Edit tour

Windows Analysis Report
http://infarmbureau.com

Overview

General Information

Sample URL:	http://infarmbureau.com
Analysis ID:	1587801
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

AI detected suspicious URL

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3264 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4304 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://infarmbureau.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.11..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://www.infarmbureau.com/ResourcePackages/IFBI... The script uses dynamic code execution with 'eval', which is a high-risk indicator. It also sends data to an external API endpoint via fetch, which is a moderate-risk indicator. The use of 'eval' suggests potential for executing arbitrary code, increasing the risk score significantly. No trusted domains or legitimate analytics context is evident to reduce the score.

AI detected suspicious URL

Source: URL	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: http://infarmbureau.com
Source: URL	Joe Sandbox AI: AI detected Typosquatting in URL: http://infarmbureau.com

Source: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foam.infarmbureau.com%2F&client-request-id=76181790-b7f4-4e55-9301-2c62efc67ae5&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=7rh_UWeGjzQlaRK0SktYsRR3NqYaztN6mzTWjblA7F8&code_challenge_method=S256&nonce=813895e5-8aca-4304-b930-b4a3a23131c8&state=eyJpZCI6IjZmYzI1ZTM5LTMzODQtNGM3Yi1iM2UwLWUwNGIwMjExODdiMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&brand=ifbi

HTTP Parser: Number of links: 0

HTTP Parser: Base64 decoded: i6cx6to5zujMrZOr8vrFtR2CkKh0I0hRoGbfPwT5ZdJanA2v686zMvMGscCpSYSJufPufCZ8+1q4FFqh6q9gNw==;2025-01-10T16:21:53.7462957Z;yZK3iGYLR/gFKHHOaCwifg==;{"OrchestrationStep":1}

HTTP Parser: Title: OAM does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://www.infarmbureau.com/	HTTP Parser: No favicon
Source: https://www.infarmbureau.com/	HTTP Parser: No favicon
Source: https://www.infarmbureau.com/	HTTP Parser: No favicon
Source: https://www.infarmbureau.com/	HTTP Parser: No favicon

Source: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foam.infarmbureau.com%2F&client-request-id=76181790-b7f4-4e55-9301-2c62efc67ae5&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=7rh_UWeGjzQlaRK0SktYsRR3NqYaztN6mzTWjblA7F8&code_challenge_method=S256&nonce=813895e5-8aca-4304-b930-b4a3a23131c8&state=eyJpZCI6IjZmYzI1ZTM5LTMzODQtNGM3Yi1iM2UwLWUwNGIwMjExODdiMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&brand=ifbi	HTTP Parser: No <meta name="author".. found
Source: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foam.infarmbureau.com%2F&client-request-id=76181790-b7f4-4e55-9301-2c62efc67ae5&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=7rh_UWeGjzQlaRK0SktYsRR3NqYaztN6mzTWjblA7F8&code_challenge_method=S256&nonce=813895e5-8aca-4304-b930-b4a3a23131c8&state=eyJpZCI6IjZmYzI1ZTM5LTMzODQtNGM3Yi1iM2UwLWUwNGIwMjExODdiMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&brand=ifbi	HTTP Parser: No <meta name="author".. found
Source: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foam.infarmbureau.com%2F&client-request-id=76181790-b7f4-4e55-9301-2c62efc67ae5&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=7rh_UWeGjzQlaRK0SktYsRR3NqYaztN6mzTWjblA7F8&code_challenge_method=S256&nonce=813895e5-8aca-4304-b930-b4a3a23131c8&state=eyJpZCI6IjZmYzI1ZTM5LTMzODQtNGM3Yi1iM2UwLWUwNGIwMjExODdiMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&brand=ifbi	HTTP Parser: No <meta name="author".. found

