw:YYfR{l.C.Lp]jk"bu 55")\.Y7~@UTo(X2Z .66m5y*WUu
2024-12-20 18:03:57 UTC	16384	IN	Data Raw: 19 20 46 f2 9a 50 82 b7 77 28 65 87 22 ee dd 26 33 65 76 b6 bf 27 17 39 39 ff 49 ae 9c 56 52 34 6f 41 7f dd 69 a5 26 39 8e 53 bd 76 7d 9c 4e 16 e1 22 da e8 da 68 2b f8 79 55 fc f1 00 be 38 9f 2f 3a cf 6b 52 3c 35 19 92 6f f8 07 fe 9e 2d 6a 21 08 16 ab 28 21 4c df 44 c8 c9 bc 99 b9 b0 9a 58 56 90 3f 8f ae af 15 1b c3 14 5c ac 0d 44 89 d7 9a 79 64 c5 ea 98 03 17 66 ee af 5b 05 f4 02 42 f1 bc f0 5d 8d 19 55 47 f7 2c 5c 10 1f 7f 79 8a ba b3 2e 16 14 fd 78 23 ed 18 17 b5 61 7e 1b 00 dd 0b d7 97 32 60 d9 70 01 be f9 0d 25 f8 bb 86 60 20 ab 6d d7 3f cc ed 27 21 de ce ba c3 00 e6 64 61 25 27 ab 19 17 ab 0c 38 c2 fa 32 cb 54 87 f3 aa 93 b5 fb f8 41 4a 78 95 8e 73 82 7c 9b c6 56 94 8d aa e2 28 b3 86 62 5b 46 9a 32 f4 f7 13 cf 1e 30 83 35 e8 48 2e 05 c2 83 9b 23 83 Data Ascii: FPw(e"&3ev'99IVR4oAi&9Sv}N"h+yU8/:kR<5o-j!(!LDXV?\Dydf[B]UG,\y.x#a~2`p%` m?'!da%'82TAJxs\|V(b[F205H.#
2024-12-20 18:03:57 UTC	16384	IN	Data Raw: fd d7 92 02 d3 69 a9 0c 4d 26 a1 06 aa ea 35 3f 5f 5f df 36 4a 81 a4 c7 19 31 73 f4 c2 1c 8b 42 6b a6 c2 33 69 09 71 10 19 b5 ce ad 27 f8 09 8d 6d 7d 59 ec 33 ea 9e a8 11 1c 0c dc 3a 79 81 5a 67 cd ea d3 76 c1 0f 78 37 a8 cb 10 6d 68 c1 23 32 a3 cf 02 79 dd c5 53 fc c0 53 3a 1a 68 f9 64 15 ec 43 c9 c6 ab f1 3e 1b a5 82 01 ac 0a dc e2 f1 0a 11 96 53 ea c2 e3 0d 59 bc c0 a3 b5 76 e6 cd 05 b5 de 09 80 ff f4 dc cb 31 9f c8 88 67 65 7b 07 61 fb 36 52 3f 4d 5b 57 e4 bf 21 bc 21 65 bc 26 3e ea 10 79 55 66 f2 aa eb 76 c2 e9 8b 7a 6b b9 e8 00 36 83 b6 89 ba ad 31 fd 90 49 cf 6d f9 78 bc d8 22 f8 19 cd 0d 57 8a 33 b0 15 f7 90 94 bc 7a f1 d9 40 f9 ca df 4a 8a a0 a8 bf c5 91 22 a2 1e 4f 4e c7 7c 96 60 9b e6 bb 03 05 4d 0c 0d 5c 07 b6 2c be b3 2c 31 19 90 a0 94 55 e8 Data Ascii: iM&5?__6J1sBk3iq'm}Y3:yZgvx7mh#2ySS:hdC>SYv1ge{a6R?M[W!!e&>yUfvzk61Imx"W3z@J"ON\|`M\,,1U
2024-12-20 18:03:57 UTC	1514	IN	Data Raw: b5 7d 45 82 39 41 47 0c cb a2 b8 74 32 58 f9 16 17 45 ba 73 0a 1d 55 1b 5b 95 f2 c7 57 6e 64 cf 1d 73 29 30 b1 ff 3e f3 a7 e4 cc 7d 4c 24 79 c8 a8 6b ac f5 cf e8 40 b0 f3 bb 92 9d fb 75 79 6e 64 1f ae 6c 4a 0c 15 17 b1 9c 86 f4 78 03 88 e5 5d 80 c3 d1 a4 32 e2 f0 11 01 c7 23 26 77 ca 75 cf 60 9f ba 1e 54 5a 6f fd d9 79 6a 9a 67 2b a6 10 6d 34 bf 96 1c 34 cf 0c e5 24 ca 13 7f 23 03 b5 52 e4 46 76 bc 40 20 36 70 73 ef b3 60 25 b6 2c 17 38 23 35 df c3 49 cb b4 32 e0 f0 b1 92 33 69 fa 4a bf 0f 9f 3e 07 e2 cd c7 85 fc 92 87 b8 48 9b 59 d1 d1 90 5f eb b1 b6 ae 3d 55 2a f9 72 d2 a0 78 5c f2 10 74 a2 b5 b4 cb 5a 76 4e 6d 3d 11 82 23 31 5b 27 27 ce 1f 26 af 5f 1b ff e0 c6 7a 9c 36 6a 34 b2 aa c6 29 57 80 96 21 a3 c1 12 ec a8 e4 9c 8b 2f f9 62 2b 03 d1 12 7d 87 71 Data Ascii: }E9AGt2XEsU[Wnds)0>}L$yk@uyndlJx]2#&wu`TZoyjg+m44$#RFv@ 6ps`%,8#5I23iJ>HY_=U*rx\tZvNm=#1[''&_z6j4)W!/b+}q
2024-12-20 18:03:57 UTC	16384	IN	Data Raw: 54 7c 54 8e 0c 92 43 6c ee 9f 10 12 0c 01 ce 9b 2c 49 5a 9a 4d e6 a2 88 55 4d 8b 03 fe 6c 84 91 ac 9a b7 be 45 48 07 09 24 fa 67 15 d1 99 b0 c7 f0 20 cb cc a6 e8 2f a7 ea 08 aa 59 a1 79 d4 b8 68 e3 96 7c 6e c0 38 99 46 22 6f 48 40 fd b5 c7 e9 74 31 5f 61 03 8e c2 74 37 e6 5b 7f 97 52 8e 15 64 05 09 64 26 89 44 5c 0d 8e f8 11 d5 02 17 b8 3c cc ec 02 3e d5 b4 11 d3 ce 60 90 01 18 3c 07 6f a6 bc 78 67 75 bd e4 0c e8 8b 11 e6 b9 1a 13 d9 e8 09 9c 00 fb 2b 03 76 4a 0f 6a 05 b0 e1 71 10 35 da ee 74 2b 61 ca 98 93 a0 b4 48 a5 28 6d 9e 82 e2 af 22 c7 fc 0e a7 80 22 fa 03 40 9d 7c e0 14 ed 55 80 dc 8e 23 0a ec 27 f3 73 34 4e f8 b5 13 c2 ff 7f 7d b6 de 56 c2 f4 67 b3 c2 64 b9 06 e9 37 78 b3 28 98 03 b4 08 d6 9f 46 ac 97 a7 54 4d ee 5e 7c 03 27 17 5b 60 49 26 c5 5a Data Ascii: T\|TCl,IZMUMlEH$g /Yyh\|n8F"oH@t1_at7[Rdd&D\<>`<oxgu+vJjq5t+aH(m""@\|U#'s4N}Vgd7x(FTM^\|'[`I&Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49855	108.158.75.52	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:56 UTC	359	OUT	GET /frame.ac03c723.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:57 UTC	836	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 188818 Connection: close Date: Fri, 20 Dec 2024 18:03:58 GMT Last-Modified: Wed, 18 Dec 2024 17:16:49 GMT ETag: "fe9467159bfe3c3a6aebdb7f6c7f017a" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: SEU84kxNaHr1y1e8uTaxvLjh1tUr.4cK Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1aea7e24169d7c704c98c2fee9cab32e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: otr8gdFkD-xzJWL8IW1K-xRsMjBrvzoHKISqjGf1G9ANnskurPikNw== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-12-20 18:03:57 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 79 77 1b 37 d2 2f fc ff fb 29 da cc 1c 3f e4 4d b3 d3 00 7a a5 46 e3 ab 28 ce c8 73 a5 d8 13 3b 9a c5 d7 af 4e 8b 6a 89 8c b9 c8 dc 64 c9 e6 77 bf f5 2b a0 57 b6 64 39 71 32 76 86 c7 16 d9 44 63 47 a1 36 54 15 be f9 5f 0f ac ef a7 33 6b 34 ec a7 93 79 6a 0d 27 e7 d3 d9 38 59 0c a7 13 eb 72 94 26 94 34 4f 53 eb 7c 96 8c 53 27 e9 bb aa 1f 4a e5 fc 3c 77 0e 9f ec 3f fe e1 f9 63 67 f1 76 61 fd af 6f fe bf 07 e7 cb 49 1f a5 da 9d 77 ab 64 66 2d ec d4 9e d8 33 7b 6a 0f 77 df 85 4a 2a b7 97 e7 e0 77 3a db 6c f7 5d cb f9 e6 3c 19 8e d2 33 67 7c a9 5a 3d 25 a3 40 d9 94 38 99 2e 86 e7 c3 3e 77 45 bf 8a 63 e5 09 bc 9a 5e a6 b3 64 31 9d 99 12 91 f4 3c 24 cf 97 a7 e3 e1 42 27 7a 9e f0 83 f5 4e d6 a6 35 6d 2f 74 8b e9 ee 90 1e 77 66 Data Ascii: yw7/)?MzF(s;Njdw+Wd9q2vDcG6T_3k4yj'8Yr&4OS\|S'J<w?cgvaoIwdf-3{jwJ*w:l]<3g\|Z=%@8.>wEc^d1<$B'zN5m/twf
2024-12-20 18:03:57 UTC	413	IN	Data Raw: 7d eb e5 0d da 18 d7 3a 1f e5 8a a6 7e b5 bb b9 0e e9 9a 57 81 b6 c3 ee bb 35 ed 51 83 34 f2 9a 6d 5a 9f 1a 47 40 eb 64 72 d1 7e 1c 4e d2 2c fd fd fb fa ee 5a 10 8b 41 c5 57 c9 68 99 12 bc de 3e b9 8f f4 57 8f ba 90 10 be cf 66 f4 fd fb d6 ff fe df d9 8f 16 2d 3f 71 d5 f3 eb 49 ff 49 f9 7d 25 85 48 09 65 5a 4c 9f 2f 70 e3 fb 8b e4 82 b3 94 7e b7 8a 85 9f 67 dd cc 40 bb 69 50 9c e7 1d 8f a0 37 b1 d3 09 31 37 b3 e4 94 28 d5 03 d7 a6 f5 39 1f 5e 2c f3 df 57 b3 e1 c2 3c af 3b 36 06 bf 5e cc ae df cd 89 ab b2 5b 84 85 fa c9 a2 cf d0 36 df ad cf 54 06 11 3c 61 eb 62 d9 46 06 e3 cf 34 36 1d ee a6 0f 1f a6 c5 ea 10 d7 36 5f 24 93 3e 66 f2 f4 51 da 3b b5 73 c6 51 d3 bb f6 b0 c8 cc fb 27 bd b2 5e b4 69 e2 5e be ea ec 64 b2 47 3b b1 5b 27 c3 c9 0a ae 82 d9 58 9f 50 Data Ascii: }:~W5Q4mZG@dr~N,ZAWh>Wf-?qII}%HeZL/p~g@iP717(9^,W<;6^[6T<abF466_$>fQ;sQ'^i^dG;['XP
2024-12-20 18:03:57 UTC	16384	IN	Data Raw: fd b8 fd ac 4d 93 4b 99 f7 1f 3e dc a7 bd 3a 79 f8 70 a6 27 64 df 4e c0 44 3f df dd d7 35 bd dd 3d 29 56 67 f7 b4 f4 5c 5d c3 e7 25 6c b5 87 a9 7c d9 9a a4 6f 69 5a b2 69 6c e9 6e b6 5e 39 c4 cf 3f 4e 68 be 8b 31 a4 04 6e bc 6a ed 26 0c 44 e3 72 cc d2 d3 7a 11 c2 e8 f0 ff bc b9 a7 28 4a d2 45 f6 9b f8 06 04 9b 20 c0 60 78 24 7a 4f 32 01 f8 06 7b d8 d9 19 9e b7 4d 8f 68 d8 7d 87 61 8e b3 cd e9 17 2d 35 e1 e7 b9 46 06 19 e8 01 ab 4e 79 ac 84 11 06 ed 51 27 9f ab 11 81 e4 49 72 95 0c 89 7c 3f 4a 9d 59 3a 9f 8e 56 69 7b e4 98 d4 8e b3 18 a4 93 76 65 50 93 b6 99 97 05 f7 90 40 b7 fe da cc 57 f6 be d3 2b d5 dc 54 a3 e9 ee 2e 15 68 cf 37 2a 34 83 68 a8 77 bd 6c f3 88 3b 0c 5b c3 9d 69 1b 33 bd b9 cb 4a 68 60 56 9a e5 69 01 79 d8 b0 69 79 39 c1 fc 71 7e 1b 8f 68 Data Ascii: MK>:yp'dND?5=)Vg\]%l\|oiZiln^9?Nh1nj&Drz(JE `x$zO2{Mh}a-5FNyQ'Ir\|?JY:Vi{veP@W+T.h7*4hwl;[i3Jh`Viyiy9q~h
2024-12-20 18:03:57 UTC	16384	IN	Data Raw: f8 98 32 9f f6 cf cc a7 6d 95 f9 b4 4b 7c 4c 89 8f 29 f3 69 ff bd f0 31 65 3e ed 12 1f 53 e2 63 7e 16 3e c6 fa 25 f1 31 65 3e ed 32 9f f6 f7 c7 c7 94 f9 b4 4b 7c 4c 89 8f 29 f1 31 25 3e a6 c4 c7 94 f8 98 12 1f 53 e2 63 7e 16 3e 66 f0 b3 f0 31 63 95 3d f7 7b e2 63 06 4b e0 63 06 cb e6 d3 9e d2 e4 d3 55 c7 83 65 01 7a 31 58 4c e1 50 e4 01 7e 12 b1 00 6f 61 55 ea c5 f0 e1 cc 96 63 6d 54 c4 b9 04 c0 85 5d 1e 10 87 0c c8 98 0c 93 ac c8 87 69 5e 64 72 43 8e d3 94 84 05 f4 4b 90 47 bf 04 4c 38 0c 94 e8 97 01 8f 22 a5 59 2d 17 ea ca c5 03 d6 93 b8 8d 56 cb 32 32 e1 48 92 f8 8d 96 31 76 42 07 93 07 f1 86 ea 18 45 58 c3 e4 57 43 8a 9f 99 c0 bf 02 53 d3 81 bf 69 54 9f 36 fc 91 0f 3e 7c c8 3e 28 04 f1 a4 69 90 4d 91 06 59 95 54 37 a6 09 22 ed 42 52 dd 24 a2 c9 9c dc Data Ascii: 2mK\|L)i1e>Sc~>%1e>2K\|L)1%>Sc~>f1c={cKcUez1XLP~oaUcmT]i^drCKGL8"Y-V22H1vBEXWCSiT6>\|>(iMYT7"BR$
2024-12-20 18:03:58 UTC	10224	IN	Data Raw: 3c 6e 30 d7 8f f3 c8 e8 85 0d b4 3e 8c 7c 2f b4 a9 f3 a6 8d 97 00 6a 0f cb c2 fc 4c 9f 07 33 76 87 0e a7 f4 f3 78 e4 22 b5 db 07 73 a9 ed 94 50 49 e7 a0 70 a6 35 7f 67 6f 54 27 3d 67 95 cd 3f e7 17 61 c2 c0 23 ea 44 5c af af 2f e5 bf 79 35 52 b8 4b 3a 33 f2 4e e5 46 69 cd c8 c5 b6 e2 79 3f e3 5e c9 9c 17 f1 da 63 6b a3 b1 bd c1 de 30 cd b0 00 56 29 60 9e 65 03 70 62 27 e1 e7 39 ba be d8 93 ca 7e 10 98 53 34 a3 f9 ad da ae ff 1f 6f d7 7f fc 58 0f de fb 1f d2 0f e0 87 00 83 16 81 37 dc 96 c2 f6 25 09 f4 c4 ea 6a b7 f2 36 1e 9b d3 33 08 7f b8 ba bd 9c 9b 08 49 80 07 40 a7 d0 19 b5 dd a7 d7 f2 8d fd 29 0b 36 91 40 a1 9f c4 ff a5 e7 29 fb b4 a7 93 c7 8f cd ff b4 10 5c 94 e9 5d 9a 51 89 ca ff 81 e1 a3 94 82 f6 88 0e 15 48 a8 f4 fc d8 a1 f7 97 81 11 7e ca bc 64 Data Ascii: <n0>\|/jL3vx"sPIp5goT'=g?a#D\/y5RK:3NFiy?^ck0V)`epb'9~S4oX7%j63I@)6@)\]QH~d
2024-12-20 18:03:58 UTC	16384	IN	Data Raw: 70 31 3f 46 64 8b a7 31 2d 3a 8e da dd 12 e6 d5 05 26 44 e1 4c 12 2e 52 5c 41 87 5f 24 6f 39 7f ba 08 8e 53 81 e9 7f 46 dc e8 7c 72 84 b4 ba 17 5f 44 2a 68 13 3f 61 f3 87 9f a6 8b e5 2c 7c 4a 04 73 a1 7d 04 a3 46 1f 24 7b 02 82 ba 88 3a 71 fa 39 dc c1 29 87 8b bf c3 9b 72 c8 3e bd 25 61 12 71 4a bd e0 0d f8 09 94 e0 c4 fd 92 74 f8 b7 3f ea e5 68 4e ac 28 a7 a3 3a 7a 67 88 ec 43 df 5c 8e f6 71 f4 c8 db e4 f0 b2 ee f6 d4 cc f1 4c dd 61 9d 0c 39 23 11 1e 8c 3b a3 44 c7 77 10 a7 94 87 19 a5 e8 48 c3 b4 ff 13 3b 16 37 9f 1d 9e 44 bb a6 69 4d 9c 91 dd bd e9 3a 5a 4a 1a 79 d8 f8 ba 44 c6 e0 18 5c 70 36 19 27 a7 54 13 7e 3c 15 04 8b bd 20 25 88 5e 03 dd 12 8e 11 c0 7e a8 6a 55 35 96 ad 6a 7d 1b f9 a3 3c e1 c7 84 f1 28 ed 15 4e 80 4e a7 ca e3 20 1f e7 19 1c fb da Data Ascii: p1?Fd1-:&DL.R\A_$o9SF\|r_D*h?a,\|Js}F${:q9)r>%aqJt?hN(:zgC\qLa9#;DwH;7DiM:ZJyD\p6'T~< %^~jU5j}<(NN
2024-12-20 18:03:58 UTC	3578	IN	Data Raw: fc 4c 10 46 cf 07 5c 65 af db a7 a6 9e c8 10 5b 6d 1a ca 2e 57 df ef c2 91 e9 27 ae b3 e9 c3 d3 c5 0e cf 08 2d 11 4d eb 0b ee 72 a7 45 45 f6 38 79 d8 41 b3 1f f9 b9 47 7d 23 50 93 de 63 80 1f b8 74 bf df a6 56 5f 73 87 69 dc 54 cb 4b 9e 90 5e b3 4f ad 3e e7 1e c8 a6 7b 95 c9 b6 1d d2 b7 bf f3 48 68 0e e8 f9 33 97 6f 35 01 d4 6f b8 4e 9a 35 82 38 6e c9 1f a0 f3 3f 4b ab cd 36 f5 e0 29 37 45 13 48 4d 3d 93 f4 61 0f 50 c7 4d f9 cd 01 cd e5 5b ae 66 d8 04 68 ff cd e5 db 7d ec e5 3f 64 b0 4d cc f1 af d2 9d 16 d6 e4 cf 4c ac c6 00 9c bf 71 9d 43 bf 45 7d f8 97 ac 2d d5 44 e0 27 13 de c4 50 fe 92 e7 1e 00 ff 07 19 4a 0b 93 99 85 a8 13 ea d8 04 82 a1 5c 2f a1 7c 84 67 02 68 60 a1 24 e4 a9 ea a1 ad 18 cf 9d 66 17 c6 93 f3 50 f0 17 e0 2e e0 f4 81 0f 58 5b 86 7c 3b Data Ascii: LF\e[m.W'-MrEE8yAG}#PctV_siTK^O>{Hh3o5oN58n?K6)7EHM=aPM[fh}?dMLqCE}-D'PJ\/\|gh`$fP.X[\|;
2024-12-20 18:03:58 UTC	16384	IN	Data Raw: aa a4 63 70 15 7b 58 9b 5c cf 1e d7 c3 fb 0d c3 56 91 80 15 1d b7 d3 85 33 1c 02 18 30 ad 35 2a aa 63 4f ee d1 9e 54 95 8d f5 90 b0 2e a0 03 91 2e 9c 80 b2 20 df d9 21 fd 39 44 76 0d ef c1 51 6c e6 52 e8 35 64 e1 6c b3 ef 78 b6 f0 e3 86 eb e3 c1 c9 66 8c 10 7e 02 0e fd e5 58 e8 03 19 3a 11 58 28 9a 0b 8e 61 e2 bf 4c 1d e1 58 0f 63 52 00 9b 41 6e 7e 3d 8a 73 41 7e f9 0c 2b a8 ea 44 af c2 e8 31 d8 42 97 c0 f0 05 5d a9 99 81 4f 8e 87 b1 10 8e 0e fb 89 ae b6 cd 63 bc 2b 08 31 48 1a 05 ac 72 28 11 fe 1b 91 eb 37 76 ff 86 fd c1 52 1e 14 b4 a4 56 44 23 26 fa 0d 47 87 c4 b6 cf 0f d0 25 7c 60 70 81 c9 b0 e9 56 cd 21 a7 81 26 c5 f0 f2 38 a6 9a 43 11 40 60 d0 2e 3a 6f c6 1b 38 20 f6 6c 18 8a 50 2b e3 29 02 6c 37 12 b1 ad 70 60 06 c0 94 8b 8e 94 ed 00 f2 73 ec 11 87 Data Ascii: cp{X\V305*cOT.. !9DvQlR5dlxf~X:X(aLXcRAn~=sA~+D1B]Oc+1Hr(7vRVD#&G%\|`pV!&8C@`.:o8 lP+)l7p`s
2024-12-20 18:03:58 UTC	1024	IN	Data Raw: 39 66 e4 c4 23 79 10 37 24 27 44 76 71 d8 a7 6d 83 d7 d3 2a 06 37 cf 03 05 02 f7 bc a7 49 be 55 62 8d 5c 21 e1 af 01 fc f9 df bb dd d3 bf 7f f5 a2 db 3b fd 78 f6 f1 63 5f df 1f 7c 2c fe fb a3 76 b6 db fd d8 57 7f e8 fd b1 f7 d8 fd a8 f5 77 3f 6a bd de 7f 77 bb 1f 4f 4f 8d bd f0 ec c1 d4 ed 05 94 d9 fe 7c 06 e5 bb a7 d1 de 97 97 7b 3f 7f dc c3 f4 dd 8f fd de ae 48 39 7b b0 74 d8 8f 95 7e 67 89 13 40 6e a0 9e 34 01 2a 31 53 a6 96 b4 27 ea 79 11 9e cc 57 ef d0 28 3a 2f 90 e9 5a f7 60 a0 ed b6 0f c8 b2 e2 74 1e b5 de ae d6 83 33 6e f8 2e be 3a ba 9b 21 2c 64 f5 b3 ae 5d 69 ab be 90 db ac 5b 75 99 a4 01 9e d1 76 f1 88 14 73 40 5c 08 7b 83 c8 50 d7 15 ef 43 00 2d 74 1f b4 67 90 f5 59 34 9d ed 03 b4 7f 85 cf 93 12 1f 5f e0 e3 15 3e fe 41 fb 03 3c fe 32 cf 28 fd Data Ascii: 9f#y7$'Dvqm7IUb\!;xc_\|,vWw?jwOO\|{?H9{t~g@n41S'yW(:/Z`t3n.:!,d]i[uvs@\{PC-tgY4_>A<2(
2024-12-20 18:03:58 UTC	16384	IN	Data Raw: 7a 94 b3 5f 6f 88 78 fd 7f cc 10 f1 fa 3f ca 10 f1 fa 3f c3 10 f1 fa b7 34 44 ac 5b b9 69 29 46 c8 86 89 07 d2 1b 87 da ea 49 9b b1 71 a8 68 ee c7 5f d5 61 83 2a c3 df 18 9a 16 17 a8 f5 37 8c 3c 28 05 1a 4e 7b 5d a0 84 fb d7 51 f1 f6 36 c5 5b b0 38 2f ef 85 93 3e 3d a7 98 b7 14 ec 0c fe 34 e6 15 0b fd 46 78 73 a1 e0 bc ad 80 45 58 ef bd 52 20 8c 1e 26 2f 59 55 b8 02 6f a0 e0 80 c1 97 ef 05 71 ca 55 5e 43 85 03 d5 ca 3d 28 bf ee 69 bb f7 6c d8 c5 ee 3c 49 ce 55 65 c1 17 c8 10 93 01 07 66 c3 04 91 91 c5 66 55 4e 7a 5b ae ab 98 45 a3 38 af f3 f0 2b d6 c7 9f c7 09 fa 31 6d be 8b f7 26 03 7b b3 ad 9b c0 37 a9 37 f3 7c 22 5a 9a b4 7c 8f d2 cb 1e 99 b3 a8 7c 9b 36 ca 41 dc d5 e6 76 79 4f 13 b5 8d 61 0d 81 b6 6b a6 aa 4a 58 19 20 ac c0 24 de 63 29 73 33 ce 76 6a Data Ascii: z_ox??4D[i)FIqh_a*7<(N{]Q6[8/>=4FxsEXR &/YUoqU^C=(il<IUeffUNz[E8+1m&{77\|"Z\|\|6AvyOakJX $c)s3vj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49865	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:57 UTC	740	OUT	GET /v3/link-modal-inner-3856548e7a416d6bdacb10b20db090c3.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:57 UTC	1370	IN	HTTP/1.1 200 OK Connection: close Content-Length: 807 Last-Modified: Thu, 19 Dec 2024 21:09:16 GMT ETag: "3856548e7a416d6bdacb10b20db090c3" Cache-Control: max-age=60, stale-while-revalidate=900 Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src 'self' https://r.stripe.com https://errors.stripe.com https://api.stripe.com https://merchant-ui-api.stripe.com; default-src 'self'; form-action 'none'; frame-src 'self' https://b.stripecdn.com https://checkout.link.com; img-src 'self' https://js.stripe.com https://q.stripe.com https://b.stripecdn.com; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report content-security-policy-report-only: base-uri 'none'; connect-src 'self' https://r.stripe.com https://errors.stripe.com https://api.stripe.com https://merchant-ui-api.stripe.com; default-src 'self'; form-action 'none'; frame-src 'self' https://b.stripecdn.com https://checkout.link.com; img-src 'self' https://js.stripe.com https://q.stripe.com https://b.stripecdn.com; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report origin-agent-cluster: ?1 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: *
2024-12-20 18:03:57 UTC	346	IN	Data Raw: 73 65 72 76 65 72 3a 20 46 61 73 74 6c 79 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 67 65 3a 20 30 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 30 20 44 65 63 20 32 30 32 34 20 31 38 3a 30 33 3a 35 37 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 58 2d 52 65 71 75 65 73 74 2d 49 44 3a 20 66 33 61 37 32 30 38 33 2d 63 30 31 31 2d 34 30 39 62 2d 61 63 39 37 2d 33 39 30 36 32 35 32 37 35 39 33 63 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 34 33 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 69 6d 69 6e 67 2d 41 Data Ascii: server: FastlyAccept-Ranges: bytesAge: 0Date: Fri, 20 Dec 2024 18:03:57 GMTVia: 1.1 varnishX-Request-ID: f3a72083-c011-409b-ac97-39062527593cX-Served-By: cache-nyc-kteb1890043-NYCX-Cache: HITX-Cache-Hits: 0Vary: Accept-EncodingTiming-A
2024-12-20 18:03:57 UTC	807	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 74 44 30 57 72 6e 4d 77 41 50 49 34 6e 57 57 43 76 72 65 45 2b 76 70 67 50 56 7a 34 35 53 4f 2f 31 66 47 31 49 5a 52 4e 70 42 73 64 57 5a 4f 5a 4e 36 53 4b 72 30 79 6e 43 31 31 4b 75 7a 72 76 54 39 30 33 57 72 45 55 2b 4e 39 49 6b 2f 52 70 69 43 52 54 41 45 41 41 41 42 62 65 79 4a 76 Data Ascii: <!doctype html><html><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta http-equiv="origin-trial" content="AtD0WrnMwAPI4nWWCvreE+vpgPVz45SO/1fG1IZRNpBsdWZOZN6SKr0ynC11KuzrvT903WrEU+N9Ik/RpiCRTAEAAABbeyJv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49864	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:57 UTC	452	OUT	GET /v3/fingerprinted/js/ui-shared-4af9c6190c1d792bdbbe4e49904ee0f6.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
2024-12-20 18:03:57 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 485590 Last-Modified: Thu, 19 Dec 2024 21:09:16 GMT ETag: "fc04feb50d7c22254c1ca4114d570bde" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Fri, 20 Dec 2024 18:03:57 GMT Via: 1.1 varnish Age: 14020 X-Request-ID: 11fe303d-8e1f-401a-b8ed-58f16b9f440a X-Served-By: cache-ewr-kewr1740022-EWR X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 30 33 35 5d 2c 7b 39 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 69 66 28 6e 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 69 7c 7c 22 6e 75 6d 62 65 72 Data Ascii: (window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[7035],{94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var i=typeof n;if("string"===i\|\|"number
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 73 2e 6c 6f 63 61 74 69 6f 6e 3d 61 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 53 79 6e 74 61 78 45 72 72 6f 72 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 26 26 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 6e 29 7d 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 6e 7d 28 6e 2c 45 72 72 6f 72 29 2c 6e 2e 62 75 69 6c 64 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b Data Ascii: s.location=a,this.name="SyntaxError","function"==typeof Error.captureStackTrace&&Error.captureStackTrace(this,n)}!function(e,t){function n(){this.constructor=e}n.prototype=t.prototype,e.prototype=new n}(n,Error),n.buildMessage=function(e,t){function n(e){
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 6e 3d 31 3b 74 3c 61 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 61 5b 74 2d 31 5d 21 3d 3d 61 5b 74 5d 26 26 28 61 5b 6e 5d 3d 61 5b 74 5d 2c 6e 2b 2b 29 3b 61 2e 6c 65 6e 67 74 68 3d 6e 7d 73 77 69 74 63 68 28 61 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 61 5b 30 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 61 5b 30 5d 2b 22 20 6f 72 20 22 2b 61 5b 31 5d 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 61 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2b 22 2c 20 6f 72 20 22 2b 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7d 7d 28 65 29 2b 22 20 62 75 74 20 22 2b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 27 22 27 2b 72 28 65 29 2b 27 22 27 3a 22 65 6e 64 20 6f 66 20 69 6e 70 75 74 22 7d 28 74 29 Data Ascii: n=1;t<a.length;t++)a[t-1]!==a[t]&&(a[n]=a[t],n++);a.length=n}switch(a.length){case 1:return a[0];case 2:return a[0]+" or "+a[1];default:return a.slice(0,-1).join(", ")+", or "+a[a.length-1]}}(e)+" but "+function(e){return e?'"'+r(e)+'"':"end of input"}(t)
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 29 3b 65 6c 73 65 20 72 3d 5f 3b 72 21 3d 3d 5f 3f 28 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 2c 72 2c 61 3b 65 3d 4e 2c 74 2e 73 75 62 73 74 72 28 4e 2c 37 29 3d 3d 3d 45 3f 28 6e 3d 45 2c 4e 2b 3d 37 29 3a 28 6e 3d 5f 2c 6c 28 78 29 29 3b 6e 21 3d 3d 5f 26 26 28 72 3d 6d 28 29 29 21 3d 3d 5f 3f 28 34 31 3d 3d 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 4e 29 3f 28 61 3d 43 2c 4e 2b 2b 29 3a 28 61 3d 5f 2c 6c 28 77 29 29 2c 61 21 3d 3d 5f 3f 28 65 2c 65 3d 6e 3d 72 29 3a 28 4e 3d 65 2c 65 3d 5f 29 29 3a 28 4e 3d 65 2c 65 3d 5f 29 3b 72 65 74 75 72 6e 20 65 7d 28 29 2c 61 21 3d 3d 5f 3f 28 65 2c 65 3d 6e 3d 7b 75 72 6c 3a 6e 2c 66 6f 72 6d 61 74 3a 61 7d 29 3a 28 4e 3d 65 2c 65 3d 5f 29 29 3a 28 4e 3d 65 2c 65 3d 5f 29 7d 65 6c 73 65 20 Data Ascii: );else r=_;r!==_?(a=function(){var e,n,r,a;e=N,t.substr(N,7)===E?(n=E,N+=7):(n=_,l(x));n!==_&&(r=m())!==_?(41===t.charCodeAt(N)?(a=C,N++):(a=_,l(w)),a!==_?(e,e=n=r):(N=e,e=_)):(N=e,e=_);return e}(),a!==_?(e,e=n={url:n,format:a}):(N=e,e=_)):(N=e,e=_)}else
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 20 66 72 6f 6d 20 72 75 6c 65 20 5c 22 22 2b 72 2e 73 74 61 72 74 52 75 6c 65 2b 27 22 2e 27 29 3b 79 3d 67 5b 72 2e 73 74 61 72 74 52 75 6c 65 5d 7d 76 61 72 20 4f 3d 65 28 22 2e 2e 2f 75 74 69 6c 22 29 3b 69 66 28 28 76 3d 79 28 29 29 21 3d 3d 5f 26 26 4e 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 3b 74 68 72 6f 77 20 76 21 3d 3d 5f 26 26 4e 3c 74 2e 6c 65 6e 67 74 68 26 26 6c 28 7b 74 79 70 65 3a 22 65 6e 64 22 7d 29 2c 75 28 52 2c 4d 3c 74 2e 6c 65 6e 67 74 68 3f 74 2e 63 68 61 72 41 74 28 4d 29 3a 6e 75 6c 6c 2c 4d 3c 74 2e 6c 65 6e 67 74 68 3f 73 28 4d 2c 4d 2b 31 29 3a 73 28 4d 2c 4d 29 29 7d 7d 7d 2c 7b 22 2e 2e 2f 75 74 69 6c 22 3a 33 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 28 22 2e Data Ascii: from rule \""+r.startRule+'".');y=g[r.startRule]}var O=e("../util");if((v=y())!==_&&N===t.length)return v;throw v!==_&&N<t.length&&l({type:"end"}),u(R,M<t.length?t.charAt(M):null,M<t.length?s(M,M+1):s(M,M))}}},{"../util":3}],2:[function(e,t,n){var r=e(".