Source: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foam.infarmbureau.com%2F&client-request-id=76181790-b7f4-4e55-9301-2c62efc67ae5&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=7rh_UWeGjzQlaRK0SktYsRR3NqYaztN6mzTWjblA7F8&code_challenge_method=S256&nonce=813895e5-8aca-4304-b930-b4a3a23131c8&state=eyJpZCI6IjZmYzI1ZTM5LTMzODQtNGM3Yi1iM2UwLWUwNGIwMjExODdiMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&brand=ifbi	HTTP Parser: No <meta name="copyright".. found
Source: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foam.infarmbureau.com%2F&client-request-id=76181790-b7f4-4e55-9301-2c62efc67ae5&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=7rh_UWeGjzQlaRK0SktYsRR3NqYaztN6mzTWjblA7F8&code_challenge_method=S256&nonce=813895e5-8aca-4304-b930-b4a3a23131c8&state=eyJpZCI6IjZmYzI1ZTM5LTMzODQtNGM3Yi1iM2UwLWUwNGIwMjExODdiMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&brand=ifbi	HTTP Parser: No <meta name="copyright".. found
Source: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foam.infarmbureau.com%2F&client-request-id=76181790-b7f4-4e55-9301-2c62efc67ae5&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=7rh_UWeGjzQlaRK0SktYsRR3NqYaztN6mzTWjblA7F8&code_challenge_method=S256&nonce=813895e5-8aca-4304-b930-b4a3a23131c8&state=eyJpZCI6IjZmYzI1ZTM5LTMzODQtNGM3Yi1iM2UwLWUwNGIwMjExODdiMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&brand=ifbi	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: infarmbureau.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0
Source: global traffic	HTTP traffic detected: GET /material-components-web@3.2.0/dist/material-components-web.min.css HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/IFBIRedesign/assets/dist/main.css?v=638659012120000000 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICANVfqru_10303241106123517.js HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/IFBIRedesign/assets/dist/main.js?v=638659012120000000 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
Source: global traffic	HTTP traffic detected: GET /farmhand/V1/consumer/theme.css HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
Source: global traffic	HTTP traffic detected: GET /farmhand/V2/latest/farmhand-utils.css HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Uf8BQcxRshYGUr_fjsqPCBSdjzXOm_t5et9A1wGjARLGg2L5Ezgga_iZnwtZ8RB6l6Q1M8i7GmOf-IlJG5cMmNfEEPOhyQY7YWTF770_Yo6T82I7fR9JwEfzW2mekqS_OLcTtrBVyYpFm6pC69AFXN_RS7_tPK1Rhv2mGyj6T3XiJSqAuOgFuDXVDD7x_G0j0&t=7ed91ff1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=HtQyXelCu6mzSPcVcvK_BigCsvhj3k9AyASkTLjzpE6ZzTM8CyelTzobRwbtiayklPS3tRPWiC2Mfac5xrEjhEkbRYdW8mst-e31IIzbJxiFQCEg4TekxOM93tmByJ7y_Rw0R7xpeLjRkl3Xg4lIGeW0fLIRRijq3NA77zscXCl-lF_3Z_vEfc6gdWAsAUV7mwkYARkkqqmWE_yj2UzHtJHrfYoIYOPAjdO9iVqiUSI1&t=638343388180000000 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
Source: global traffic	HTTP traffic detected: GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.min.js?package=IFBIRedesign&v=MTUuMC44MjAwLjA%3d HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/car-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d115748142dd78b5496898ba993847929317a59b3cdf3e6552f68f969fca81332514f8c05929eb1619192fcb70cddf65b327a8b4ebe11089807ca3d5b61ec0781b2a5799
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=HtQyXelCu6mzSPcVcvK_BigCsvhj3k9AyASkTLjzpE6ZzTM8CyelTzobRwbtiayklPS3tRPWiC2Mfac5xrEjhEkbRYdW8mst-e31IIzbJxiFQCEg4TekxOM93tmByJ7y_Rw0R7xpeLjRkl3Xg4lIGeW0fLIRRijq3NA77zscXCl-lF_3Z_vEfc6gdWAsAUV7mwkYARkkqqmWE_yj2UzHtJHrfYoIYOPAjdO9iVqiUSI1&t=638343388180000000 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d115748142dd78b5496898ba993847929317a59b3cdf3e6552f68f969fca81332514f8c05929eb1619192fcb70cddf65b327a8b4ebe11089807ca3d5b61ec0781b2a5799
Source: global traffic	HTTP traffic detected: GET /t/1.css?apiType=css&projectid=1b1b60c1-c56a-45c6-a9b5-03ac3c306ea3 HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.min.js?package=IFBIRedesign&v=MTUuMC44MjAwLjA%3d HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/home.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICANVfqru_10303241106123517.js HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Uf8BQcxRshYGUr_fjsqPCBSdjzXOm_t5et9A1wGjARLGg2L5Ezgga_iZnwtZ8RB6l6Q1M8i7GmOf-IlJG5cMmNfEEPOhyQY7YWTF770_Yo6T82I7fR9JwEfzW2mekqS_OLcTtrBVyYpFm6pC69AFXN_RS7_tPK1Rhv2mGyj6T3XiJSqAuOgFuDXVDD7x_G0j0&t=7ed91ff1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/car-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/life-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/IFBIRedesign/assets/dist/main.js?v=638659012120000000 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/home.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/business-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/life-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/farm-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /farmalytics.min.js HTTP/1.1Host: farmalytics.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/business-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=NjxTqR2bqTw1rewxxlkHPpxO0HewYtVlDflpbYInUeVJFzzXK9ps5DCCOpHnJe-GLFYvfIwAYK88tAgrZ4UYiSFoIDxWM5fHSClLQ2OUIH6ur5dZ5UUk2GuBjdo7SvL8SQyR67VUUd5WdQi4Bp1p2rD86Flrj4pL0JXZer5l9HggNFK5Tv2OG7IFtNlP6HEIlaRLk_JT971y9JLQAC_AjXBfDLq38newr_lRYpTjOxM1&t=638343388220000000 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/finance-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/discount.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/renters-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/umbrella.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /farmhand/V1/fonts/44e7b0fa-6c8d-43c2-b19e-f1e3ce9ea57c.woff2 HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.infarmbureau.com/farmhand/V1/consumer/theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/car.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /sdk/sitefinity-insight-client.min.3.1.27.js HTTP/1.1Host: cdn.insight.sitefinity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /farmhand/V1/fonts/be607c9f-3c81-41b4-b7ad-17af005c80bb.woff2 HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.infarmbureau.com/farmhand/V1/consumer/theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/neutrafaceslabtext-bold-webfont.woff HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.infarmbureau.com/ResourcePackages/IFBIRedesign/assets/dist/main.css?v=638659012120000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/heart.svg?sfvrsn=57e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/car.svg?sfvrsn=55e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/home.svg?sfvrsn=51e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /farmhand/V1/fonts/121784c1-863c-4e49-b682-625ea7de55b0.woff2 HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.infarmbureau.com/farmhand/V1/consumer/theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-album/icons/facebook.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /images/default-album/icons/twitter.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/bsa8xx9k5w HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-album/icons/linkedin.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
Source: global traffic	HTTP traffic detected: GET /api/myagent HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/homepage-hero-images/people-hero/happy-family-with-kids-in-front-of-indiana-skyline-min.png?sfvrsn=a91532ba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/homepage-hero-images/hero-banner/indiana-farm-bureau-background_125207343-0852-4dc5-bedc-4a47705856ea.png?sfvrsn=683a33ba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /c/hotjar-31017.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/farm-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/finance-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/renters-icon.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/discount.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/header/menu-icons/umbrella.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=NjxTqR2bqTw1rewxxlkHPpxO0HewYtVlDflpbYInUeVJFzzXK9ps5DCCOpHnJe-GLFYvfIwAYK88tAgrZ4UYiSFoIDxWM5fHSClLQ2OUIH6ur5dZ5UUk2GuBjdo7SvL8SQyR67VUUd5WdQi4Bp1p2rD86Flrj4pL0JXZer5l9HggNFK5Tv2OG7IFtNlP6HEIlaRLk_JT971y9JLQAC_AjXBfDLq38newr_lRYpTjOxM1&t=638343388220000000 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /farmalytics.min.js HTTP/1.1Host: farmalytics.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; TS0108e009=01d115748179758d1aa8f4a7eb564b510c610a4be413bdd6d9f5e1dda138b7015b5d6d1af3146cacff08f58a0fd9561cceba071d27
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=7qZAKuGErAw; VISITOR_INFO1_LIVE=iVrpiiKsmKo; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgCw%3D%3D; __Secure-ROLLOUT_TOKEN=CImgu4uh2s-9owEQn6TF58frigMYn6TF58frigM%3D
Source: global traffic	HTTP traffic detected: GET /sdk/sitefinity-insight-client.min.3.1.27.js HTTP/1.1Host: cdn.insight.sitefinity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=7qZAKuGErAw; VISITOR_INFO1_LIVE=iVrpiiKsmKo; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgCw%3D%3D; __Secure-ROLLOUT_TOKEN=CImgu4uh2s-9owEQn6TF58frigMYn6TF58frigM%3D
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=7qZAKuGErAw; VISITOR_INFO1_LIVE=iVrpiiKsmKo; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgCw%3D%3D; __Secure-ROLLOUT_TOKEN=CImgu4uh2s-9owEQn6TF58frigMYn6TF58frigM%3D
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=7qZAKuGErAw; VISITOR_INFO1_LIVE=iVrpiiKsmKo; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgCw%3D%3D; __Secure-ROLLOUT_TOKEN=CImgu4uh2s-9owEQn6TF58frigMYn6TF58frigM%3D
Source: global traffic	HTTP traffic detected: GET /images/icons/home.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/icons/key.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /tag/bsa8xx9k5w HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d0b76cf50d6948c988aa2100a70bfd50.20250110.20260110
Source: global traffic	HTTP traffic detected: GET /images/default-album/men-in-blue-jeans-jacket-and-glasses-reclining-on-chair-happily-after-bundling-his-insurance-and-get-discounted-rates15dd5c5e32056b8a9f2eff03000bf66e.jpg?sfvrsn=d8d837ba_0 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/IFBIRedesign/assets/dist/images/inside-story.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/icons/car.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/heart.svg?sfvrsn=57e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /tv2track.js HTTP/1.1Host: collector-44978.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-album/icons/facebook.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/home.svg?sfvrsn=51e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/car.svg?sfvrsn=55e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/default-album/icons/twitter.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/footer/facebook.svg?sfvrsn=2b7424ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/footer/xlogo-twitter-logo.svg?sfvrsn=948136ba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /bob_002.gif?bob_bk=1&eid=4312 HTTP/1.1Host: bob.dmpxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/footer/youtube.svg?sfvrsn=2a7424ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.59/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d0b76cf50d6948c988aa2100a70bfd50.20250110.20260110
Source: global traffic	HTTP traffic detected: GET /activityi;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: 8339572.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: 8339572.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/myagent HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /images/footer/instagram.svg?sfvrsn=a47124ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094
Source: global traffic	HTTP traffic detected: GET /images/default-album/icons/linkedin.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
Source: global traffic	HTTP traffic detected: GET /td/rul/573981699?random=1736526093885&cv=11&fst=1736526093885&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-album/careers.jpg?sfvrsn=3e9d3dba_0 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-7179S89KQB&gacid=1564115657.1736526094&gtm=45je5190v890033544z876386024za200zb76386024&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102123608~102198178&z=1623100686 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/default-album/community-involvement.jpg?sfvrsn=8a9c3dba_0 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/business.svg?sfvrsn=56e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/farm.svg?sfvrsn=50e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/key.svg?sfvrsn=54e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed
Source: global traffic	HTTP traffic detected: GET /modules.60031afbf51fb3e88a5b.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/1686000021639755?v=2.9.179&r=stable&domain=www.infarmbureau.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLWe2ujH64oDFbuDgwcdSrArRQ;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: 8339572.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CO-P2ujH64oDFU-jgwcddVgQ1Q;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: 8339572.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Indiana%20Farm%20Bureau%20Insurance&idsite=TV-5454092718-1&rec=1&r=168345&h=11&m=21&s=34&url=https%3A%2F%2Fwww.infarmbureau.com%2F&_id=fe57b8effe7e4586&_idts=1736526094&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=912 HTTP/1.1Host: collector-44978.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /images/homepage-hero-images/people-hero/happy-family-with-kids-in-front-of-indiana-skyline-min.png?sfvrsn=a91532ba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836
Source: global traffic	HTTP traffic detected: GET /images/homepage-hero-images/hero-banner/indiana-farm-bureau-background_125207343-0852-4dc5-bedc-4a47705856ea.png?sfvrsn=683a33ba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836
Source: global traffic	HTTP traffic detected: GET /c/hotjar-31017.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/MZTWt2RchgA/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=amQr2hY_VW4; VISITOR_INFO1_LIVE=8nTEpSF1n0s; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgVQ%3D%3D; __Secure-ROLLOUT_TOKEN=CPnK4_Xl7IqKeBCg7fLnx-uKAxig7fLnx-uKAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /js/th/8p-ZUt2O_r6IumY5TzUY2RZ4QvEtVfvf_MYYDjqPK3M.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_mTqeaJMXAz6DHPPU8ICZM6fP3tmkBqOPGBxeBi3sGiVqU=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Fwww.infarmbureau.com&rl=&if=false&ts=1736526096546&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=f5642d&ler=empty&cdl=API_unavailable&it=1736526093610&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/key.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Fwww.infarmbureau.com&rl=&if=false&ts=1736526096546&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=f5642d&ler=empty&cdl=API_unavailable&it=1736526093610&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/573981699/?random=1580731553&cv=11&fst=1736526093885&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBOAFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&eitems=ChAIgKeDvAYQ-a2xw5DL2PRpEh0An2rBfwFh5JTywaJ8Niz-93la7XHu19p_av7vNQ&pscrd=CIa27ZLK2JWhHyITCK3nr-nH64oDFYWO_QcdmQEq4TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjodaHR0cHM6Ly93d3cuaW5mYXJtYnVyZWF1LmNvbS9CVkNoQUlnS2VEdkFZUXBQMjVxb2IzcnF4Y0Vpd0FrMV9mdU5rRzhtcHFoTWVNOERQel9mUXF1SGFSamZlbEZHTHh2dHVwd2ZCblgydWlmaE9WQm9HX0VR HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/v2/data-centers/b9914fdb-2e6f-d6bb-b0aa-8ae951f29484/datasources/IFBI_MFSF_To_DevDEC/interactions HTTP/1.1Host: api.dec.sitefinity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/home.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/IFBIRedesign/assets/dist/images/inside-story.svg HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /images/default-album/men-in-blue-jeans-jacket-and-glasses-reclining-on-chair-happily-after-bundling-his-insurance-and-get-discounted-rates15dd5c5e32056b8a9f2eff03000bf66e.jpg?sfvrsn=d8d837ba_0 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /images/footer/facebook.svg?sfvrsn=2b7424ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /images/footer/xlogo-twitter-logo.svg?sfvrsn=948136ba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
Source: global traffic	HTTP traffic detected: GET /tv2track.js HTTP/1.1Host: collector-44978.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bob_002.gif?bob_bk=1&eid=4312 HTTP/1.1Host: bob.dmpxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.59/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=d0b76cf50d6948c988aa2100a70bfd50.20250110.20260110
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
Source: global traffic	HTTP traffic detected: GET /signals/config/1686000021639755?v=2.9.179&r=stable&domain=www.infarmbureau.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
Source: global traffic	HTTP traffic detected: GET /vi_webp/MZTWt2RchgA/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Indiana%20Farm%20Bureau%20Insurance&idsite=TV-5454092718-1&rec=1&r=168345&h=11&m=21&s=34&url=https%3A%2F%2Fwww.infarmbureau.com%2F&_id=fe57b8effe7e4586&_idts=1736526094&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=912 HTTP/1.1Host: collector-44978.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rb_bf40802pra?type=js3&sn=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0&svrid=14&flavor=post&vi=CCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0&modifiedSince=1736364532155&rf=https%3A%2F%2Fwww.infarmbureau.com%2F&bp=3&app=9a75f8cfaaed44c6&crc=839905937&en=g7j0dusa&end=1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/573981699/?random=1580731553&cv=11&fst=1736526093885&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBOAFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIa27ZLK2JWhHyITCK3nr-nH64oDFYWO_QcdmQEq4TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjodaHR0cHM6Ly93d3cuaW5mYXJtYnVyZWF1LmNvbS9CVkNoQUlnS2VEdkFZUXBQMjVxb2IzcnF4Y0Vpd0FrMV9mdU5rRzhtcHFoTWVNOERQel9mUXF1SGFSamZlbEZHTHh2dHVwd2ZCblgydWlmaE9WQm9HX0VR&is_vtc=1&cid=CAQSKQCa7L7dFwOZczxE1BL2afw8Gv0KrJ92SIFCOo6OB0U-eEbLKGOflVb5&eitems=ChAIgKeDvAYQ-a2xw5DL2PRpEh0An2rBf8js3mI5nDaOvEd7rCB_oPh48d651j8GRw&random=3422872080 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/footer/youtube.svg?sfvrsn=2a7424ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /images/footer/instagram.svg?sfvrsn=a47124ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /images/default-album/careers.jpg?sfvrsn=3e9d3dba_0 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/business.svg?sfvrsn=56e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /generate_204?ZWhcnQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=amQr2hY_VW4; VISITOR_INFO1_LIVE=8nTEpSF1n0s; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgVQ%3D%3D; __Secure-ROLLOUT_TOKEN=CPnK4_Xl7IqKeBCg7fLnx-uKAxig7fLnx-uKAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/farm.svg?sfvrsn=50e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/key.svg?sfvrsn=54e924ba_2 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /images/default-album/community-involvement.jpg?sfvrsn=8a9c3dba_0 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526093.60.0.0; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
Source: global traffic	HTTP traffic detected: GET /js/th/8p-ZUt2O_r6IumY5TzUY2RZ4QvEtVfvf_MYYDjqPK3M.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
Source: global traffic	HTTP traffic detected: GET /tr/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Fwww.infarmbureau.com&rl=&if=false&ts=1736526096546&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=f5642d&ler=empty&cdl=API_unavailable&it=1736526093610&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Fwww.infarmbureau.com&rl=&if=false&ts=1736526096546&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=f5642d&ler=empty&cdl=API_unavailable&it=1736526093610&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLWe2ujH64oDFbuDgwcdSrArRQ;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CO-P2ujH64oDFU-jgwcddVgQ1Q;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_mTqeaJMXAz6DHPPU8ICZM6fP3tmkBqOPGBxeBi3sGiVqU=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/573981699/?random=1580731553&cv=11&fst=1736526093885&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBOAFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIa27ZLK2JWhHyITCK3nr-nH64oDFYWO_QcdmQEq4TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjodaHR0cHM6Ly93d3cuaW5mYXJtYnVyZWF1LmNvbS9CVkNoQUlnS2VEdkFZUXBQMjVxb2IzcnF4Y0Vpd0FrMV9mdU5rRzhtcHFoTWVNOERQel9mUXF1SGFSamZlbEZHTHh2dHVwd2ZCblgydWlmaE9WQm9HX0VR&is_vtc=1&cid=CAQSKQCa7L7dFwOZczxE1BL2afw8Gv0KrJ92SIFCOo6OB0U-eEbLKGOflVb5&eitems=ChAIgKeDvAYQ-a2xw5DL2PRpEh0An2rBf8js3mI5nDaOvEd7rCB_oPh48d651j8GRw&random=3422872080 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/IFBIRedesign/favicon-16x16.png HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtSa=-; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526099.54.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=CATLl9vwPteY2F42UrqNsp2wfNCnxcIwENAOfnOEg_-TzkN9ASyrM9C7WBVNnCarxgrsQQ46mhY8wHz4cPfQu9ED-HFbfVDKXU4zpF0Xwa-aRc2n0POXAn8lUi2oN5yVPU1fXZTjQ6Q12x1neEgrcufXWLJKd7rnz3APqFbxrZ30wHepnUTvj0JO
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
Source: global traffic	HTTP traffic detected: GET /ResourcePackages/IFBIRedesign/favicon-16x16.png HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtSa=-; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526099.54.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=j0McQRaJxLCDuDFh41D0_X6wFj5qipLuSzA8owkUh4ZfIv7vrOqVLr2qUbHkvqCSqix1kHuXXZieKMiwcpZjyLzIjZyino-hVzNkv7khDDAbM65qDXD508FUU8T5w-LFzKwF-mEFNz2J0G7tiB8wVVbUHUD2FckUYFYet6G20uNNGwCHxYnGeWo
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=j0McQRaJxLCDuDFh41D0_X6wFj5qipLuSzA8owkUh4ZfIv7vrOqVLr2qUbHkvqCSqix1kHuXXZieKMiwcpZjyLzIjZyino-hVzNkv7khDDAbM65qDXD508FUU8T5w-LFzKwF-mEFNz2J0G7tiB8wVVbUHUD2FckUYFYet6G20uNNGwCHxYnGeWo
Source: global traffic	HTTP traffic detected: GET /oam HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526099.54.0.0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C
Source: global traffic	HTTP traffic detected: GET /rb_bf40802pra?type=js3&sn=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0&svrid=14&flavor=post&vi=CCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0&modifiedSince=1736364532155&rf=https%3A%2F%2Fwww.infarmbureau.com%2F&bp=3&app=9a75f8cfaaed44c6&crc=838008494&en=g7j0dusa&end=1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526099.54.0.0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: oam.infarmbureau.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; _ga_7179S89KQB=GS1.1.1736526093.1.0.1736526099.54.0.0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
Source: global traffic	HTTP traffic detected: GET /t/1.css?apiType=css&projectid=1b1b60c1-c56a-45c6-a9b5-03ac3c306ea3 HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=ccKEXV9yiNAlfz2FgncaBMcr5LS8i_G1IzM3FGyuVqM-1736526089-1.0.1.1-9FCv7I6MB9ZM3wryGh.BBUbTG.78rSEagp3OvjxTnZazV_.v_rbmxVyIkKMlfp.aC1O7nB_GByrbaGU5aOuQiQIf-None-Match: "d41d8cd98f00b204e9800998ecf8427e"If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICANQVfghqru_10303241106123517.js HTTP/1.1Host: oam.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oam.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0
Source: global traffic	HTTP traffic detected: GET /runtime.cb41eb04fc9ef4ce.js HTTP/1.1Host: oam.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://oam.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://oam.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0