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 36 34 62 36 33 32 39 37 33 64 30 33 65 64 35 33 2e 6a 73 6f 6e 22 7d 2c 37 36 38 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 64 65 2d 32 62 36 62 35 66 35 64 34 31 66 33 65 34 33 61 30 34 30 33 30 63 65 61 39 34 65 64 62 38 64 31 2e 6a 73 6f 6e 22 7d 2c 39 36 32 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 65 6c 2d 61 30 34 66 63 31 30 34 36 63 36 30 37 36 30 64 35 66 34 64 62 37 63 63 38 35 34 61 65 36 38 33 2e 6a 73 6f 6e 22 7d 2c 39 36 38 38 39 3a 66 75 6e 63 74 69 6f 6e Data Ascii: 64b632973d03ed53.json"},7689:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_de-2b6b5f5d41f3e43a04030cea94edb8d1.json"},96250:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_el-a04fc1046c60760d5f4db7cc854ae683.json"},96889:function
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 68 75 2d 63 39 61 65 36 35 31 61 34 34 62 32 62 38 38 36 33 65 34 35 64 37 34 63 32 32 63 64 62 38 61 32 2e 6a 73 6f 6e 22 7d 2c 34 31 37 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 69 64 2d 33 33 61 39 39 37 36 34 61 35 39 61 30 62 37 33 33 66 32 66 66 39 31 65 36 32 30 35 66 61 33 33 2e 6a 73 6f 6e 22 7d 2c 34 38 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 69 74 2d 38 64 62 38 34 Data Ascii: fingerprinted/data/countries_hu-c9ae651a44b2b8863e45d74c22cdb8a2.json"},41713:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_id-33a99764a59a0b733f2ff91e6205fa33.json"},48173:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_it-8db84
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 6e 22 7d 2c 35 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 70 74 2d 65 64 64 64 37 38 38 66 66 35 32 31 34 62 61 39 65 33 31 65 37 31 30 39 33 65 61 61 39 36 32 36 2e 6a 73 6f 6e 22 7d 2c 36 30 36 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 72 6f 2d 32 31 33 63 63 61 65 34 35 38 32 66 39 66 31 65 33 32 30 35 33 62 38 66 33 37 34 62 35 34 63 61 2e 6a 73 6f 6e 22 7d 2c 35 35 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b Data Ascii: n"},527:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_pt-eddd788ff5214ba9e31e71093eaa9626.json"},60613:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_ro-213ccae4582f9f1e32053b8f374b54ca.json"},5563:function(e,t,n){e.exports=n.p+
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 20 63 61 6e 6e 6f 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 65 29 7d 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 21 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 6e 65 Data Ascii: w TypeError("Object.assign cannot be called with null or undefined");return Object(e)}var n=Object.getOwnPropertySymbols,r=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=ne
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 28 76 61 72 20 61 20 69 6e 20 79 61 5b 6e 5d 3d 74 2c 6e 3d 74 2e 65 76 65 6e 74 54 79 70 65 73 29 7b 76 61 72 20 6f 3d 76 6f 69 64 20 30 2c 73 3d 6e 5b 61 5d 2c 6c 3d 74 2c 75 3d 61 3b 69 66 28 62 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 72 28 39 39 2c 75 29 29 3b 62 61 5b 75 5d 3d 73 3b 76 61 72 20 63 3d 73 2e 70 68 61 73 65 64 52 65 67 69 73 74 72 61 74 69 6f 6e 4e 61 6d 65 73 3b 69 66 28 63 29 7b 66 6f 72 28 6f 20 69 6e 20 63 29 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 69 28 63 5b 6f 5d 2c 6c 2c 75 29 3b 6f 3d 21 30 7d 65 6c 73 65 20 73 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 4e 61 6d 65 3f 28 69 28 73 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 4e 61 6d 65 2c 6c 2c 75 29 2c 6f 3d Data Ascii: (var a in ya[n]=t,n=t.eventTypes){var o=void 0,s=n[a],l=t,u=a;if(ba.hasOwnProperty(u))throw Error(r(99,u));ba[u]=s;var c=s.phasedRegistrationNames;if(c){for(o in c)c.hasOwnProperty(o)&&i(c[o],l,u);o=!0}else s.registrationName?(i(s.registrationName,l,u),o=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49868	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:57 UTC	449	OUT	GET /v3/fingerprinted/js/shared-fd9a4b92afc1e830f3533e4e95c53acc.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
2024-12-20 18:03:57 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 692436 Last-Modified: Thu, 19 Dec 2024 21:09:15 GMT ETag: "6d16910aeb4b18a9b40adeaeccb60a40" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 72500 Date: Fri, 20 Dec 2024 18:03:57 GMT Via: 1.1 varnish X-Request-ID: bd267670-ec45-4f17-8568-3f183617e30f X-Served-By: cache-ewr-kewr1740048-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 69 6e 6e 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 37 31 32 5d 2c 7b 31 30 37 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 63 2e 6c 65 6e 67 74 68 7c 7c 28 69 28 29 2c 21 30 29 2c 63 5b 63 2e 6c 65 6e 67 74 68 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 66 6f 72 28 3b 70 3c 63 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 65 3d 70 3b 69 66 28 70 2b 3d 31 2c 63 5b 65 5d 2e 63 61 6c 6c 28 29 2c 70 3e 31 30 32 34 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 63 2e 6c 65 6e 67 Data Ascii: (window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[3712],{10723:function(e,t,n){"use strict";function a(e){c.length\|\|(i(),!0),c[c.length]=e}function o(){for(;p<c.length;){var e=p;if(p+=1,c[e].call(),p>1024){for(var t=0,n=c.leng
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 2c 75 3d 69 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 75 3f 6e 3a 6f 28 75 2c 6e 29 3b 6c 3e 73 3b 29 74 5b 73 2b 2b 5d 3d 65 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 38 32 35 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 39 35 33 32 39 29 2c 6f 3d 61 28 7b 7d 2e 74 6f 53 74 72 69 6e 67 29 2c 72 3d 61 28 22 22 2e 73 6c 69 63 65 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 6f 28 65 29 2c 38 2c 2d 31 29 7d 7d 2c 33 32 30 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 35 35 37 34 36 29 2c 6f 3d 6e 28 36 35 39 38 38 29 2c 72 3d 6e 28 33 31 38 38 37 29 3b 65 2e 65 78 70 6f 72 74 73 3d Data Ascii: ,u=i>2?arguments[2]:void 0,l=void 0===u?n:o(u,n);l>s;)t[s++]=e;return t}},82532:function(e,t,n){var a=n(95329),o=a({}.toString),r=a("".slice);e.exports=function(e){return r(o(e),8,-1)}},32029:function(e,t,n){var a=n(55746),o=n(65988),r=n(31887);e.exports=
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 6e 29 7b 76 61 72 20 61 3d 6e 28 36 32 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 37 36 38 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 32 31 38 39 39 29 2c 6f 3d 6e 28 37 39 37 33 30 29 2c 72 3d 6e 28 39 37 34 38 34 29 2c 69 3d 6e 28 35 37 34 37 35 29 2c 73 3d 6e 28 34 39 36 37 37 29 2e 66 2c 75 3d 6e 28 33 37 32 35 32 29 2c 6c 3d 6e 28 35 34 30 35 38 29 2c 63 3d 6e 28 38 36 38 34 33 29 2c 70 3d 6e 28 33 32 30 32 39 29 2c 64 3d 6e 28 39 30 39 35 33 29 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 61 2c 72 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: n){var a=n(626);e.exports=a},76887:function(e,t,n){"use strict";var a=n(21899),o=n(79730),r=n(97484),i=n(57475),s=n(49677).f,u=n(37252),l=n(54058),c=n(86843),p=n(32029),d=n(90953),m=function(e){var t=function(n,a,r){if(this instanceof t){switch(arguments.
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 39 35 39 38 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 21 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 62 69 6e 64 28 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 74 6f 74 79 70 65 22 29 7d 29 29 7d 2c 37 38 38 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 31 38 32 38 35 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 3b 65 2e 65 78 70 6f 72 74 73 3d 61 3f 6f 2e 62 69 6e 64 28 6f 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 39 37 34 38 34 3a 66 75 6e Data Ascii: 95981);e.exports=!a((function(){var e=function(){}.bind();return"function"!=typeof e\|\|e.hasOwnProperty("prototype")}))},78834:function(e,t,n){var a=n(18285),o=Function.prototype.call;e.exports=a?o.bind(o):function(){return o.apply(o,arguments)}},97484:fun
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 7d 29 29 7d 2c 33 37 30 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 39 35 33 32 39 29 2c 6f 3d 6e 28 39 35 39 38 31 29 2c 72 3d 6e 28 38 32 35 33 32 29 2c 69 3d 4f 62 6a 65 63 74 2c 73 3d 61 28 22 22 2e 73 70 6c 69 74 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 69 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 72 28 65 29 3f 73 28 65 2c 22 22 29 3a 69 28 65 29 7d 3a 69 7d 2c 35 37 34 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 37 36 36 31 36 29 2c 6f 3d 61 2e 61 6c 6c 3b 65 2e 65 78 70 6f 72 74 Data Ascii: }))},37026:function(e,t,n){var a=n(95329),o=n(95981),r=n(82532),i=Object,s=a("".split);e.exports=o((function(){return!i("z").propertyIsEnumerable(0)}))?function(e){return"String"==r(e)?s(e,""):i(e)}:i},57475:function(e,t,n){var a=n(76616),o=a.all;e.export
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 63 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 70 3d 22 65 6e 75 6d 65 72 61 62 6c 65 22 2c 64 3d 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 2c 6d 3d 22 77 72 69 74 61 62 6c 65 22 3b 74 2e 66 3d 61 3f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 69 28 65 29 2c 74 3d 73 28 74 29 2c 69 28 6e 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 70 72 6f 74 6f 74 79 70 65 22 3d 3d 3d 74 26 26 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 6d 20 69 6e 20 6e 26 26 21 6e 2e 77 72 69 74 61 62 6c 65 29 7b 76 61 72 20 61 3d 63 28 65 2c 74 29 3b 61 26 26 61 2e 77 72 69 74 61 62 6c 65 26 26 28 65 5b 74 5d 3d 6e 2e 76 Data Ascii: Object.defineProperty,c=Object.getOwnPropertyDescriptor,p="enumerable",d="configurable",m="writable";t.f=a?r?function(e,t,n){if(i(e),t=s(t),i(n),"function"==typeof e&&"prototype"===t&&"value"in n&&m in n&&!n.writable){var a=c(e,t);a&&a.writable&&(e[t]=n.v
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 34 38 32 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 38 32 31 31 39 29 2c 6f 3d 54 79 70 65 45 72 72 6f 72 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 61 28 65 29 29 74 68 72 6f 77 20 6f 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 36 33 30 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 6e 28 32 31 38 39 39 29 2c 6f 3d 6e 28 37 35 36 30 39 29 2c 72 3d 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 2c 69 3d 61 5b 72 5d 7c 7c 6f 28 72 2c 7b 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 36 38 37 32 36 3a 66 75 6e Data Ascii: ion(e){e.exports={}},48219:function(e,t,n){var a=n(82119),o=TypeError;e.exports=function(e){if(a(e))throw o("Can't call method on "+e);return e}},63030:function(e,t,n){var a=n(21899),o=n(75609),r="__core-js_shared__",i=a[r]\|\|o(r,{});e.exports=i},68726:fun
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 54 79 70 65 45 72 72 6f 72 2c 63 3d 75 28 22 74 6f 50 72 69 6d 69 74 69 76 65 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 6f 28 65 29 7c 7c 72 28 65 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 2c 75 3d 69 28 65 2c 63 29 3b 69 66 28 75 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 64 65 66 61 75 6c 74 22 29 2c 6e 3d 61 28 75 2c 65 2c 74 29 2c 21 6f 28 6e 29 7c 7c 72 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6c 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 6e 75 6d 62 65 72 22 29 2c 73 28 65 2c 74 29 7d 7d 2c 38 33 38 39 Data Ascii: TypeError,c=u("toPrimitive");e.exports=function(e,t){if(!o(e)\|\|r(e))return e;var n,u=i(e,c);if(u){if(void 0===t&&(t="default"),n=a(u,e,t),!o(n)\|\|r(n))return n;throw l("Can't convert object to primitive value")}return void 0===t&&(t="number"),s(e,t)}},8389
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 62 67 2d 66 66 38 36 62 36 32 34 33 35 36 35 37 32 66 34 33 36 31 33 61 66 65 39 39 61 33 33 32 32 34 36 2e 6a 73 6f 6e 22 7d 2c 35 37 31 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 73 2d 64 63 36 39 34 37 65 35 64 31 33 66 65 62 64 35 34 38 35 32 32 35 35 61 38 38 33 34 62 32 35 63 2e 6a 73 6f 6e 22 7d 2c 36 33 36 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 64 61 2d 37 63 38 34 36 39 65 32 36 38 61 Data Ascii: n(e,t,n){e.exports=n.p+"fingerprinted/data/bg-ff86b624356572f43613afe99a332246.json"},57128:function(e,t,n){e.exports=n.p+"fingerprinted/data/cs-dc6947e5d13febd54852255a8834b25c.json"},63645:function(e,t,n){e.exports=n.p+"fingerprinted/data/da-7c8469e268a
2024-12-20 18:03:57 UTC	1378	IN	Data Raw: 6e 22 7d 2c 36 37 37 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 68 72 2d 31 61 33 35 39 32 31 33 61 32 66 33 65 33 33 33 38 32 32 30 64 38 61 39 30 32 33 34 32 65 32 63 2e 6a 73 6f 6e 22 7d 2c 32 32 38 34 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 68 75 2d 32 34 38 61 33 63 36 35 63 31 33 32 63 30 33 36 36 36 61 36 65 63 63 61 61 30 30 30 61 63 38 39 2e 6a 73 6f 6e 22 7d 2c 36 31 35 37 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 Data Ascii: n"},6771:function(e,t,n){e.exports=n.p+"fingerprinted/data/hr-1a359213a2f3e3338220d8a902342e2c.json"},22844:function(e,t,n){e.exports=n.p+"fingerprinted/data/hu-248a3c65c132c03666a6eccaa000ac89.json"},61579:function(e,t,n){e.exports=n.p+"fingerprinted/dat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49863	3.132.245.25	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:57 UTC	877	OUT	GET /api/patient/v1/unauthenticated_patients/attempted_checkout_at HTTP/1.1 Host: rest.inboxhealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __zlcmid=1PJnG4DSWUQIpQ8; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717830.46.0.0
2024-12-20 18:03:57 UTC	304	IN	HTTP/1.1 401 Unauthorized Cache-Control: no-cache Content-Length: 88 Content-Type: application/json Date: Fri, 20 Dec 2024 18:03:57 GMT Strict-Transport-Security: max-age=315360000; preload Vary: Origin X-Request-Id: 61a500e5-10b0-4095-ae47-29e06458db8b X-Runtime: 0.008520 Connection: close
2024-12-20 18:03:57 UTC	88	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 73 74 61 74 75 73 22 3a 34 30 31 2c 22 74 69 74 6c 65 22 3a 22 4e 6f 74 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 2c 22 64 65 74 61 69 6c 22 3a 22 55 73 65 72 20 6e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 22 7d 5d 7d Data Ascii: {"errors":[{"status":401,"title":"NotAuthenticated","detail":"User not authenticated"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49867	108.177.14.92	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:57 UTC	647	OUT	GET /gp/p/js/pay.js HTTP/1.1 Host: pay.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA
2024-12-20 18:03:57 UTC	2087	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Expires: Fri, 20 Dec 2024 18:03:57 GMT Date: Fri, 20 Dec 2024 18:03:57 GMT Cache-Control: private, max-age=600 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-zOJ0JluCM_ZOSHfUiIlbtQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendHttp/cspreport Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data:;report-uri /_/InstantbuyFrontendHttp/cspreport/fine-allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/gp/p/_/InstantbuyFrontendHttp/web-reports?context=eJzjKtDikmLw15BiWFYqxbBkphSDxNeXTBpA7JQ-gzUIiFtvnmOdCsRzA86zhmeeZzVae57VCYiT_p1nLQJiQ4VLrI5A_CvvEqtqzyVWUyAukrjC2gTE9aFXWbdcvcq6kfUa6yyLa6wBWddYhXg4eh9P280mcODFrvtMStpJ-YXxmXnFJYl5JUmllWlF-XklqXkpxalFZalF8UYGRiaGRoZGegbG8QUGAABcQ6M" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 18:03:57 UTC	2087	IN	Data Raw: 37 66 66 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 5b 27 64 65 6e 79 6c 69 73 74 65 64 44 6f 6d 61 69 6e 73 48 61 73 68 65 64 56 61 6c 75 65 4c 69 73 74 46 6f 72 47 70 61 79 42 75 74 74 6f 6e 57 69 74 68 43 61 72 64 49 6e 66 6f 27 5d 20 3d 20 5b 2d 37 31 38 35 38 33 34 36 36 2c 2d 36 35 31 34 30 37 31 37 33 2c 31 35 30 31 30 35 33 30 32 30 2c 31 32 37 30 39 33 31 37 39 33 2c 31 38 37 38 39 36 35 32 30 33 2c 31 33 35 39 39 37 39 33 31 31 2c 2d 31 35 35 36 33 39 36 35 39 39 2c 2d 39 32 39 38 32 30 32 39 30 2c 2d 31 39 39 33 39 36 36 35 35 38 2c 39 36 39 33 36 39 34 38 37 2c 38 31 33 30 30 34 37 32 36 5d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 5b 27 77 68 69 74 65 6c 69 73 74 65 Data Ascii: 7ff2(function(){window['denylistedDomainsHashedValueListForGpayButtonWithCardInfo'] = [-718583466,-651407173,1501053020,1270931793,1878965203,1359979311,-1556396599,-929820290,-1993966558,969369487,813004726];}).call(this);(function(){window['whiteliste
2024-12-20 18:03:57 UTC	2087	IN	Data Raw: 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 62 3d 5b 22 67 6f 6f 67 6c 65 22 2c 22 70 61 79 6d 65 6e 74 73 22 2c 22 61 70 69 22 2c 22 45 6e 61 62 6c 65 50 6f 70 75 70 46 6f 72 43 68 72 6f 6d 65 41 6e 64 72 6f 69 64 22 5d 2c 63 3d 77 69 6e 64 6f 77 7c 7c 61 3b 62 5b 30 5d 69 6e 20 63 7c 7c 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 62 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 62 2e 6c 65 6e 67 74 68 26 26 28 64 3d 62 2e 73 68 69 66 74 28 29 29 3b 29 62 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 Data Ascii: e-Identifier: Apache-2.0*/var a=this\|\|self;var b=["google","payments","api","EnablePopupForChromeAndroid"],c=window\|\|a;b[0]in c\|\|typeof c.execScript=="undefined"\|\|c.execScript("var "+b[0]);for(var d;b.length&&(d=b.shift());)b.length?c=c[d]&&c[d]!==Objec
2024-12-20 18:03:57 UTC	2087	IN	Data Raw: 68 69 66 74 28 29 29 3b 29 62 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 21 30 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 62 3d 5b 22 67 6f 6f 67 6c 65 22 2c 22 70 61 79 6d 65 6e 74 73 22 2c 22 61 70 69 22 2c 22 45 6e 61 62 6c 65 4f 66 66 65 72 43 61 6c 6c 62 61 63 6b Data Ascii: hift());)b.length?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=!0;}).call(this);(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var a=this\|\|self;var b=["google","payments","api","EnableOfferCallback
2024-12-20 18:03:57 UTC	2087	IN	Data Raw: 22 67 6f 6f 67 6c 65 22 2c 22 70 61 79 6d 65 6e 74 73 22 2c 22 61 70 69 22 2c 22 45 6e 61 62 6c 65 50 61 79 6d 65 6e 74 48 61 6e 64 6c 65 72 53 61 6e 64 62 6f 78 42 75 79 66 6c 6f 77 22 5d 2c 63 3d 77 69 6e 64 6f 77 7c 7c 61 3b 62 5b 30 5d 69 6e 20 63 7c 7c 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 62 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 62 2e 6c 65 6e 67 74 68 26 26 28 64 3d 62 2e 73 68 69 66 74 28 29 29 3b 29 62 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 21 30 3b 7d 29 2e 63 61 6c 6c 28 74 Data Ascii: "google","payments","api","EnablePaymentHandlerSandboxBuyflow"],c=window\|\|a;b[0]in c\|\|typeof c.execScript=="undefined"\|\|c.execScript("var "+b[0]);for(var d;b.length&&(d=b.shift());)b.length?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=!0;}).call(t
2024-12-20 18:03:57 UTC	2087	IN	Data Raw: 62 2e 73 68 69 66 74 28 29 29 3b 29 62 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 21 30 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 62 3d 5b 22 67 6f 6f 67 6c 65 22 2c 22 70 61 79 6d 65 6e 74 73 22 2c 22 61 70 69 22 2c 22 45 6e 61 62 6c 65 42 75 74 74 6f 6e 42 6f 72 64 Data Ascii: b.shift());)b.length?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=!0;}).call(this);(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var a=this\|\|self;var b=["google","payments","api","EnableButtonBord
2024-12-20 18:03:57 UTC	2087	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 58 62 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 22 65 73 36 22 29 3b 0a 76 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 Data Ascii: .prototype.toString=function(){return this.Xb};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(f\|\|"")+"_"+d++,f)};return e},"es6");v("Symbol.iter
2024-12-20 18:03:57 UTC	2087	IN	Data Raw: 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6a 63 28 29 7d 29 7d 74 68 69 73 2e 55 2e 70 75 73 68 28 67 29 7d 3b 76 61 72 20 64 3d 71 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 64 28 67 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 55 26 26 74 68 69 73 2e 55 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 55 3b 74 68 69 73 2e 55 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 7b 76 61 72 20 6c 3d 67 5b 68 5d 3b 67 5b 68 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6c 28 29 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 65 63 28 6b 29 7d 7d 7d 74 68 69 73 2e 55 Data Ascii: b(function(){h.jc()})}this.U.push(g)};var d=q.setTimeout;b.prototype.zb=function(g){d(g,0)};b.prototype.jc=function(){for(;this.U&&this.U.length;){var g=this.U;this.U=[];for(var h=0;h<g.length;++h){var l=g[h];g[h]=null;try{l()}catch(k){this.ec(k)}}}this.U
2024-12-20 18:03:58 UTC	2087	IN	Data Raw: 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 75 2c 41 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 75 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 6f 61 29 7b 74 72 79 7b 6b 28 75 28 6f 61 29 29 7d 63 61 74 63 68 28 56 29 7b 6e 28 56 29 7d 7d 3a 41 7d 76 61 72 20 6b 2c 6e 2c 77 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 75 2c 41 29 7b 6b 3d 75 3b 6e 3d 41 7d 29 3b 74 68 69 73 2e 51 61 28 6c 28 67 2c 6b 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 77 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 51 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 Data Ascii: ){function l(u,A){return typeof u=="function"?function(oa){try{k(u(oa))}catch(V){n(V)}}:A}var k,n,w=new e(function(u,A){k=u;n=A});this.Qa(l(g,k),l(h,n));return w};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Qa=function(g,h){funct
2024-12-20 18:03:58 UTC	2087	IN	Data Raw: 74 28 68 29 21 3d 22 73 22 7c 7c 6c 2e 73 69 7a 65 21 3d 31 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 6c 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6b 3d 74 28 6c 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 6c 29 2c 6e 3d 6b 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 6e 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 6e 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 6e 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 74 22 7c 7c 21 6b 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 28 77 Data Ascii: t(h)!="s"\|\|l.size!=1\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|l.size!=2)return!1;var k=t(l,"entries").call(l),n=k.next();if(n.done\|\|n.value[0]!=h\|\|n.value[1]!="s")return!1;n=k.next();return n.done\|\|n.value[0].x!=4\|\|n.value[1]!="t"\|\|!k.next().done?!1:!0}catch(w
2024-12-20 18:03:58 UTC	2087	IN	Data Raw: 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 74 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 7d 3b 0a 76 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 Data Ascii: String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[t(r.Symbol,"iterator")]=function(){return e};return e};v("Array.prototype.entries",function(a){return a?a:f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49869	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:57 UTC	453	OUT	GET /v3/fingerprinted/js/controller-e1865ca26c58947a4c41ae602ceeabce.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
2024-12-20 18:03:58 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 941993 Last-Modified: Thu, 19 Dec 2024 21:09:13 GMT ETag: "ebbf36fc6d459bb3ad1f2ad4904b7ddf" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 72602 Date: Fri, 20 Dec 2024 18:03:57 GMT Via: 1.1 varnish X-Request-ID: e1aaeabd-0b7e-4e62-a1c1-ae5a51fc03ff X-Served-By: cache-nyc-kteb1890073-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 69 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 69 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 2c 61 3d 7b 39 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 Data Ascii: !function(){function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return a[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arg
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 63 63 38 35 34 61 65 36 38 33 2e 6a 73 6f 6e 22 7d 2c 39 36 38 38 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 65 6e 2d 47 42 2d 39 31 39 63 39 31 66 61 64 32 37 38 38 37 35 30 39 33 37 63 61 65 31 32 36 64 34 61 66 34 38 37 2e 6a 73 6f 6e 22 7d 2c 32 33 30 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 65 73 2d 34 31 39 2d 31 35 38 32 34 33 31 66 65 64 61 31 34 61 34 64 36 32 37 62 30 61 33 37 31 30 32 34 64 31 38 65 2e 6a 73 6f 6e 22 7d 2c 35 34 36 31 33 3a 66 75 6e 63 74 69 Data Ascii: cc854ae683.json"},96889:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_en-GB-919c91fad2788750937cae126d4af487.json"},23030:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_es-419-1582431feda14a4d627b0a371024d18e.json"},54613:functi