Source: global traffic	HTTP traffic detected: GET /polyfills.7a327121b2f16d9d.js HTTP/1.1Host: oam.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://oam.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://oam.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0
Source: global traffic	HTTP traffic detected: GET /main.37a156e426df75ac.js HTTP/1.1Host: oam.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://oam.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://oam.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0
Source: global traffic	HTTP traffic detected: GET /runtime.cb41eb04fc9ef4ce.js HTTP/1.1Host: oam.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0
Source: global traffic	HTTP traffic detected: GET /polyfills.7a327121b2f16d9d.js HTTP/1.1Host: oam.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0
Source: global traffic	HTTP traffic detected: GET /styles.d88015f63e1dc000.css HTTP/1.1Host: oam.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://oam.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0
Source: global traffic	HTTP traffic detected: GET /main.37a156e426df75ac.js HTTP/1.1Host: oam.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526109.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526109.0.0.0
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: oam.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://oam.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/v2.0/.well-known/openid-configuration HTTP/1.1Host: login.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://oam.infarmbureau.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/pwa/android-chrome-192x192.png HTTP/1.1Host: oam.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oam.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526109.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526109.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/pwa/android-chrome-192x192.png HTTP/1.1Host: oam.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01de2d92=01d1157481443049258058742828189e20c9001b4796a0c4b8a844cb8f868266dd303106bfdb86a3bbcfe8714519da74ee8c7ac961; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526109.0.0.0
Source: global traffic	HTTP traffic detected: GET /ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foam.infarmbureau.com%2F&client-request-id=76181790-b7f4-4e55-9301-2c62efc67ae5&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=7rh_UWeGjzQlaRK0SktYsRR3NqYaztN6mzTWjblA7F8&code_challenge_method=S256&nonce=813895e5-8aca-4304-b930-b4a3a23131c8&state=eyJpZCI6IjZmYzI1ZTM5LTMzODQtNGM3Yi1iM2UwLWUwNGIwMjExODdiMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&brand=ifbi HTTP/1.1Host: login.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526109.0.0.0
Source: global traffic	HTTP traffic detected: GET /ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/v2.0/.well-known/openid-configuration HTTP/1.1Host: login.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526109.0.0.0
Source: global traffic	HTTP traffic detected: GET /b2c/oam/customize-ui-ifbi.html?appId=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7 HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.infarmbureau.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/1.css?apiType=css&projectid=1b1b60c1-c56a-45c6-a9b5-03ac3c306ea3 HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=ccKEXV9yiNAlfz2FgncaBMcr5LS8i_G1IzM3FGyuVqM-1736526089-1.0.1.1-9FCv7I6MB9ZM3wryGh.BBUbTG.78rSEagp3OvjxTnZazV_.v_rbmxVyIkKMlfp.aC1O7nB_GByrbaGU5aOuQiQIf-None-Match: "d41d8cd98f00b204e9800998ecf8427e"If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
Source: global traffic	HTTP traffic detected: GET /farmhand/0.0.3/assets/ifbi-symbol.svg HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS017720c6=01d1157481619bae605a83952fa5fb9c32bfdff605ef60ead141d5e07b90ffdd5d3dd782633aa1ce9fff88aefeb2b57b1ef6fbdc53; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /b2c/oam/css/badge.css HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2c/oam/css/ifbi.css HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2c/oam/scripts/bowser.min.js HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /b2c/oam/scripts/login-ifbi.js HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/1686000021639755?v=2.9.179&r=stable&domain=login.infarmbureau.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /seg?add=5001888&t=2 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2c/oam/customize-ui-ifbi.html?appId=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7 HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /farmhand/0.0.3/assets/ifbi-symbol.svg HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS017720c6=01d1157481619bae605a83952fa5fb9c32bfdff605ef60ead141d5e07b90ffdd5d3dd782633aa1ce9fff88aefeb2b57b1ef6fbdc53; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fseg%3Fadd%3D5001888%26t%3D2 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NAOWZHSeeZjJ7wBBGLINtnUp68i_b0yNR9WFM8bHTT8jGdsFLtKyk3mgjH33FJkumbkYKyd0_BkYtGS_Zw-rfAXJYdhaUopcFoUrZtzPARE.; receive-cookie-deprecation=1; uuid2=4707963453986252107
Source: global traffic	HTTP traffic detected: GET /farmhand/V1/assets/ifbi-horizontal.svg HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.infarmbureau.com/farmhand/V1/consumer/theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS017720c6=01d1157481619bae605a83952fa5fb9c32bfdff605ef60ead141d5e07b90ffdd5d3dd782633aa1ce9fff88aefeb2b57b1ef6fbdc53; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /farmhand/V1/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.infarmbureau.com/farmhand/V1/consumer/theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2c/oam/scripts/login-common.js HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://cdn.aws.infarmbureau.com/b2c/oam/scripts/login-ifbi.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2c/oam/scripts/user-messages/user-messages-ifbi.js HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.infarmbureau.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://cdn.aws.infarmbureau.com/b2c/oam/scripts/login-ifbi.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2c/oam/scripts/login-ifbi.js HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115929&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a277a6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115929&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a277a6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1686000021639755&ev=Other&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115934&sw=1280&sh=1024&v=2.9.179&r=stable&ec=1&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a137c6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/1686000021639755?v=2.9.179&r=stable&domain=login.infarmbureau.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1686000021639755&ev=Other&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115934&sw=1280&sh=1024&v=2.9.179&r=stable&ec=1&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a137c6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /farmhand/V1/assets/ifbi-horizontal.svg HTTP/1.1Host: cdn.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS017720c6=01d1157481619bae605a83952fa5fb9c32bfdff605ef60ead141d5e07b90ffdd5d3dd782633aa1ce9fff88aefeb2b57b1ef6fbdc53; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fseg%3Fadd%3D5001888%26t%3D2 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4707963453986252107; anj=dTM7k!M4/8CxrEQF']wIg2E>:<d7Mt!@wnf-Te9(>wL5L!!'OL$hMd)
Source: global traffic	HTTP traffic detected: GET /tr/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115929&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a277a6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1686000021639755&ev=Other&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115934&sw=1280&sh=1024&v=2.9.179&r=stable&ec=1&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a137c6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/shared-content-blocks/contentitems?$filter=Tags/any(t:t%20eq%203e234c5e-3205-6b8a-9f2e-ff03000bf66e)%20and%20Category/any(c:c%20eq%20dd1d4c5e-3205-6b8a-9f2e-ff03000bf66e)&$select=Title,Content HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://login.infarmbureau.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115929&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a277a6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1686000021639755&ev=Other&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115934&sw=1280&sh=1024&v=2.9.179&r=stable&ec=1&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a137c6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2c/oam/scripts/login-common.js HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /b2c/oam/scripts/user-messages/user-messages-ifbi.js HTTP/1.1Host: cdn.aws.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/default-album/oam_oct2020_600x312.jpg?sfvrsn=e803aba_0 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/life-insurance.jpg?sfvrsn=69793dba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /api/shared-content-blocks/contentitems?$filter=Tags/any(t:t%20eq%203e234c5e-3205-6b8a-9f2e-ff03000bf66e)%20and%20Category/any(c:c%20eq%20dd1d4c5e-3205-6b8a-9f2e-ff03000bf66e)&$select=Title,Content HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/default-album/oam_oct2020_600x312.jpg?sfvrsn=e803aba_0 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/life-insurance-matters/life-insurance.jpg?sfvrsn=69793dba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1 HTTP/1.1Host: www.infarmbureau.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga=GA1.1.1564115657.1736526094; _tq_id.TV-5454092718-1.1370=fe57b8effe7e4586.1736526094.0.1736526094..; tfpsi=a2167eb7-06aa-48ec-b437-b08c483f8b4d; _uetsid=f58b80f0cf6e11ef9334d149f6e56f66; _uetvid=f58b8e10cf6e11efb7b151fb7877a1ed; _clck=15l4far%7C2%7Cfsg%7C0%7C1836; _clsk=1gbod8p%7C1736526095858%7C1%7C1%7Cz.clarity.ms%2Fcollect; _fbp=fb.1.1736526096543.207889938827811595; rxvt=1736527899716\|1736526087892; dtPC=14$126087888_342h-vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=true%7CC%7C-1%7Clock%7C-%7C1736526102782%7C126087888_342%7Chttps%3A%2F%2Fwww.infarmbureau.com%2F%7C%7C%7C%7C; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0; TS01938728=01d1157481f3667736ad659a7483738607b33f0d9d96a0c4b8a844cb8f868266dd303106bf37d3ba0a3e611828b0de0fdde8f06636c430b8d9e83de1115ba2f51d4fa23b40; _ga_7179S89KQB=GS1.1.1736526093.1.1.1736526104.49.0.0; _ga_ZM31Q2H51M=GS1.1.1736526109.1.0.1736526112.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: infarmbureau.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_173.2.dr	String found in binary or memory: <a id="facebook-social-media-share" class="material-icons f-p-4px" href="https://www.facebook.com/sharer/sharer.php?u=https://www.infarmbureau.com/inside-story/articles/6-ways-to-stay-positive-during-the-holiday-season" target="_blank" itemprop="sameAs"> equals www.facebook.com (Facebook)
Source: chromecache_173.2.dr	String found in binary or memory: <a id="facebook-social-media-share" class="material-icons f-p-4px" href="https://www.facebook.com/sharer/sharer.php?u=https://www.infarmbureau.com/inside-story/articles/how-to-have-a-healthy-new-year" target="_blank" itemprop="sameAs"> equals www.facebook.com (Facebook)
Source: chromecache_173.2.dr	String found in binary or memory: <a id="facebook-social-media-share" class="material-icons f-p-4px" href="https://www.facebook.com/sharer/sharer.php?u=https://www.infarmbureau.com/inside-story/articles/january-2025-holidays-you-need-to-know-about" target="_blank" itemprop="sameAs"> equals www.facebook.com (Facebook)
Source: chromecache_173.2.dr	String found in binary or memory: <a id="linkedin-social-media-share" class="material-icons f-p-4px" href="https://www.linkedin.com/shareArticle?mini=true&url=https://www.infarmbureau.com/inside-story/articles/6-ways-to-stay-positive-during-the-holiday-season" target="_blank" itemprop="sameAs"> equals www.linkedin.com (Linkedin)