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 69 74 2d 38 64 62 38 34 37 65 35 63 61 30 37 31 64 61 31 33 36 36 35 39 62 63 30 62 62 34 66 64 62 66 63 2e 6a 73 6f 6e 22 7d 2c 34 33 35 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 6a 61 2d 32 35 33 62 36 61 62 31 64 31 35 65 37 66 32 38 30 33 66 34 61 39 33 37 36 33 63 39 62 34 37 38 2e 6a 73 6f 6e 22 7d 2c 39 37 37 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 6b 6f 2d 31 36 35 30 63 63 36 61 66 63 Data Ascii: rprinted/data/countries_it-8db847e5ca071da136659bc0bb4fdbfc.json"},43596:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_ja-253b6ab1d15e7f2803f4a93763c9b478.json"},97750:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_ko-1650cc6afc
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 72 75 2d 38 65 31 31 38 65 35 36 66 62 62 34 33 32 62 61 31 32 64 63 39 38 35 32 38 61 37 36 33 39 35 33 2e 6a 73 6f 6e 22 7d 2c 36 35 30 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 64 61 74 61 2f 63 6f 75 6e 74 72 69 65 73 5f 73 6b 2d 62 33 63 33 65 36 63 33 38 35 32 36 32 36 64 32 31 37 31 65 37 38 31 61 30 32 61 62 35 34 61 36 2e 6a 73 6f 6e 22 7d 2c 38 33 30 30 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 Data Ascii: 3:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_ru-8e118e56fbb432ba12dc98528a763953.json"},65043:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_sk-b3c3e6c3852626d2171e781a02ab54a6.json"},83005:function(e,t,n){e.exports=n.p+"fing
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 39 63 64 61 61 38 30 65 39 33 61 62 64 62 38 62 2e 73 76 67 22 7d 2c 31 35 39 37 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 64 69 73 63 6f 76 65 72 2d 61 63 35 32 63 64 34 36 66 38 39 66 61 34 30 61 32 39 61 30 62 66 62 39 35 34 65 33 33 31 37 33 2e 73 76 67 22 7d 2c 35 34 35 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 65 6c 6f 2d 65 66 65 38 37 33 65 38 38 34 65 36 63 39 65 62 38 31 37 66 32 33 61 31 32 30 63 61 61 61 33 65 2e 73 76 67 22 7d 2c 37 35 39 37 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 Data Ascii: 9cdaa80e93abdb8b.svg"},15972:function(e,t,n){e.exports=n.p+"fingerprinted/img/discover-ac52cd46f89fa40a29a0bfb954e33173.svg"},54504:function(e,t,n){e.exports=n.p+"fingerprinted/img/elo-efe873e884e6c9eb817f23a120caaa3e.svg"},75979:function(e,t,n){e.exports
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 33 39 35 30 65 33 64 30 32 37 34 64 39 34 64 36 62 37 39 32 61 35 62 30 37 66 66 30 2e 73 76 67 22 7d 2c 38 36 38 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 62 6b 73 62 61 6e 6b 61 67 2d 30 35 38 64 64 34 32 63 34 63 39 66 32 33 39 34 35 36 34 63 39 61 64 36 36 32 30 35 30 36 32 65 2e 73 76 67 22 7d 2c 34 39 36 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 62 72 75 6c 6c 6b 61 6c 6c 6d 75 73 62 61 6e 6b 61 67 2d 39 38 32 61 62 37 61 35 63 62 30 35 64 63 61 39 35 34 36 63 38 33 61 36 30 39 34 64 36 33 65 34 2e 73 76 67 22 7d 2c 38 38 31 38 Data Ascii: 3950e3d0274d94d6b792a5b07ff0.svg"},8683:function(e,t,n){e.exports=n.p+"fingerprinted/img/bksbankag-058dd42c4c9f2394564c9ad66205062e.svg"},49696:function(e,t,n){e.exports=n.p+"fingerprinted/img/brullkallmusbankag-982ab7a5cb05dca9546c83a6094d63e4.svg"},8818
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 64 2f 69 6d 67 2f 68 79 70 6f 74 69 72 6f 6c 62 61 6e 6b 61 67 2d 65 34 30 62 38 36 65 34 66 33 31 65 39 61 61 38 32 32 35 38 38 66 32 35 63 64 65 33 35 63 61 35 2e 73 76 67 22 7d 2c 33 36 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 68 79 70 6f 76 6f 72 61 72 6c 62 65 72 67 62 61 6e 6b 61 67 2d 30 61 65 66 63 37 34 65 35 65 61 38 36 30 35 36 34 61 35 32 64 32 38 63 62 36 66 36 32 65 64 34 2e 73 76 67 22 7d 2c 38 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 6d 61 72 63 68 66 65 6c 64 65 72 62 61 6e 6b 2d 66 37 36 31 32 61 62 66 37 31 66 Data Ascii: d/img/hypotirolbankag-e40b86e4f31e9aa822588f25cde35ca5.svg"},3648:function(e,t,n){e.exports=n.p+"fingerprinted/img/hypovorarlbergbankag-0aefc74e5ea860564a52d28cb6f62ed4.svg"},874:function(e,t,n){e.exports=n.p+"fingerprinted/img/marchfelderbank-f7612abf71f
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 69 6e 67 2d 66 34 62 65 62 39 66 35 38 38 33 34 61 38 32 62 61 62 65 33 38 34 32 37 63 65 63 30 62 61 39 35 2e 73 76 67 22 7d 2c 39 34 32 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 6b 6e 61 62 2d 64 62 64 66 36 31 64 35 38 64 33 30 30 34 63 32 33 35 37 33 31 35 38 63 62 39 31 65 39 35 36 39 2e 73 76 67 22 7d 2c 36 36 38 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 6e 32 36 2d 35 61 64 33 65 30 61 65 37 36 37 37 32 30 38 63 Data Ascii: t,n){e.exports=n.p+"fingerprinted/img/ing-f4beb9f58834a82babe38427cec0ba95.svg"},94223:function(e,t,n){e.exports=n.p+"fingerprinted/img/knab-dbdf61d58d3004c23573158cb91e9569.svg"},66863:function(e,t,n){e.exports=n.p+"fingerprinted/img/n26-5ad3e0ae7677208c
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 66 64 33 38 32 39 31 64 38 61 64 62 35 64 66 34 33 31 33 61 36 39 62 33 62 36 33 2e 73 76 67 22 7d 2c 35 39 33 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 62 61 6e 6b 70 65 6b 61 6f 2d 64 62 38 65 30 61 31 34 66 61 31 30 36 34 38 38 30 34 33 63 36 39 34 37 31 66 39 64 39 66 63 37 2e 73 76 67 22 7d 2c 39 39 32 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 62 61 6e 6b 73 70 6f 74 64 7a 69 65 6c 63 7a 65 2d 37 39 61 39 34 63 39 64 37 30 64 38 39 31 65 62 37 30 64 39 38 36 62 62 63 37 37 34 31 39 63 30 2e 73 76 67 22 7d 2c 34 37 38 30 39 3a Data Ascii: fd38291d8adb5df4313a69b3b63.svg"},59329:function(e,t,n){e.exports=n.p+"fingerprinted/img/bankpekao-db8e0a14fa106488043c69471f9d9fc7.svg"},99213:function(e,t,n){e.exports=n.p+"fingerprinted/img/bankspotdzielcze-79a94c9d70d891eb70d986bbc77419c0.svg"},47809:
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 37 35 32 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 6e 65 73 74 62 61 6e 6b 2d 30 38 65 31 33 61 62 34 34 31 30 37 37 61 63 32 33 64 61 33 32 39 64 36 32 34 35 38 35 32 34 36 2e 73 76 67 22 7d 2c 37 39 36 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 6e 6f 62 6c 65 62 61 6e 6b 2d 33 31 31 34 64 64 62 39 65 62 39 30 34 38 31 32 36 31 61 31 65 38 66 62 61 62 64 36 30 36 38 62 2e 73 76 67 22 7d 2c 35 39 35 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 Data Ascii: 7525:function(e,t,n){e.exports=n.p+"fingerprinted/img/nestbank-08e13ab441077ac23da329d624585246.svg"},79695:function(e,t,n){e.exports=n.p+"fingerprinted/img/noblebank-3114ddb9eb90481261a1e8fbabd6068b.svg"},59539:function(e,t,n){e.exports=n.p+"fingerprinte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49870	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:57 UTC	665	OUT	GET /v3/.deploy_status_henson.json HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:58 UTC	656	IN	HTTP/1.1 200 OK Connection: close Content-Length: 474 Last-Modified: Thu, 19 Dec 2024 21:49:29 GMT ETag: "9bdbc44392db31ded05237a073d884d8" Cache-Control: max-age=60 Content-Type: application/json access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 75 Date: Fri, 20 Dec 2024 18:03:57 GMT Via: 1.1 varnish X-Request-ID: 93848437-94bb-41b9-8810-9474dd086799 X-Served-By: cache-ewr-kewr1740064-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:58 UTC	474	IN	Data Raw: 7b 22 63 61 6e 61 72 79 50 65 72 63 65 6e 74 61 67 65 22 3a 30 2c 22 64 65 70 6c 6f 79 65 64 52 65 76 69 73 69 6f 6e 73 22 3a 5b 22 34 62 39 61 35 61 32 61 65 33 33 63 35 32 61 66 33 66 37 63 39 33 62 62 32 65 65 39 61 34 36 31 61 61 34 61 31 63 38 63 22 2c 22 30 34 63 31 33 61 62 32 39 30 66 37 33 35 33 33 64 33 65 39 39 31 39 33 30 37 62 64 38 66 66 34 36 30 36 37 36 36 30 61 22 2c 22 37 39 36 61 37 62 39 32 64 66 62 62 39 32 30 63 63 65 62 38 62 34 62 39 30 39 38 62 39 39 63 64 35 31 33 61 35 30 30 66 22 2c 22 65 32 35 61 35 61 33 65 63 34 38 36 64 35 37 32 37 61 61 38 31 61 62 37 34 65 61 32 66 36 36 36 37 33 31 31 64 31 66 30 22 2c 22 33 66 30 39 35 64 30 36 37 37 37 34 64 32 39 37 65 31 65 32 35 61 35 31 64 39 35 30 35 38 65 36 30 65 61 39 38 33 63 Data Ascii: {"canaryPercentage":0,"deployedRevisions":["4b9a5a2ae33c52af3f7c93bb2ee9a461aa4a1c8c","04c13ab290f73533d3e9919307bd8ff46067660a","796a7b92dfbb920cceb8b4b9098b99cd513a500f","e25a5a3ec486d5727aa81ab74ea2f6667311d1f0","3f095d067774d297e1e25a51d95058e60ea983c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49871	52.210.46.219	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:58 UTC	655	OUT	POST /elements/wallet-config HTTP/1.1 Host: merchant-ui-api.stripe.com Connection: keep-alive Content-Length: 189 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.stripe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:58 UTC	189	OUT	Data Raw: 73 74 72 69 70 65 5f 6a 73 5f 69 64 3d 30 36 61 34 64 39 63 37 2d 63 38 34 39 2d 34 30 39 62 2d 38 64 62 30 2d 34 31 37 61 35 33 61 61 63 62 31 63 26 72 65 66 65 72 72 65 72 5f 68 6f 73 74 3d 70 61 74 69 65 6e 74 2e 69 6e 62 6f 78 68 65 61 6c 74 68 2e 63 6f 6d 26 61 6d 6f 75 6e 74 3d 36 30 30 30 26 63 75 72 72 65 6e 63 79 3d 75 73 64 26 6b 65 79 3d 70 6b 5f 6c 69 76 65 5f 47 4d 63 47 4d 34 72 79 6b 4e 62 59 44 39 35 6e 73 48 6c 77 6f 41 65 77 26 72 65 71 75 65 73 74 5f 73 75 72 66 61 63 65 3d 77 65 62 5f 65 6c 65 6d 65 6e 74 73 5f 63 6f 6e 74 72 6f 6c 6c 65 72 Data Ascii: stripe_js_id=06a4d9c7-c849-409b-8db0-417a53aacb1c&referrer_host=patient.inboxhealth.com&amount=6000&currency=usd&key=pk_live_GMcGM4rykNbYD95nsHlwoAew&request_surface=web_elements_controller
2024-12-20 18:03:58 UTC	1340	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:03:58 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 2895 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: https://js.stripe.com Access-Control-Expose-Headers: Request-Id Access-Control-Max-Age: 300 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'; img-src 'self'; script-src 'self' 'report-sample'; style-src 'self'; upgrade-insecure-requests; report-uri /csp-violation https://q.stripe.com/csp-violation?q=FWmabn_6IKo61uO236K3VaYWN0_V4JhWrhFWM3YBliiHXlpRVHRD4SSg255gxrHwtRt1cA_TujJyk7A%3D Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop" Cross-Origin-Resource-Policy: same-site Expires: 0 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true} Reporting-Endpoints: coop="https://q.stripe.com/coop-report" Request-Id: req_UgtTMPcMNKrOqB Vary: Origin X-Content-Type-Options: nosniff X-Robots-Tag: none X-Wc: ABC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-12-20 18:03:58 UTC	2895	IN	Data Raw: 7b 22 6c 69 6e 6b 5f 61 76 61 69 6c 61 62 6c 65 22 3a 7b 22 63 61 72 64 5f 65 6c 65 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 73 70 6c 69 74 5f 63 61 72 64 5f 65 6c 65 6d 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 70 61 79 6d 65 6e 74 5f 72 65 71 75 65 73 74 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 6f 75 74 22 3a 74 72 75 65 7d 2c 22 6c 69 6e 6b 5f 73 65 74 74 69 6e 67 73 22 3a 7b 22 6d 65 72 63 68 61 6e 74 5f 69 6e 66 6f 22 3a 7b 22 62 75 73 69 6e 65 73 73 5f 6e 61 6d 65 22 3a 22 49 4e 42 4f 58 20 48 45 41 4c 54 48 20 43 4f 52 50 2e 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 2c 22 63 75 73 74 6f 6d 65 72 5f 69 6e 66 6f 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 2c 22 6c 69 6e 6b 5f 68 63 61 70 74 63 68 61 5f 73 69 74 65 5f Data Ascii: {"link_available":{"card_element":false,"split_card_elements":false,"payment_request_button":true,"checkout":true},"link_settings":{"merchant_info":{"business_name":"INBOX HEALTH CORP.","country":"US"},"customer_info":{"country":"US"},"link_hcaptcha_site_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49876	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:58 UTC	462	OUT	GET /v3/fingerprinted/js/elements-inner-card-244854405722882f318e50d94037ffbf.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
2024-12-20 18:03:58 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 56584 Last-Modified: Mon, 16 Dec 2024 21:06:15 GMT ETag: "16553965860c27faf04865c26bd8d33f" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Fri, 20 Dec 2024 18:03:58 GMT Via: 1.1 varnish Age: 277164 X-Request-ID: d5af4699-1477-4bf7-9523-c2db5c5d5cf4 X-Served-By: cache-ewr-kewr1740047-EWR X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 6f 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 2c 61 3d 7b 31 34 36 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 61 6d 65 78 2d 61 34 39 62 38 32 66 34 36 63 35 Data Ascii: !function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var r=o[t]={id:t,loaded:!1,exports:{}};return a[t].call(r.exports,r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={14657:function(e,t,n){e.exports=n.p+"fingerprinted/img/amex-a49b82f46c5
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 76 3d 6e 2e 6e 28 66 29 2c 43 3d 6e 28 36 30 32 37 36 29 2c 67 3d 6e 28 36 31 37 36 31 29 2c 62 3d 6e 28 38 30 38 37 37 29 2c 79 3d 6e 28 31 34 37 39 38 29 2c 6b 3d 6e 2e 6e 28 79 29 2c 45 3d 6e 28 34 33 33 39 38 29 2c 4e 3d 6e 2e 6e 28 45 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 28 30 2c 75 2e 5a 29 28 74 68 69 73 2c 74 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 28 30 2c 68 2e 5a 29 28 74 2c 65 29 3b 76 61 72 20 6e 3d 28 30 2c 6d 2e 5a 29 28 74 29 3b 72 65 74 75 72 6e 28 30 2c 70 2e 5a 29 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 70 73 2e 73 6f 6c 69 Data Ascii: v=n.n(f),C=n(60276),g=n(61761),b=n(80877),y=n(14798),k=n.n(y),E=n(43398),N=n.n(E),w=function(e){function t(){return(0,u.Z)(this,t),n.apply(this,arguments)}(0,h.Z)(t,e);var n=(0,m.Z)(t);return(0,p.Z)(t,[{key:"render",value:function(){return this.props.soli
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 28 30 2c 75 2e 5a 29 28 74 68 69 73 2c 74 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 28 30 2c 68 2e 5a 29 28 74 2c 65 29 3b 76 61 72 20 6e 3d 28 30 2c 6d 2e 5a 29 28 74 29 3b 72 65 74 75 72 6e 28 30 2c 70 2e 5a 29 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 70 73 2e 73 6f 6c 69 64 3f 61 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 59 28 29 2c 6e 75 6c 6c 29 3a 61 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 7a 28 29 2c 6e 75 6c 6c 29 7d 7d 5d 29 2c 74 7d 28 61 28 29 2e 43 6f 6d 70 6f 6e 65 6e 74 29 2c 54 3d 6e 28 32 36 36 39 38 29 2c 55 3d 6e 28 33 39 35 38 31 29 2c 4b 3d 6e 28 39 34 38 Data Ascii: return(0,u.Z)(this,t),n.apply(this,arguments)}(0,h.Z)(t,e);var n=(0,m.Z)(t);return(0,p.Z)(t,[{key:"render",value:function(){return this.props.solid?a().createElement(Y(),null):a().createElement(z(),null)}}]),t}(a().Component),T=n(26698),U=n(39581),K=n(948
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 28 61 28 29 2e 43 6f 6d 70 6f 6e 65 6e 74 29 2c 6b 65 3d 6e 28 33 35 39 31 38 29 2c 45 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 68 6f 75 6c 64 44 69 73 70 6c 61 79 43 61 72 64 45 6c 65 6d 65 6e 74 43 42 43 2c 6e 3d 65 2e 63 61 72 64 4e 65 74 77 6f 72 6b 73 2c 61 3d 65 2e 6f 6e 52 65 70 6f 72 74 2c 6f 3d 65 2e 6c 6f 63 61 6c 65 2c 69 3d 28 30 2c 72 2e 75 73 65 52 65 66 29 28 7b 7d 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 4d 65 6d 6f 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 5b 5d 3b 72 65 74 75 72 6e 20 6e 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 30 2c 6b 65 2e 70 59 29 28 6f 2c 22 63 61 72 64 5f 62 72 61 6e 64 2e 22 2e 63 6f 6e 63 61 74 28 65 29 29 3b Data Ascii: (a().Component),ke=n(35918),Ee=function(e){var t=e.shouldDisplayCardElementCBC,n=e.cardNetworks,a=e.onReport,o=e.locale,i=(0,r.useRef)({});return(0,r.useMemo)((function(){if(!t)return[];return n.map((function(e){var t=(0,ke.pY)(o,"card_brand.".concat(e));
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 22 6f 70 74 69 6f 6e 22 2c 7b 76 61 6c 75 65 3a 74 2c 6b 65 79 3a 74 7d 2c 6e 7c 7c 74 29 7d 29 29 29 29 7d 2c 77 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 30 2c 75 2e 5a 29 28 74 68 69 73 2c 74 29 2c 28 72 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 2e 75 70 64 61 74 65 44 69 6d 65 6e 73 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 63 61 6c 63 75 6c 61 74 65 57 69 64 74 68 28 29 3b 72 2e 5f 77 69 64 74 68 21 3d 3d 65 26 26 28 72 2e 70 72 6f 70 73 2e 6f 6e 44 69 6d 65 6e 73 69 6f 6e 43 68 61 6e 67 65 28 7b 77 69 64 74 68 3a 65 7d 29 2c 72 2e 5f 77 69 64 74 68 3d 65 29 2c 72 2e 5f 75 6e 6d 6f 75 6e 74 65 64 7c 7c 72 65 71 75 65 73 74 41 6e 69 6d Data Ascii: "option",{value:t,key:t},n\|\|t)}))))},we=function(e){function t(e){var r;return(0,u.Z)(this,t),(r=n.call(this,e)).updateDimensions=function(){var e=r.calculateWidth();r._width!==e&&(r.props.onDimensionChange({width:e}),r._width=e),r._unmounted\|\|requestAnim
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 6c 3d 3d 3d 28 61 3d 65 2e 63 61 72 64 4e 65 74 77 6f 72 6b 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 5b 30 5d 29 7c 7c 6e 75 6c 6c 3b 74 3d 6f 3f 68 65 28 6f 29 3a 22 75 6e 6b 6e 6f 77 6e 22 7d 22 75 6e 6b 6e 6f 77 6e 22 3d 3d 3d 74 26 26 28 74 3d 54 2e 5a 50 2e 75 6e 69 66 69 65 64 42 72 61 6e 64 28 65 2e 63 61 72 64 4e 75 6d 62 65 72 7c 7c 22 22 29 29 7d 76 61 72 20 69 3d 22 61 6d 65 78 22 3d 3d 3d 74 2c 6c 3d 69 3f 22 65 72 72 6f 72 41 6d 65 78 22 3a 22 65 72 72 6f 72 22 3b 72 65 74 75 72 6e 7b 62 61 63 6b 49 63 6f 6e 4e 61 6d 65 3a 69 3f 22 63 76 63 41 6d 65 78 22 3a 22 63 76 63 22 2c 66 72 6f 6e 74 49 63 6f 6e 4e 61 6d 65 3a 65 2e 68 61 73 43 61 72 64 4e 75 6d 62 65 72 45 72 72 6f 72 3f 6c 3a 74 2c 62 72 61 6e 64 3a 74 7d Data Ascii: l===(a=e.cardNetworks)\|\|void 0===a?void 0:a[0])\|\|null;t=o?he(o):"unknown"}"unknown"===t&&(t=T.ZP.unifiedBrand(e.cardNumber\|\|""))}var i="amex"===t,l=i?"errorAmex":"error";return{backIconName:i?"cvcAmex":"cvc",frontIconName:e.hasCardNumberError?l:t,brand:t}
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 64 6f 77 6e 2c 64 3d 74 2e 6f 6e 53 65 6c 65 63 74 43 61 72 64 4e 65 74 77 6f 72 6b 2c 75 3d 74 2e 63 61 72 64 4e 65 74 77 6f 72 6b 73 2c 70 3d 74 2e 73 65 6c 65 63 74 65 64 4e 65 74 77 6f 72 6b 2c 68 3d 74 2e 64 65 66 61 75 6c 74 4e 65 74 77 6f 72 6b 2c 6d 3d 74 2e 6f 6e 4f 70 65 6e 43 61 72 64 42 72 61 6e 64 43 68 6f 69 63 65 44 72 6f 70 64 6f 77 6e 2c 66 3d 74 68 69 73 2e 67 65 74 42 72 61 6e 64 41 6e 64 49 63 6f 6e 73 28 74 68 69 73 2e 70 72 6f 70 73 29 2c 43 3d 66 2e 66 72 6f 6e 74 49 63 6f 6e 4e 61 6d 65 2c 67 3d 66 2e 62 61 63 6b 49 63 6f 6e 4e 61 6d 65 2c 62 3d 66 2e 62 72 61 6e 64 2c 79 3d 74 68 69 73 2e 70 72 6f 70 73 2e 73 68 6f 77 43 76 63 26 26 21 76 65 2e 4a 57 2c 6b 3d 74 68 69 73 2e 70 72 6f 70 73 2e 73 68 6f 75 6c 64 44 69 73 70 6c 61 79 Data Ascii: down,d=t.onSelectCardNetwork,u=t.cardNetworks,p=t.selectedNetwork,h=t.defaultNetwork,m=t.onOpenCardBrandChoiceDropdown,f=this.getBrandAndIcons(this.props),C=f.frontIconName,g=f.backIconName,b=f.brand,y=this.props.showCvc&&!ve.JW,k=this.props.shouldDisplay
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 28 65 29 3f 6e 75 6c 6c 3a 28 30 2c 78 65 2e 5a 29 28 22 69 6e 76 61 6c 69 64 5f 6e 75 6d 62 65 72 22 29 3a 6e 3f 6e 75 6c 6c 3a 28 30 2c 78 65 2e 5a 29 28 22 69 6e 63 6f 6d 70 6c 65 74 65 5f 6e 75 6d 62 65 72 22 29 7d 2c 50 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 74 2e 69 67 6e 6f 72 65 49 6e 63 6f 6d 70 6c 65 74 65 2c 72 3d 44 65 28 65 29 2c 61 3d 72 2e 73 61 6e 69 74 69 7a 65 64 2c 6f 3d 72 2e 6d 69 6e 4c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 4c 65 28 61 2c 6f 2c 6e 29 7d 2c 41 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 Data Ascii: (e)?null:(0,xe.Z)("invalid_number"):n?null:(0,xe.Z)("incomplete_number")},Pe=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=t.ignoreIncomplete,r=De(e),a=r.sanitized,o=r.minLength;return Le(a,o,n)},Ae=function(e){var t=argume
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 3b 28 30 2c 75 2e 5a 29 28 74 68 69 73 2c 74 29 3b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 61 3d 6e 65 77 20 41 72 72 61 79 28 72 29 2c 6f 3d 30 3b 6f 3c 72 3b 6f 2b 2b 29 61 5b 6f 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 72 65 74 75 72 6e 28 65 3d 6e 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 61 29 29 29 2e 5f 61 75 74 6f 63 6f 72 72 65 63 74 43 6f 6d 70 6c 65 74 65 3d 21 31 2c 65 2e 68 61 6e 64 6c 65 43 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 28 30 2c 64 2e 5a 29 28 28 30 2c 64 2e 5a 29 28 28 30 2c 64 2e 5a 29 28 7b 7d 2c 65 2e 70 72 6f 70 73 2e 6d 65 74 61 29 2c 6e 29 2c 7b 7d 2c 7b 62 72 61 6e 64 3a 54 2e 5a 50 2e 75 6e 69 Data Ascii: ;(0,u.Z)(this,t);for(var r=arguments.length,a=new Array(r),o=0;o<r;o++)a[o]=arguments[o];return(e=n.call.apply(n,[this].concat(a)))._autocorrectComplete=!1,e.handleChange=function(t,n,r){var a=(0,d.Z)((0,d.Z)((0,d.Z)({},e.props.meta),n),{},{brand:T.ZP.uni
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 65 6e 74 28 5a 65 2c 28 30 2c 63 2e 5a 29 28 7b 6f 6e 52 65 70 6f 72 74 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 52 65 70 6f 72 74 2c 6c 6f 63 61 6c 65 3a 6e 2c 6f 6e 43 6c 69 63 6b 44 72 6f 70 64 6f 77 6e 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 43 6c 69 63 6b 44 72 6f 70 64 6f 77 6e 2c 6f 6e 53 65 6c 65 63 74 43 61 72 64 4e 65 74 77 6f 72 6b 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 53 65 6c 65 63 74 43 61 72 64 4e 65 74 77 6f 72 6b 7d 2c 74 68 69 73 2e 70 72 6f 70 73 2e 63 61 72 64 42 72 61 6e 64 43 68 6f 69 63 65 2c 7b 63 61 72 64 4e 75 6d 62 65 72 3a 6f 2c 64 69 73 61 62 6c 65 64 3a 74 68 69 73 2e 70 72 6f 70 73 2e 69 6e 70 75 74 50 72 6f 70 73 2e 64 69 73 61 62 6c 65 64 7c 7c 21 31 2c 68 69 64 65 49 63 6f 6e 3a 21 6c 2c 69 63 6f 6e 53 74 79 6c 65 Data Ascii: ent(Ze,(0,c.Z)({onReport:this.props.onReport,locale:n,onClickDropdown:this.props.onClickDropdown,onSelectCardNetwork:this.props.onSelectCardNetwork},this.props.cardBrandChoice,{cardNumber:o,disabled:this.props.inputProps.disabled\|\|!1,hideIcon:!l,iconStyle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49873	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:58 UTC	668	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717833768 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=NFi9H2AerJmk9MMmqOENTTutpf5e7lIjR1prDRiKDGnyK1q65SY7MUDpK8Yh2STNWgiDSmmZxHZwbolu/gx2ANi6BJKLCiVW2QAm0/gbwGTHeOZ3CGN62P5fawR9; AWSALBCORS=gC5JpJfCPqDL+7PTWjIMd6Gn5SM0gl7tPypin/nHDX6/Wxyq01Y+5EuvRFpg5/pPWFRHbRYijzcj5fb9WKKmI8naXLKvka6s+gFwBnrzH3T/h/vlxcEwF7bOi5XJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49872	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:58 UTC	675	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717835694 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=gC5JpJfCPqDL+7PTWjIMd6Gn5SM0gl7tPypin/nHDX6/Wxyq01Y+5EuvRFpg5/pPWFRHbRYijzcj5fb9WKKmI8naXLKvka6s+gFwBnrzH3T/h/vlxcEwF7bOi5XJ
2024-12-20 18:03:58 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:58 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=kBvk7oMRJYPcmqCDpGbLVPkdCBbIIosas9ghQwlDXvIJAFKT2n5dO3dFTF5tx3nKLPZVIYc+ryuDMEb89mr3RWaZFwXz/X8lFdh++Nz/zqYUpj3in0yHEXnOqB9H; Expires=Fri, 27 Dec 2024 18:03:58 GMT; Path=/ Set-Cookie: AWSALBCORS=kBvk7oMRJYPcmqCDpGbLVPkdCBbIIosas9ghQwlDXvIJAFKT2n5dO3dFTF5tx3nKLPZVIYc+ryuDMEb89mr3RWaZFwXz/X8lFdh++Nz/zqYUpj3in0yHEXnOqB9H; Expires=Fri, 27 Dec 2024 18:03:58 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:58 UTC	4682	IN	Data Raw: 31 32 34 32 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 33 38 35 34 30 5c 6e 33 30 30 38 5c 6e 34 5c 6e 34 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 32 30 7d 2c 5c 22 73 65 71 5c 22 3a 32 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 64 67 5f 6d 61 70 70 69 6e 67 73 5c 22 3a 7b 5c 22 32 31 34 37 35 32 30 30 37 37 5c 22 3a 7b 5c 22 67 72 6f 75 70 5f 69 64 24 69 6e 74 5c 22 3a 32 33 39 37 37 39 33 35 37 33 39 37 39 36 7d 2c 5c 22 32 31 34 37 35 36 32 35 30 37 5c 22 3a 7b 5c 22 67 Data Ascii: 1242$Loader && ($Loader.payload = "1734717838540\n3008\n4\n4\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":20},\"seq\":2}\n{\"path\":\"livechat\",\"update\":{\"dg_mappings\":{\"2147520077\":{\"group_id$int\":23977935739796},\"2147562507\":{\"g