Source: chromecache_173.2.dr	String found in binary or memory: <a id="linkedin-social-media-share" class="material-icons f-p-4px" href="https://www.linkedin.com/shareArticle?mini=true&url=https://www.infarmbureau.com/inside-story/articles/how-to-have-a-healthy-new-year" target="_blank" itemprop="sameAs"> equals www.linkedin.com (Linkedin)
Source: chromecache_173.2.dr	String found in binary or memory: <a id="linkedin-social-media-share" class="material-icons f-p-4px" href="https://www.linkedin.com/shareArticle?mini=true&url=https://www.infarmbureau.com/inside-story/articles/january-2025-holidays-you-need-to-know-about" target="_blank" itemprop="sameAs"> equals www.linkedin.com (Linkedin)
Source: chromecache_173.2.dr	String found in binary or memory: <a id="twitter-social-media-share" class="material-icons f-p-4px" href="https://twitter.com/intent/tweet?url=https://www.infarmbureau.com/inside-story/articles/6-ways-to-stay-positive-during-the-holiday-season&text=6 ways to stay positive during the holiday season" target="_blank" itemprop="sameAs"> equals www.twitter.com (Twitter)
Source: chromecache_173.2.dr	String found in binary or memory: <a id="twitter-social-media-share" class="material-icons f-p-4px" href="https://twitter.com/intent/tweet?url=https://www.infarmbureau.com/inside-story/articles/how-to-have-a-healthy-new-year&text=How to have a healthy new year" target="_blank" itemprop="sameAs"> equals www.twitter.com (Twitter)
Source: chromecache_173.2.dr	String found in binary or memory: <a id="twitter-social-media-share" class="material-icons f-p-4px" href="https://twitter.com/intent/tweet?url=https://www.infarmbureau.com/inside-story/articles/january-2025-holidays-you-need-to-know-about&text=January holidays you need to know" target="_blank" itemprop="sameAs"> equals www.twitter.com (Twitter)
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: href="https://www.facebook.com/INFarmBureauIns" equals www.facebook.com (Facebook)
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: href="https://www.youtube.com/user/INFarmBureau" equals www.youtube.com (Youtube)
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=1686000021639755&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: chromecache_173.2.dr	String found in binary or memory: <div ><iframe width="100%" height="315" src="https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen=""></iframe></div> equals www.youtube.com (Youtube)
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: (g.JE(V,"redirector.googlevideo.com"),N=V.toString()):V.T.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.JE(V,"www.youtube.com"),N=V.toString()):(V=pQL(N),BU(V)&&(N=V));V=new g.l5(N);V.set("cmo=pf","1");H&&V.set("cmo=td","a1.googlevideo.com");return V}; equals www.youtube.com (Youtube)
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: 0?"http":"https";this.Vn=rt((C?C.customBaseYoutubeUrl:p.BASE_YT_URL)\|\|"")\|\|rt(this.iW)\|\|this.protocol+"://www.youtube.com/";d=C?C.eventLabel:p.el;N="detailpage";d==="adunit"?N=this.S?"embedded":"detailpage":d==="embedded"\|\|this.D?N=N5(N,d,eO1):d&&(N="embedded");this.Wr=N;Odj();d=null;N=C?C.playerStyle:p.ps;X=g.W5(Pnj,N);!N\|\|X&&!this.D\|\|(d=N);this.playerStyle=d;this.Y=g.W5(Pnj,this.playerStyle);this.houseBrandUserStatus=C==null?void 0:C.houseBrandUserStatus;this.b_=this.Y&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: C=this.api.K();p=this.api.getVideoData();var V="";C.V\|\|(C=g.bL(C),C.indexOf("www.")===0&&(C=C.substring(4)),V=g.h_(p)?"Watch on YouTube Music":C==="youtube.com"?"Watch on YouTube":g.c8("Watch on $WEBSITE",{WEBSITE:C}));this.updateValue("title",V)}; equals www.youtube.com (Youtube)
Source: chromecache_256.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Nk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_216.2.dr	String found in binary or memory: bu.prototype.If=function(){return this.w7.l()};var rxH=(new Date).getTime();var CZe="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),joQ=/\bocr\b/;var NTY=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var vcy=0,mke=0,FgV=0;var xI=null,YI=!1,t1a=1,nX=Symbol("SIGNAL"),e0={version:0,Qn$:0,mL:!1,TU:void 0,W9:void 0,Y$:void 0,G5:0,GS:void 0,vn:void 0,Qq:!1,Oa:!1,kind:"unknown",i9_:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_228.2.dr, chromecache_342.2.dr, chromecache_256.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=vC(a,c,e);U(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return U(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},yC=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_395.2.dr, chromecache_230.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=qa(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_395.2.dr, chromecache_230.2.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;oa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return oa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: g.LI=function(p){var C=g.bL(p);p0V.includes(C)&&(C="www.youtube.com");return p.protocol+"://"+C}; equals www.youtube.com (Youtube)
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: g.bL=function(p){p=fI(p.Vn);return p==="www.youtube-nocookie.com"?"www.youtube.com":p}; equals www.youtube.com (Youtube)
Source: chromecache_216.2.dr	String found in binary or memory: g.h.getVideoUrl=function(p,C,V,N,H,X,d){C={list:C};V&&(H?C.time_continue=V:C.t=V);V=d?"music.youtube.com":g.bL(this);H=V==="www.youtube.com";!X&&N&&H?X="https://youtu.be/"+p:g.DW(this)?(X="https://"+V+"/fire",C.v=p):(X&&H?(X=this.protocol+"://"+V+"/shorts/"+p,N&&(C.feature="share")):(X=this.protocol+"://"+V+"/watch",C.v=p),L3&&(p=RUQ())&&(C.ebc=p));return g.LJ(X,C)}; equals www.youtube.com (Youtube)
Source: chromecache_216.2.dr	String found in binary or memory: gP9=function(p,C){if(!p.T["0"]){var V=new Rr("0","fakesb",{video:new kZ(0,0,0,void 0,void 0,"auto")});p.T["0"]=C?new bw(new g.l5("http://www.youtube.com/videoplayback"),V,"fake"):new rz(new g.l5("http://www.youtube.com/videoplayback"),V,new JW(0,0),new JW(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_256.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Kh:e,Ih:f,Jh:g,ri:k,si:m,bf:n,Mb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(aF(w,"iframe_api")\|\|aF(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!SE&&ZE(x[B],p.bf))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_216.2.dr	String found in binary or memory: new Set;this.deviceIsAudioOnly=!(C==null\|\|!C.deviceIsAudioOnly);this.xt=Hw(this.xt,p.ismb);this.uL?(M=p.vss_host\|\|"s.youtube.com",M==="s.youtube.com"&&(M=fI(this.Vn)\|\|"www.youtube.com")):M="video.google.com";this.kz=M;Oe(this,p,!0);this.vr=new Wb;g.R(this,this.vr);T=C?C.innertubeApiKey:XW("",p.innertube_api_key);c=C?C.innertubeApiVersion:XW("",p.innertube_api_version);M=C?C.innertubeContextClientVersion:XW("",p.innertube_context_client_version);T=g.W6("INNERTUBE_API_KEY")\|\|T;c=g.W6("INNERTUBE_API_VERSION")\|\| equals www.youtube.com (Youtube)
Source: chromecache_216.2.dr	String found in binary or memory: p))):this.api.K().G("enable_adb_handling_in_sabr")&&V==="BROWSER_OR_EXTENSION_ERROR"&&!N.Y?(N=N.hostLanguage,p="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",N&&(p=g.LJ(p,{hl:N})),this.Jc(j4(this,"BROWSER_OR_EXTENSION_ERROR",p))):this.Jc(g.pZ(p.errorMessage)):this.Jc(j4(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(p=N.hostLanguage,V="//support.google.com/youtube/?p=player_error1",p&&(V=g.LJ(V, equals www.youtube.com (Youtube)
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: p.details.rc!=="429"?p.errorCode==="ump.spsrejectfailure"&&(H="HTML5_SPS_UMP_STATUS_REJECTED"):(H="TOO_MANY_REQUESTS",X="6");this.Ta.GM(p.errorCode,p.severity,H,S9(p.details),X)}else this.Ta.publish("nonfatalerror",p),N=/^pp/.test(this.videoData.clientPlaybackNonce),this.DE(p.errorCode,p.details),N&&p.errorCode==="manifest.net.connect"&&(p="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.U2)(),Ah(p,"manifest",function(d){C.Y=!0;C.k_("pathprobe",d)},function(d){C.DE(d.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_228.2.dr, chromecache_368.2.dr, chromecache_382.2.dr, chromecache_321.2.dr, chromecache_178.2.dr, chromecache_244.2.dr, chromecache_342.2.dr, chromecache_377.2.dr	String found in binary or memory: return b}OE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_379.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_379.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_379.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: this.yn.sY&&(p.authuser=this.yn.sY);this.yn.pageId&&(p.pageid=this.yn.pageId);isNaN(this.cryptoPeriodIndex)\|\|(p.cpi=this.cryptoPeriodIndex.toString());var H=(H=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.f0()))?H[1]:"";H==="ATV"&&(p.cdt=H);this.W=p;this.W.session_id=N;this.a$=!0;this.C.flavor==="widevine"&&(this.W.hdr="1");this.C.flavor==="playready"&&(C=Number(eO(C.experiments,"playready_first_play_expiration")),!isNaN(C)&&C>=0&&(this.W.mfpe=""+C),this.a$=!1);C="";g.O6(this.C)?fb(this.C)?(N=V.C)&&(C="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_228.2.dr, chromecache_382.2.dr, chromecache_342.2.dr, chromecache_256.2.dr, chromecache_377.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: var cE=function(a,b,c,d,e){var f=TB("fsl",c?"nv.mwt":"mwt",0),g;g=c?TB("fsl","nv.ids",[]):TB("fsl","ids",[]);if(!g.length)return!0;var k=YB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!DA(k,FA(b, equals www.facebook.com (Facebook)
Source: chromecache_317.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: var uk={};var QOP={FU:[{XU:/Unable to load player module/,weight:20},{XU:/Failed to fetch/,weight:500},{XU:/XHR API fetch failed/,weight:10},{XU:/JSON parsing failed after XHR fetch/,weight:10},{XU:/Retrying OnePlatform request/,weight:10},{XU:/CSN Missing or undefined during playback association/,weight:100},{XU:/Non-recoverable error. Do not retry./,weight:0},{XU:/Internal Error. Retry with an exponential backoff./,weight:0},{XU:/API disabled by application./,weight:0}],uq:[{callback:AZv,weight:500}]};var ghv=/[&\?]action_proxy=1/,LFs=/[&\?]token=([\w-])/,WFy=/[&\?]video_id=([\w-])/,Qya=/[&\?]index=([\d-])/,rZe=/[&\?]m_pos_ms=([\d-])/,G3u=/[&\?]vvt=([\w-]*)/,Yx1="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Bi1="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),nha={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: infarmbureau.com
Source: global traffic	DNS traffic detected: DNS query: www.infarmbureau.com
Source: global traffic	DNS traffic detected: DNS query: cdn.infarmbureau.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: farmalytics.infarmbureau.com
Source: global traffic	DNS traffic detected: DNS query: cdn.insight.sitefinity.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: api.dec.sitefinity.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: p.teads.tv
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: collector-44978.us.tvsquared.com
Source: global traffic	DNS traffic detected: DNS query: cm.teads.tv
Source: global traffic	DNS traffic detected: DNS query: bob.dmpxs.com
Source: global traffic	DNS traffic detected: DNS query: 8339572.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: fledge.teads.tv
Source: global traffic	DNS traffic detected: DNS query: t.teads.tv
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: z.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: oam.infarmbureau.com
Source: global traffic	DNS traffic detected: DNS query: login.infarmbureau.com
Source: global traffic	DNS traffic detected: DNS query: zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: cdn.aws.infarmbureau.com
Source: global traffic	DNS traffic detected: DNS query: dc.services.visualstudio.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com

Source: unknown

HTTP traffic detected: POST /collect/v2/data-centers/b9914fdb-2e6f-d6bb-b0aa-8ae951f29484/datasources/IFBI_MFSF_To_DevDEC/interactions HTTP/1.1Host: api.dec.sitefinity.comConnection: keep-aliveContent-Length: 1669sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: application/jsonx-dataintelligence-sdk-version: js-3.1.41sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.infarmbureau.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.infarmbureau.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 16:21:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 244Connection: closeAccess-Control-Allow-Headers: Content-Type, Content-Length, X-Requested-With, Authorization, x-dataintelligence-accountkey, x-dataintelligence-datacenterkey, x-dataintelligence-datasource, x-dataintelligence-sort, x-dataintelligence-skip, x-dataintelligence-take, x-dataintelligence-fields, x-dataintelligence-count, x-dataintelligence-filterby, x-dataintelligence-filter, x-dataintelligence-contains, x-dataintelligence-nextrowkey, x-dataintelligence-flush, x-dataintelligence-fromdate, x-dataintelligence-todate, x-dataintelligence-period, x-dataintelligence-scale, x-dataintelligence-predicate, x-dataintelligence-subject, x-dataintelligence-ids, x-dataintelligence-datasources, x-dataintelligence-imagecrop, x-dataintelligence-contacts, x-forwarded-for, x-dataintelligence-sdk-version, Referer, Origin, x-dataintelligence-clientid, x-dataintelligence-campaignids, x-dataintelligence-userid, x-dataintelligence-errorid, x-dataintelligence-correlationid, cf-connecting-ip, x-forwarded-for, http_x_forwarded_for, x-forwarded, x-cluster-client-ip, forwarded-for, forwarded, remote_addr, client-ipAccess-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONSAccess-Control-Allow-Origin: *request-context: appId=cid-v1:a33f2e3a-ec15-4d53-8ac6-897af884626bContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closeServer: AmazonS3Date: Fri, 10 Jan 2025 16:21:56 GMTX-Cache: Error from cloudfrontVia: 1.1 360184e3d21355e6dfcea5cbe81a7f44.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P8X-Amz-Cf-Id: DEuxRlk_IkM5GGb8alUZXzcRxMhav8-SNAOESIWTRxhNYBaltgazqA==Vary: Origin

Source: chromecache_285.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_285.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_285.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_285.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_285.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_350.2.dr, chromecache_204.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_214.2.dr, chromecache_202.2.dr	String found in binary or memory: http://piwik.org
Source: chromecache_214.2.dr, chromecache_202.2.dr	String found in binary or memory: http://piwik.org/free-software/bsd/
Source: chromecache_173.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_242.2.dr	String found in binary or memory: http://stackoverflow.com/questions/2989263/disable-auto-zoom-in-input-text-tag-safari-on-iphone
Source: chromecache_171.2.dr, chromecache_264.2.dr, chromecache_216.2.dr, chromecache_344.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_303.2.dr, chromecache_212.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: http://www.infarmbureau.com/customer-service/index.aspx
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: http://www.infarmbureau.com/privacy-policy.aspx
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: http://www.infarmbureau.com/website/general/termsOfUse.aspx
Source: chromecache_216.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_377.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_368.2.dr, chromecache_382.2.dr, chromecache_178.2.dr, chromecache_377.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_263.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_173.2.dr	String found in binary or memory: https://api.dec.sitefinity.com
Source: chromecache_228.2.dr, chromecache_368.2.dr, chromecache_382.2.dr, chromecache_321.2.dr, chromecache_178.2.dr, chromecache_244.2.dr, chromecache_342.2.dr, chromecache_256.2.dr, chromecache_377.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cdn.aws.infarmbureau.com/b2c/oam/css/badge.css
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cdn.aws.infarmbureau.com/b2c/oam/css/ifbi.css
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cdn.aws.infarmbureau.com/b2c/oam/scripts/bowser.min.js
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cdn.aws.infarmbureau.com/b2c/oam/scripts/login-ifbi.js
Source: chromecache_260.2.dr	String found in binary or memory: https://cdn.infarmbureau.com/east-street/east-street-2-tier-color.svg);
Source: chromecache_260.2.dr	String found in binary or memory: https://cdn.infarmbureau.com/uhl/united-farm-family-logo.png);
Source: chromecache_260.2.dr	String found in binary or memory: https://cdn.infarmbureau.com/uhl/united-home-life-logo.png)
Source: chromecache_173.2.dr	String found in binary or memory: https://cdn.insight.sitefinity.com/sdk/sitefinity-insight-client.min.3.1.27.js
Source: chromecache_196.2.dr, chromecache_379.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_347.2.dr, chromecache_382.2.dr, chromecache_373.2.dr, chromecache_377.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_196.2.dr, chromecache_379.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_221.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_221.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_221.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_221.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_395.2.dr, chromecache_230.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_286.2.dr, chromecache_220.2.dr	String found in binary or memory: https://farmalytics.infarmbureau.com
Source: chromecache_173.2.dr	String found in binary or memory: https://farmalytics.infarmbureau.com/farmalytics.min.js
Source: chromecache_208.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_208.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_173.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vBI9kqt8ndeYxZ2JTg.woff)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vBIvkqt8ndeYxZ2JTg.woff)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vBJBkqt8ndeYxZ0.woff)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vBJFkqt8ndeYxZ2JTg.woff)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vBJMkqt8ndeYxZ2JTg.woff)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vBJOkqt8ndeYxZ2JTg.woff)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vBJPkqt8ndeYxZ2JTg.woff)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2)
Source: chromecache_188.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_188.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsoutlined/v109/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsoutlined/v109/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUcel5euI
Source: chromecache_173.2.dr	String found in binary or memory: https://g.page/indianafarmbureauinsurance?share
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: chromecache_382.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_171.2.dr, chromecache_264.2.dr, chromecache_216.2.dr, chromecache_344.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_190.2.dr	String found in binary or memory: https://github.com/material-components/material-components-web/blob/master/LICENSE
Source: chromecache_370.2.dr, chromecache_197.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_214.2.dr, chromecache_202.2.dr	String found in binary or memory: https://github.com/piwik/piwik/blob/master/js/piwik.js
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://goo.gle/js-open-now
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://goo.gle/js-open-now.
Source: chromecache_231.2.dr	String found in binary or memory: https://google.com
Source: chromecache_231.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_173.2.dr	String found in binary or memory: https://ifbsf.infarmbureau.com/external-pages/non-infb-external-pages/american-farm-bureau-federatio
Source: chromecache_173.2.dr	String found in binary or memory: https://in.linkedin.com/company/indiana-farm-bureau-insurance
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_173.2.dr	String found in binary or memory: https://jobs.infarmbureau.com/
Source: chromecache_255.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?libraries=places&key=AIzaSyDyt48xa3hHyPRLMK07PC3N552oTwB
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/staticmap
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_173.2.dr	String found in binary or memory: https://oam.infarmbureau.com/accountSummary
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://oam.infarmbureau.com/forgotPassword
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://oam.infarmbureau.com/individualRegistration
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://onpay.infarmbureau.com
Source: chromecache_263.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_228.2.dr, chromecache_368.2.dr, chromecache_382.2.dr, chromecache_321.2.dr, chromecache_178.2.dr, chromecache_244.2.dr, chromecache_342.2.dr, chromecache_256.2.dr, chromecache_377.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://places.googleapis.com/v1/places/$
Source: chromecache_344.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_216.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_217.2.dr, chromecache_278.2.dr	String found in binary or memory: https://s.qualtrics.com/spoke/all/jam
Source: chromecache_173.2.dr	String found in binary or memory: https://schema.org/
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://secure.adnxs.com/seg?add=5001888&t=2
Source: chromecache_217.2.dr, chromecache_278.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com
Source: chromecache_217.2.dr, chromecache_278.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com/dxjsmodule/
Source: chromecache_382.2.dr, chromecache_377.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_382.2.dr, chromecache_377.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_256.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://support.google.com/contributionpolicy/answer/7422880
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://support.google.com/maps/answer/3092445
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_216.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_228.2.dr, chromecache_368.2.dr, chromecache_382.2.dr, chromecache_321.2.dr, chromecache_178.2.dr, chromecache_244.2.dr, chromecache_342.2.dr, chromecache_256.2.dr, chromecache_377.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://twitter.com/#
Source: chromecache_285.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_173.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?url=https://www.infarmbureau.com/inside-story/articles/6-ways-to-st
Source: chromecache_173.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?url=https://www.infarmbureau.com/inside-story/articles/how-to-have-
Source: chromecache_173.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?url=https://www.infarmbureau.com/inside-story/articles/january-2025
Source: chromecache_285.2.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_205.2.dr, chromecache_302.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.dynatrace.com/company/trust-center/customers/reports/
Source: chromecache_345.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.gettyimages.com/detail/1160193557?utm_medium=organic&utm_source=google&utm_campa
Source: chromecache_307.2.dr, chromecache_199.2.dr	String found in binary or memory: https://www.gettyimages.com/detail/1225019375?utm_medium=organic&utm_source=google&utm_campa
Source: chromecache_263.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_211.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.google.com/maps/dir/
Source: chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_263.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_228.2.dr, chromecache_382.2.dr, chromecache_342.2.dr, chromecache_377.2.dr, chromecache_343.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_368.2.dr, chromecache_382.2.dr, chromecache_178.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_255.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_255.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-K8M96N7
Source: chromecache_173.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NNN5R8J
Source: chromecache_228.2.dr, chromecache_382.2.dr, chromecache_342.2.dr, chromecache_377.2.dr, chromecache_343.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_254.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/
Source: chromecache_179.2.dr, chromecache_266.2.dr	String found in binary or memory: https://www.infarmbureau.com/api/shared-content-blocks/$metadata#contentitems(Title
Source: chromecache_311.2.dr, chromecache_194.2.dr	String found in binary or memory: https://www.infarmbureau.com/api/shared-content-blocks/contentitems?$filter=Tags/any(t:t%20eq%203e23
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/apple-touch-icon.png
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/auto
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/business
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/company
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/discounts/promotions
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/drivetrend
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/external-pages/facebook
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/external-pages/instagram
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/external-pages/twitter
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/external-pages/youtube
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/farm
Source: chromecache_255.2.dr	String found in binary or memory: https://www.infarmbureau.com/favicon.ico
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/hereforyou
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/homeowners
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/actuaries'-conference/infb-health-plans-.jpg?sfvrsn=d99f3dba
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/actuaries'-conference/life-insurance---have-question-about-l
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/actuaries'-conference/save-up-to-15-with-drivetrend.jpg?sfvr
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/blog/father-and-son-cooking-in-the-kitchen-to-have-a-healthy-new
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/blog/january-2025-holidays-you-need-to-know-about-main-image-wit
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/blog/tips-to-stay-positive-during-the-holiday-season-woman-sitti
Source: chromecache_179.2.dr, chromecache_266.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1
Source: chromecache_179.2.dr, chromecache_266.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/default-album/oam_oct2020_600x312.jpg?sfvrsn=e803aba_0
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/google/indiana-farm-bureau-insurance-brand.svg
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/homepage-hero-images/hero-banner/indiana-farm-bureau-background_
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/homepage-hero-images/people-hero/family-picture-with-kids-in-lap
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/homepage-hero-images/people-hero/happy-family-with-kids-in-front
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/icons/car.svg
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/icons/home.svg
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/icons/key.svg
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/life-insurance-matters/business.svg?sfvrsn=56e924ba_2
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/life-insurance-matters/car.svg?sfvrsn=55e924ba_2
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/life-insurance-matters/farm.svg?sfvrsn=50e924ba_2
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/life-insurance-matters/heart.svg?sfvrsn=57e924ba_2
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/life-insurance-matters/home.svg?sfvrsn=51e924ba_2
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/life-insurance-matters/key.svg?sfvrsn=54e924ba_2
Source: chromecache_179.2.dr, chromecache_266.2.dr	String found in binary or memory: https://www.infarmbureau.com/images/life-insurance-matters/life-insurance.jpg?sfvrsn=69793dba_1
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/infb-health-plans
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/inside-story/articles/6-ways-to-stay-positive-during-the-holiday-season
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/inside-story/articles/how-to-have-a-healthy-new-year
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/inside-story/articles/january-2025-holidays-you-need-to-know-about
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/insurance-bundle
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/life
Source: chromecache_179.2.dr, chromecache_266.2.dr	String found in binary or memory: https://www.infarmbureau.com/life?c=hereforyou
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/oam
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/renters
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.com/search-results?indexCatalogue=fullsearch&searchQuery=
Source: chromecache_173.2.dr	String found in binary or memory: https://www.infarmbureau.org/membership?type=insurance
Source: chromecache_179.2.dr, chromecache_266.2.dr	String found in binary or memory: https://www.infbhealthplans.com/
Source: chromecache_173.2.dr	String found in binary or memory: https://www.linkedin.com/shareArticle?mini=true&url=https://www.infarmbureau.com/inside-story/articl
Source: chromecache_256.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_230.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_173.2.dr	String found in binary or memory: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_256.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_347.2.dr, chromecache_373.2.dr	String found in binary or memory: https://www.youtube.com/user/INFarmBureau
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_216.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_171.2.dr, chromecache_216.2.dr	String found in binary or memory: https://yurt.corp.google.com
Source: chromecache_255.2.dr	String found in binary or memory: https://zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_40n45Auaibhuy9M