2024-12-20 18:03:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49878	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:58 UTC	656	OUT	GET /v3/fingerprinted/css/link-modal-inner-bd52ba2d8aa3af905ae3d09fcce45b9b.css HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.stripe.com/v3/link-modal-inner-3856548e7a416d6bdacb10b20db090c3.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:58 UTC	708	IN	HTTP/1.1 200 OK Connection: close Content-Length: 83638 Last-Modified: Fri, 13 Dec 2024 21:02:48 GMT ETag: "495aff2d817fc4fd6c39dba39dcdd268" Cache-Control: max-age=31536000 Content-Type: text/css; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 498676 Date: Fri, 20 Dec 2024 18:03:58 GMT Via: 1.1 varnish X-Request-ID: f7f86d8a-9deb-40fc-ae70-375df16efed1 X-Served-By: cache-ewr-kewr1740067-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 2e 5f 34 76 77 59 71 5f 5f 7a 5f 5f 49 6e 64 69 63 61 74 6f 72 2c 2e 78 61 34 77 74 77 47 5f 5f 5f 49 6e 64 69 63 61 74 6f 72 73 7b 2d 2d 6c 6f 63 61 6c 49 6e 64 69 63 61 74 6f 72 43 6f 6c 6f 72 3a 76 61 72 28 2d 2d 69 6e 64 69 63 61 74 6f 72 43 6f 6c 6f 72 29 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 5f 36 4d 32 35 68 4b 79 76 5f 5f 49 6e 64 69 63 61 74 6f 72 2d 2d 73 6d 7b 2d 2d 6c 6f 63 61 6c 49 6e 64 69 63 61 74 6f 72 53 69 7a 65 3a 76 61 72 28 2d 2d 69 6e 64 69 63 61 74 6f 72 53 69 7a 65 53 6d 29 3b 2d 2d 6c 6f 63 61 6c 49 6e 64 69 63 61 74 6f 72 53 74 72 6f 6b 65 3a 76 61 72 28 2d 2d 69 6e 64 69 63 61 74 6f 72 53 74 72 6f 6b 65 53 6d 29 7d 2e 67 6e 41 6a 53 32 76 67 5f 5f 49 6e 64 69 63 61 74 6f 72 2d 2d 6d 64 7b 2d 2d 6c 6f Data Ascii: ._4vwYq__z__Indicator,.xa4wtwG___Indicators{--louserndicatorColor:var(--indicatorColor);pointer-events:none}._6M25hKyv__Indicator--sm{--louserndicatorSize:var(--indicatorSizeSm);--louserndicatorStroke:var(--indicatorStrokeSm)}.gnAjS2vg__Indicator--md{--lo
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 54 5f 57 65 6d 76 55 4c 5f 5f 4c 6f 61 64 69 6e 67 49 6e 64 69 63 61 74 6f 72 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6c 6f 63 61 6c 49 6e 64 69 63 61 74 6f 72 43 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6c 6f 63 61 6c 49 6e 64 69 63 61 74 6f 72 53 74 72 6f 6b 65 29 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6c 6f 63 61 6c 49 6e 64 69 63 61 74 6f 72 53 74 72 6f 6b 65 29 2a 2d 31 2f 32 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 6c 6f 63 61 6c Data Ascii: ht:0;top:0}.T_WemvUL__LoadingIndicator:after{background-color:var(--louserndicatorColor);border-radius:100%;content:"";height:var(--louserndicatorStroke);left:50%;margin-left:calc(var(--louserndicatorStroke)*-1/2);position:absolute;top:0;width:var(--local
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 49 6e 64 69 63 61 74 6f 72 2d 2d 78 6c 20 2e 45 55 49 77 6b 6a 41 79 5f 5f 43 68 65 63 6b 6d 61 72 6b 2d 61 72 6d 2d 2d 6c 65 66 74 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 77 69 64 74 68 3a 34 70 78 7d 2e 56 7a 6f 44 69 64 32 78 5f 5f 53 75 63 63 65 73 73 49 6e 64 69 63 61 74 6f 72 2e 6d 35 49 7a 73 53 6b 52 5f 5f 49 6e 64 69 63 61 74 6f 72 2d 2d 78 6c 20 2e 50 69 61 55 79 44 47 33 5f 5f 43 68 65 63 6b 6d 61 72 6b 2d 61 72 6d 2d 2d 72 69 67 68 74 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 68 65 69 67 68 74 3a 34 70 78 7d 2e 51 68 37 6c 42 46 37 30 5f 5f 53 75 63 63 65 73 73 49 6e 64 69 63 61 74 6f 72 2d 2d 76 69 73 69 62 6c 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 76 33 56 6d 38 38 4b 48 5f 5f 67 72 6f 77 Data Ascii: Indicator--xl .EUIwkjAy__Checkmark-arm--left{border-radius:2px;width:4px}.VzoDid2x__SuccessIndicator.m5IzsSkR__Indicator--xl .PiaUyDG3__Checkmark-arm--right{border-radius:2px;height:4px}.Qh7lBF70__SuccessIndicator--visible{-webkit-animation:v3Vm88KH__grow
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 61 6c 65 28 31 29 7d 2e 55 6f 65 6b 56 6f 6e 39 5f 5f 45 72 72 6f 72 49 6e 64 69 63 61 74 6f 72 20 73 76 67 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 69 6e 2d 77 69 64 74 68 3a 39 70 78 3b 77 69 64 74 68 3a 34 30 25 7d 2e 79 57 69 37 59 45 43 4f 5f 5f 49 6e 76 61 6c 69 64 49 6e 64 69 63 61 74 6f 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e Data Ascii: ale(1)}.UoekVon9__ErrorIndicator svg{height:auto;min-width:9px;width:40%}.yWi7YECO__InvalidIndicator{-ms-flex-align:center;-ms-flex-pack:center;-webkit-align-items:center;align-items:center;display:-webkit-inline-flex;display:-ms-inline-flexbox;display:in
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 38 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 59 37 32 63 69 30 49 30 5f 5f 43 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a Data Ascii: bkit-flex-shrink:0;flex-shrink:0;height:20px;margin-right:var(--spacing8);position:relative;width:20px}.Y72ci0I0__Checkbox-label{-ms-flex-align:start;-webkit-align-items:flex-start;align-items:flex-start;cursor:pointer;display:-webkit-inline-flex;display:
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 73 63 61 6c 65 28 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 45 55 49 77 6b 6a 41 79 5f 5f 43 68 65 63 6b 6d 61 72 6b 2d 61 72 6d 2d 2d 6c 65 66 74 2c 2e 5f 37 4b 31 50 48 6d 4d 74 5f 5f 43 68 65 63 6b 6d 61 72 6b 2d 61 72 6d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 73 20 65 61 73 65 20 2e 32 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 30 73 20 65 61 73 65 20 2e 32 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 30 73 20 65 61 73 65 20 2e 32 73 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 Data Ascii: scale(0);-ms-transform:scale(0);transform:scale(0);will-change:transform}.EUIwkjAy__Checkmark-arm--left,._7K1PHmMt__Checkmark-arm{transition:-webkit-transform 0s ease .2s;transition:transform 0s ease .2s;transition:transform 0s ease .2s,-webkit-transform
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 74 44 75 72 61 74 69 6f 6e 4f 70 61 63 69 74 79 3a 30 2e 33 73 3b 2d 2d 61 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 45 78 69 74 44 65 6c 61 79 4f 70 61 63 69 74 79 3a 30 73 7d 2e 41 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 41 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 2e 69 73 2d 65 6e 74 65 72 69 6e 67 7b 68 65 69 67 68 74 3a 30 7d 2e 41 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 2e 69 73 2d 65 6e 74 65 72 69 6e 67 2c 2e 41 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 2e 69 73 2d 65 78 69 74 69 6e 67 41 63 74 69 76 65 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 41 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 2e 69 73 2d 65 6e 74 65 72 69 6e 67 41 63 74 69 76 65 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 41 6e 69 6d Data Ascii: tDurationOpacity:0.3s;--animatePresenceExitDelayOpacity:0s}.AnimatePresence{position:relative}.AnimatePresence.is-entering{height:0}.AnimatePresence.is-entering,.AnimatePresence.is-exitingActive{opacity:0}.AnimatePresence.is-enteringActive{opacity:1}.Anim
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 2e 69 73 2d 65 78 69 74 69 6e 67 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 41 6e 69 6d 61 74 65 53 69 6e 67 6c 65 50 72 65 73 65 6e 63 65 49 74 65 6d 2e 69 73 2d 65 6e 74 65 72 69 6e 67 2c 2e 41 6e 69 6d 61 74 65 53 69 6e 67 6c 65 50 72 65 73 65 6e 63 65 49 74 65 6d 2e 69 73 2d 65 78 69 74 69 6e 67 7b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 41 6e 69 6d 61 74 65 53 69 6e 67 6c 65 50 72 65 73 65 6e 63 65 49 74 65 6d 2e 69 73 2d 65 6e 74 65 72 69 6e 67 2e 69 73 2d 69 6e 74 65 72 72 75 70 74 65 64 2c 2e 41 6e 69 6d 61 74 65 53 69 6e 67 6c 65 50 72 65 73 65 6e 63 65 49 74 65 6d 2e 69 73 2d 65 6e 74 65 72 69 6e 67 41 63 Data Ascii: .is-exiting{opacity:1;pointer-events:none}.AnimateSinglePresenceItem.is-entering,.AnimateSinglePresenceItem.is-exiting{left:0;position:absolute;top:0;width:100%}.AnimateSinglePresenceItem.is-entering.is-interrupted,.AnimateSinglePresenceItem.is-enteringAc
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 76 61 72 28 2d 2d 65 6e 74 65 72 44 75 72 61 74 69 6f 6e 29 20 76 61 72 28 2d 2d 74 69 6d 69 6e 67 46 75 6e 63 74 69 6f 6e 29 20 76 61 72 28 2d 2d 65 6e 74 65 72 44 65 6c 61 79 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 76 61 72 28 2d 2d 65 6e 74 65 72 44 75 72 61 74 69 6f 6e 29 20 76 61 72 28 2d 2d 74 69 6d 69 6e 67 46 75 6e 63 74 69 6f 6e 29 20 76 61 72 28 2d 2d 65 6e 74 65 72 44 65 6c 61 79 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 76 61 72 28 2d 2d 65 6e 74 65 72 44 75 72 61 74 69 6f 6e 29 20 76 61 72 Data Ascii: translateY(0);transform:translateY(0);transition:-webkit-transform var(--enterDuration) var(--timingFunction) var(--enterDelay);transition:transform var(--enterDuration) var(--timingFunction) var(--enterDelay);transition:transform var(--enterDuration) var
2024-12-20 18:03:58 UTC	1378	IN	Data Raw: 6e 67 41 63 74 69 76 65 3e 2e 46 61 64 65 2d 69 74 65 6d 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 76 61 72 28 2d 2d 66 61 64 65 45 6e 74 65 72 44 75 72 61 74 69 6f 6e 29 20 76 61 72 28 2d 2d 66 61 64 65 54 69 6d 69 6e 67 46 75 6e 63 74 69 6f 6e 29 20 76 61 72 28 2d 2d 66 61 64 65 45 6e 74 65 72 44 65 6c 61 79 29 7d 2e 46 61 64 65 2e 69 73 2d 65 78 69 74 69 6e 67 2e 69 73 2d 69 6e 74 65 72 72 75 70 74 65 64 3e 2e 46 61 64 65 2d 69 74 65 6d 2c 2e 46 61 64 65 2e 69 73 2d 65 78 69 74 69 6e 67 41 63 74 69 76 65 3e 2e 46 61 64 65 2d 69 74 65 6d 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 76 61 72 28 2d 2d 66 61 64 65 45 78 69 74 44 75 72 61 74 69 6f 6e 29 20 76 61 72 Data Ascii: ngActive>.Fade-item{opacity:1;transition:opacity var(--fadeEnterDuration) var(--fadeTimingFunction) var(--fadeEnterDelay)}.Fade.is-exiting.is-interrupted>.Fade-item,.Fade.is-exitingActive>.Fade-item{opacity:0;transition:opacity var(--fadeExitDuration) var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49874	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:58 UTC	1666	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717835749/1734717835749%0A-778.1813275055503%0A4%0A3%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%226FQXnIYg7b7AgsCqLoSQ70bWODubjdzL%22%2C%22mID%22%3A%221PJnG4DSWUQIpQ8%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22zendesk2019%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22fe3feadc90d3b32f24ac083c22901e0970b582ac%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Quick%20Pay%20-%20Inbox%20Health%22%2C%22url%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22ref%2 [TRUNCATED] Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=OpKzsCj8OxWGcfQUUhjm8euDKXifMJpG1E+4voOpeHhCIZ1d2jzBXDfnQgMhexbHbsxk3hny+970D9jIYTnnpzISjSTS2EcgbgNiDtndDa5Q0LA5LseqPOAKypng
2024-12-20 18:03:58 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:58 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=x/SW6bFt39C/0vJ8fPeUPoGbsWaIneqHSi34bEL3PBBM/7p68CPjTcg6T9WVyKU4pHIlaFwT5OwIH1kRTpaWMtazOhRHpT6VchFiZTXaV/FN9XIuxXPD76Rb0yDG; Expires=Fri, 27 Dec 2024 18:03:58 GMT; Path=/ Set-Cookie: AWSALBCORS=x/SW6bFt39C/0vJ8fPeUPoGbsWaIneqHSi34bEL3PBBM/7p68CPjTcg6T9WVyKU4pHIlaFwT5OwIH1kRTpaWMtazOhRHpT6VchFiZTXaV/FN9XIuxXPD76Rb0yDG; Expires=Fri, 27 Dec 2024 18:03:58 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:58 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-12-20 18:03:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49875	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:58 UTC	1973	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717833762/1734717833762%0A-779.3196208628339%0A3%0A4%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22title%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%7D%2C%22__messageID%22%3A2%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22session%22%2C%22page_path%22%5D%2C%22value%22%3A%7B%22url%24string%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b- [TRUNCATED] Host: widget-mediator.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=NFi9H2AerJmk9MMmqOENTTutpf5e7lIjR1prDRiKDGnyK1q65SY7MUDpK8Yh2STNWgiDSmmZxHZwbolu/gx2ANi6BJKLCiVW2QAm0/gbwGTHeOZ3CGN62P5fawR9; AWSALBCORS=OpKzsCj8OxWGcfQUUhjm8euDKXifMJpG1E+4voOpeHhCIZ1d2jzBXDfnQgMhexbHbsxk3hny+970D9jIYTnnpzISjSTS2EcgbgNiDtndDa5Q0LA5LseqPOAKypng
2024-12-20 18:03:58 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:03:58 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=9VObnfM+Ck+G1MT4e6spp3w6RyOfr6lLDFRA2Pk6Gr+moZysYlZAefKA6SzF+QiJi0ML3WZtZiB99RatJ8xCfmfBV/G4pkiuXO+adrfSMB4q7HDLtkWc1/u11l/Z; Expires=Fri, 27 Dec 2024 18:03:58 GMT; Path=/ Set-Cookie: AWSALBCORS=9VObnfM+Ck+G1MT4e6spp3w6RyOfr6lLDFRA2Pk6Gr+moZysYlZAefKA6SzF+QiJi0ML3WZtZiB99RatJ8xCfmfBV/G4pkiuXO+adrfSMB4q7HDLtkWc1/u11l/Z; Expires=Fri, 27 Dec 2024 18:03:58 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:03:58 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-12-20 18:03:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49880	52.210.46.219	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:58 UTC	655	OUT	POST /elements/wallet-config HTTP/1.1 Host: merchant-ui-api.stripe.com Connection: keep-alive Content-Length: 169 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.stripe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:58 UTC	169	OUT	Data Raw: 73 74 72 69 70 65 5f 6a 73 5f 69 64 3d 30 36 61 34 64 39 63 37 2d 63 38 34 39 2d 34 30 39 62 2d 38 64 62 30 2d 34 31 37 61 35 33 61 61 63 62 31 63 26 72 65 66 65 72 72 65 72 5f 68 6f 73 74 3d 70 61 74 69 65 6e 74 2e 69 6e 62 6f 78 68 65 61 6c 74 68 2e 63 6f 6d 26 6b 65 79 3d 70 6b 5f 6c 69 76 65 5f 47 4d 63 47 4d 34 72 79 6b 4e 62 59 44 39 35 6e 73 48 6c 77 6f 41 65 77 26 72 65 71 75 65 73 74 5f 73 75 72 66 61 63 65 3d 77 65 62 5f 73 70 6c 69 74 5f 63 61 72 64 5f 65 6c 65 6d 65 6e 74 5f 70 6f 70 75 70 Data Ascii: stripe_js_id=06a4d9c7-c849-409b-8db0-417a53aacb1c&referrer_host=patient.inboxhealth.com&key=pk_live_GMcGM4rykNbYD95nsHlwoAew&request_surface=web_split_card_element_popup
2024-12-20 18:03:59 UTC	1340	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:03:59 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 2895 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: https://js.stripe.com Access-Control-Expose-Headers: Request-Id Access-Control-Max-Age: 300 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'; img-src 'self'; script-src 'self' 'report-sample'; style-src 'self'; upgrade-insecure-requests; report-uri /csp-violation https://q.stripe.com/csp-violation?q=vHg6FPOh51VIiUj2wvxRCp_ZiatkzUGxtstmr02vJWpZo3yG5NlNxAPH_V1oI_U_f8BOT1fRZmnfzVs%3D Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop" Cross-Origin-Resource-Policy: same-site Expires: 0 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true} Reporting-Endpoints: coop="https://q.stripe.com/coop-report" Request-Id: req_ABhFwXfuDg5dC0 Vary: Origin X-Content-Type-Options: nosniff X-Robots-Tag: none X-Wc: ABC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-12-20 18:03:59 UTC	2895	IN	Data Raw: 7b 22 6c 69 6e 6b 5f 61 76 61 69 6c 61 62 6c 65 22 3a 7b 22 63 61 72 64 5f 65 6c 65 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 73 70 6c 69 74 5f 63 61 72 64 5f 65 6c 65 6d 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 70 61 79 6d 65 6e 74 5f 72 65 71 75 65 73 74 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 6f 75 74 22 3a 74 72 75 65 7d 2c 22 6c 69 6e 6b 5f 73 65 74 74 69 6e 67 73 22 3a 7b 22 6d 65 72 63 68 61 6e 74 5f 69 6e 66 6f 22 3a 7b 22 62 75 73 69 6e 65 73 73 5f 6e 61 6d 65 22 3a 22 49 4e 42 4f 58 20 48 45 41 4c 54 48 20 43 4f 52 50 2e 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 2c 22 63 75 73 74 6f 6d 65 72 5f 69 6e 66 6f 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 2c 22 6c 69 6e 6b 5f 68 63 61 70 74 63 68 61 5f 73 69 74 65 5f Data Ascii: {"link_available":{"card_element":false,"split_card_elements":false,"payment_request_button":true,"checkout":true},"link_settings":{"merchant_info":{"business_name":"INBOX HEALTH CORP.","country":"US"},"customer_info":{"country":"US"},"link_hcaptcha_site_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49885	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:59 UTC	672	OUT	GET /v3/fingerprinted/js/payment-request-inner-google-pay-6fc983c9284c67933a5e14c4b22c32b4.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/payment-request-inner-google-pay-3e5f7756d6176660c979cc629f258eab.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:59 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12253 Last-Modified: Mon, 16 Dec 2024 21:06:17 GMT ETag: "26c21664ab90a0616b393eda4422f672" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 333004 Date: Fri, 20 Dec 2024 18:03:59 GMT Via: 1.1 varnish X-Request-ID: 6126e08a-3e6b-4678-870b-a1088241ffd3 X-Served-By: cache-ewr-kewr1740020-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 72 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 72 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 69 5b 74 5d 28 61 2c 61 2e 65 78 70 6f 72 74 73 2c 65 29 2c 61 2e 6c 6f 61 64 65 64 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 61 2c 69 3d 7b 33 31 35 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 2c 69 3d 6e 28 39 33 33 32 34 29 2c 72 3d 6e 28 31 34 31 33 29 2c 6f 3d 6e 28 34 35 39 38 37 29 2c 73 3d 6e 28 33 39 35 38 31 29 2c 70 3d Data Ascii: !function(){"use strict";function e(t){var n=r[t];if(void 0!==n)return n.exports;var a=r[t]={id:t,loaded:!1,exports:{}};return i[t](a,a.exports,e),a.loaded=!0,a.exports}var t,n,a,i={31506:function(e,t,n){var a,i=n(93324),r=n(1413),o=n(45987),s=n(39581),p=
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 63 6c 69 65 6e 74 2e 6c 6f 61 64 50 61 79 6d 65 6e 74 44 61 74 61 28 65 29 7d 2c 74 68 69 73 2e 69 73 52 65 61 64 79 54 6f 50 61 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 63 6c 69 65 6e 74 2e 69 73 52 65 61 64 79 54 6f 50 61 79 28 65 29 7d 2c 74 68 69 73 2e 5f 63 6c 69 65 6e 74 3d 6e 65 77 20 67 6f 6f 67 6c 65 2e 70 61 79 6d 65 6e 74 73 2e 61 70 69 2e 50 61 79 6d 65 6e 74 73 43 6c 69 65 6e 74 28 74 29 7d 29 29 2c 45 3d 6e 28 32 34 36 34 33 29 2c 77 3d 6e 28 34 30 39 33 39 29 2c 43 3d 6e 28 35 36 32 37 34 29 2e 50 72 6f 6d 69 73 65 2c 6b 3d 5b 22 73 74 61 74 75 73 22 5d 2c 41 3d 5b 22 5f 5f 6d 65 72 63 68 61 6e 74 44 65 74 61 69 6c 73 22 2c 22 5f 5f 73 74 72 69 70 65 55 73 65 Data Ascii: ion(e){return n._client.loadPaymentData(e)},this.isReadyToPay=function(e){return n._client.isReadyToPay(e)},this._client=new google.payments.api.PaymentsClient(t)})),E=n(24643),w=n(40939),C=n(56274).Promise,k=["status"],A=["__merchantDetails","__stripeUse
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 6d 65 6e 74 4f 70 74 69 6f 6e 73 3d 28 30 2c 72 2e 5a 29 28 28 30 2c 72 2e 5a 29 28 7b 7d 2c 70 2e 5f 6c 61 74 65 73 74 50 61 79 6d 65 6e 74 4f 70 74 69 6f 6e 73 29 2c 61 29 3b 76 61 72 20 73 3d 28 30 2c 5f 2e 5f 74 29 28 70 2e 5f 6c 61 74 65 73 74 50 61 79 6d 65 6e 74 4f 70 74 69 6f 6e 73 2c 70 2e 5f 6d 65 72 63 68 61 6e 74 44 65 74 61 69 6c 73 29 2c 6c 3d 73 2e 74 72 61 6e 73 61 63 74 69 6f 6e 49 6e 66 6f 2c 63 3d 73 2e 73 68 69 70 70 69 6e 67 4f 70 74 69 6f 6e 50 61 72 61 6d 65 74 65 72 73 2c 75 3d 7b 6e 65 77 54 72 61 6e 73 61 63 74 69 6f 6e 49 6e 66 6f 3a 6c 7d 3b 72 65 74 75 72 6e 21 28 30 2c 64 2e 58 79 29 28 70 2e 5f 6c 61 74 65 73 74 50 61 79 6d 65 6e 74 4f 70 74 69 6f 6e 73 2e 73 68 69 70 70 69 6e 67 4f 70 74 69 6f 6e 73 2c 69 29 26 26 28 75 2e Data Ascii: mentOptions=(0,r.Z)((0,r.Z)({},p._latestPaymentOptions),a);var s=(0,_._t)(p._latestPaymentOptions,p._merchantDetails),l=s.transactionInfo,c=s.shippingOptionParameters,u={newTransactionInfo:l};return!(0,d.Xy)(p._latestPaymentOptions.shippingOptions,i)&&(u.
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 52 4f 52 22 29 2c 73 74 61 74 75 73 4d 65 73 73 61 67 65 3a 28 30 2c 6d 2e 6a 74 29 28 6d 2e 5a 5f 29 7d 29 2c 65 2c 22 50 61 79 2e 6a 73 20 6c 6f 61 64 50 61 79 6d 65 6e 74 44 61 74 61 2e 63 61 74 63 68 22 29 3b 72 65 74 75 72 6e 22 65 72 72 6f 72 22 3d 3d 3d 74 2e 74 79 70 65 3f 7b 74 61 67 3a 22 45 58 43 45 50 54 49 4f 4e 22 2c 65 72 72 6f 72 3a 65 7d 3a 7b 74 61 67 3a 22 50 41 59 4d 45 4e 54 53 5f 45 52 52 4f 52 22 2c 65 72 72 6f 72 3a 74 2e 76 61 6c 75 65 7d 7d 28 65 29 3b 69 66 28 22 50 41 59 4d 45 4e 54 53 5f 45 52 52 4f 52 22 3d 3d 3d 74 2e 74 61 67 26 26 28 22 43 41 4e 43 45 4c 45 44 22 3d 3d 3d 74 2e 65 72 72 6f 72 2e 73 74 61 74 75 73 43 6f 64 65 3f 70 2e 5f 65 6d 69 74 45 76 65 6e 74 28 7b 74 79 70 65 3a 22 63 61 6e 63 65 6c 22 7d 29 3a 70 2e Data Ascii: ROR"),statusMessage:(0,m.jt)(m.Z_)}),e,"Pay.js loadPaymentData.catch");return"error"===t.type?{tag:"EXCEPTION",error:e}:{tag:"PAYMENTS_ERROR",error:t.value}}(e);if("PAYMENTS_ERROR"===t.tag&&("CANCELED"===t.error.statusCode?p._emitEvent({type:"cancel"}):p.
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 29 7d 2c 74 68 69 73 2e 5f 61 75 74 68 65 6e 74 69 63 61 74 65 64 4f 72 69 67 69 6e 3d 61 2c 74 68 69 73 2e 5f 73 65 74 50 61 79 6d 65 6e 74 4f 70 74 69 6f 6e 73 28 74 29 2c 74 68 69 73 2e 5f 6d 65 72 63 68 61 6e 74 44 65 74 61 69 6c 73 3d 28 30 2c 64 2e 50 4d 29 28 74 2e 5f 5f 6d 65 72 63 68 61 6e 74 44 65 74 61 69 6c 73 2c 6e 29 2c 74 68 69 73 2e 5f 63 6c 69 65 6e 74 55 6e 61 76 61 69 6c 61 62 6c 65 3d 21 31 2c 74 68 69 73 2e 5f 72 65 70 6f 72 74 3d 69 2c 74 68 69 73 2e 5f 77 61 72 6e 3d 73 3b 76 61 72 20 6c 3d 28 30 2c 68 2e 6c 4f 29 28 6e 2e 61 70 69 4b 65 79 29 3d 3d 3d 68 2e 4b 6c 2e 6c 69 76 65 3f 22 50 52 4f 44 55 43 54 49 4f 4e 22 3a 22 54 45 53 54 22 2c 75 3d 7b 70 61 79 6d 65 6e 74 44 61 74 61 43 61 6c 6c 62 61 63 6b 73 3a 28 30 2c 72 2e 5a 29 Data Ascii: )},this._authenticatedOrigin=a,this._setPaymentOptions(t),this._merchantDetails=(0,d.PM)(t.__merchantDetails,n),this._clientUnavailable=!1,this._report=i,this._warn=s;var l=(0,h.lO)(n.apiKey)===h.Kl.live?"PRODUCTION":"TEST",u={paymentDataCallbacks:(0,r.Z)
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 22 73 68 69 70 70 69 6e 67 6f 70 74 69 6f 6e 63 68 61 6e 67 65 22 3a 63 61 73 65 22 73 68 69 70 70 69 6e 67 61 64 64 72 65 73 73 63 68 61 6e 67 65 22 3a 76 61 72 20 6e 3d 74 2e 70 61 79 6c 6f 61 64 2c 61 3d 6e 2e 75 70 64 61 74 65 57 69 74 68 2c 69 3d 28 30 2c 6f 2e 5a 29 28 6e 2c 49 29 3b 65 2e 77 61 69 74 46 6f 72 43 61 6c 6c 62 61 63 6b 28 74 2e 74 79 70 65 2c 69 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 6d 2e 47 75 29 28 53 2e 46 34 2c 65 2c 22 47 6f 6f 67 6c 65 20 50 61 79 20 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 43 61 6c 6c 62 61 63 6b 22 29 29 7d 28 6e 2c 74 2e 74 79 70 65 29 3b 4c 28 65 Data Ascii: switch(t.type){case"shippingoptionchange":case"shippingaddresschange":var n=t.payload,a=n.updateWith,i=(0,o.Z)(n,I);e.waitForCallback(t.type,i).then((function(n){var i=function(e,t){return(0,m.Gu)(S.F4,e,"Google Pay ".concat(t," Callback"))}(n,t.type);L(e
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 69 73 48 6f 73 74 65 64 49 6e 76 6f 69 63 65 50 61 67 65 3a 21 21 65 2e 5f 5f 69 73 48 6f 73 74 65 64 49 6e 76 6f 69 63 65 50 61 67 65 2c 69 73 50 61 79 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 21 21 65 2e 5f 5f 69 73 50 61 79 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 67 72 6f 75 70 49 64 3a 65 2e 5f 5f 65 6c 65 6d 65 6e 74 73 47 72 6f 75 70 49 64 2c 6f 6e 42 65 68 61 6c 66 4f 66 3a 65 2e 6f 6e 42 65 68 61 6c 66 4f 66 2c 61 6d 6f 75 6e 74 3a 65 2e 74 6f 74 61 6c 2e 61 6d 6f 75 6e 74 2c 63 75 72 72 65 6e 63 79 3a 65 2e 63 75 72 72 65 6e 63 79 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 61 76 61 69 6c 61 62 69 6c 69 74 79 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: isHostedInvoicePage:!!e.__isHostedInvoicePage,isPaymentElement:!!e.__isPaymentElement,groupId:e.__elementsGroupId,onBehalfOf:e.onBehalfOf,amount:e.total.amount,currency:e.currency}).then((function(e){var n=e.availability;return t(n)})).catch((function(){r
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 2e 66 5b 61 5d 28 74 2c 6e 29 2c 6e 7d 29 2c 5b 5d 29 29 7d 2c 65 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 6a 73 2f 22 2b 28 32 38 39 37 3d 3d 3d 65 3f 22 73 65 6e 74 72 79 22 3a 65 29 2b 22 2d 22 2b 7b 31 30 37 32 3a 22 38 35 38 30 66 35 32 33 33 35 36 65 66 62 64 36 39 65 36 66 38 33 36 35 31 62 30 39 34 32 32 65 22 2c 32 38 39 37 3a 22 35 35 65 37 39 34 61 34 35 39 30 36 62 33 39 32 38 33 35 32 64 31 63 64 38 33 37 34 34 32 34 64 22 7d 5b 65 5d 2b 22 2e 6a 73 22 7d 2c 65 2e 6d 69 6e 69 43 73 73 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 Data Ascii: ){return e.f[a](t,n),n}),[]))},e.u=function(e){return"fingerprinted/js/"+(2897===e?"sentry":e)+"-"+{1072:"8580f523356efbd69e6f83651b09422e",2897:"55e794a45906b3928352d1cd8374424d"}[e]+".js"},e.miniCssF=function(){},e.g=function(){if("object"==typeof globa
2024-12-20 18:03:59 UTC	1229	IN	Data Raw: 64 28 6e 75 6c 6c 2c 6f 2e 6f 6e 65 72 72 6f 72 29 2c 6f 2e 6f 6e 6c 6f 61 64 3d 75 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 2e 6f 6e 6c 6f 61 64 29 2c 73 26 26 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 7d 2c 65 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d Data Ascii: d(null,o.onerror),o.onload=u.bind(null,o.onload),s&&document.head.appendChild(o)}},e.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49884	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:59 UTC	640	OUT	GET /v3/fingerprinted/js/link-modal-inner-ed83c1976ac2b7b2ceab9468304dea5f.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/link-modal-inner-3856548e7a416d6bdacb10b20db090c3.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:03:59 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 820148 Last-Modified: Thu, 19 Dec 2024 21:09:14 GMT ETag: "15652d8db6efed067703b4b5415db938" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 14021 Date: Fri, 20 Dec 2024 18:03:59 GMT Via: 1.1 varnish X-Request-ID: 6d74cf55-c728-4118-9520-5a1c1373febe X-Served-By: cache-ewr-kewr1740077-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 63 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 63 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 73 5b 74 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 61 2c 6f 2c 75 2c 73 3d 7b 35 38 35 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 3d 2f 5e 28 28 63 Data Ascii: !function(){function e(t){var n=c[t];if(void 0!==n)return n.exports;var r=c[t]={id:t,loaded:!1,exports:{}};return s[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,i,a,o,u,s={58594:function(e,t,n){"use strict";n.d(t,{Z:function(){return i}});var r=/^((c
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 70 65 6c 6c 43 68 65 63 6b 7c 73 72 63 7c 73 72 63 44 6f 63 7c 73 72 63 4c 61 6e 67 7c 73 72 63 53 65 74 7c 73 74 61 72 74 7c 73 74 65 70 7c 73 74 79 6c 65 7c 73 75 6d 6d 61 72 79 7c 74 61 62 49 6e 64 65 78 7c 74 61 72 67 65 74 7c 74 69 74 6c 65 7c 74 79 70 65 7c 75 73 65 4d 61 70 7c 76 61 6c 75 65 7c 77 69 64 74 68 7c 77 6d 6f 64 65 7c 77 72 61 70 7c 61 62 6f 75 74 7c 64 61 74 61 74 79 70 65 7c 69 6e 6c 69 73 74 7c 70 72 65 66 69 78 7c 70 72 6f 70 65 72 74 79 7c 72 65 73 6f 75 72 63 65 7c 74 79 70 65 6f 66 7c 76 6f 63 61 62 7c 61 75 74 6f 43 61 70 69 74 61 6c 69 7a 65 7c 61 75 74 6f 43 6f 72 72 65 63 74 7c 61 75 74 6f 53 61 76 65 7c 63 6f 6c 6f 72 7c 69 6e 65 72 74 7c 69 74 65 6d 50 72 6f 70 7c 69 74 65 6d 53 63 6f 70 65 7c 69 74 65 6d 54 79 70 65 7c 69 Data Ascii: pellCheck\|src\|srcDoc\|srcLang\|srcSet\|start\|step\|style\|summary\|tabIndex\|target\|title\|type\|useMap\|value\|width\|wmode\|wrap\|about\|datatype\|inlist\|prefix\|property\|resource\|typeof\|vocab\|autoCapitalize\|autoCorrect\|autoSave\|color\|inert\|itemProp\|itemScope\|itemType\|i
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 6b 65 72 45 6e 64 7c 6d 61 72 6b 65 72 4d 69 64 7c 6d 61 72 6b 65 72 53 74 61 72 74 7c 6d 61 72 6b 65 72 48 65 69 67 68 74 7c 6d 61 72 6b 65 72 55 6e 69 74 73 7c 6d 61 72 6b 65 72 57 69 64 74 68 7c 6d 61 73 6b 7c 6d 61 73 6b 43 6f 6e 74 65 6e 74 55 6e 69 74 73 7c 6d 61 73 6b 55 6e 69 74 73 7c 6d 61 74 68 65 6d 61 74 69 63 61 6c 7c 6d 6f 64 65 7c 6e 75 6d 4f 63 74 61 76 65 73 7c 6f 66 66 73 65 74 7c 6f 70 61 63 69 74 79 7c 6f 70 65 72 61 74 6f 72 7c 6f 72 64 65 72 7c 6f 72 69 65 6e 74 7c 6f 72 69 65 6e 74 61 74 69 6f 6e 7c 6f 72 69 67 69 6e 7c 6f 76 65 72 66 6c 6f 77 7c 6f 76 65 72 6c 69 6e 65 50 6f 73 69 74 69 6f 6e 7c 6f 76 65 72 6c 69 6e 65 54 68 69 63 6b 6e 65 73 73 7c 70 61 6e 6f 73 65 31 7c 70 61 69 6e 74 4f 72 64 65 72 7c 70 61 74 68 4c 65 6e 67 74 Data Ascii: kerEnd\|markerMid\|markerStart\|markerHeight\|markerUnits\|markerWidth\|mask\|maskContentUnits\|maskUnits\|mathematical\|mode\|numOctaves\|offset\|opacity\|operator\|order\|orient\|orientation\|origin\|overflow\|overlinePosition\|overlineThickness\|panose1\|paintOrder\|pathLengt
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 6c 53 70 61 63 65 7c 79 7c 79 31 7c 79 32 7c 79 43 68 61 6e 6e 65 6c 53 65 6c 65 63 74 6f 72 7c 7a 7c 7a 6f 6f 6d 41 6e 64 50 61 6e 7c 66 6f 72 7c 63 6c 61 73 73 7c 61 75 74 6f 66 6f 63 75 73 29 7c 28 28 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 41 61 5d 7c 5b 41 61 5d 5b 52 72 5d 5b 49 69 5d 5b 41 61 5d 7c 78 29 2d 2e 2a 29 29 24 2f 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 5b 6e 5d 26 26 28 74 5b 6e 5d 3d 65 28 6e 29 29 2c 74 5b 6e 5d 7d 7d 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 74 65 73 74 28 65 29 7c 7c 31 31 31 3d 3d 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 26 26 31 31 30 3d 3d 3d Data Ascii: lSpace\|y\|y1\|y2\|yChannelSelector\|z\|zoomAndPan\|for\|class\|autofocus)\|(([Dd][Aa][Tt][Aa]\|[Aa][Rr][Ii][Aa]\|x)-.*))$/,i=function(e){var t={};return function(n){return void 0===t[n]&&(t[n]=e(n)),t[n]}}((function(e){return r.test(e)\|\|111===e.charCodeAt(0)&&110===
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 3b 72 65 74 75 72 6e 28 30 2c 75 2e 5a 29 28 7b 7d 2c 74 2c 7b 63 61 63 68 65 4b 65 79 3a 72 2c 6c 6f 61 64 69 6e 67 3a 74 2e 6c 6f 61 64 69 6e 67 7c 7c 74 2e 63 61 63 68 65 4b 65 79 21 3d 3d 72 7d 29 7d 3b 76 61 72 20 61 3d 72 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 61 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6d 6f 75 6e 74 65 64 3d 21 30 2c 74 68 69 73 2e 73 74 61 74 65 2e 6c 6f 61 64 69 6e 67 3f 74 68 69 73 2e 6c 6f 61 64 41 73 79 6e 63 28 29 3a 74 68 69 73 2e 73 74 61 74 65 2e 65 72 72 6f 72 7c 7c 74 68 69 73 2e 74 72 69 67 67 65 72 4f 6e 4c 6f 61 64 28 29 7d 2c 61 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 2e 63 Data Ascii: ;return(0,u.Z)({},t,{cacheKey:r,loading:t.loading\|\|t.cacheKey!==r})};var a=r.prototype;return a.componentDidMount=function(){this.mounted=!0,this.state.loading?this.loadAsync():this.state.error\|\|this.triggerOnLoad()},a.componentDidUpdate=function(e,t){t.c
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 78 74 72 61 63 74 6f 72 2c 28 30 2c 6f 2e 5a 29 28 65 2c 5b 22 66 6f 72 77 61 72 64 65 64 52 65 66 22 2c 22 66 61 6c 6c 62 61 63 6b 22 2c 22 5f 5f 63 68 75 6e 6b 45 78 74 72 61 63 74 6f 72 22 5d 29 29 2c 73 3d 74 68 69 73 2e 73 74 61 74 65 2c 63 3d 73 2e 65 72 72 6f 72 2c 6c 3d 73 2e 6c 6f 61 64 69 6e 67 2c 64 3d 73 2e 72 65 73 75 6c 74 3b 69 66 28 74 2e 73 75 73 70 65 6e 73 65 29 7b 76 61 72 20 66 3d 74 68 69 73 2e 67 65 74 43 61 63 68 65 28 29 3b 69 66 28 21 66 29 74 68 72 6f 77 20 74 68 69 73 2e 6c 6f 61 64 41 73 79 6e 63 28 29 3b 72 65 74 75 72 6e 20 69 28 7b 6c 6f 61 64 69 6e 67 3a 21 31 2c 66 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 72 65 73 75 6c 74 3a 66 2c 6f 70 74 69 6f 6e 73 3a 74 2c 70 72 6f 70 73 3a 28 30 2c 75 2e 5a 29 28 7b 7d 2c 61 2c 7b 72 Data Ascii: xtractor,(0,o.Z)(e,["forwardedRef","fallback","__chunkExtractor"])),s=this.state,c=s.error,l=s.loading,d=s.result;if(t.suspense){var f=this.getCache();if(!f)throw this.loadAsync();return i({loading:!1,fallback:null,result:f,options:t,props:(0,u.Z)({},a,{r
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 74 3d 65 29 7d 2c 72 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 73 75 6c 74 2c 6e 3d 65 2e 6c 6f 61 64 69 6e 67 2c 72 3d 65 2e 70 72 6f 70 73 3b 72 65 74 75 72 6e 21 6e 26 26 72 2e 63 68 69 6c 64 72 65 6e 3f 72 2e 63 68 69 6c 64 72 65 6e 28 74 29 3a 6e 75 6c 6c 7d 7d 29 2c 5f 3d 62 2e 6c 6f 61 64 61 62 6c 65 2c 6b 3d 62 2e 6c 61 7a 79 2c 53 3d 76 3b 53 2e 6c 69 62 3d 5f 2c 79 2e 6c 69 62 3d 6b 3b 74 2e 5a 50 3d 53 7d 2c 39 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b Data Ascii: t=e)},render:function(e){var t=e.result,n=e.loading,r=e.props;return!n&&r.children?r.children(t):null}}),_=b.loadable,k=b.lazy,S=v;S.lib=_,y.lib=k;t.ZP=S},94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arguments.length;
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 46 6c 61 67 49 63 6f 6e 2d 41 4d 2d 36 61 31 33 39 32 34 37 36 65 65 35 63 38 35 66 65 64 34 36 66 37 30 66 33 39 63 64 37 36 36 39 2e 73 76 67 22 7d 2c 35 32 30 35 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 46 6c 61 67 49 63 6f 6e 2d 41 4f 2d 33 62 34 65 30 33 63 39 34 63 34 31 39 66 37 65 63 36 38 39 62 34 39 34 37 36 39 61 64 34 30 65 2e 73 76 67 22 7d 2c 35 35 31 34 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 46 6c 61 67 Data Ascii: ,t,n){e.exports=n.p+"fingerprinted/img/FlagIcon-AM-6a1392476ee5c85fed46f70f39cd7669.svg"},52059:function(e,t,n){e.exports=n.p+"fingerprinted/img/FlagIcon-AO-3b4e03c94c419f7ec689b494769ad40e.svg"},55141:function(e,t,n){e.exports=n.p+"fingerprinted/img/Flag
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 46 6c 61 67 49 63 6f 6e 2d 42 46 2d 66 32 65 64 30 35 31 65 35 33 38 39 62 32 65 64 39 35 32 31 30 62 64 65 32 30 63 39 36 38 34 32 2e 73 76 67 22 7d 2c 34 35 30 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 46 6c 61 67 49 63 6f 6e 2d 42 47 2d 30 30 38 62 65 38 66 38 33 63 63 38 33 65 35 65 61 30 38 31 61 62 34 61 34 64 31 34 37 32 38 32 2e 73 76 67 22 7d 2c 38 33 31 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 46 6c 61 67 49 Data Ascii: t,n){e.exports=n.p+"fingerprinted/img/FlagIcon-BF-f2ed051e5389b2ed95210bde20c96842.svg"},45046:function(e,t,n){e.exports=n.p+"fingerprinted/img/FlagIcon-BG-008be8f83cc83e5ea081ab4a4d147282.svg"},83169:function(e,t,n){e.exports=n.p+"fingerprinted/img/FlagI
2024-12-20 18:03:59 UTC	1378	IN	Data Raw: 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 46 6c 61 67 49 63 6f 6e 2d 42 56 2d 30 38 30 62 30 39 64 65 30 34 37 62 63 66 61 61 37 64 66 61 34 30 32 61 35 38 33 61 33 30 61 32 2e 73 76 67 22 7d 2c 32 35 32 30 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 46 6c 61 67 49 63 6f 6e 2d 42 57 2d 65 65 62 32 39 34 38 33 38 33 37 30 61 37 36 32 32 63 39 34 33 66 61 36 63 64 30 61 66 32 33 64 2e 73 76 67 22 7d 2c 36 38 36 36 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 69 6d 67 2f 46 6c 61 67 49 63 6f 6e Data Ascii: ){e.exports=n.p+"fingerprinted/img/FlagIcon-BV-080b09de047bcfaa7dfa402a583a30a2.svg"},25203:function(e,t,n){e.exports=n.p+"fingerprinted/img/FlagIcon-BW-eeb294838370a7622c943fa6cd0af23d.svg"},68664:function(e,t,n){e.exports=n.p+"fingerprinted/img/FlagIcon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49883	52.222.144.10	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:59 UTC	894	OUT	GET /assets/icons/quickpay/hipaa_compliance-e7c73a7f11cecccd5088195f38aa751e.png HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __zlcmid=1PJnG4DSWUQIpQ8; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717830.46.0.0
2024-12-20 18:04:00 UTC	806	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 123155 Connection: close Date: Fri, 20 Dec 2024 18:04:00 GMT Last-Modified: Thu, 13 Jun 2024 20:08:50 GMT ETag: "406812922decfb2e52314c5f2b01279e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fb2da24822e38e789d39c4f5093e3062.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: 04UYa2PSLM8UeJM_TFitGx61L5qqv4grNQwREeQvcA0HgNdpDYeecw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:04:00 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bb f7 5b 54 49 f3 3e 8c eb 2a ab 22 66 05 01 51 19 40 04 05 44 65 c8 18 71 88 22 49 24 2a 49 40 c9 51 a2 22 28 8a a0 33 e4 ac 08 48 1a 14 44 72 4e 0e 59 14 90 0c 32 64 01 25 67 be dd 7d d0 75 3f ef 2f ef 1f f0 3c d7 b5 cf ee 3a e7 74 57 57 dd 75 d7 5d d5 67 bd af ca 4b 6d df 7a 70 2b 0d 0d cd 76 c2 95 8b d7 68 68 b6 94 c1 bf fe d9 0c fe e4 a4 f5 8c 18 f8 db 16 8b 2b ea d6 e0 df d8 e0 5f 1b 1c 62 25 ec 68 68 0e d3 10 2e 9e 53 76 08 ff de e9 96 dc d9 7f b3 fb 67 fd 4c 3e 7e d6 b6 66 a6 a7 62 e6 ca b7 6d cd fb d9 1e 3e 6d bf fa d2 8a e5 ca 5f f5 07 f4 37 9e 34 c9 f9 fb e2 de aa db d2 55 c2 a7 76 4b 29 95 bd bf f2 d0 ed 14 7b 0c b7 c9 d1 33 4a dc 77 9f c4 a9 aa ec 3f b8 33 dc fc 38 1f c7 e7 ab e9 3e 8d 8f 1f aa 6c 08 57 f6 89 Data Ascii: [TI>"fQ@Deq"I$I@Q"(3HDrNY2d%g}u?/<:tWWu]gKmzp+vhh+_b%hh.SvgL>~fbm>m_74UvK){3Jw?38>lW
2024-12-20 18:04:00 UTC	486	IN	Data Raw: 0f 5e fa 05 89 15 83 4f 93 01 21 f6 55 39 98 80 77 27 cf 79 1f 60 55 14 be 2f 6e ff 2f c4 1a 66 fe 44 bb e7 ea 14 b7 6d 6e c1 4b 1b c0 4c f9 f0 b3 63 77 2e 35 2c b4 de f1 d9 c1 56 02 83 3e 86 bd db 74 42 81 50 be b7 9d 5e 77 77 fe d4 a6 18 21 ab d7 8a ff d1 42 34 f9 31 eb 4a 39 ac 70 a0 09 1f 57 fd 67 8c cf 72 2a 6d a0 09 a6 57 03 91 e1 3a 0b bf 14 e9 f1 cf 60 bc a1 02 84 e6 10 a1 7d 56 9e a1 4c d1 9f 9f b9 08 17 f6 35 ca 7c 07 af 8c bc 8b 1e bc 00 ba 37 9a 89 be d1 4c 1a ba 3b 35 59 66 74 d1 14 92 70 43 7b 1e 0c 8c 3f 28 ab a3 44 e7 0f 36 b4 f9 c3 9c a9 c5 b5 20 1d d1 75 17 6d 74 7c c4 3b 0b 43 57 97 e1 ef 8d 8c d3 09 bf 07 66 34 43 2e a0 6f 6c 1b 03 86 75 c4 da e6 ae 6a 0e ff 43 43 73 0f 7d 8d a5 14 67 a2 52 4f 98 2c 94 b1 6f 70 ca db 4c cb b7 22 cf 6c Data Ascii: ^O!U9w'y`U/n/fDmnKLcw.5,V>tBP^ww!B41J9pWgr*mW:`}VL5\|7L;5YftpC{?(D6 umt\|;CWf4C.olujCCs}gRO,opL"l
2024-12-20 18:04:00 UTC	16384	IN	Data Raw: 9a d7 91 b8 d7 71 d8 d7 d8 be 34 bf 2e f6 2f 9b f0 9f 2b d9 37 6d 1c d3 cc 1c ff 1b 33 71 18 b3 2b 51 3c 2c 7f d1 48 9a ff 84 04 08 bf 33 02 a5 eb 46 8e c7 38 bf 75 dd ed fd 05 3f 62 43 ac db b8 81 cf 1b 36 89 3b 37 2e c3 5b 8a ba 68 3f cd f9 58 91 b4 9f 51 3e df 68 84 b5 ad 0f 27 d9 75 43 44 05 c2 ab db 96 06 ad cb e8 16 0d c2 b4 14 b9 ec c3 5c 00 7d b4 88 c3 76 f0 7f 9d 05 53 95 8e 94 57 40 a2 4c bf 78 b6 63 f5 8d cd 5f a0 ce 38 bb 15 88 e5 f1 08 cd 3c d3 7e d6 a7 9b cf 4b 69 97 91 02 18 12 41 18 7a 0d 92 3b 1c e7 e7 3f 1e 6d ed 08 16 58 8a 10 15 66 0b 3a 24 18 0f 7b ee 44 11 3b 6a 53 8b 19 57 c4 86 a2 97 93 26 cc b4 66 66 9d 64 fb 20 5f a0 34 05 51 2d a0 4c 07 36 6e b0 89 fb 6f f1 c7 cb 76 2f 7c f2 9b 62 ea 5b 8a 90 33 b8 e1 bc e0 24 22 cd 49 63 81 8f Data Ascii: q4./+7m3q+Q<,H3F8u?bC6;7.[h?XQ>h'uCD\}vSW@Lxc_8<~KiAz;?mXf:${D;jSW&ffd _4Q-L6nov/\|b[3$"Ic
2024-12-20 18:04:00 UTC	16384	IN	Data Raw: 39 b9 f7 02 a3 0d 86 bc e9 2d 07 20 e8 58 69 ec 55 d1 58 49 9f 0b 64 51 d5 f7 7e a7 2b 97 0d f8 d5 0b 00 e8 47 e6 d1 24 51 70 ad 16 52 a1 3e 9c f6 17 bf 31 24 98 d1 f9 d8 71 72 f2 85 ac 3c fd fc e9 3e f4 7f 8d 62 c2 41 02 2b 6f 95 36 00 29 36 78 7c 80 28 83 53 16 6d f6 1f f5 72 98 03 28 d3 09 c8 30 b9 9e 5c cd a2 d4 4a 90 c4 72 fc 1c 42 70 3d 7f 9a fa af 9a c3 36 d2 ac 4f fe f9 7f 79 56 cb 5d 21 ec 2f 39 22 8f fb b1 0a 1c 91 e9 b7 b1 10 b2 72 f5 bb 3d c4 80 a7 df c8 81 7b e8 bb 91 17 7b 71 45 7e 75 e1 23 3f ea b1 90 25 20 d4 d9 8a bf 23 85 a3 8e ff 53 27 3f 7f e4 8d 90 de 0d 56 9f a7 40 d3 74 cd 11 19 64 05 7d 09 30 e3 c3 fe 59 f4 23 14 f0 5a 7a 6b b8 ea 2e 6f c4 08 35 04 58 db 35 31 ec 41 54 0e 48 3d e9 80 fb cb df 76 c7 34 4f b0 17 86 9e 09 16 d4 46 7b Data Ascii: 9- XiUXIdQ~+G$QpR>1$qr<>bA+o6)6x\|(Smr(0\JrBp=6OyV]!/9"r={{qE~u#?% #S'?V@td}0Y#Zzk.o5X51ATH=v4OF{
2024-12-20 18:04:00 UTC	2048	IN	Data Raw: 4f 51 74 bf 45 d1 7d af 6b ff e9 0c f4 47 65 c0 81 8c 97 72 9b a9 3d 8f b6 d6 97 26 3e b7 5e de 32 90 b8 33 2f b1 c2 14 a9 ff c0 64 6c d8 76 e3 a4 b4 62 34 52 21 0a b0 c8 40 40 e0 48 1d 95 a1 4c b5 e6 8f b6 0a 4c 80 b0 74 16 8c 29 5d 94 98 82 e1 7e 6f 8e e6 96 cd b0 5c c3 01 12 2a 6b b9 21 d8 63 93 76 97 69 22 67 7f 49 dd f6 a1 8e 37 d4 e9 27 41 86 ba ef f7 6d f4 88 2f 46 4d 68 71 e1 18 36 72 69 2b 08 ea 02 0f 75 a1 41 49 40 7a 43 4d e8 4b df 9e 95 ac f9 9b a5 c6 fa 83 fb 61 0f 13 dd eb f4 39 8e 5a 26 be 38 4c 54 57 ea 12 e3 66 9f 96 31 44 9b 83 ba 38 66 3f 5f 7c 91 79 f9 c0 95 90 51 04 1d 50 3b 13 bf b3 b5 e4 3c 5d fb f2 48 a0 0b 92 73 dd 40 fe 06 6e f4 40 bb 1d b4 c4 f3 14 d6 62 8c 97 8a 22 51 4a 1b 7f b4 9c f0 4a f0 0c 71 41 cd 1c 98 66 59 a5 60 fa c8 Data Ascii: OQtE}kGer=&>^23/dlvb4R!@@HLLt)]~o\*k!cvi"gI7'Am/FMhq6ri+uAI@zCMKa9Z&8LTWf1D8f?_\|yQP;<]Hs@n@b"QJJqAfY`
2024-12-20 18:04:00 UTC	16384	IN	Data Raw: a8 41 9a 69 79 85 39 80 74 d3 fd 43 a4 58 28 90 1a 1d dc 65 44 5e 8c 55 d9 ff 06 cf 18 9c dc a1 2d 9f 2f 6c 47 90 3b 33 cf ba 29 b5 95 44 b0 f8 3e a0 4f 14 6b 62 ef d8 57 a3 15 7e 9d c1 1d 3a 24 f0 77 d5 5b cc 43 d5 b0 3f da a4 90 c4 8a a7 f5 df 82 df d3 e4 c2 e2 24 fd c2 55 21 6c 6b be ac 9f 89 df e6 f2 b3 99 10 9d be 87 98 43 60 97 fb d2 c6 a1 58 99 c8 62 a5 64 ba e6 e7 21 bb 6e 5b 7f 1a 8b e7 43 92 02 17 c1 17 f7 fd 5a 8d 1b 39 5c 4d 85 dd 32 66 cb b5 ff 8a aa e3 89 af 85 ca 76 93 ce 86 18 34 05 50 e9 03 99 3f c7 66 9b e0 ad 05 da 4d 04 90 8b 9f a1 5f c4 49 39 8d 3e 43 23 ce 44 2e 55 db 3b 27 d3 76 5a 0a 77 30 a7 33 f8 32 a8 41 62 b5 90 54 b6 6e 14 99 cd 37 78 96 0b 06 45 f8 13 bb d8 56 ca 4c 9d f9 ca c3 64 4d 90 ab b5 a6 4d e2 d9 90 a4 93 b3 b6 d9 bd Data Ascii: Aiy9tCX(eD^U-/lG;3)D>OkbW~:$w[C?$U!lkC`Xbd!n[CZ9\M2fv4P?fM_I9>C#D.U;'vZw032AbTn7xEVLdMM
2024-12-20 18:04:00 UTC	1024	IN	Data Raw: 53 05 c0 80 b1 bd 83 1f 22 68 a2 c4 fc 0e a1 ea de 5e 2b 4b 1c 62 6e d6 b6 70 e9 37 e5 1e bb 86 f0 09 16 79 d5 0e 45 0b 14 a2 8c 7d dd 78 96 ca 5a eb 65 90 16 aa 1c 20 72 4a 6f 38 4c 14 12 f4 e1 a5 a0 97 f2 8a e8 ae ee a5 41 09 5c fd 67 b7 d5 85 75 d7 a9 07 45 e0 2c 43 db 91 c5 b5 25 22 1b 57 40 37 9f 36 39 ce d6 16 33 91 17 21 b4 08 d4 3a ea a1 91 e0 07 4a b2 0c 22 08 eb 6e fe de 69 1e e8 97 91 d1 1b 74 dd f1 56 30 7f cc 1e 7a ec dc fe 2f af fb 5e a9 7e cc 1e 98 56 bf 65 44 79 60 89 b3 2a 77 4a 97 d7 e8 4f 2f 75 ef b6 4b ef a5 e8 96 5b db b7 e7 ad 9c 9c 56 df 2a 71 ea d8 6e 9f e9 b1 ed 7e c9 3f 2d a6 cd 99 d9 14 a9 7e a7 2a f1 c0 cb 7d a9 86 9c 17 f6 bc 16 7c 21 7b ff aa ec 3b d9 4c a9 03 a5 ea fb 64 af 0a cd ce 36 2e ce 67 c5 fe 72 dd 7b 65 70 b6 6c d3 Data Ascii: S"h^+Kbnp7yE}xZe rJo8LA\guE,C%"W@7693!:J"nitV0z/^~VeDy`wJO/uK[Vqn~?-~*}\|!{;Ld6.gr{epl
2024-12-20 18:04:00 UTC	16384	IN	Data Raw: 3c ed 4f 6b 0a c8 2c c1 c6 b4 e3 74 3a f4 5b 3d fd 3f b3 a6 09 dc 19 2a 1e bf c9 56 a3 f9 53 5f 48 19 47 86 31 25 d3 fe b2 69 bc 41 7f de be b6 37 5f a6 ec 39 10 b4 80 95 0b 63 66 aa 36 fb dc 8b fe fb 08 3e b9 1e 8f dc 36 58 95 22 e6 c0 4d ff fa 2e 83 bc 75 ae dd 3c 89 1c 97 d5 b2 e4 80 e3 7d 77 1d 64 07 fc 57 41 9f 3c 5c b6 78 fc 11 99 f5 fc f8 3c 03 09 26 3b d3 fa 24 9d e4 d7 6d 9d 0c 31 c9 56 c2 5c 62 1b 6c 22 06 ca dc b2 c0 79 b4 06 c3 1f 4e d7 54 66 05 e2 7c a5 2e 39 8d d0 ed 5c 84 68 2b f0 8c 06 7c 20 a0 3e ca f2 92 5b 74 82 4c 86 78 59 66 f1 27 e5 b6 ed e6 1d ee 08 0d ad 64 d4 1c 3e 17 7b df 5b c8 24 70 b2 a1 9a cc f3 34 4c ee a8 b5 f3 c2 0b 32 fb 84 9a cd ac af b7 57 73 44 6a f5 31 9e 16 56 a1 a6 9f 0c 02 71 e1 6d c0 45 c4 2e 72 dd 45 ba aa ee c3 Data Ascii: <Ok,t:[=?*VS_HG1%iA7_9cf6>6X"M.u<}wdWA<\x<&;$m1V\bl"yNTf\|.9\h+\| >[tLxYf'd>{[$p4L2WsDj1VqmE.rE
2024-12-20 18:04:00 UTC	16384	IN	Data Raw: f2 e1 17 e4 6a 68 a5 a5 74 85 4e d4 a3 07 4e 0b a1 4e 81 d8 a1 70 dd 8c 6d e3 cb ed cb a0 16 0f 30 99 4a 07 3e a9 90 b3 1d 94 d4 4d cf 77 d3 60 bf d5 0c a8 28 47 09 e3 60 a2 9a a6 a3 8d 25 d9 d3 c3 e2 56 92 b1 9d 08 6c b6 d8 21 c7 1a b9 d2 93 d5 c4 41 dd a3 80 3b 12 30 a0 8d a5 70 26 f8 1f 21 bf 26 fe 2c e5 f4 3b 1a b3 4b 42 84 60 e1 d0 75 c2 31 48 d2 cb dd b0 67 29 00 7a cb 93 75 4a 64 e0 69 bb 34 05 58 c4 91 7b 2a 19 0b 69 b3 9d bf d0 be 0a 3f b3 57 19 b7 a5 b3 b4 0f b1 7b 9a 70 35 d2 54 f1 f7 77 9f d2 d4 37 c2 8d 03 1e 67 a1 92 a1 b1 f3 1e fa 40 cc 88 03 8c d9 34 4f 93 b1 fc 7c 75 18 74 13 97 98 87 c4 df 83 87 61 40 2d d4 e1 c2 7a d2 dc 5b 7f 69 d5 97 23 79 a6 42 fb 93 db ac 7b 30 0c ee aa 53 5f 12 16 1a cb 0e c6 87 a7 d6 fb 41 2d 6b f0 91 bf 1d 88 9e Data Ascii: jhtNNNpm0J>Mw`(G`%Vl!A;0p&!&,;KB`u1Hg)zuJdi4X{*i?W{p5Tw7g@4O\|uta@-z[i#yB{0S_A-k
2024-12-20 18:04:00 UTC	16384	IN	Data Raw: e9 90 47 6f 64 f1 a9 3e 2c 72 86 ae 78 5a 3b 69 39 d2 1b 62 6a 72 ce 40 75 aa 88 fc 7c 67 55 4c c7 58 df af 7d 72 89 a1 a3 07 ee e2 1d 90 39 66 5d b3 4b 52 f2 12 fc dc cd 82 f3 ca c4 08 1d b3 c8 a5 80 b8 90 9b 8c e4 28 8d 1b 66 ef 89 a3 33 07 7a 5b 19 a1 2e f8 ee a5 6e f5 df c2 6f 39 48 9e 99 1f 4f 28 b7 47 cf d8 b9 51 a7 e9 f5 b4 e0 a1 ba 2e c4 51 d1 33 97 c5 62 39 30 c2 a0 f6 54 5d 7f 80 62 6c 95 24 85 d4 91 1b 4b f1 13 49 49 75 7a 5c 14 df 70 13 d4 01 85 39 e7 a0 ba 7f ee d5 21 bc 09 0d bf 75 fc c0 58 7f 45 52 8a 42 ab ea 9f 52 78 89 54 64 f8 fd 4e a1 57 40 04 e0 2f 52 d2 c7 5f 87 d5 af 1e 35 a2 50 e9 99 7c 0f a9 7f fe 95 b6 55 d4 4d a6 a3 5d 70 08 e2 42 38 30 f9 b1 86 86 d9 75 57 37 68 ff 3d 1f af 89 d5 34 74 72 82 18 43 a8 0e b9 70 80 a2 01 90 6e c8 Data Ascii: God>,rxZ;i9bjr@u\|gULX}r9f]KR(f3z[.no9HO(GQ.Q3b90T]bl$KIIuz\p9!uXERBRxTdNW@/R_5P\|UM]pB80uW7h=4trCpn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49886	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:59 UTC	766	OUT	GET /v3/.deploy_status_henson.json HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/v3/controller-with-preconnect-aab8b94fc04611f86646ae67152acdce.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "9bdbc44392db31ded05237a073d884d8" If-Modified-Since: Thu, 19 Dec 2024 21:49:29 GMT
2024-12-20 18:03:59 UTC	528	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 20 Dec 2024 18:03:59 GMT Via: 1.1 varnish Cache-Control: max-age=60 ETag: "9bdbc44392db31ded05237a073d884d8" Age: 1 X-Request-ID: 16b5ec97-a0f5-4657-9231-1fb72e7aa289 X-Served-By: cache-ewr-kewr1740048-EWR X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49887	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:59 UTC	416	OUT	GET /v3/.deploy_status_henson.json HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
2024-12-20 18:03:59 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 474 Last-Modified: Thu, 19 Dec 2024 21:49:29 GMT ETag: "9bdbc44392db31ded05237a073d884d8" Cache-Control: max-age=60 Content-Type: application/json access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Fri, 20 Dec 2024 18:03:59 GMT Via: 1.1 varnish Age: 1 X-Request-ID: 02040dc4-ec9b-414c-820d-adf72dc4a09a X-Served-By: cache-ewr-kewr1740074-EWR X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:03:59 UTC	474	IN	Data Raw: 7b 22 63 61 6e 61 72 79 50 65 72 63 65 6e 74 61 67 65 22 3a 30 2c 22 64 65 70 6c 6f 79 65 64 52 65 76 69 73 69 6f 6e 73 22 3a 5b 22 34 62 39 61 35 61 32 61 65 33 33 63 35 32 61 66 33 66 37 63 39 33 62 62 32 65 65 39 61 34 36 31 61 61 34 61 31 63 38 63 22 2c 22 30 34 63 31 33 61 62 32 39 30 66 37 33 35 33 33 64 33 65 39 39 31 39 33 30 37 62 64 38 66 66 34 36 30 36 37 36 36 30 61 22 2c 22 37 39 36 61 37 62 39 32 64 66 62 62 39 32 30 63 63 65 62 38 62 34 62 39 30 39 38 62 39 39 63 64 35 31 33 61 35 30 30 66 22 2c 22 65 32 35 61 35 61 33 65 63 34 38 36 64 35 37 32 37 61 61 38 31 61 62 37 34 65 61 32 66 36 36 36 37 33 31 31 64 31 66 30 22 2c 22 33 66 30 39 35 64 30 36 37 37 37 34 64 32 39 37 65 31 65 32 35 61 35 31 64 39 35 30 35 38 65 36 30 65 61 39 38 33 63 Data Ascii: {"canaryPercentage":0,"deployedRevisions":["4b9a5a2ae33c52af3f7c93bb2ee9a461aa4a1c8c","04c13ab290f73533d3e9919307bd8ff46067660a","796a7b92dfbb920cceb8b4b9098b99cd513a500f","e25a5a3ec486d5727aa81ab74ea2f6667311d1f0","3f095d067774d297e1e25a51d95058e60ea983c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49894	216.198.54.3	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:03:59 UTC	563	OUT	GET /web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-12-20 18:04:00 UTC	1224	IN	HTTP/1.1 206 Partial Content Date: Fri, 20 Dec 2024 18:04:00 GMT Content-Type: audio/mpeg; charset=utf-8 Content-Length: 19698 Connection: close x-amz-id-2: Th0spU1cJ07m9Psiasq9j01hBfBwd9naGfv7LdRpgnq09L8OXrdcxTGiqfNh/eXi1lfz2HxQ4ng+1u1yrOtZ/tUvC4mx8XkIDgPbNO5nFBA= x-amz-request-id: 12G31G5B10TKG12H x-amz-replication-status: COMPLETED Last-Modified: Tue, 26 Nov 2024 15:37:05 GMT ETag: "f11ce9e8f40a392830217253fe75d6de" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Wed, 26 Nov 2025 15:37:04 GMT x-amz-version-id: yUuWnbEePQYvxUjPkLfqiJC9Zk3rLSam CF-Cache-Status: HIT Age: 1938837 Content-Range: bytes 0-19697/19698 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mEJzyuyazFwXzZOfbBjPNvchIgwysWo4evrIJFDOMHPAsYGOMS1OJWQNvVwYFh2ZvvhaUXesMHtBjRoFVhgC5nxo1boqg%2FiqNK1WTfP3DGQGrfJ4h5rBl6sd2HKnZxQVZnw5IvI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8f518d65be8f41cf-EWR
2024-12-20 18:04:00 UTC	145	IN	Data Raw: 49 44 33 03 00 00 00 00 33 69 50 52 49 56 00 00 11 df 00 00 58 4d 50 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 Data Ascii: ID33iPRIVXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
2024-12-20 18:04:00 UTC	1369	IN	Data Raw: 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 Data Ascii: 1 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="h
2024-12-20 18:04:00 UTC	1369	IN	Data Raw: 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 37 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 41 30 46 35 30 34 45 41 45 41 41 38 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 33 2d 30 34 2d 30 34 54 31 31 3a 30 32 3a 30 31 2b 30 38 3a 30 30 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 41 75 64 69 74 69 6f 6e 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 0a 20 20 20 20 3c 2f 72 64 66 3a 53 65 71 3e 0a 20 20 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 0a 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 Data Ascii: nstanceID="xmp.iid:078011740720681192B0A0F504EAEAA8" stEvt:when="2013-04-04T11:02:01+08:00" stEvt:softwareAgent="Adobe Audition CS6 (Macintosh)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:insta
2024-12-20 18:04:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 Data Ascii:
2024-12-20 18:04:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-20 18:04:00 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-20 18:04:00 UTC	1369	IN	Data Raw: 0f c4 63 48 77 1a 63 b8 84 22 63 54 99 2e 16 7c b6 54 27 cd cd 09 d4 0e 98 b7 cb e9 a0 9a d0 5a 2c 71 1f 56 9a d0 4e a5 f5 a3 f5 ff fe 58 4f ff ff ff ff e9 b4 04 b1 00 00 86 95 00 00 03 c9 52 11 22 46 6c 38 fa ff fb 90 40 04 00 02 11 36 d5 7f 6d a0 08 4e e6 ca af ee 34 01 47 e0 d9 53 8d ed 4b 71 56 32 2a f5 ba a9 b6 80 23 90 3c 32 fa e0 d6 9c 25 c6 c5 c2 a5 c2 02 b5 5a 22 36 07 0b 01 41 4e bc 30 48 09 61 80 a2 85 d4 6c 2e 14 92 fc 4d d6 df fe c5 bf ff ff a9 21 26 3f ff ff 36 ff fe a2 eb d4 20 88 91 92 ae fc 7d 40 11 e8 5c 32 e0 d2 30 e6 54 9e 69 36 60 12 90 20 9a 50 05 06 1c 0c 52 0a 30 98 94 fa 24 a3 16 81 8c 0a 0a 02 f4 27 a2 f1 70 79 24 f5 f0 db 24 51 6f 5e d5 d8 6e 4b ff ff e9 19 06 d1 09 ff db f6 25 bf ff a8 70 8d d5 a0 49 52 7e 72 05 2c 19 37 00 5d Data Ascii: cHwc"cT.\|T'Z,qVNXOR"Fl8@6mN4GSKqV2*#<2%Z"6AN0Hal.M!&?6 }@\20Ti6` PR0$'py$$Qo^nK%pIR~r,7]
2024-12-20 18:04:00 UTC	1369	IN	Data Raw: d4 00 59 6b 9a a9 d3 25 ab 0d 49 c7 93 3e 7b 54 e8 80 b5 37 6e 42 b7 a4 58 dc a2 88 d6 ec 9c 02 64 ba 85 c4 d2 c0 ec c8 d6 ad 31 89 eb ed 25 36 b3 71 39 46 1c 8e b0 ff 53 fd bb 01 4c 44 1e 9f 77 f4 80 fa b0 01 77 5d ac 00 00 fc 38 6e c2 ef 67 05 cf 4e 42 6f c8 86 10 68 41 b0 22 94 94 17 ac c3 f0 23 1a 0c 66 e9 1e 99 08 e4 ff be 91 aa 48 75 7d c8 25 ed 08 42 24 7f 46 71 3a da d1 4b 0f 76 5f 0e b5 43 e4 30 ca 11 97 ad 2b 09 17 4a 45 98 33 5e be 9a d4 d4 de ff f5 c4 6b 39 7f e6 49 53 ff ff ba 80 2e a6 a4 c4 13 31 85 d4 95 ba 65 c1 1b 38 e0 9b 3c e4 38 f1 c0 b5 1c 34 a7 71 60 53 e4 9f 43 6d 34 49 34 23 39 18 a2 80 fc f9 73 a2 11 97 16 4c b4 ad 5d ea b1 eb 0c 57 70 ae f0 61 10 50 4e 44 65 fd 29 a5 2f 77 e2 6f f3 00 07 b6 db 40 00 0d ab c4 fc b8 cb 94 b4 4c a4 Data Ascii: Yk%I>{T7nBXd1%6q9FSLDww]8ngNBohA"#fHu}%B$Fq:Kv_C0+JE3^k9IS.1e8<84q`SCm4I4#9sL]WpaPNDe)/wo@L
2024-12-20 18:04:00 UTC	1369	IN	Data Raw: 54 03 ca 62 45 27 97 d1 3f 58 f2 96 3c bb 61 11 ab a4 41 8f 24 d0 cb 81 e2 68 a9 d0 b3 9f 44 cd 54 4b 74 a1 63 3d 9d ad 9d aa 96 f7 69 c7 f8 6e 72 8e ae 57 de 2c 3d 4d 5d df 37 87 0a 22 eb 65 9d 38 0e dd 92 42 bb 5b 58 00 0a 4b b2 7a 8b 78 4d b1 61 64 ab 92 49 9a 86 3c 24 0e 86 1a 22 60 f2 2d a6 51 bb ef 43 6d 23 67 af 8a b2 25 d8 30 02 d4 3e 0a 60 e6 82 bc 2e 69 2a e2 ba cb e0 28 f4 92 c6 31 bc 63 f0 db f3 2e 88 d1 5a af 37 56 66 ec ab 96 71 ec c4 ba ae 37 b2 ff ff a0 dd 33 6f d9 04 3d f6 da 00 00 ac b8 73 08 1a 85 7d 86 a9 1f 13 b9 9b 37 16 ed ab 0d 06 53 3d 15 44 41 11 1a 40 f1 0a 0c c7 5f 84 c2 15 29 9a 2e e2 c8 a5 2c c5 b0 d9 20 66 f8 d1 3a 4e 65 2a 6d 1f d9 21 bc a2 69 77 3d a4 74 8e 9e cc fb 8a ae 96 ae ed bc de 3c e8 a8 db d6 00 57 eb ff fb 90 60 Data Ascii: TbE'?X<aA$hDTKtc=inrW,=M]7"e8B[XKzxMadI<$"`-QCm#g%0>`.i(1c.Z7Vfq73o=s}7S=DA@_)., f:Nem!iw=t<W`
2024-12-20 18:04:00 UTC	1369	IN	Data Raw: d8 2c 8b 10 14 8b 6f ce 78 8c ab ec 0c 2d 91 56 ec d6 f1 e6 a3 d6 d7 bd e6 60 84 47 7f 40 b7 54 00 5b 5b 22 00 01 26 e6 76 61 f6 18 d3 c9 c9 0e 90 a5 0d b6 d1 a2 25 42 80 b7 c0 16 a0 d7 11 42 a6 10 4a a2 c0 40 90 40 0a da a4 55 11 20 15 20 eb 37 58 9b 4e 87 e5 31 b7 fe 3c e4 b9 2e 0e 10 c4 b6 ff 32 ec cd 8d 6f fe cf 85 92 24 96 ff cf ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb 90 60 dc 80 02 c9 1f 4f eb 1a c2 4e 53 84 7a 3d 63 2f 4b ca 40 7b 41 ac 65 e9 31 4a 90 69 7d ac 3d 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb b5 44 85 b5 b6 30 00 1f 12 c2 5f 3b 8b 32 fc a2 53 0d ee 1e 4c 82 b0 af 05 5d 53 97 23 f4 17 51 3d 63 96 78 b0 25 02 2f d8 42 95 81 a6 46 e6 21 f7 d5 b3 b4 e8 3e 89 92 cb e0 c9 7b c7 37 18 8b cd 52 4a e2 9f a8 84 Data Ascii: ,ox-V`G@T[["&va%BBJ@@U 7XN1<.2o$`ONSz=c/K@{Ae1Ji}='D0_;2SL]S#Q=cx%/BF!>{7RJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49888	142.250.181.132	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:00 UTC	338	OUT	HEAD /pay HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:04:00 UTC	338	IN	HTTP/1.1 302 Found Location: https://pay.google.com/about/redirect/ Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 20 Dec 2024 18:04:00 GMT Server: sffe Content-Length: 235 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49889	52.222.144.12	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:00 UTC	1301	OUT	GET /assets/icons/quickpay/soc-7d610560b68610eb2dedfd7e759ddf49.png HTTP/1.1 Host: patient.inboxhealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patient.inboxhealth.com/quickPay?confirmation_token=XHcUtg&enterprise_id=7272&landing_page=false&patient_id=36304491&paymentCreateRoute=paymentMethodSelection&uuid=e0a63f3e-cd6b-4c6a-b737-957ba382f5ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.697303844.1734717810; _gid=GA1.2.603093165.1734717810; _gat=1; _hjSessionUser_1820622=eyJpZCI6Ijg1YjI1YzdjLTVjNDEtNTdlNC1iMmVjLTVlZGI3MmQwNDYxZCIsImNyZWF0ZWQiOjE3MzQ3MTc4MTYzMjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1820622=eyJpZCI6ImE3MTI5MzY0LTkwODgtNGMxZS1hZDExLWRlNDVhMTNmOTIzMCIsImMiOjE3MzQ3MTc4MTYzMjksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __zlcmid=1PJnG4DSWUQIpQ8; _ga_H07SGNNMD6=GS1.2.1734717816.1.1.1734717830.46.0.0
2024-12-20 18:04:01 UTC	806	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 522462 Connection: close Date: Fri, 20 Dec 2024 18:04:01 GMT Last-Modified: Thu, 13 Jun 2024 20:08:50 GMT ETag: "5e40ecd8eb1c13375c5e8066db6823a7" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ba055a10d278614dad75399031edff3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: ZmEX0fI0Wjw8903a5EoEKLH2lxNtte3dXa8VAiiXEMN-yuWVGSClSg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-12-20 18:04:01 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc ba 07 54 53 5b b7 06 ba 43 ef 4d 9a d4 10 2c 28 02 a1 f7 0e 82 22 82 14 41 7a 80 d0 21 11 02 a1 13 40 8a 20 c5 06 8a d2 11 a4 a3 22 bd 0b a2 d2 3b d2 8b f4 aa 10 90 fe 12 3c e7 e8 bd f7 ff ef bd ef 8e f1 c6 78 7b 0c 4a d6 9e 6b ed b9 66 f9 e6 37 d7 ce 7d dd 9b 1a d4 14 6c 14 00 00 50 5f d3 54 d3 03 00 e2 61 dc 4f 27 19 09 6e 24 a8 41 27 16 f7 87 c8 5e 59 5b 19 00 de c4 51 1e c2 88 01 80 e2 9a a3 aa aa ae 87 9e 86 0a f8 9a ba aa 84 b0 b4 84 84 80 88 a0 30 00 68 de 4f d6 47 1b 3f de 65 56 98 dc 85 d3 de 56 19 de 7c 93 e8 12 0c 40 78 0b c8 3e d1 dd c9 a0 7b 04 c0 ee d1 31 28 b5 84 45 52 dc 66 64 a2 7f a9 69 d8 1c 32 40 a1 99 1c 39 93 c6 57 61 af 1c 15 69 12 6d 68 26 b5 ce 3d 96 f3 3e c0 77 63 6d ed 60 e8 a0 66 e1 e5 c2 61 a7 Data Ascii: TS[CM,("Az!@ ";<x{Jkf7}lP_TaO'n$A'^Y[Q0hOG?eVV\|@x>{1(ERfdi2@9Waimh&=>wcm`fa
2024-12-20 18:04:01 UTC	412	IN	Data Raw: 51 89 e4 ea 99 f5 f2 5a d4 9a 86 65 e5 f7 3b 96 1e a0 1b 44 c1 3c b8 28 12 b0 c2 17 4c 87 c6 eb 84 49 6c 0a d8 cd e9 7c 85 9f 6b 17 27 8f be 4d bb 3f f5 33 ce 47 2a 51 cd d3 a4 01 57 20 e0 b4 27 91 53 d2 45 4c a1 55 d9 0d 77 e4 69 dd 28 5e 53 5a eb 44 7e c0 c8 4f a6 80 fc 2c db 84 99 70 26 a9 c7 9f 91 77 bd 00 f9 d9 dc c1 a5 3d 2b 0e aa 3c 18 4b d0 3a dc 5b fe 44 04 61 15 8d 86 ba 58 b3 62 02 ef c7 ca 44 a5 b7 e6 b1 da 9a 0b 58 f9 7d 1b 7e 12 ee a0 d6 b9 95 e2 20 ac 7a d7 e1 e1 db 16 c2 4c 3a 18 2d 0e d5 4d e2 4f 8d 74 e9 f2 ee 75 52 f7 f9 01 4e 73 59 99 5b cf 78 22 74 27 9e 7b bd 9e d3 52 7c 8b 6d 28 f6 3f 3c 96 47 c8 0f 53 b4 51 36 8b d3 d3 f4 61 20 1f 65 a6 92 35 15 41 1e 38 5c f4 f7 c3 d1 47 81 56 03 9c 1e 87 75 38 63 29 22 48 56 63 e0 b0 06 05 1b 5c Data Ascii: QZe;D<(LIl\|k'M?3G*QW 'SELUwi(^SZD~O,p&w=+<K:[DaXbDX}~ zL:-MOtuRNsY[x"t'{R\|m(?<GSQ6a e5A8\GVu8c)"HVc\
2024-12-20 18:04:01 UTC	892	IN	Data Raw: a1 59 ef 48 5f 04 fb 8e f8 af 50 89 e8 e0 90 39 ef 94 c7 e6 08 92 82 a5 c1 09 dd 95 54 af 55 b1 97 51 fb 83 45 99 2f dc 8e a7 a7 87 02 96 a7 6b 15 17 1a 4c 5a 00 0e 57 a5 73 6b df e6 7c 5e dd 59 7c e2 43 4c 88 a3 d2 b5 5b 04 b8 a7 8b fe f1 3e 2b 15 e7 1f 69 54 14 c9 2a 84 46 32 94 10 49 4d e7 c1 b8 27 6a c3 06 20 54 cf b9 8c a2 26 be 54 17 7f ad 59 af d2 ea 34 f5 41 d8 6b 3f 55 41 11 a6 e9 41 62 1c 33 63 60 d3 f8 36 43 1b 1f 34 8b fd 03 72 03 c3 a0 08 d5 e6 5b 11 ad f3 3f 3f a6 bc d1 2a 3a d9 49 99 ac 98 fd fc b0 ad ff 4d d9 13 94 b5 e8 15 40 1a 60 d6 91 cd ee 11 a0 de f4 7c a0 14 8c ff ee c7 84 0f 08 17 c7 7f be ac 3c 8d 62 19 75 c2 1d c6 e8 1c 66 e1 0b 4b 0f 94 df 2c cb f6 eb 99 2a 50 03 1c d0 c9 32 c7 0f 51 d5 a7 88 58 7b dc 92 7f 32 31 4d 47 56 55 b5 Data Ascii: YH_P9TUQE/kLZWsk\|^Y\|CL[>+iTF2IM'j T&TY4Ak?UAAb3c`6C4r[??:IM@`\|<bufK,*P2QX{21MGVU
2024-12-20 18:04:01 UTC	12792	IN	Data Raw: 6c a5 f3 8e cf 48 ca ba f5 8e 81 1c 0f f6 87 ce e1 a5 eb a3 f1 38 37 9e 1c fe d2 4a f3 83 e5 a5 0c f6 10 87 5a a3 7e f2 d1 3e 9a 27 84 91 00 05 ab d7 83 66 c3 a0 9d e4 80 8d ba 25 d2 83 62 86 87 ef e9 43 00 8d a5 70 15 12 90 d6 d3 c5 99 a4 fd c2 21 56 fc 11 75 32 e8 e0 cd 9f 67 20 38 eb b9 04 93 ac 0e 4c 82 62 19 40 04 a1 55 e9 02 84 64 91 c8 c5 9d 7c 41 85 85 be 8d 11 ff 89 f7 f6 42 dc c3 84 06 2b df 3e 96 41 f2 5c 19 c4 6e b7 b9 08 a9 aa a9 79 9c 9e 8f 75 70 aa 8e 08 33 f4 bb 9a 94 e6 29 b0 7c bb b0 12 d2 1a 61 9a af b8 9d 1c 30 e4 bf 1c 11 11 78 53 6d 10 e5 15 4b 7d 21 aa 89 90 c3 f5 09 12 88 c2 60 d6 75 9f 82 0e bc a9 86 cf 96 70 b3 ff 27 1a cb ec d4 20 58 c9 36 de e7 77 53 8d 27 92 2e 3a 52 04 60 f9 3c 2a 52 76 84 7d 31 38 e6 dd 31 d7 55 eb 36 10 d5 Data Ascii: lH87JZ~>'f%bCp!Vu2g 8Lb@Ud\|AB+>A\nyup3)\|a0xSmK}!`up' X6wS'.:R`<*Rv}181U6
2024-12-20 18:04:01 UTC	12792	IN	Data Raw: 6e a8 1e 9c e9 39 a0 df a1 2c 6f 20 86 24 c7 33 83 ae d9 b9 6f 87 05 16 7b 1c 9c f7 a1 c0 6e 54 f6 39 9e 2d fa b8 62 9a c2 26 da f6 cd 20 ce d3 1b e9 c7 d1 93 0e 08 51 db 83 27 e9 24 31 f4 21 ae 77 2e 29 7f 2d f7 23 68 e0 4e 6f d9 79 ac 55 0a e0 ba bb fd e9 e1 97 de 03 51 97 40 ad ff 08 88 43 06 bd 75 c9 82 b4 ad f4 b2 b0 e4 2b bd f2 29 da 2b 2b d3 f8 21 31 7d 7a 25 92 9f 14 56 9f 63 06 ef b5 be 67 6e fd ce 4a 1e 32 1c 5d 31 b1 ed 7a 29 1a 32 41 b5 96 6f b2 74 6c 2f 33 93 3c 8e 88 af 6f 9d c9 a8 a3 7e 72 90 5c 01 dd 7e 90 46 42 96 41 81 ca 16 7c 28 ed 23 bc b1 df b1 fd 2a c2 9f 27 02 1a 41 8e 84 1d ec e9 5a ae 35 a5 d0 f2 8b 05 7a 43 83 77 46 ab a3 b7 ca 6e c5 90 4f 6a 87 aa 6b a8 c5 f4 71 ae 9e 71 13 35 3b f7 50 00 37 20 0d 29 0f bc 59 ba be 5a 1a 67 8c Data Ascii: n9,o $3o{nT9-b& Q'$1!w.)-#hNoyUQ@Cu+)++!1}z%VcgnJ2]1z)2Aotl/3<o~r\~FBA\|(#*'AZ5zCwFnOjkqq5;P7 )YZg
2024-12-20 18:04:01 UTC	16384	IN	Data Raw: 91 33 79 ce 79 d8 be 63 96 cb 0e 7b e0 04 a1 15 bc 04 2d a2 dd e2 f4 25 7f 72 e4 ad 20 a3 99 88 6a 2b d4 c7 1c 81 de 38 d0 d7 86 1d 24 36 1e c4 78 4c 73 22 48 71 21 1b ed 60 6f 91 f1 dc e0 f3 c6 f2 d2 ad a5 0b 65 fc 72 5c fe 5a 7a cf df 31 76 1a 7b 2a 8c ad 3c a7 69 17 9f b5 9d 80 54 5e a3 52 34 bf bd 2f d1 34 4a 48 f2 c6 b2 95 08 e8 0f 1d 5a 5b 14 82 72 2e c6 88 fd 68 45 5d cd 21 95 0a 40 0c ca 25 54 9e 02 fe 0e 38 19 1a 93 47 27 e2 87 7c fa d7 ee 4e 13 7a 3e 45 97 fa 6e ab 03 9d c5 6c 33 77 5f 6b d6 81 40 9d bf 48 a3 23 a7 47 9d 50 bf 2c 23 5e 9f 6d 88 a5 64 e1 ec da fb 36 ea b9 5b 28 40 e1 88 13 a8 28 ce 12 08 d7 30 22 83 a6 63 97 c7 62 11 91 2b 88 87 62 51 03 f2 3e 3b ff 42 c8 12 ee 57 1c 76 80 8e 16 5f bd a8 db c6 5b 07 14 c5 ef 50 fa 06 a0 cc fc df Data Ascii: 3yyc{-%r j+8$6xLs"Hq!`oer\Zz1v{*<iT^R4/4JHZ[r.hE]!@%T8G'\|Nz>Enl3w_k@H#GP,#^md6[(@(0"cb+bQ>;BWv_[P
2024-12-20 18:04:01 UTC	2804	IN	Data Raw: 61 4d 07 dd a1 3b 16 36 69 63 b4 7a a7 70 da 6f 79 89 28 73 f1 c3 34 75 35 35 1f 3a af 7c 1e a1 d0 87 4c 4e 20 35 41 f0 6b 7a 9d f2 5e 8b c1 8d e4 62 d4 3f 78 0b 4d 15 e8 1a 16 73 f6 14 ac fc 1d ef 17 1e 96 f0 95 60 46 31 6d ed 1c 70 c1 42 76 aa 4b b1 d2 d0 3c 06 f6 ba c6 1f 96 52 57 9c 38 45 c6 e0 73 dc 01 5f fd f3 1e 4a 40 a6 c0 c2 a6 11 87 fb 52 d3 f0 b0 77 fe 7f 1b 4b c3 8e 83 96 4d ee 1f 3f 7d fe 2e 03 89 cf aa 58 3e 77 d8 a7 53 ff 74 84 4e dc b6 30 19 11 81 0d da 8c 97 e5 19 1a 1f 5e 32 4c 59 41 cf 1f 02 de 74 1f bb 9f 0b 3d 6e 4f f4 af 25 a3 b8 4e 31 bd e1 7c 5d 5f fe d0 36 77 a0 e7 1a 51 0f f2 e9 50 b0 07 86 6f 3c 6c 7b a1 9d f0 63 37 b1 cb 46 b4 99 2b 1c 91 c6 1d 05 a6 6b 30 ee d3 30 6a 69 09 ed 34 a2 c9 70 67 38 37 40 07 28 e2 8f 7b ff 7f e4 3e Data Ascii: aM;6iczpoy(s4u55:\|LN 5Akz^b?xMs`F1mpBvK<RW8Es_J@RwKM?}.X>wStN0^2LYAt=nO%N1\|]_6wQPo<l{c7F+k00ji4pg87@({>
2024-12-20 18:04:01 UTC	9182	IN	Data Raw: 4b 78 9e b3 4a 4b 19 e4 bf 90 a5 01 33 8f de 63 06 30 cc 53 19 70 1d c8 c8 2a 9c ff 2d 4f ed da 44 f2 b4 8a 3d 37 a0 28 e0 5a 34 89 a8 87 bc 41 2b 13 ff 8a e2 88 ea c8 d7 7d 91 0f ed 1c c0 99 6e cb 1b 69 22 ff 64 8c c3 c2 e1 e4 a9 8d ae a2 bf b6 8d 6e 09 fe d4 e1 5c eb 81 29 60 82 14 54 4a ae 6e 08 15 22 d3 7c 90 89 b1 22 ed 00 35 f6 79 00 da fa 69 c1 9f 4c a7 05 2e 31 dd 4c e3 46 60 c8 32 b6 88 97 76 d4 f6 4c 32 32 a6 2e 61 42 51 07 78 ff 25 58 e5 d1 a7 18 2b ee 9a e9 28 19 cd 43 d3 66 5e f6 aa ae 7d a2 64 db 8e b2 ca 9d 32 a3 83 9f be f1 d6 94 18 c3 8c 85 ef 65 e5 65 b0 44 cf d6 47 ba 6f 87 5c c8 ee 00 96 d4 5b c1 7e c5 5e e5 88 9b 65 ba da 34 2a 7e 2b 90 c8 39 e0 55 9e 1c 5f 94 c1 ab 3e 9a c7 94 10 7c 9f a5 f8 15 38 0e ce 78 41 a1 1b 79 42 85 3a 8c d7 Data Ascii: KxJK3c0Sp-OD=7(Z4A+}ni"dn\)`TJn"\|"5yiL.1LF`2vL22.aBQx%X+(Cf^}d2eeDGo\[~^e4~+9U_>\|8xAyB:
2024-12-20 18:04:01 UTC	12792	IN	Data Raw: 90 4b ff 01 4f de ab d6 35 7b 67 b2 59 39 83 11 88 e6 7d 7d 80 28 02 ee ff ed db 2e 3b 29 af df 37 ab 14 c0 23 28 b7 7a 59 e2 ed af 3b 1f 65 78 52 de a3 52 a9 bc 30 ad 38 a2 e1 5a 1d 76 79 2d ae e1 9c 3f 45 8b 7b 34 31 15 11 56 2f 9b e2 e7 fe ee c5 7c f1 1f bd 81 9b 5f 77 6e 24 de c6 fc f5 f1 01 82 90 01 f1 b6 9a 37 74 c8 58 b3 48 c2 4f 96 2e 01 21 c6 ea 01 fc ec 5b 37 70 fb 4f bc 9a f7 be f6 2c 92 18 2d 5d ef 9f 44 76 0d c5 67 36 4c 04 d1 54 02 0c 75 7e ae cc 77 b4 f4 b8 a2 58 83 14 bf 65 c6 7a 73 48 49 3f 15 85 fb 3b 2e 5a ce 27 ae df c8 5d ff e0 72 de 77 f9 5a 06 49 30 4a 15 9d 44 35 26 40 ae 3d 08 e6 3d 2e ca 4f 5f b6 36 fc 85 01 95 e2 8d 6e 60 93 8e 5f e5 1a e9 92 33 e3 4a f6 55 03 78 d7 a6 35 84 6f 71 cc 48 31 56 4a 6d 92 b9 00 30 0b 6b ba ce 7f ba Data Ascii: KO5{gY9}}(.;)7#(zY;exRR08Zvy-?E{41V/\|_wn$7tXHO.![7pO,-]Dvg6LTu~wXezsHI?;.Z']rwZI0JD5&@==.O_6n`_3JUx5oqH1VJm0k
2024-12-20 18:04:01 UTC	3592	IN	Data Raw: 68 4b a9 be 86 e5 51 d9 2c 88 48 f8 6a 4f e0 d1 5a 39 b3 e9 3c 36 d5 95 eb 5f 77 3e ab 97 15 3b 16 99 d0 86 c0 29 be eb a3 92 ed 1d cf 1e e5 ce ef 3c dd bf 46 34 50 1d 94 87 c7 ab 7e f6 1b db 46 0b 06 1f b3 eb 34 87 63 da 4f f7 22 a9 a2 94 1f e7 86 ab d7 b1 6a 69 43 72 43 24 93 3c 1e 6f 02 5e 2d 92 2a 0b 9c be e7 86 34 38 86 4a a8 d6 0d 61 cd d2 86 7f f6 03 9b c7 c2 0c 23 eb 04 29 df cf 4e 94 fd 6b 51 46 97 7e a9 fc f3 db b6 71 db 03 4f 83 2b 26 5e 92 65 61 df a0 66 78 f5 87 39 29 58 1f e0 93 32 86 85 1d 43 5b 3e df 9f bf f5 21 76 ee 3d 0c 34 a5 92 07 ba 06 19 cf ab 6e 7b 41 ba 6b c1 70 0f ff 76 93 cc ff f0 7d eb 59 39 d5 80 38 26 5a 2a 98 22 d0 18 f6 0c 27 c7 82 a3 52 99 0d f5 08 b4 a7 6e a6 2f d6 22 3e 36 d7 4f d1 22 3e 45 92 8c bb f0 e5 47 f6 f0 f1 bf Data Ascii: hKQ,HjOZ9<6_w>;)<F4P~F4cO"jiCrC$<o^-48Ja#)NkQF~qO+&^eafx9)X2C[>!v=4n{Akpv}Y98&Z"'Rn/">6O">EG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49893	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:00 UTC	675	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717837759 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=kBvk7oMRJYPcmqCDpGbLVPkdCBbIIosas9ghQwlDXvIJAFKT2n5dO3dFTF5tx3nKLPZVIYc+ryuDMEb89mr3RWaZFwXz/X8lFdh++Nz/zqYUpj3in0yHEXnOqB9H
2024-12-20 18:04:00 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:04:00 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=7+TK+GgD2HqMwpYdxzJXGzJ6B6HQ4JuHrtPxQrYFqpK6MECJuOoy9YqUuq5iRpVFlLhZdUDB6ajbYZ4EQGavgdqg9XoGuEz7MgHXmARWm+hbbCKmQvhip4NdPjPM; Expires=Fri, 27 Dec 2024 18:04:00 GMT; Path=/ Set-Cookie: AWSALBCORS=7+TK+GgD2HqMwpYdxzJXGzJ6B6HQ4JuHrtPxQrYFqpK6MECJuOoy9YqUuq5iRpVFlLhZdUDB6ajbYZ4EQGavgdqg9XoGuEz7MgHXmARWm+hbbCKmQvhip4NdPjPM; Expires=Fri, 27 Dec 2024 18:04:00 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:04:00 UTC	1679	IN	Data Raw: 36 38 38 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 34 30 34 38 32 5c 6e 32 39 39 36 5c 6e 35 5c 6e 34 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 64 65 70 61 72 74 6d 65 6e 74 73 5c 22 3a 6e 75 6c 6c 2c 5c 22 67 72 6f 75 70 73 5c 22 3a 6e 75 6c 6c 7d 2c 5c 22 73 65 71 5c 22 3a 31 32 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 61 63 63 6f 75 6e 74 5c 22 3a 7b 5c 22 6b 65 79 24 73 74 72 69 6e 67 5c 22 3a 5c 22 36 46 51 58 6e 49 59 67 37 62 37 41 67 73 43 71 4c 6f 53 51 37 30 62 57 4f 44 75 62 6a 64 7a 4c 5c 22 2c 5c 22 69 Data Ascii: 688$Loader && ($Loader.payload = "1734717840482\n2996\n5\n4\nd\n{\"path\":\"livechat\",\"update\":{\"departments\":null,\"groups\":null},\"seq\":12}\n{\"path\":\"livechat\",\"update\":{\"account\":{\"key$string\":\"6FQXnIYg7b7AgsCqLoSQ70bWODubjdzL\",\"i
2024-12-20 18:04:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49896	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:00 UTC	1659	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/d/1734717835749/1734717835749%0A-778.1813275055503%0A4%0A3%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%226FQXnIYg7b7AgsCqLoSQ70bWODubjdzL%22%2C%22mID%22%3A%221PJnG4DSWUQIpQ8%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22zendesk2019%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22fe3feadc90d3b32f24ac083c22901e0970b582ac%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Quick%20Pay%20-%20Inbox%20Health%22%2C%22url%22%3A%22https%3A%2F%2Fpatient.inboxhealth.com%2FquickPay%3Fconfirmation_token%3DXHcUtg%26enterprise_id%3D7272%26landing_page%3Dfalse%26patient_id%3D36304491%26paymentCreateRoute%3DpaymentMethodSelection%26uuid%3De0a63f3e-cd6b-4c6a-b737-957ba382f5ba%22%2C%22ref%2 [TRUNCATED] Host: widget-mediator.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9VObnfM+Ck+G1MT4e6spp3w6RyOfr6lLDFRA2Pk6Gr+moZysYlZAefKA6SzF+QiJi0ML3WZtZiB99RatJ8xCfmfBV/G4pkiuXO+adrfSMB4q7HDLtkWc1/u11l/Z; AWSALBCORS=kBvk7oMRJYPcmqCDpGbLVPkdCBbIIosas9ghQwlDXvIJAFKT2n5dO3dFTF5tx3nKLPZVIYc+ryuDMEb89mr3RWaZFwXz/X8lFdh++Nz/zqYUpj3in0yHEXnOqB9H
2024-12-20 18:04:00 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:04:00 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=40mMMUqfUVAK8Ebm0lqIWVkUHfo4dGYG09f20aT3hbHkkHMai75/kMsE5VLv7YDOMwdrTONh8mt/xgt5eduaA5FomkLBaTObZDqQijI7xbvP8+Gm696APxsN85bg; Expires=Fri, 27 Dec 2024 18:04:00 GMT; Path=/ Set-Cookie: AWSALBCORS=40mMMUqfUVAK8Ebm0lqIWVkUHfo4dGYG09f20aT3hbHkkHMai75/kMsE5VLv7YDOMwdrTONh8mt/xgt5eduaA5FomkLBaTObZDqQijI7xbvP8+Gm696APxsN85bg; Expires=Fri, 27 Dec 2024 18:04:00 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:04:00 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-12-20 18:04:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49895	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:00 UTC	668	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717835694 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9VObnfM+Ck+G1MT4e6spp3w6RyOfr6lLDFRA2Pk6Gr+moZysYlZAefKA6SzF+QiJi0ML3WZtZiB99RatJ8xCfmfBV/G4pkiuXO+adrfSMB4q7HDLtkWc1/u11l/Z; AWSALBCORS=kBvk7oMRJYPcmqCDpGbLVPkdCBbIIosas9ghQwlDXvIJAFKT2n5dO3dFTF5tx3nKLPZVIYc+ryuDMEb89mr3RWaZFwXz/X8lFdh++Nz/zqYUpj3in0yHEXnOqB9H
2024-12-20 18:04:00 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 18:04:00 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=XPly8mnq3RT3OSWqTLVYNCjC2oy6VftKRttBWpD5dPbbJ1Xdwn/Y4JmkjwYWxsKAVsdTxp8tMF+bfZwooU4BOYR0TuFzZSFNkkJ7nSA6DGz8g4BswEqHBMur8/Hh; Expires=Fri, 27 Dec 2024 18:04:00 GMT; Path=/ Set-Cookie: AWSALBCORS=XPly8mnq3RT3OSWqTLVYNCjC2oy6VftKRttBWpD5dPbbJ1Xdwn/Y4JmkjwYWxsKAVsdTxp8tMF+bfZwooU4BOYR0TuFzZSFNkkJ7nSA6DGz8g4BswEqHBMur8/Hh; Expires=Fri, 27 Dec 2024 18:04:00 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-12-20 18:04:00 UTC	194	IN	Data Raw: 62 63 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 33 34 37 31 37 38 34 30 36 31 30 5c 6e 32 39 39 39 5c 6e 36 5c 6e 34 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 72 65 61 74 74 61 63 68 65 64 5c 22 2c 5c 22 72 65 61 74 74 61 63 68 65 64 5f 74 69 6d 65 73 74 61 6d 70 24 69 6e 74 5c 22 3a 31 37 33 34 37 31 37 38 34 30 35 36 30 7d 2c 5c 22 73 65 71 5c 22 3a 32 30 7d 22 29 0d 0a Data Ascii: bc$Loader && ($Loader.payload = "1734717840610\n2999\n6\n4\nd\n{\"path\":\"connection\",\"update\":{\"status$string\":\"reattached\",\"reattached_timestamp$int\":1734717840560},\"seq\":20}")
2024-12-20 18:04:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49897	52.215.231.162	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:00 UTC	565	OUT	GET /cookie-settings/enforcement-mode HTTP/1.1 Host: stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://js.stripe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:04:00 UTC	4835	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:04:00 GMT Content-Type: application/json; charset=utf-8 Content-Length: 15 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: https://js.stripe.com Access-Control-Max-Age: 300 Content-Security-Policy: report-uri /csp-report?p=cookie-settings%2Fenforcement-mode; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://stripe-camo.global.ssl.fastly.net https://images.ctfassets.net https://images.stripeassets.com https://assets.ctfassets.net https://assets.stripeassets.com data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1/indexes/mkt [TRUNCATED] Content-Security-Policy-Report-Only: report-uri /csp-report?p=cookie-settings%2Fenforcement-mode; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://stripe-camo.global.ssl.fastly.net https://images.ctfassets.net https://images.stripeassets.com https://assets.ctfassets.net https://assets.stripeassets.com data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1 [TRUNCATED] Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop" Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true} Reporting-Endpoints: coop="https://q.stripe.com/coop-report" Set-Cookie: __Host-stripe.mkt.csrf=bPXw2x6-wrx1JQIr8V6F2YC-Decpm7m3bn-m_gA9PcsionI2ySekgR9QNdY2h3MP6QrNvMXdT1CAmkl1ol80ezw-AcAXe4akcGjLdo7R0BlsmtlWRW1NV2Jupi-h6sYOMAlzi-IJtQ%3D%3D; path=/; secure; HttpOnly; SameSite=Strict Vary: Origin X-Content-Type-Options: nosniff X-Stripe-Proxy-Response: upstream X-Wc: AC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-12-20 18:04:00 UTC	15	IN	Data Raw: 7b 22 6d 6f 64 65 22 3a 22 6f 70 65 6e 22 7d Data Ascii: {"mode":"open"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49898	54.170.183.1	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:00 UTC	422	OUT	GET /elements/wallet-config HTTP/1.1 Host: merchant-ui-api.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
2024-12-20 18:04:00 UTC	661	IN	HTTP/1.1 401 Unauthorized Server: nginx Date: Fri, 20 Dec 2024 18:04:00 GMT Content-Type: application/json Content-Length: 342 Connection: close Cache-Control: no-cache, no-store Content-Security-Policy: base-uri 'none'; default-src 'none'; form-action 'none'; frame-ancestors 'none'; img-src 'self'; script-src 'self' 'report-sample'; style-src 'self'; upgrade-insecure-requests; report-uri /csp-violation https://q.stripe.com/csp-violation?q=P9oglWvb3cS4F7CZ2peb_SzMsoDmapzt8HxKAY0psdzMOuhDrYKjv0O6nZDbQIqpSpXt9n5X2BcAVOU%3D Www-Authenticate: Basic realm="Stripe" X-Wc: ABC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-12-20 18:04:00 UTC	342	IN	Data Raw: 7b 0a 20 20 22 65 72 72 6f 72 22 3a 20 7b 0a 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 59 6f 75 20 64 69 64 20 6e 6f 74 20 70 72 6f 76 69 64 65 20 61 6e 20 41 50 49 20 6b 65 79 2e 20 59 6f 75 20 6e 65 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 72 20 41 50 49 20 6b 65 79 20 69 6e 20 74 68 65 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 68 65 61 64 65 72 2c 20 75 73 69 6e 67 20 42 65 61 72 65 72 20 61 75 74 68 20 28 65 2e 67 2e 20 27 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 20 42 65 61 72 65 72 20 59 4f 55 52 5f 53 45 43 52 45 54 5f 4b 45 59 27 29 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 64 6f 63 73 2f 61 70 69 23 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 66 6f 72 20 64 65 74 61 69 6c 73 2c 20 6f 72 20 77 Data Ascii: { "error": { "message": "You did not provide an API key. You need to provide your API key in the Authorization header, using Bearer auth (e.g. 'Authorization: Bearer YOUR_SECRET_KEY'). See https://stripe.com/docs/api#authentication for details, or w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49899	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:00 UTC	475	OUT	GET /v3/fingerprinted/js/payment-request-inner-google-pay-6fc983c9284c67933a5e14c4b22c32b4.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=9f6321fe-eac4-494e-85f2-d4b32a8c66f9