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: classification engine

Classification label: mal48.win@27/363@172/46

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://infarmbureau.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3264 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4304 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3264 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4304 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://infarmbureau.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://www.infarmbureau.com/images/homepage-hero-images/people-hero/happy-family-with-kids-in-front-of-indiana-skyline-min.png?sfvrsn=a91532ba_1	0%	Avira URL Cloud	safe
https://oam.infarmbureau.com/ruxitagentjs_ICANQVfghqru_10303241106123517.js	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1	0%	Avira URL Cloud	safe
https://cdn.infarmbureau.com/uhl/united-home-life-logo.png)	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/external-pages/twitter	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/ScriptResource.axd?d=Uf8BQcxRshYGUr_fjsqPCBSdjzXOm_t5et9A1wGjARLGg2L5Ezgga_iZnwtZ8RB6l6Q1M8i7GmOf-IlJG5cMmNfEEPOhyQY7YWTF770_Yo6T82I7fR9JwEfzW2mekqS_OLcTtrBVyYpFm6pC69AFXN_RS7_tPK1Rhv2mGyj6T3XiJSqAuOgFuDXVDD7x_G0j0&t=7ed91ff1	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/blog/tips-to-stay-positive-during-the-holiday-season-woman-sitti	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/default-album/men-in-blue-jeans-jacket-and-glasses-reclining-on-chair-happily-after-bundling-his-insurance-and-get-discounted-rates15dd5c5e32056b8a9f2eff03000bf66e.jpg?sfvrsn=d8d837ba_0	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/header/menu-icons/umbrella.svg	0%	Avira URL Cloud	safe
https://oam.infarmbureau.com/individualRegistration	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/life-insurance-matters/business.svg?sfvrsn=56e924ba_2	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/life-insurance-matters/life-insurance.jpg?sfvrsn=69793dba_1	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/hereforyou	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/infb-health-plans	0%	Avira URL Cloud	safe
https://jobs.infarmbureau.com/	0%	Avira URL Cloud	safe
https://oam.infarmbureau.com/forgotPassword	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/company	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/api/myagent	0%	Avira URL Cloud	safe
https://cdn.aws.infarmbureau.com/b2c/oam/css/badge.css	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/life-insurance-matters/car.svg?sfvrsn=55e924ba_2	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/inside-story/articles/6-ways-to-stay-positive-during-the-holiday-season	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/business	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/rb_bf40802pra?type=js3&sn=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0&svrid=14&flavor=post&vi=CCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0&modifiedSince=1736364532155&rf=https%3A%2F%2Fwww.infarmbureau.com%2F&bp=3&app=9a75f8cfaaed44c6&crc=839905937&en=g7j0dusa&end=1	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/external-pages/instagram	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/blog/father-and-son-cooking-in-the-kitchen-to-have-a-healthy-new	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/footer/youtube.svg?sfvrsn=2a7424ba_2	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/rb_bf40802pra?type=js3&sn=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0&svrid=14&flavor=post&vi=CCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0&modifiedSince=1736364532155&rf=https%3A%2F%2Fwww.infarmbureau.com%2F&bp=3&app=9a75f8cfaaed44c6&crc=609544148&en=g7j0dusa&end=1	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/header/menu-icons/life-icon.svg	0%	Avira URL Cloud	safe
https://zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_40n45Auaibhuy9M	0%	Avira URL Cloud	safe
http://www.infarmbureau.com/website/general/termsOfUse.aspx	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/actuaries'-conference/save-up-to-15-with-drivetrend.jpg?sfvr	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/google/indiana-farm-bureau-insurance-brand.svg	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/search-results?indexCatalogue=fullsearch&searchQuery=	0%	Avira URL Cloud	safe
https://cdn.aws.infarmbureau.com/b2c/oam/customize-ui-ifbi.html?appId=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7	0%	Avira URL Cloud	safe
https://oam.infarmbureau.com/accountSummary	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/insurance-bundle	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/header/menu-icons/car-icon.svg	0%	Avira URL Cloud	safe
https://www.infbhealthplans.com/	0%	Avira URL Cloud	safe
https://onpay.infarmbureau.com	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/homeowners	0%	Avira URL Cloud	safe
https://oam.infarmbureau.com/assets/images/pwa/android-chrome-192x192.png	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/images/blog/january-2025-holidays-you-need-to-know-about-main-image-wit	0%	Avira URL Cloud	safe
https://www.infarmbureau.com/farm	0%	Avira URL Cloud	safe
https://farmalytics.infarmbureau.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	high
dart.l.doubleclick.net	142.250.186.38	true	false	high
farmalytics.infarmbureau.com	198.179.10.51	true	false	unknown
i.ytimg.com	216.58.212.150	true	false	high
cdn.infarmbureau.com	198.179.10.61	true	false	unknown
adservice.google.com	142.250.185.162	true	false	high
collectoru.us.tvsquared.com	3.131.211.191	true	false	high
infarmbureau.com	198.179.10.65	true	true	unknown
stats.g.doubleclick.net	74.125.133.156	true	false	high
scontent.xx.fbcdn.net	157.240.251.9	true	false	high
script.hotjar.com	13.33.187.109	true	false	high
d338mmiskgzqu4.cloudfront.net	3.161.82.86	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.225	true	false	high
www.google.com	142.250.185.68	true	false	high
oam.infarmbureau.com	198.179.10.24	true	false	unknown
static-cdn.hotjar.com	18.66.102.51	true	false	high
star-mini.c10r.facebook.com	157.240.0.35	true	false	high
ad.doubleclick.net	142.250.184.198	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
static.doubleclick.net	216.58.206.38	true	false	high
youtube-ui.l.google.com	142.250.185.206	true	false	high
analytics-alv.google.com	216.239.32.181	true	false	high
cdn.aws.infarmbureau.com	18.172.112.59	true	false	unknown
www.infarmbureau.com	198.179.10.12	true	true	unknown
fast.fonts.net	104.16.40.28	true	false	high
googleads.g.doubleclick.net	142.250.184.226	true	false	high
play.google.com	142.250.184.238	true	false	high
td.doubleclick.net	142.250.185.66	true	false	high
unpkg.com	104.17.249.203	true	false	high
ib.anycast.adnxs.com	185.89.210.90	true	false	high
api.insight.sitefinity.com	52.252.156.53	true	false	high
yt3.ggpht.com	unknown	unknown	false	high
t.teads.tv	unknown	unknown	false	high
zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com	unknown	unknown	false	unknown
siteintercept.qualtrics.com	unknown	unknown	false	high
secure.adnxs.com	unknown	unknown	false	high
8339572.fls.doubleclick.net	unknown	unknown	false	unknown
fledge.teads.tv	unknown	unknown	false	high
z.clarity.ms	unknown	unknown	false	high
login.infarmbureau.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
collector-44978.us.tvsquared.com	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	high
api.dec.sitefinity.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
p.teads.tv	unknown	unknown	false	high
cm.teads.tv	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
bob.dmpxs.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
dc.services.visualstudio.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
cdn.insight.sitefinity.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://oam.infarmbureau.com/ruxitagentjs_ICANQVfghqru_10303241106123517.js	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/images/header/menu-icons/umbrella.svg	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/images/homepage-hero-images/people-hero/happy-family-with-kids-in-front-of-indiana-skyline-min.png?sfvrsn=a91532ba_1	false	Avira URL Cloud: safe	unknown
https://yt3.ggpht.com/ytc/AIdro_mTqeaJMXAz6DHPPU8ICZM6fP3tmkBqOPGBxeBi3sGiVqU=s68-c-k-c0x00ffffff-no-rj	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Fwww.infarmbureau.com&rl=&if=false&ts=1736526096546&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=f5642d&ler=empty&cdl=API_unavailable&it=1736526093610&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341&rqm=FGET	false		high
https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/remote.js	false		high
https://www.infarmbureau.com/images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/ScriptResource.axd?d=Uf8BQcxRshYGUr_fjsqPCBSdjzXOm_t5et9A1wGjARLGg2L5Ezgga_iZnwtZ8RB6l6Q1M8i7GmOf-IlJG5cMmNfEEPOhyQY7YWTF770_Yo6T82I7fR9JwEfzW2mekqS_OLcTtrBVyYpFm6pC69AFXN_RS7_tPK1Rhv2mGyj6T3XiJSqAuOgFuDXVDD7x_G0j0&t=7ed91ff1	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1686000021639755&ev=Other&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115934&sw=1280&sh=1024&v=2.9.179&r=stable&ec=1&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a137c6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=FGET	false		high
https://www.infarmbureau.com/images/default-album/men-in-blue-jeans-jacket-and-glasses-reclining-on-chair-happily-after-bundling-his-insurance-and-get-discounted-rates15dd5c5e32056b8a9f2eff03000bf66e.jpg?sfvrsn=d8d837ba_0	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://www.infarmbureau.com/images/life-insurance-matters/business.svg?sfvrsn=56e924ba_2	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/images/life-insurance-matters/life-insurance.jpg?sfvrsn=69793dba_1	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=1686000021639755&ev=Other&dl=https%3A%2F%2Flogin.infarmbureau.com&rl=&if=false&ts=1736526115934&sw=1280&sh=1024&v=2.9.179&r=stable&ec=1&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=a137c6&ler=empty&cdl=API_unavailable&it=1736526114568&coo=false&cs_cc=1&cas=6775042175848930%2C5062751907180619%2C4868316926528341%2C4124363244256970&rqm=GET	false		high
https://www.infarmbureau.com/api/myagent	false	Avira URL Cloud: safe	unknown
https://cdn.aws.infarmbureau.com/b2c/oam/css/badge.css	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/images/life-insurance-matters/car.svg?sfvrsn=55e924ba_2	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/rb_bf40802pra?type=js3&sn=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0&svrid=14&flavor=post&vi=CCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0&modifiedSince=1736364532155&rf=https%3A%2F%2Fwww.infarmbureau.com%2F&bp=3&app=9a75f8cfaaed44c6&crc=839905937&en=g7j0dusa&end=1	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/images/footer/youtube.svg?sfvrsn=2a7424ba_2	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3	false		high
https://www.infarmbureau.com/rb_bf40802pra?type=js3&sn=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_app-3Ab78b8a7e60c38db4_1_rcs-3Acss_0&svrid=14&flavor=post&vi=CCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0&modifiedSince=1736364532155&rf=https%3A%2F%2Fwww.infarmbureau.com%2F&bp=3&app=9a75f8cfaaed44c6&crc=609544148&en=g7j0dusa&end=1	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/images/header/menu-icons/life-icon.svg	false	Avira URL Cloud: safe	unknown
https://cdn.insight.sitefinity.com/sdk/sitefinity-insight-client.min.3.1.27.js	false		high
https://cdn.aws.infarmbureau.com/b2c/oam/customize-ui-ifbi.html?appId=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7	false	Avira URL Cloud: safe	unknown
https://static.hotjar.com/c/hotjar-31017.js?sv=7	false		high
https://www.infarmbureau.com/images/header/menu-icons/car-icon.svg	false	Avira URL Cloud: safe	unknown
https://oam.infarmbureau.com/assets/images/pwa/android-chrome-192x192.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.infarmbureau.com/images/blog/tips-to-stay-positive-during-the-holiday-season-woman-sitti	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_256.2.dr, chromecache_343.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_171.2.dr, chromecache_216.2.dr	false		high
http://g.co/dev/maps-no-account	chromecache_211.2.dr, chromecache_221.2.dr	false		high
https://twitter.com/benjsperry	chromecache_285.2.dr	false		high
https://g.page/indianafarmbureauinsurance?share	chromecache_173.2.dr	false		high
https://www.youtube.com	chromecache_230.2.dr	false		high
https://fontawesome.com	chromecache_208.2.dr	false		high
https://admin.youtube.com	chromecache_171.2.dr, chromecache_216.2.dr	false		high
https://www.infarmbureau.com/external-pages/twitter	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_285.2.dr	false		high
https://cdn.infarmbureau.com/uhl/united-home-life-logo.png)	chromecache_260.2.dr	false	Avira URL Cloud: safe	unknown
https://goo.gle/js-api-loading	chromecache_211.2.dr, chromecache_221.2.dr	false		high
https://oam.infarmbureau.com/individualRegistration	chromecache_347.2.dr, chromecache_373.2.dr	false	Avira URL Cloud: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_171.2.dr, chromecache_216.2.dr	false		high
https://support.google.com/maps/answer/3092445	chromecache_211.2.dr, chromecache_221.2.dr	false		high
https://twitter.com/intent/tweet?url=https://www.infarmbureau.com/inside-story/articles/6-ways-to-st	chromecache_173.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_221.2.dr	false		high
https://github.com/microsoft/clarity	chromecache_370.2.dr, chromecache_197.2.dr	false		high
https://yurt.corp.google.com	chromecache_171.2.dr, chromecache_216.2.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_211.2.dr, chromecache_221.2.dr	false		high
https://developers.google.com/maps/deprecations	chromecache_211.2.dr, chromecache_221.2.dr	false		high
https://www.infarmbureau.com/hereforyou	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_171.2.dr, chromecache_216.2.dr	false		high
https://www.infarmbureau.com/infb-health-plans	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://jobs.infarmbureau.com/	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://oam.infarmbureau.com/forgotPassword	chromecache_347.2.dr, chromecache_373.2.dr	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/company	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://siteintercept.qualtrics.com	chromecache_217.2.dr, chromecache_278.2.dr	false		high
https://www.infarmbureau.com/inside-story/articles/6-ways-to-stay-positive-during-the-holiday-season	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/	chromecache_196.2.dr, chromecache_379.2.dr	false		high
https://github.com/piwik/piwik/blob/master/js/piwik.js	chromecache_214.2.dr, chromecache_202.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_171.2.dr, chromecache_264.2.dr, chromecache_216.2.dr, chromecache_344.2.dr	false		high
https://www.gettyimages.com/detail/1225019375?utm_medium=organic&utm_source=google&utm_campa	chromecache_307.2.dr, chromecache_199.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_221.2.dr	false		high
https://www.infarmbureau.com/business	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_285.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_211.2.dr, chromecache_221.2.dr	false		high
https://www.infarmbureau.com/images/blog/father-and-son-cooking-in-the-kitchen-to-have-a-healthy-new	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/intent/tweet?url=https://www.infarmbureau.com/inside-story/articles/january-2025	chromecache_173.2.dr	false		high
https://www.infarmbureau.com/external-pages/instagram	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gettyimages.com/detail/1160193557?utm_medium=organic&utm_source=google&utm_campa	chromecache_345.2.dr, chromecache_308.2.dr	false		high
https://zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_40n45Auaibhuy9M	chromecache_255.2.dr	false	Avira URL Cloud: safe	unknown
https://oam.infarmbureau.com/accountSummary	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/youtube/?p=report_playback	chromecache_171.2.dr, chromecache_216.2.dr	false		high
http://www.infarmbureau.com/website/general/termsOfUse.aspx	chromecache_347.2.dr, chromecache_373.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_221.2.dr	false		high
https://www.dynatrace.com/company/trust-center/customers/reports/	chromecache_205.2.dr, chromecache_302.2.dr, chromecache_294.2.dr	false		high
https://www.infarmbureau.com/images/google/indiana-farm-bureau-insurance-brand.svg	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/search-results?indexCatalogue=fullsearch&searchQuery=	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/questions/2989263/disable-auto-zoom-in-input-text-tag-safari-on-iphone	chromecache_242.2.dr	false		high
https://angular.dev/license	chromecache_171.2.dr, chromecache_216.2.dr	false		high
https://www.infarmbureau.com/images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1	chromecache_179.2.dr, chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_395.2.dr, chromecache_230.2.dr	false		high
https://www.infarmbureau.com/images/actuaries'-conference/save-up-to-15-with-drivetrend.jpg?sfvr	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_171.2.dr, chromecache_216.2.dr	false		high
https://twitter.com/ionicframework	chromecache_285.2.dr	false		high
https://fontawesome.com/license/free	chromecache_208.2.dr	false		high
https://twitter.com/intent/tweet?url=https://www.infarmbureau.com/inside-story/articles/how-to-have-	chromecache_173.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_211.2.dr, chromecache_221.2.dr	false		high
https://in.linkedin.com/company/indiana-farm-bureau-insurance	chromecache_173.2.dr	false		high
https://youtu.be/	chromecache_171.2.dr, chromecache_216.2.dr	false		high
http://schema.org	chromecache_173.2.dr	false		high
https://github.com/material-components/material-components-web/blob/master/LICENSE	chromecache_190.2.dr	false		high
https://www.infarmbureau.com/insurance-bundle	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://www.infbhealthplans.com/	chromecache_179.2.dr, chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://onpay.infarmbureau.com	chromecache_347.2.dr, chromecache_373.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/contributionpolicy/answer/7422880	chromecache_211.2.dr, chromecache_221.2.dr	false		high
https://www.infarmbureau.com/farm	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/homeowners	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://www.infarmbureau.com/images/blog/january-2025-holidays-you-need-to-know-about-main-image-wit	chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
https://farmalytics.infarmbureau.com	chromecache_286.2.dr, chromecache_220.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.252.156.53	api.insight.sitefinity.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.172.112.59	cdn.aws.infarmbureau.com	United States	3	MIT-GATEWAYSUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
142.250.185.225	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.17.249.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
216.58.212.150	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
142.250.184.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
142.250.185.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
3.161.82.86	d338mmiskgzqu4.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.184.198	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.38	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
172.217.23.102	unknown	United States	15169	GOOGLEUS	false
3.130.114.26	unknown	United States	16509	AMAZON-02US	false
142.250.184.238	play.google.com	United States	15169	GOOGLEUS	false
142.250.186.86	unknown	United States	15169	GOOGLEUS	false
13.33.187.109	script.hotjar.com	United States	16509	AMAZON-02US	false
18.66.102.51	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
18.172.112.115	unknown	United States	3	MIT-GATEWAYSUS	false
74.125.133.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.206	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
3.161.82.19	unknown	United States	16509	AMAZON-02US	false
37.252.173.215	unknown	European Union	29990	ASN-APPNEXUS	false
3.131.211.191	collectoru.us.tvsquared.com	United States	16509	AMAZON-02US	false
142.250.185.166	unknown	United States	15169	GOOGLEUS	false
216.58.206.38	static.doubleclick.net	United States	15169	GOOGLEUS	false
198.179.10.61	cdn.infarmbureau.com	United States	30098	INFB-ASNUS	false
198.179.10.65	infarmbureau.com	United States	30098	INFB-ASNUS	true
142.250.74.193	unknown	United States	15169	GOOGLEUS	false
198.179.10.24	oam.infarmbureau.com	United States	30098	INFB-ASNUS	false
216.58.212.130	unknown	United States	15169	GOOGLEUS	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
185.89.210.90	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
198.179.10.51	farmalytics.infarmbureau.com	United States	30098	INFB-ASNUS	false
198.179.10.12	www.infarmbureau.com	United States	30098	INFB-ASNUS	true
104.16.40.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587801
Start date and time:	2025-01-10 17:20:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://infarmbureau.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@27/363@172/46
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.186.174, 64.233.166.84, 172.217.18.110, 216.58.212.142, 172.217.18.14, 172.217.16.138, 142.250.186.67, 216.58.206.72, 142.250.185.138, 142.250.186.106, 142.250.186.170, 142.250.181.234, 142.250.74.202, 142.250.185.234, 216.58.206.42, 216.58.206.74, 142.250.184.202, 142.250.184.234, 172.217.18.10, 142.250.185.202, 142.250.185.170, 142.250.185.106, 172.217.16.202, 142.250.186.138, 23.209.209.205, 104.124.11.217, 104.124.11.145, 142.250.185.232, 23.32.185.35, 23.212.89.35, 199.232.214.172, 20.10.16.51, 142.250.185.162, 13.107.42.14, 88.221.110.227, 88.221.110.136, 142.250.186.42, 142.250.185.74, 172.217.23.106, 172.217.18.106, 142.250.186.74, 216.58.212.138, 216.58.206.78, 192.229.221.95, 142.250.185.174, 2.23.241.198, 142.250.185.98, 216.58.206.67, 172.64.146.215, 104.18.41.41, 142.250.74.195, 13.74.129.1, 204.79.197.237, 13.107.21.237, 216.58.212.170, 104.17.208.240, 104.17.209.240, 172.217.16.206, 142.250.181.238, 20.166.40.71, 20.50.88.238, 142
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, t.teads.tv.edgekey.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, fledge.teads.tv.edgekey.net, update.googleapis.com, www.gstatic.com, gig-ai-prod-northeurope-global.trafficmanager.net, e9957.e4.akamaiedge.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, od.linkedin.edgesuite.net, az416426.vo.msecnd.net, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, c.bing.com, clients.l.google.com, a1916.dscg2.akamai.net, www.googleadservices.com, c-msn-com-nsatc.trafficmanager.net, gig-ai-g-prod-northeurope-0-app-v4-tag.northeurope.cloudapp.azure.com, maps.googleapis.com, cm.teads.tv.edgekey.net, redirector.gvt1.com, www.googletagmanager.com, bat.bing.com, azurefd-t-prod.trafficmanager.net, gig-ai-g-prod-westeurope-3-app-v4-tag.westeurope.cloudapp.azure.com, www-l
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://infarmbureau.com