2024-12-20 18:04:01 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12253 Last-Modified: Mon, 16 Dec 2024 21:06:17 GMT ETag: "26c21664ab90a0616b393eda4422f672" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Fri, 20 Dec 2024 18:04:01 GMT Via: 1.1 varnish Age: 333006 X-Request-ID: 35210081-298a-455e-a5ac-6c8ac6669a18 X-Served-By: cache-ewr-kewr1740064-EWR X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:04:01 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 72 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 72 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 69 5b 74 5d 28 61 2c 61 2e 65 78 70 6f 72 74 73 2c 65 29 2c 61 2e 6c 6f 61 64 65 64 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 61 2c 69 3d 7b 33 31 35 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 2c 69 3d 6e 28 39 33 33 32 34 29 2c 72 3d 6e 28 31 34 31 33 29 2c 6f 3d 6e 28 34 35 39 38 37 29 2c 73 3d 6e 28 33 39 35 38 31 29 2c 70 3d Data Ascii: !function(){"use strict";function e(t){var n=r[t];if(void 0!==n)return n.exports;var a=r[t]={id:t,loaded:!1,exports:{}};return i[t](a,a.exports,e),a.loaded=!0,a.exports}var t,n,a,i={31506:function(e,t,n){var a,i=n(93324),r=n(1413),o=n(45987),s=n(39581),p=
2024-12-20 18:04:01 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 63 6c 69 65 6e 74 2e 6c 6f 61 64 50 61 79 6d 65 6e 74 44 61 74 61 28 65 29 7d 2c 74 68 69 73 2e 69 73 52 65 61 64 79 54 6f 50 61 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 63 6c 69 65 6e 74 2e 69 73 52 65 61 64 79 54 6f 50 61 79 28 65 29 7d 2c 74 68 69 73 2e 5f 63 6c 69 65 6e 74 3d 6e 65 77 20 67 6f 6f 67 6c 65 2e 70 61 79 6d 65 6e 74 73 2e 61 70 69 2e 50 61 79 6d 65 6e 74 73 43 6c 69 65 6e 74 28 74 29 7d 29 29 2c 45 3d 6e 28 32 34 36 34 33 29 2c 77 3d 6e 28 34 30 39 33 39 29 2c 43 3d 6e 28 35 36 32 37 34 29 2e 50 72 6f 6d 69 73 65 2c 6b 3d 5b 22 73 74 61 74 75 73 22 5d 2c 41 3d 5b 22 5f 5f 6d 65 72 63 68 61 6e 74 44 65 74 61 69 6c 73 22 2c 22 5f 5f 73 74 72 69 70 65 55 73 65 Data Ascii: ion(e){return n._client.loadPaymentData(e)},this.isReadyToPay=function(e){return n._client.isReadyToPay(e)},this._client=new google.payments.api.PaymentsClient(t)})),E=n(24643),w=n(40939),C=n(56274).Promise,k=["status"],A=["__merchantDetails","__stripeUse
2024-12-20 18:04:01 UTC	1378	IN	Data Raw: 6d 65 6e 74 4f 70 74 69 6f 6e 73 3d 28 30 2c 72 2e 5a 29 28 28 30 2c 72 2e 5a 29 28 7b 7d 2c 70 2e 5f 6c 61 74 65 73 74 50 61 79 6d 65 6e 74 4f 70 74 69 6f 6e 73 29 2c 61 29 3b 76 61 72 20 73 3d 28 30 2c 5f 2e 5f 74 29 28 70 2e 5f 6c 61 74 65 73 74 50 61 79 6d 65 6e 74 4f 70 74 69 6f 6e 73 2c 70 2e 5f 6d 65 72 63 68 61 6e 74 44 65 74 61 69 6c 73 29 2c 6c 3d 73 2e 74 72 61 6e 73 61 63 74 69 6f 6e 49 6e 66 6f 2c 63 3d 73 2e 73 68 69 70 70 69 6e 67 4f 70 74 69 6f 6e 50 61 72 61 6d 65 74 65 72 73 2c 75 3d 7b 6e 65 77 54 72 61 6e 73 61 63 74 69 6f 6e 49 6e 66 6f 3a 6c 7d 3b 72 65 74 75 72 6e 21 28 30 2c 64 2e 58 79 29 28 70 2e 5f 6c 61 74 65 73 74 50 61 79 6d 65 6e 74 4f 70 74 69 6f 6e 73 2e 73 68 69 70 70 69 6e 67 4f 70 74 69 6f 6e 73 2c 69 29 26 26 28 75 2e Data Ascii: mentOptions=(0,r.Z)((0,r.Z)({},p._latestPaymentOptions),a);var s=(0,_._t)(p._latestPaymentOptions,p._merchantDetails),l=s.transactionInfo,c=s.shippingOptionParameters,u={newTransactionInfo:l};return!(0,d.Xy)(p._latestPaymentOptions.shippingOptions,i)&&(u.
2024-12-20 18:04:01 UTC	1378	IN	Data Raw: 52 4f 52 22 29 2c 73 74 61 74 75 73 4d 65 73 73 61 67 65 3a 28 30 2c 6d 2e 6a 74 29 28 6d 2e 5a 5f 29 7d 29 2c 65 2c 22 50 61 79 2e 6a 73 20 6c 6f 61 64 50 61 79 6d 65 6e 74 44 61 74 61 2e 63 61 74 63 68 22 29 3b 72 65 74 75 72 6e 22 65 72 72 6f 72 22 3d 3d 3d 74 2e 74 79 70 65 3f 7b 74 61 67 3a 22 45 58 43 45 50 54 49 4f 4e 22 2c 65 72 72 6f 72 3a 65 7d 3a 7b 74 61 67 3a 22 50 41 59 4d 45 4e 54 53 5f 45 52 52 4f 52 22 2c 65 72 72 6f 72 3a 74 2e 76 61 6c 75 65 7d 7d 28 65 29 3b 69 66 28 22 50 41 59 4d 45 4e 54 53 5f 45 52 52 4f 52 22 3d 3d 3d 74 2e 74 61 67 26 26 28 22 43 41 4e 43 45 4c 45 44 22 3d 3d 3d 74 2e 65 72 72 6f 72 2e 73 74 61 74 75 73 43 6f 64 65 3f 70 2e 5f 65 6d 69 74 45 76 65 6e 74 28 7b 74 79 70 65 3a 22 63 61 6e 63 65 6c 22 7d 29 3a 70 2e Data Ascii: ROR"),statusMessage:(0,m.jt)(m.Z_)}),e,"Pay.js loadPaymentData.catch");return"error"===t.type?{tag:"EXCEPTION",error:e}:{tag:"PAYMENTS_ERROR",error:t.value}}(e);if("PAYMENTS_ERROR"===t.tag&&("CANCELED"===t.error.statusCode?p._emitEvent({type:"cancel"}):p.
2024-12-20 18:04:01 UTC	1378	IN	Data Raw: 29 7d 2c 74 68 69 73 2e 5f 61 75 74 68 65 6e 74 69 63 61 74 65 64 4f 72 69 67 69 6e 3d 61 2c 74 68 69 73 2e 5f 73 65 74 50 61 79 6d 65 6e 74 4f 70 74 69 6f 6e 73 28 74 29 2c 74 68 69 73 2e 5f 6d 65 72 63 68 61 6e 74 44 65 74 61 69 6c 73 3d 28 30 2c 64 2e 50 4d 29 28 74 2e 5f 5f 6d 65 72 63 68 61 6e 74 44 65 74 61 69 6c 73 2c 6e 29 2c 74 68 69 73 2e 5f 63 6c 69 65 6e 74 55 6e 61 76 61 69 6c 61 62 6c 65 3d 21 31 2c 74 68 69 73 2e 5f 72 65 70 6f 72 74 3d 69 2c 74 68 69 73 2e 5f 77 61 72 6e 3d 73 3b 76 61 72 20 6c 3d 28 30 2c 68 2e 6c 4f 29 28 6e 2e 61 70 69 4b 65 79 29 3d 3d 3d 68 2e 4b 6c 2e 6c 69 76 65 3f 22 50 52 4f 44 55 43 54 49 4f 4e 22 3a 22 54 45 53 54 22 2c 75 3d 7b 70 61 79 6d 65 6e 74 44 61 74 61 43 61 6c 6c 62 61 63 6b 73 3a 28 30 2c 72 2e 5a 29 Data Ascii: )},this._authenticatedOrigin=a,this._setPaymentOptions(t),this._merchantDetails=(0,d.PM)(t.__merchantDetails,n),this._clientUnavailable=!1,this._report=i,this._warn=s;var l=(0,h.lO)(n.apiKey)===h.Kl.live?"PRODUCTION":"TEST",u={paymentDataCallbacks:(0,r.Z)
2024-12-20 18:04:01 UTC	1378	IN	Data Raw: 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 22 73 68 69 70 70 69 6e 67 6f 70 74 69 6f 6e 63 68 61 6e 67 65 22 3a 63 61 73 65 22 73 68 69 70 70 69 6e 67 61 64 64 72 65 73 73 63 68 61 6e 67 65 22 3a 76 61 72 20 6e 3d 74 2e 70 61 79 6c 6f 61 64 2c 61 3d 6e 2e 75 70 64 61 74 65 57 69 74 68 2c 69 3d 28 30 2c 6f 2e 5a 29 28 6e 2c 49 29 3b 65 2e 77 61 69 74 46 6f 72 43 61 6c 6c 62 61 63 6b 28 74 2e 74 79 70 65 2c 69 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 6d 2e 47 75 29 28 53 2e 46 34 2c 65 2c 22 47 6f 6f 67 6c 65 20 50 61 79 20 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 43 61 6c 6c 62 61 63 6b 22 29 29 7d 28 6e 2c 74 2e 74 79 70 65 29 3b 4c 28 65 Data Ascii: switch(t.type){case"shippingoptionchange":case"shippingaddresschange":var n=t.payload,a=n.updateWith,i=(0,o.Z)(n,I);e.waitForCallback(t.type,i).then((function(n){var i=function(e,t){return(0,m.Gu)(S.F4,e,"Google Pay ".concat(t," Callback"))}(n,t.type);L(e
2024-12-20 18:04:01 UTC	1378	IN	Data Raw: 69 73 48 6f 73 74 65 64 49 6e 76 6f 69 63 65 50 61 67 65 3a 21 21 65 2e 5f 5f 69 73 48 6f 73 74 65 64 49 6e 76 6f 69 63 65 50 61 67 65 2c 69 73 50 61 79 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 21 21 65 2e 5f 5f 69 73 50 61 79 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 67 72 6f 75 70 49 64 3a 65 2e 5f 5f 65 6c 65 6d 65 6e 74 73 47 72 6f 75 70 49 64 2c 6f 6e 42 65 68 61 6c 66 4f 66 3a 65 2e 6f 6e 42 65 68 61 6c 66 4f 66 2c 61 6d 6f 75 6e 74 3a 65 2e 74 6f 74 61 6c 2e 61 6d 6f 75 6e 74 2c 63 75 72 72 65 6e 63 79 3a 65 2e 63 75 72 72 65 6e 63 79 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 61 76 61 69 6c 61 62 69 6c 69 74 79 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: isHostedInvoicePage:!!e.__isHostedInvoicePage,isPaymentElement:!!e.__isPaymentElement,groupId:e.__elementsGroupId,onBehalfOf:e.onBehalfOf,amount:e.total.amount,currency:e.currency}).then((function(e){var n=e.availability;return t(n)})).catch((function(){r
2024-12-20 18:04:01 UTC	1378	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 2e 66 5b 61 5d 28 74 2c 6e 29 2c 6e 7d 29 2c 5b 5d 29 29 7d 2c 65 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 6a 73 2f 22 2b 28 32 38 39 37 3d 3d 3d 65 3f 22 73 65 6e 74 72 79 22 3a 65 29 2b 22 2d 22 2b 7b 31 30 37 32 3a 22 38 35 38 30 66 35 32 33 33 35 36 65 66 62 64 36 39 65 36 66 38 33 36 35 31 62 30 39 34 32 32 65 22 2c 32 38 39 37 3a 22 35 35 65 37 39 34 61 34 35 39 30 36 62 33 39 32 38 33 35 32 64 31 63 64 38 33 37 34 34 32 34 64 22 7d 5b 65 5d 2b 22 2e 6a 73 22 7d 2c 65 2e 6d 69 6e 69 43 73 73 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 Data Ascii: ){return e.f[a](t,n),n}),[]))},e.u=function(e){return"fingerprinted/js/"+(2897===e?"sentry":e)+"-"+{1072:"8580f523356efbd69e6f83651b09422e",2897:"55e794a45906b3928352d1cd8374424d"}[e]+".js"},e.miniCssF=function(){},e.g=function(){if("object"==typeof globa
2024-12-20 18:04:01 UTC	1229	IN	Data Raw: 64 28 6e 75 6c 6c 2c 6f 2e 6f 6e 65 72 72 6f 72 29 2c 6f 2e 6f 6e 6c 6f 61 64 3d 75 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 2e 6f 6e 6c 6f 61 64 29 2c 73 26 26 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 7d 2c 65 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d Data Ascii: d(null,o.onerror),o.onload=u.bind(null,o.onload),s&&document.head.appendChild(o)}},e.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49900	108.177.14.92	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:01 UTC	1025	OUT	GET /gp/p/ui/payframe?origin=https%3A%2F%2Fjs.stripe.com&mid= HTTP/1.1 Host: pay.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=hxjiJdLTLI4_CEkqQXCOSqSkR4X0fuS9xHhCvBCV-lOy5glo1H3CkRpthBY_HdCqPFdR5-gYHl6HGZ3BTOzx9Gxj4dnS8nfWrT-sewHJk05HN4FuTXeopgp65BYo6ev4IQyPXDOqer6RegvLEyrij-A7jthHDAjvcBO7OE-VpW2SlWcRj6H92lDA
2024-12-20 18:04:01 UTC	2824	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Expires: Fri, 20 Dec 2024 18:04:01 GMT Date: Fri, 20 Dec 2024 18:04:01 GMT Cache-Control: private, max-age=3600 Origin-Trial: AssDE6uDpaVUq9mb8HyrCnDR4hxNa3P1PQl8E0huFRpGw4MFWswRwyuk1E68LufiBFMulCrRk3VCexIRW39eYwoAAABMeyJvcmlnaW4iOiJodHRwczovL3BheS5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5fQ== Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-n8uDG43F1XoAA6THJruaJw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendBuyflowPayframeUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendBuyflowPayframeUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendBuyflowPayframeUi/cspreport Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.BY62uICrLh0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /_/InstantbuyFrontendBuyflowPayframeUi/cspreport/fine-allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/gp/p/_/InstantbuyFrontendBuyflowPayframeUi/web-reports?context=eJzjKtDikmLw15BiWFYqxbBkphSDxNeXTBpA7JQ-gzUIiFtvnmOdCsRzA86zhmeeZzVae57VCYiT_p1nLQJiQ4VLrI5A_CvvEqtqzyVWUyAukrjC2gTE9aFXWbdcvcq6kfUa6yyLa6wBWddYhXg4Jj6etptNYMPkc68YlbST8gvjM_OKSxLzSpJKK9OK8vNKUvNSilOLylKL4o0MjEwMjQyN9AyM4wsMAPNfQ2A" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 18:04:01 UTC	2824	IN	Data Raw: 33 38 64 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 70 2f 70 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 69 2f 70 61 79 66 72 61 6d 65 22 3e 3c 6d 65 74 61 20 Data Ascii: 38dc<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://pay.google.com/gp/p/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><link rel="canonical" href="https://pay.google.com/ui/payframe"><meta
2024-12-20 18:04:01 UTC	2824	IN	Data Raw: 37 30 2c 39 33 38 37 33 39 38 36 2c 39 37 36 38 34 35 31 37 2c 39 37 34 34 32 31 38 31 2c 39 37 35 31 37 31 35 34 2c 39 37 36 35 36 38 38 31 2c 39 37 37 38 35 39 37 30 2c 34 38 38 38 37 30 36 34 5d 2c 22 65 70 74 5a 65 22 3a 22 2f 67 70 2f 70 2f 5f 2f 49 6e 73 74 61 6e 74 62 75 79 46 72 6f 6e 74 65 6e 64 42 75 79 66 6c 6f 77 50 61 79 66 72 61 6d 65 55 69 2f 22 2c 22 66 50 44 78 77 64 22 3a 5b 39 37 34 39 36 33 38 36 2c 39 37 35 31 37 31 37 30 2c 39 37 36 38 34 35 33 33 5d 2c 22 67 47 63 4c 6f 65 22 3a 66 61 6c 73 65 2c 22 69 43 7a 68 46 63 22 3a 66 61 6c 73 65 2c 22 6d 55 56 34 57 63 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 73 2f 76 34 2f 6a 73 2f 69 6e 74 65 67 72 61 74 6f 72 2e 6a 73 3f 73 73 5c Data Ascii: 70,93873986,97684517,97442181,97517154,97656881,97785970,48887064],"eptZe":"/gp/p/_/InstantbuyFrontendBuyflowPayframeUi/","fPDxwd":[97496386,97517170,97684533],"gGcLoe":false,"iCzhFc":false,"mUV4Wc":"https://pay.google.com/payments/v4/js/integrator.js?ss\
2024-12-20 18:04:01 UTC	2824	IN	Data Raw: 28 22 70 72 74 22 29 3b 61 2e 70 72 74 3d 62 7d 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 6c 28 27 6f 58 46 4e 50 65 27 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6e 38 75 44 47 34 33 46 31 58 6f 41 41 36 54 48 4a 72 75 61 4a 77 22 3e 76 61 72 20 5f 46 5f 63 73 73 52 6f 77 4b 65 79 20 3d 20 27 62 6f 71 2d 70 61 79 6d 65 6e 74 73 2d 63 6f 6e 73 75 6d 65 72 2e 49 6e 73 74 61 6e 74 62 75 79 46 72 6f 6e 74 65 6e 64 42 75 79 66 6c 6f 77 50 61 79 66 72 61 6d 65 55 69 2e 4b 37 66 6f 56 64 35 79 6e 7a 6f 2e 4c 2e 42 31 2e 4f 27 3b 76 61 72 20 5f 46 5f 63 6f 6d 62 69 6e 65 64 53 69 67 6e 61 74 75 72 65 20 3d 20 27 41 4d 69 74 66 72 6a 36 4e 4b 4e 68 6c 53 69 59 45 47 33 44 63 44 43 35 36 50 6c 4d 44 64 39 30 50 41 27 3b 66 Data Ascii: ("prt");a.prt=b}};}).call(this);l('oXFNPe')</script><script nonce="n8uDG43F1XoAA6THJruaJw">var _F_cssRowKey = 'boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.K7foVd5ynzo.L.B1.O';var _F_combinedSignature = 'AMitfrj6NKNhlSiYEG3DcDC56PlMDd90PA';f
2024-12-20 18:04:01 UTC	2824	IN	Data Raw: 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 69 3d 5b 5d 7d 75 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 26 26 28 74 68 69 73 2e 67 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 22 70 6f 69 6e 74 65 72 22 29 3b 76 61 72 20 64 3d 74 68 69 73 2e 69 2c 6b 3d 64 2e 70 75 73 68 2c 68 3d 74 68 69 73 2e 67 3b 62 3d 62 28 74 68 69 73 2e 67 29 3b 76 61 72 20 66 3d 21 31 3b 6d 2e 69 6e 64 65 78 4f 66 28 61 29 3e 3d 30 26 26 28 66 3d 21 30 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 74 79 70 65 6f 66 20 63 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 3f 7b 63 61 70 74 75 72 65 3a 66 2c 70 61 73 73 69 76 65 3a 63 7d 3a 66 29 3b 6b 2e 63 61 6c 6c 28 64 2c 7b 65 Data Ascii: this.g=a;this.i=[]}u.prototype.addEventListener=function(a,b,c){t&&(this.g.style.cursor="pointer");var d=this.i,k=d.push,h=this.g;b=b(this.g);var f=!1;m.indexOf(a)>=0&&(f=!0);h.addEventListener(a,b,typeof c==="boolean"?{capture:f,passive:c}:f);k.call(d,{e
2024-12-20 18:04:01 UTC	2824	IN	Data Raw: 69 6e 69 74 44 61 74 61 49 6e 69 74 69 61 6c 69 7a 65 43 61 6c 6c 62 61 63 6b 3b 20 69 66 20 28 41 46 5f 69 6e 69 74 44 61 74 61 49 6e 69 74 69 61 6c 69 7a 65 43 61 6c 6c 62 61 63 6b 29 20 7b 41 46 5f 69 6e 69 74 44 61 74 61 49 6e 69 74 69 61 6c 69 7a 65 43 61 6c 6c 62 61 63 6b 28 41 46 5f 69 6e 69 74 44 61 74 61 4b 65 79 73 2c 20 41 46 5f 69 6e 69 74 44 61 74 61 43 68 75 6e 6b 51 75 65 75 65 2c 20 41 46 5f 64 61 74 61 53 65 72 76 69 63 65 52 65 71 75 65 73 74 73 29 3b 7d 69 66 20 28 21 41 46 5f 69 6e 69 74 44 61 74 61 43 61 6c 6c 62 61 63 6b 29 20 7b 41 46 5f 69 6e 69 74 44 61 74 61 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 68 75 6e 6b 29 20 7b 41 46 5f 69 6e 69 74 44 61 74 61 43 68 75 6e 6b 51 75 65 75 65 2e 70 75 73 68 28 63 68 75 Data Ascii: initDataInitializeCallback; if (AF_initDataInitializeCallback) {AF_initDataInitializeCallback(AF_initDataKeys, AF_initDataChunkQueue, AF_dataServiceRequests);}if (!AF_initDataCallback) {AF_initDataCallback = function(chunk) {AF_initDataChunkQueue.push(chu
2024-12-20 18:04:01 UTC	444	IN	Data Raw: 72 76 69 63 65 3f 68 6c 5c 78 33 64 65 6e 2d 55 53 27 2c 20 6e 75 6c 6c 20 2c 20 66 61 6c 73 65 20 2c 20 6e 75 6c 6c 20 2c 5d 3b 20 77 69 6e 64 6f 77 2e 49 4a 5f 76 61 6c 75 65 73 43 62 20 26 26 20 77 69 6e 64 6f 77 2e 49 4a 5f 76 61 6c 75 65 73 43 62 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 69 64 3d 22 77 69 7a 5f 6a 64 22 20 6e 6f 6e 63 65 3d 22 6e 38 75 44 47 34 33 46 31 58 6f 41 41 36 54 48 4a 72 75 61 4a 77 22 3e 69 66 20 28 77 69 6e 64 6f 77 5b 27 5f 77 6a 64 63 27 5d 29 20 7b 63 6f 6e 73 74 20 77 6a 64 20 3d 20 7b 7d 3b 20 77 69 6e 64 6f 77 5b 27 5f 77 6a 64 63 27 5d 28 77 6a 64 29 3b 20 64 65 6c 65 74 65 20 77 69 6e 64 6f 77 5b 27 5f 77 6a 64 63 27 5d 3b 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 61 72 69 61 2d 68 69 Data Ascii: rvice?hl\x3den-US', null , false , null ,]; window.IJ_valuesCb && window.IJ_valuesCb();</script><script id="wiz_jd" nonce="n8uDG43F1XoAA6THJruaJw">if (window['_wjdc']) {const wjd = {}; window['_wjdc'](wjd); delete window['_wjdc'];}</script><script aria-hi
2024-12-20 18:04:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49905	54.187.119.242	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:01 UTC	621	OUT	POST /b HTTP/1.1 Host: r.stripe.com Connection: keep-alive Content-Length: 5653 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.stripe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:04:01 UTC	5653	OUT	Data Raw: 63 6c 69 65 6e 74 5f 69 64 3d 73 74 72 69 70 65 2d 6a 73 26 6e 75 6d 5f 72 65 71 75 65 73 74 73 3d 35 26 65 76 65 6e 74 73 3d 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 5f 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 6c 65 6d 65 6e 74 73 2e 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6c 6f 61 64 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 64 25 32 32 25 33 41 31 37 33 34 37 31 37 38 33 35 34 37 38 25 32 43 25 32 32 62 61 74 63 68 69 6e 67 5f 65 6e 61 62 6c 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 65 76 65 6e 74 5f 63 6f 75 6e 74 25 32 32 25 33 41 31 25 32 43 25 32 32 6f 73 25 32 32 25 33 41 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 62 72 6f 77 73 65 72 46 61 6d 69 6c 79 25 32 32 25 33 41 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 Data Ascii: client_id=stripe-js&num_requests=5&events=%5B%7B%22event_name%22%3A%22elements.controller.load%22%2C%22created%22%3A1734717835478%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A1%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Chrome%22%2C%22
2024-12-20 18:04:02 UTC	645	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:04:02 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://js.stripe.com access-control-allow-credentials: true access-control-allow-methods: POST x-stripe-inbound-proxy-type: mesh-proxy x-stripe-proxy-response: upstream x-stripe-server-envoy-upstream-service-time-ms: 3 x-stripe-server-envoy-start-time-us: 1734717842085054 x-envoy-attempt-count: 1 x-stripe-bg-intended-route-color: blue x-stripe-outbound-proxy-type: envoy x-stripe-client-envoy-start-time-us: 1734717842084246 x-stripe-upstream-host: 10.72.207.9:1643 Content-Type: text/plain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49902	54.187.119.242	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:01 UTC	621	OUT	POST /b HTTP/1.1 Host: r.stripe.com Connection: keep-alive Content-Length: 6084 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.stripe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:04:01 UTC	6084	OUT	Data Raw: 63 6c 69 65 6e 74 5f 69 64 3d 73 74 72 69 70 65 2d 6a 73 26 6e 75 6d 5f 72 65 71 75 65 73 74 73 3d 35 26 65 76 65 6e 74 73 3d 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 5f 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 6c 65 6d 65 6e 74 73 2e 70 72 2e 6f 70 74 69 6f 6e 73 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 64 25 32 32 25 33 41 31 37 33 34 37 31 37 38 32 39 39 36 37 25 32 43 25 32 32 62 61 74 63 68 69 6e 67 5f 65 6e 61 62 6c 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 65 76 65 6e 74 5f 63 6f 75 6e 74 25 32 32 25 33 41 36 25 32 43 25 32 32 6f 73 25 32 32 25 33 41 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 62 72 6f 77 73 65 72 46 61 6d 69 6c 79 25 32 32 25 33 41 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 76 65 72 73 69 Data Ascii: client_id=stripe-js&num_requests=5&events=%5B%7B%22event_name%22%3A%22elements.pr.options%22%2C%22created%22%3A1734717829967%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A6%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Chrome%22%2C%22versi
2024-12-20 18:04:02 UTC	647	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:04:02 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://js.stripe.com access-control-allow-credentials: true access-control-allow-methods: POST x-stripe-inbound-proxy-type: mesh-proxy x-stripe-proxy-response: upstream x-stripe-server-envoy-upstream-service-time-ms: 4 x-stripe-server-envoy-start-time-us: 1734717842084954 x-envoy-attempt-count: 1 x-stripe-bg-intended-route-color: blue x-stripe-outbound-proxy-type: envoy x-stripe-client-envoy-start-time-us: 1734717842084148 x-stripe-upstream-host: 10.76.175.204:1643 Content-Type: text/plain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49901	54.187.119.242	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:01 UTC	621	OUT	POST /b HTTP/1.1 Host: r.stripe.com Connection: keep-alive Content-Length: 6332 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.stripe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:04:01 UTC	6332	OUT	Data Raw: 63 6c 69 65 6e 74 5f 69 64 3d 73 74 72 69 70 65 2d 6a 73 26 6e 75 6d 5f 72 65 71 75 65 73 74 73 3d 35 26 65 76 65 6e 74 73 3d 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 5f 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 6c 65 6d 65 6e 74 73 2e 70 72 2e 63 61 6e 5f 6d 61 6b 65 5f 70 61 79 6d 65 6e 74 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 64 25 32 32 25 33 41 31 37 33 34 37 31 37 38 32 39 39 37 31 25 32 43 25 32 32 62 61 74 63 68 69 6e 67 5f 65 6e 61 62 6c 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 65 76 65 6e 74 5f 63 6f 75 6e 74 25 32 32 25 33 41 31 31 25 32 43 25 32 32 6f 73 25 32 32 25 33 41 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 62 72 6f 77 73 65 72 46 61 6d 69 6c 79 25 32 32 25 33 41 25 32 32 43 68 72 6f 6d 65 25 32 32 25 Data Ascii: client_id=stripe-js&num_requests=5&events=%5B%7B%22event_name%22%3A%22elements.pr.can_make_payment%22%2C%22created%22%3A1734717829971%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A11%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Chrome%22%
2024-12-20 18:04:02 UTC	647	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:04:02 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://js.stripe.com access-control-allow-credentials: true access-control-allow-methods: POST x-stripe-inbound-proxy-type: mesh-proxy x-stripe-proxy-response: upstream x-stripe-server-envoy-upstream-service-time-ms: 4 x-stripe-server-envoy-start-time-us: 1734717842083386 x-envoy-attempt-count: 1 x-stripe-bg-intended-route-color: blue x-stripe-outbound-proxy-type: envoy x-stripe-client-envoy-start-time-us: 1734717842082755 x-stripe-upstream-host: 10.76.175.204:1643 Content-Type: text/plain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49904	54.187.119.242	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:01 UTC	621	OUT	POST /b HTTP/1.1 Host: r.stripe.com Connection: keep-alive Content-Length: 5790 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.stripe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:04:01 UTC	5790	OUT	Data Raw: 63 6c 69 65 6e 74 5f 69 64 3d 73 74 72 69 70 65 2d 6a 73 26 6e 75 6d 5f 72 65 71 75 65 73 74 73 3d 35 26 65 76 65 6e 74 73 3d 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 5f 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 6c 65 6d 65 6e 74 73 2e 65 6c 65 6d 65 6e 74 5f 6d 6f 75 6e 74 65 64 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 64 25 32 32 25 33 41 31 37 33 34 37 31 37 38 33 35 35 30 30 25 32 43 25 32 32 62 61 74 63 68 69 6e 67 5f 65 6e 61 62 6c 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 65 76 65 6e 74 5f 63 6f 75 6e 74 25 32 32 25 33 41 31 36 25 32 43 25 32 32 6f 73 25 32 32 25 33 41 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 62 72 6f 77 73 65 72 46 61 6d 69 6c 79 25 32 32 25 33 41 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 Data Ascii: client_id=stripe-js&num_requests=5&events=%5B%7B%22event_name%22%3A%22elements.element_mounted%22%2C%22created%22%3A1734717835500%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A16%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Chrome%22%2C%2
2024-12-20 18:04:02 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:04:02 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://js.stripe.com access-control-allow-credentials: true access-control-allow-methods: POST x-stripe-inbound-proxy-type: mesh-proxy x-stripe-proxy-response: upstream x-stripe-server-envoy-upstream-service-time-ms: 3 x-stripe-server-envoy-start-time-us: 1734717842141173 x-envoy-attempt-count: 1 x-stripe-bg-intended-route-color: blue x-stripe-outbound-proxy-type: envoy x-stripe-client-envoy-start-time-us: 1734717842140939 x-stripe-upstream-host: 10.76.166.12:1643 Content-Type: text/plain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49903	54.187.119.242	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:01 UTC	621	OUT	POST /b HTTP/1.1 Host: r.stripe.com Connection: keep-alive Content-Length: 8385 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.stripe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:04:01 UTC	8385	OUT	Data Raw: 63 6c 69 65 6e 74 5f 69 64 3d 73 74 72 69 70 65 2d 6a 73 26 6e 75 6d 5f 72 65 71 75 65 73 74 73 3d 35 26 65 76 65 6e 74 73 3d 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 5f 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 6c 65 6d 65 6e 74 73 2e 72 65 74 72 69 65 76 65 5f 77 61 6c 6c 65 74 5f 63 6f 6e 66 69 67 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 64 25 32 32 25 33 41 31 37 33 34 37 31 37 38 33 35 35 30 31 25 32 43 25 32 32 62 61 74 63 68 69 6e 67 5f 65 6e 61 62 6c 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 65 76 65 6e 74 5f 63 6f 75 6e 74 25 32 32 25 33 41 32 31 25 32 43 25 32 32 6f 73 25 32 32 25 33 41 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 62 72 6f 77 73 65 72 46 61 6d 69 6c 79 25 32 32 25 33 41 25 32 32 43 68 72 6f 6d 65 25 Data Ascii: client_id=stripe-js&num_requests=5&events=%5B%7B%22event_name%22%3A%22elements.retrieve_wallet_config%22%2C%22created%22%3A1734717835501%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A21%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Chrome%
2024-12-20 18:04:02 UTC	647	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 18:04:02 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://js.stripe.com access-control-allow-credentials: true access-control-allow-methods: POST x-stripe-inbound-proxy-type: mesh-proxy x-stripe-proxy-response: upstream x-stripe-server-envoy-upstream-service-time-ms: 2 x-stripe-server-envoy-start-time-us: 1734717842142508 x-envoy-attempt-count: 1 x-stripe-bg-intended-route-color: blue x-stripe-outbound-proxy-type: envoy x-stripe-client-envoy-start-time-us: 1734717842142178 x-stripe-upstream-host: 10.76.166.120:1643 Content-Type: text/plain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49906	151.101.192.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:01 UTC	699	OUT	GET /v3/hcaptcha-invisible-f4a7521df8551e3c92d92eb08c5b46bf.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:04:02 UTC	1135	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75895 Last-Modified: Thu, 19 Dec 2024 21:09:16 GMT ETag: "f66911b4ee0de422dfcff9736464b88f" Cache-Control: max-age=31536000 Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src 'self' https://errors.stripe.com https://r.stripe.com; default-src 'self'; form-action 'none'; frame-src 'self' https://b.stripecdn.com; img-src 'self' https://q.stripe.com; object-src 'none'; script-src 'self' 'sha256-MoTOQZKSh1eYwszb6bhKXwTTdvWTaXwaATIT4yJ98yY='; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report origin-agent-cluster: ?1 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 65645 Date: Fri, 20 Dec 2024 18:04:02 GMT Via: 1.1 varnish X-Request-ID: a3b26738-0036-4f7b-9210-7c76b0835f99 X-Served-By: cache-ewr-kewr1740041-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 0a 3c 21 2d 2d 20 70 72 65 74 74 69 65 72 2d 69 67 6e 6f 72 65 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 76 61 72 20 6f 3d 6e 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 65 3d 7b 32 39 33 31 37 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: <!doctype html><html><head><meta charset="utf-8"/></head><body></body>... prettier-ignore --><script>!function(){function t(r){var o=n[r];if(void 0!==o)return o.exports;var i=n[r]={exports:{}};return e[r](i,i.exports,t),i.exports}var e={29317:function(
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 29 7c 7c 65 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 29 7c 7c 65 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 29 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 30 29 2c 6f 3d 6e 28 33 39 29 2c 69 3d 6e 28 36 29 2c 61 3d 6e 28 34 31 29 2c 75 3d 6e 28 34 34 29 2c 63 3d 6e 28 36 39 29 2c 73 3d 6f 28 22 77 6b 73 22 29 2c 66 3d 72 2e 53 79 6d 62 6f 6c 2c 6c 3d 63 3f 66 3a 66 26 26 66 2e 77 69 74 68 6f 75 74 53 65 74 74 65 72 7c 7c 61 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: window&&window)\|\|e("object"==typeof self&&self)\|\|e("object"==typeof window&&window)\|\|Function("return this")()},function(t,e,n){var r=n(0),o=n(39),i=n(6),a=n(41),u=n(44),c=n(69),s=o("wks"),f=r.Symbol,l=c?f:f&&f.withoutSetter\|\|a;t.exports=function(t){retur
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 6e 76 69 73 69 62 6c 65 2e 68 74 6d 6c 22 7d 2c 48 75 6d 61 6e 53 65 63 75 72 69 74 79 3a 7b 70 61 74 68 3a 22 48 75 6d 61 6e 53 65 63 75 72 69 74 79 2e 68 74 6d 6c 22 7d 2c 49 6e 63 6f 67 6e 69 61 3a 7b 70 61 74 68 3a 22 49 6e 63 6f 67 6e 69 61 2e 68 74 6d 6c 22 7d 2c 48 6f 6d 65 46 65 65 64 49 74 65 6d 50 72 65 76 69 65 77 3a 7b 70 61 74 68 3a 22 48 6f 6d 65 46 65 65 64 49 74 65 6d 50 72 65 76 69 65 77 2e 68 74 6d 6c 22 7d 2c 49 6f 76 61 74 69 6f 6e 3a 7b 70 61 74 68 3a 22 69 6f 76 61 74 69 6f 6e 2e 68 74 6d 6c 22 7d 2c 4b 6c 61 72 6e 61 45 78 70 72 65 73 73 42 75 74 74 6f 6e 3a 7b 70 61 74 68 3a 22 4b 6c 61 72 6e 61 45 78 70 72 65 73 73 42 75 74 74 6f 6e 2e 68 74 6d 6c 22 7d 2c 4b 6c 61 72 6e 61 49 6e 43 6f 6e 74 65 78 74 3a 7b 70 61 74 68 3a 22 4b 6c Data Ascii: nvisible.html"},HumanSecurity:{path:"HumanSecurity.html"},Incognia:{path:"Incognia.html"},HomeFeedItemPreview:{path:"HomeFeedItemPreview.html"},Iovation:{path:"iovation.html"},KlarnaExpressButton:{path:"KlarnaExpressButton.html"},KlarnaInContext:{path:"Kl
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 6f 72 28 66 20 69 6e 20 65 29 7b 69 66 28 70 3d 65 5b 66 5d 2c 6c 3d 74 2e 6e 6f 54 61 72 67 65 74 47 65 74 3f 28 68 3d 6f 28 6e 2c 66 29 29 26 26 68 2e 76 61 6c 75 65 3a 6e 5b 66 5d 2c 21 73 28 76 3f 66 3a 64 2b 28 79 3f 22 2e 22 3a 22 23 22 29 2b 66 2c 74 2e 66 6f 72 63 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 29 7b 69 66 28 74 79 70 65 6f 66 20 70 3d 3d 74 79 70 65 6f 66 20 6c 29 63 6f 6e 74 69 6e 75 65 3b 63 28 70 2c 6c 29 7d 28 74 2e 73 68 61 6d 7c 7c 6c 26 26 6c 2e 73 68 61 6d 29 26 26 69 28 70 2c 22 73 68 61 6d 22 2c 21 30 29 2c 61 28 6e 2c 66 2c 70 2c 74 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: or(f in e){if(p=e[f],l=t.noTargetGet?(h=o(n,f))&&h.value:n[f],!s(v?f:d+(y?".":"#")+f,t.forced)&&void 0!==l){if(typeof p==typeof l)continue;c(p,l)}(t.sham\|\|l&&l.sham)&&i(p,"sham",!0),a(n,f,p,t)}}},function(t,e,n){var r=n(3);t.exports=!r((function(){return
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 29 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 75 75 69 64 6a 73 2f 75 75 69 64 23 67 65 74 72 61 6e 64 6f 6d 76 61 6c 75 65 73 2d 6e 6f 74 2d 73 75 70 70 6f 72 74 65 64 22 29 3b 72 65 74 75 72 6e 20 6f 28 69 29 7d 6e 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 2c 6e 2e 64 28 65 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 66 6f 72 28 76 61 72 20 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 26 26 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 26 26 63 72 79 70 74 6f 2e 67 Data Ascii: ypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");return o(i)}n.d(e,"a",(function(){return f})),n.d(e,"b",(function(){return l}));for(var o="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.g
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 3d 6e 2c 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 33 29 2c 6f 3d 6e 28 30 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 76 6f 69 64 20 30 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 32 3f 69 28 72 5b 74 5d 29 7c 7c 69 28 6f 5b 74 5d 29 3a 72 5b 74 5d 26 26 72 5b 74 5d 5b 65 5d 7c 7c 6f 5b 74 5d 26 26 6f 5b 74 5d 5b 65 5d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 28 65 3d 72 Data Ascii: =n,t}},function(t,e,n){var r=n(63),o=n(0),i=function(t){return"function"==typeof t?t:void 0};t.exports=function(t,e){return arguments.length<2?i(r[t])\|\|i(o[t]):r[t]&&r[t][e]\|\|o[t]&&o[t][e]}},function(t,e,n){var r=n(92);t.exports=function(t,e,n){return(e=r
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 2c 65 29 7b 69 66 28 21 72 28 74 29 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 2c 6f 3b 69 66 28 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 74 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 72 28 6f 3d 6e 2e 63 61 6c 6c 28 74 29 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 74 2e 76 61 6c 75 65 4f 66 29 26 26 21 72 28 6f 3d 6e 2e 63 61 6c 6c 28 74 29 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 21 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 74 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 72 28 6f 3d 6e 2e 63 61 6c 6c 28 74 29 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 Data Ascii: ,e){if(!r(t))return t;var n,o;if(e&&"function"==typeof(n=t.toString)&&!r(o=n.call(t)))return o;if("function"==typeof(n=t.valueOf)&&!r(o=n.call(t)))return o;if(!e&&"function"==typeof(n=t.toString)&&!r(o=n.call(t)))return o;throw TypeError("Can't convert ob
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 26 26 21 72 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 74 3d 7b 6c 65 6e 67 74 68 3a 2d 31 7d 3b 73 3f 61 28 74 2c 31 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 63 7d 29 3a 74 5b 31 5d 3d 31 2c 6e 2e 63 61 6c 6c 28 74 2c 66 2c 6c 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 Data Ascii: unction(){if(s&&!r)return!0;var t={length:-1};s?a(t,1,{enumerable:!0,get:c}):t[1]=1,n.call(t,f,l)}))}},function(t,e,n){"use strict";function r(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter(
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 28 72 29 7d 28 22 22 2e 63 6f 6e 63 61 74 28 70 29 2e 63 6f 6e 63 61 74 28 22 76 32 32 2e 33 22 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 75 2e 61 5b 72 5d 2e 70 61 74 68 29 2c 6f 28 6f 28 7b 7d 2c 61 29 2c 7b 7d 2c 7b 69 64 3a 6c 2c 6f 72 69 67 69 6e 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 7c 7c 22 22 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 22 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 33 29 2c 6f 3d 6e 28 31 39 29 2c 69 3d 6e 28 39 34 29 3b 72 7c 7c 6f 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 53 74 72 Data Ascii: (r)}("".concat(p).concat("v22.3","/").concat(u.a[r].path),o(o({},a),{},{id:l,origin:window.location.origin\|\|"".concat(window.location.protocol,"//").concat(window.location.host)}))}},function(t,e,n){var r=n(53),o=n(19),i=n(94);r\|\|o(Object.prototype,"toStr
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 7a 7d 2c 61 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 3d 3d 3d 55 26 26 61 74 28 24 2c 65 2c 6e 29 2c 64 28 74 29 3b 76 61 72 20 72 3d 6d 28 65 2c 21 30 29 3b 72 65 74 75 72 6e 20 64 28 6e 29 2c 6c 28 58 2c 72 29 3f 28 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3f 28 6c 28 74 2c 71 29 26 26 74 5b 71 5d 5b 72 5d 26 26 28 74 5b 71 5d 5b 72 5d 3d 21 31 29 2c 6e 3d 62 28 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 67 28 30 2c 21 31 29 7d 29 29 3a 28 6c 28 74 2c 71 29 7c 7c 47 28 74 2c 71 2c 67 28 31 2c 7b 7d 29 29 2c 74 5b 71 5d 5b 72 5d 3d 21 30 29 2c 72 74 28 74 2c 72 2c 6e 29 29 3a 47 28 74 2c 72 2c 6e 29 7d 2c 75 74 3d 66 75 Data Ascii: t}:function(t){return Object(t)instanceof z},at=function(t,e,n){t===U&&at($,e,n),d(t);var r=m(e,!0);return d(n),l(X,r)?(n.enumerable?(l(t,q)&&t[q][r]&&(t[q][r]=!1),n=b(n,{enumerable:g(0,!1)})):(l(t,q)\|\|G(t,q,g(1,{})),t[q][r]=!0),rt(t,r,n)):G(t,r,n)},ut=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	49907	151.101.0.176	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:01 UTC	593	OUT	GET /v3/fingerprinted/js/phone-numbers-lib-2e4b163cc1a1989623e99b9224e9eda8.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://patient.inboxhealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 18:04:02 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 154070 Last-Modified: Wed, 18 Dec 2024 21:12:00 GMT ETag: "923076fd2b6fefb66fa5480a11ac28d2" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 88897 Date: Fri, 20 Dec 2024 18:04:02 GMT Via: 1.1 varnish X-Request-ID: a9e1c015-04ba-4500-a9de-ab205730988c X-Served-By: cache-ewr-kewr1740021-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 6f 75 74 65 72 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 74 72 69 70 65 4a 53 6f 75 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 34 34 5d 2c 7b 33 37 39 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 76 61 72 20 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 74 65 29 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 74 3d 74 2e 73 70 6c 69 74 28 22 2d 22 29 2c 65 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 3b 66 6f 72 28 Data Ascii: "use strict";(window.webpackChunkStripeJSouter=window.webpackChunkStripeJSouter\|\|[]).push([[944],{3799:function(t,e,d){function n(t,e){var d=Array.prototype.slice.call(e);return d.push(te),t.apply(this,d)}function r(t,e){t=t.split("-"),e=e.split("-");for(
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 28 74 2c 65 29 7b 69 66 28 28 65 3d 6e 65 77 20 72 65 28 65 29 29 2e 68 61 73 43 6f 75 6e 74 72 79 28 74 29 29 72 65 74 75 72 6e 20 65 2e 63 6f 75 6e 74 72 79 28 74 29 2e 63 6f 75 6e 74 72 79 43 61 6c 6c 69 6e 67 43 6f 64 65 28 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 63 6f 75 6e 74 72 79 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 75 6e 74 72 69 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 65 3d 74 2e 76 65 72 73 69 6f 6e 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 74 68 69 73 2e 76 31 3d 31 3d 3d 3d 65 2c 74 68 69 73 2e 76 32 3d 32 3d 3d 3d 65 Data Ascii: (t,e){if((e=new re(e)).hasCountry(t))return e.country(t).countryCallingCode();throw new Error("Unknown country: ".concat(t))}function s(t,e){return e.countries.hasOwnProperty(t)}function c(t){var e=t.version;"number"==typeof e?(this.v1=1===e,this.v2=2===e
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 6c 65 4c 65 6e 67 74 68 73 28 29 3b 69 66 28 21 72 29 72 65 74 75 72 6e 22 49 53 5f 50 4f 53 53 49 42 4c 45 22 3b 69 66 28 22 46 49 58 45 44 5f 4c 49 4e 45 5f 4f 52 5f 4d 4f 42 49 4c 45 22 3d 3d 3d 65 29 7b 69 66 28 21 64 2e 74 79 70 65 28 22 46 49 58 45 44 5f 4c 49 4e 45 22 29 29 72 65 74 75 72 6e 20 70 28 74 2c 22 4d 4f 42 49 4c 45 22 2c 64 29 3b 76 61 72 20 61 3d 64 2e 74 79 70 65 28 22 4d 4f 42 49 4c 45 22 29 3b 61 26 26 28 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 64 2c 6e 3d 74 2e 73 6c 69 63 65 28 29 2c 72 3d 67 28 65 29 3b 21 28 64 3d 72 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 61 3d 64 2e 76 61 6c 75 65 3b 74 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 26 26 6e 2e 70 75 73 68 28 61 29 7d 72 65 74 75 72 6e 20 6e 2e 73 Data Ascii: leLengths();if(!r)return"IS_POSSIBLE";if("FIXED_LINE_OR_MOBILE"===e){if(!d.type("FIXED_LINE"))return p(t,"MOBILE",d);var a=d.type("MOBILE");a&&(r=function(t,e){for(var d,n=t.slice(),r=g(e);!(d=r()).done;){var a=d.value;t.indexOf(a)<0&&n.push(a)}return n.s
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 74 68 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 65 29 3b 64 3c 65 3b 64 2b 2b 29 6e 5b 64 5d 3d 74 5b 64 5d 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 2c 65 2c 64 29 7b 69 66 28 65 3d 65 7c 7c 7b 7d 2c 74 2e 63 6f 75 6e 74 72 79 7c 7c 74 2e 63 6f 75 6e 74 72 79 43 61 6c 6c 69 6e 67 43 6f 64 65 29 7b 28 64 3d 6e 65 77 20 72 65 28 64 29 29 2e 73 65 6c 65 63 74 4e 75 6d 62 65 72 69 6e 67 50 6c 61 6e 28 74 2e 63 6f 75 6e 74 72 79 2c 74 2e 63 6f 75 6e 74 72 79 43 61 6c 6c 69 6e 67 43 6f 64 65 29 3b 76 61 72 20 6e 3d 65 2e 76 32 3f 74 2e 6e 61 74 69 6f 6e 61 6c 4e 75 6d 62 65 72 3a 74 2e 70 68 6f 6e 65 3b 69 66 28 62 28 6e 2c 64 2e 6e 61 74 69 6f 6e 61 6c 4e 75 6d 62 65 72 50 61 74 74 65 72 6e 28 29 29 Data Ascii: th);for(var d=0,n=new Array(e);d<e;d++)n[d]=t[d];return n}function P(t,e,d){if(e=e\|\|{},t.country\|\|t.countryCallingCode){(d=new re(d)).selectNumberingPlan(t.country,t.countryCallingCode);var n=e.v2?t.nationalNumber:t.phone;if(b(n,d.nationalNumberPattern())
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 2e 63 61 6c 6c 28 74 29 29 2e 6e 65 78 74 2e 62 69 6e 64 28 64 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 28 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 45 28 74 2c 65 29 3b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 22 4f 62 6a 65 63 74 22 3d 3d 3d 64 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 64 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3b 69 66 28 22 4d 61 70 22 3d 3d 3d 64 7c 7c 22 53 65 74 22 3d 3d 3d 64 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d Data Ascii: .call(t)).next.bind(d);if(Array.isArray(t)\|\|(d=function(t,e){if(!t)return;if("string"==typeof t)return E(t,e);var d=Object.prototype.toString.call(t).slice(8,-1);"Object"===d&&t.constructor&&(d=t.constructor.name);if("Map"===d\|\|"Set"===d)return Array.from
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 64 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 2c 64 2c 6e 29 7b 69 66 28 64 3d 64 3f 54 28 54 28 7b 7d 2c 6d 65 29 2c 64 29 3a 6d 65 2c 6e 3d 6e 65 77 20 72 65 28 6e 29 2c 74 2e 63 6f 75 6e 74 72 79 26 26 22 30 30 31 22 21 3d 3d 74 2e 63 6f 75 6e 74 72 79 29 7b 69 66 28 21 6e 2e 68 61 73 43 6f 75 6e 74 72 79 28 74 2e 63 6f 75 6e 74 72 79 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 63 6f 75 6e 74 72 79 3a 20 22 2e 63 6f 6e 63 61 74 28 74 2e 63 6f 75 6e 74 72 79 29 29 3b 6e 2e 63 6f 75 6e 74 72 79 28 74 2e 63 6f 75 6e 74 72 79 29 7d 65 6c 73 65 7b 69 66 28 21 74 2e 63 6f 75 Data Ascii: umerable:!0,configurable:!0,writable:!0}):t[e]=d,t}function F(t,e,d,n){if(d=d?T(T({},me),d):me,n=new re(n),t.country&&"001"!==t.country){if(!n.hasCountry(t.country))throw new Error("Unknown country: ".concat(t.country));n.country(t.country)}else{if(!t.cou
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 64 2e 66 6f 72 6d 61 74 45 78 74 65 6e 73 69 6f 6e 29 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 55 6e 6b 6e 6f 77 6e 20 22 66 6f 72 6d 61 74 22 20 61 72 67 75 6d 65 6e 74 20 70 61 73 73 65 64 20 74 6f 20 22 66 6f 72 6d 61 74 4e 75 6d 62 65 72 28 29 22 3a 20 22 27 2e 63 6f 6e 63 61 74 28 65 2c 27 22 27 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 65 2c 64 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 64 2c 6e 3d 49 28 74 29 3b 21 28 64 3d 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 72 3d 64 2e 76 61 6c 75 65 3b 69 66 28 72 2e 6c 65 61 64 69 6e 67 44 69 67 69 74 73 50 61 74 74 65 72 6e 73 28 29 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 61 3d 72 2e 6c 65 Data Ascii: d.formatExtension);default:throw new Error('Unknown "format" argument passed to "formatNumber()": "'.concat(e,'"'))}}function k(t,e,d,n,r){var a=function(t,e){for(var d,n=I(t);!(d=n()).done;){var r=d.value;if(r.leadingDigitsPatterns().length>0){var a=r.le
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 65 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 6e 3d 65 5b 64 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: rable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(t,n.key,n)}}function B(t,e){for(var d=0;d<e.length;d++){var n=e[d];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProper
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 72 20 6f 3d 69 5b 61 5d 3b 72 2b 3d 74 2e 73 6c 69 63 65 28 6e 2c 6f 29 2c 6e 3d 6f 2b 31 7d 72 65 74 75 72 6e 20 72 7d 28 74 2e 73 6c 69 63 65 28 30 2c 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 2c 65 29 7b 76 61 72 20 64 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 74 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 64 29 72 65 74 75 72 6e 28 64 3d 64 2e 63 61 6c 6c 28 74 29 29 2e 6e 65 78 74 2e 62 69 6e 64 28 64 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 28 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 Data Ascii: r o=i[a];r+=t.slice(n,o),n=o+1}return r}(t.slice(0,e))}function H(t,e){var d="undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(d)return(d=d.call(t)).next.bind(d);if(Array.isArray(t)\|\|(d=function(t,e){if(!t)return;if("string"==typeof t)ret
2024-12-20 18:04:02 UTC	1378	IN	Data Raw: 6e 61 6c 50 72 65 66 69 78 2c 74 2e 63 61 72 72 69 65 72 43 6f 64 65 3b 69 66 28 72 28 65 29 29 7b 76 61 72 20 69 3d 58 28 74 2c 65 2c 7b 75 73 65 4e 61 74 69 6f 6e 61 6c 50 72 65 66 69 78 46 6f 72 6d 61 74 74 69 6e 67 52 75 6c 65 3a 21 30 2c 67 65 74 53 65 70 61 72 61 74 6f 72 41 66 74 65 72 4e 61 74 69 6f 6e 61 6c 50 72 65 66 69 78 3a 61 2c 6d 65 74 61 64 61 74 61 3a 6e 7d 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 20 58 28 74 2c 65 2c 7b 75 73 65 4e 61 74 69 6f 6e 61 6c 50 72 65 66 69 78 46 6f 72 6d 61 74 74 69 6e 67 52 75 6c 65 3a 21 31 2c 67 65 74 53 65 70 61 72 61 74 6f 72 41 66 74 65 72 4e 61 74 69 6f 6e 61 6c 50 72 65 66 69 78 3a 61 2c 6d 65 74 61 64 61 74 61 3a 6e 7d 29 7d 28 74 2c 65 2c 7b 6d 65 74 61 64 61 74 61 3a 6e 2c Data Ascii: nalPrefix,t.carrierCode;if(r(e)){var i=X(t,e,{useNationalPrefixFormattingRule:!0,getSeparatorAfterNationalPrefix:a,metadata:n});if(i)return i}return X(t,e,{useNationalPrefixFormattingRule:!1,getSeparatorAfterNationalPrefix:a,metadata:n})}(t,e,{metadata:n,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	49910	18.184.10.197	443	1444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 18:04:02 UTC	675	OUT	GET /s/W/xdds/Ov5-54Tk4fWLXRV2/p/1734717839706 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=7+TK+GgD2HqMwpYdxzJXGzJ6B6HQ4JuHrtPxQrYFqpK6MECJuOoy9YqUuq5iRpVFlLhZdUDB6ajbYZ4EQGavgdqg9XoGuEz7MgHXmARWm+hbbCKmQvhip4NdPjPM

Target ID:	0
Start time:	13:02:56
Start date:	20/12/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\phish_alert_iocp_v1.10.16(15).eml"
Imagebase:	0xe70000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	13:03:00
Start date:	20/12/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "1B07E646-70E7-4C5C-AE00-0E35716E40B6" "ED956F3E-79B7-4C34-B44E-FA16FFFE8145" "7112" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff676730000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	13:03:11
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31352174-4544474f5631-0e43f818546e997e&q=1&e=6c3af84b-fbb1-4eda-9e73-8ee3c3f39128&u=https%3A%2F%2Femail.chat.inboxhealth.com%2Fc%2FeJxcjsFu3CAYhJ8GbrsCfhvsA4dGKyuqVMlV0ibpxcLwe03XBgdD0s3TV2paqcp1ZvTN5_Q4NVxQ1FxBpThnStFZM4McGK8VTGp0rVS8lcCgrZtWCqwa6vXX_unmyyt7_HF663th5ydXP9zcp73_fL3b1vgMDWzfbx_u3JslFfNhjL9mNEuejzaudNFzzttO4BMRHRHdh56IbjPZY8hEdM_F20tvrgQ6G8Pk02qyj2HI8YKBwOnx1n7LZyIkhoxpS37HwTsCJyWUIEIuJjgfzsNmzkjglFNBIuRf_vsSJLCqajkRspQ_CTIjYQI8WCfHQ2WlOYwK1KGt1WigEVM9Ghpi9pO37zreaVWBUA2XNOmfcQ7HVzQvmEjFdrccy16O6ArN-t_1XtbVpOvwP4bmZOzFjAvq-1SQvmjxOwAA__-IP4kt
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	13:03:13
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=2036,i,14044213915127150472,12868546578057075525,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	13:03:59
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5220 --field-trial-handle=2036,i,14044213915127150472,12868546578057075525,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	13:04:18
Start date:	20/12/2024
Path:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Imagebase:	0x7ff684410000
File size:	2'486'784 bytes
MD5 hash:	6F8EAC2C377C8F16D91CB5AC8B8DBF5F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	13:04:20
Start date:	20/12/2024
Path:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Imagebase:	0x7ff6323d0000
File size:	274'432 bytes
MD5 hash:	6FEB00C9A2C3FF66230658B3012BAB6A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	13:04:55
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	24
Start time:	13:04:55
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=1872,i,1434172226620214781,4211589301215833021,262144 /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report phish_alert_iocp_v1.10.16(15).eml

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Nunito\24226543661.ttf

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Poppins\26433847794.ttf

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\3DXBZZEJ\enterprise_logo.png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\3DXBZZEJ\enterprise_logo.png:Zone.Identifier

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{0F9CD62C-31FF-42A9-9D7D-BDCC13C76580}.tmp

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\CCF9A13A-2F68-4F48-A7FE-BB25510A585D

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxAccountsAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxmAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat.LOG1

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1734717776751030100_AFDC0BCB-5ECD-4DAC-B0A0-77F0743A051B.log

Windows Analysis Report
phish_alert_iocp_v1.10.16(15).eml