Input	Output
URL: http://infarmbureau.com Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: http://infarmbureau.com
URL: https://www.infarmbureau.com/WebResource.axd?d=HtQ... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a part of a web analytics or tracking solution. It contains several behaviors that are considered moderate-risk, such as external data transmission, the use of legacy APIs, and cookie management. However, the overall intent seems to be legitimate, with the script handling analytics-related functionality. Further review may be needed to ensure the script is not overly aggressive or misusing user data." }
InsightInitScript = { _settings: null, _client: null, _createClient: function (t) { InsightInitScript._client = new sfDataIntell.Client({ apiKey: InsightInitScript._settings.apiKey, source: InsightInitScript._settings.applicationName, apiServerUrl: InsightInitScript._settings.apiServerUrl, trackingCookieDomain: InsightInitScript._settings.trackingCookieDomain, maxAgeForTrackingCookieInDays: InsightInitScript._settings.maxAgeForTrackingCookieInDays, slidingExpirationForTrackingCookie: InsightInitScript._settings.slidingExpirationForTrackingCookie, trackYouTubeVideos: InsightInitScript._settings.trackYouTubeVideos, trackVimeoVideos: InsightInitScript._settings.trackVimeoVideos, crossDomainTrackingEntries: InsightInitScript._settings.crossDomainTrackingEntries, sessionLengthInMinutes: InsightInitScript._settings.sessionLengthInMinutes, trackPageVisits: !0, trackVideos: !0, instrument: !0, trackBrowserInformation: !0, trackDocuments: !0, docsHrefTestExpressions: InsightInitScript._settings.docsHrefTestExpressions, enableTracking: t, writeSubjectMetadata: InsightInitScript._settings.writeSubjectMetadata, writeSessionMetadata: InsightInitScript._settings.writeSessionMetadata, xDomainSessionId: InsightInitScript._settings.xDomainSessionId, xDomainPrevSessionId: InsightInitScript._settings.xDomainPrevSessionId, pageVisitId: InsightInitScript._settings.pageVisitId }); var i = InsightInitScript._settings.keepDecTrackingCookieOnTrackingConsentRejection \|\| !1; !1 === t && !1 === i && (InsightInitScript._client.deleteCookie(InsightInitScript._settings.trackingCookieDomain), InsightInitScript._client.deleteSessionCookie(InsightInitScript._settings.trackingCookieDomain)), window.DataIntelligenceSubmitScript = InsightInitScript, InsightInitScript._dispatchEvent("decclientready") }, _dispatchEvent: function (t) { if ("function" == typeof window.CustomEvent) window.dispatchEvent(new window.CustomEvent(t)); else { var i = function (t, i) { i = i \|\| { bubbles: !1, cancelable: !1, detail: void 0 }; var n = document.createEvent("CustomEvent"); return n.initCustomEvent(t, i.bubbles, i.cancelable, i.detail), n }; i.prototype = window.Event.prototype, window.CustomEvent = i; var n = new i(t, { bubbles: !0, cancelable: !0 }); window.dispatchEvent(n) } }, _readCookieByName: function (t) { for (var i = t + "=", n = window.document.cookie.split(";"), e = 0; e < n.length; e++) { var s = n[e].trim(); if (0 === s.indexOf(i)) return s.substring(i.length, s.length) } return null }, _setCookie: function (t, i, n, e) { var s = new Date; s.setTime(s.getTime() + 60 * n * 1e3); var r = t + "=" + i + ";path=/; " + ("expires=" + s.toGMTString()); e && (r += ";domain=" + e), r += ";SameSite=Lax", document.cookie = r }, _createIdentifier: function (t = !0) { var i = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (function (t) { var i = 16 * Math.random() \| 0; return ("x" == t ? i : 3 & i \| 8).toString(16) })); return t ? (new Date).getTime() + "-" + i : i }, _waitForCookie(t, i) { if (document.cookie.includes(t)) i(); else { const n = setInterval((function () { document.cookie.includes(t) && (clearInterval(n), i()) }), 25) } }, _getQueryParams: function () { try { var t = window.location; if (!t) return null; var i = t.search; if (!i) return null; var n = i.slice(i.indexOf("?") + 1).split("&"), e = {}; return n.forEach((function (t) { var i = t.split("="); e[i[0]] = decodeURIComponent(i[1]) })), e } catch (t) { return null } }, _parseXDomainParams: function () { var t = InsightInitScript._getQueryParams(); if (!t) return null; var i = t.instrck; if (!i) return null; var n = atob(i); return JSON.parse(n) }, parseSettings: function () { var t = document.querySelector("#sf-insight-settings"); if (t) { var i = t.textContent.trim(); InsightInitScript._settings = JSON.parse(i) } }, manageCookies: function () { var t = "sf-data-intell-subject", i = "sf-ins-ssid", n = "sf-ins-pv-id", e = 24 * InsightInitScript._settings.maxAgeForTrackingCookieInDays * 60, s = InsightInitS
URL: https://www.infarmbureau.com/Frontend-Assembly/Tel... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script appears to be a search functionality implementation, with some moderate-risk indicators. It sends user search queries to an external domain, which could potentially be used for data exfiltration. However, the script also includes some legitimate functionality, such as autocomplete suggestions and redirection to a search results page. Overall, the script requires further review due to the potential for misuse, but it does not demonstrate clear malicious intent." }
!function(l){function e(){for(var e=l('[data-sf-role="searchTextBoxId"]'),t=0;t<e.length;t++){var s=l(e[t]);n({resultsUrl:s.siblings('[data-sf-role="resultsUrl"]').first().val(),indexCatalogue:s.siblings('[data-sf-role="indexCatalogue"]').first().val(),disableSuggestions:l.parseJSON(s.siblings('[data-sf-role="disableSuggestions"]').first().val()),minSuggestionLength:s.siblings('[data-sf-role="minSuggestionLength"]').first().val(),suggestionFields:s.siblings('[data-sf-role="suggestionFields"]').first().val(),language:s.siblings('[data-sf-role="language"]').first().val(),siteId:s.siblings('[data-sf-role="siteId"]').first().val(),suggestionsRoute:s.siblings('[data-sf-role="suggestionsRoute"]').first().val(),searchTextBoxSelector:s.val(),searchButtonSelector:s.siblings('[data-sf-role="searchButtonId"]').first().val(),scoringSettingsSelector:s.siblings('[data-sf-role="scoringSettings"]').first().val(),resultsForAllSites:s.siblings('[data-sf-role="searchInAllSitesInTheIndex"]').first().val()})}function n(i){var o=l(i.searchTextBoxSelector);if(l(i.searchButtonSelector).click(a),o.keypress(function(e){e=e\|\|window.event;var t=null;t=e.keyCode?e.keyCode:e.charCode;13==t&&a(e)}),!i.disableSuggestions){o.keyup(function(e){if(38!=e.keyCode&&40!=e.keyCode&&27!=e.keyCode){13==e.keyCode&&a(e);var t={},s=o.val().trim();s.length>=i.minSuggestionLength&&(t.IndexName=i.indexCatalogue,t.SuggestionFields=i.suggestionFields,t.Text=s,t.Language=i.language,t.SiteId=i.siteId,i.resultsForAllSites&&(t.ResultsForAllSites=i.resultsForAllSites),i.scoringSettingsSelector&&(t.ScoringInfo=i.scoringSettingsSelector),l.ajax({type:"GET",url:i.suggestionsRoute,dataType:"json",data:t,success:n}))}});try{o.autocomplete({source:[],messages:{noResults:"",results:function(){}},select:function(e,t){o.val(t.item.value),a(e)}}).autocomplete("widget").addClass("sf-autocomplete")}catch(e){}}function n(e,t){var s=e.Suggestions;o.autocomplete("option","source",s),o.autocomplete("search",o.val().trim())}function a(e){(e=e\|\|window.event).stopPropagation?e.stopPropagation():e.cancelBubble=!0,e.preventDefault?e.preventDefault():e.returnValue=!1;var t=o.val();t&&t.trim()&&i.indexCatalogue&&(window.DataIntelligenceSubmitScript&&DataIntelligenceSubmitScript._client.sentenceClient.writeSentence({predicate:"Search for",object:o.val(),objectMetadata:[{K:"PageUrl",V:location.href}]}),window.location=function(){var e=o.val().trim(),t=(-1==i.resultsUrl.indexOf("?")?"?":"&")+"indexCatalogue="+encodeURIComponent(i.indexCatalogue),s="&searchQuery="+encodeURIComponent(e),n=i.resultsUrl+t+s;i.scoringSettingsSelector&&(n=n+"&scoringInfo="+i.scoringSettingsSelector);i.resultsForAllSites&&(n=n+"&resultsForAllSites="+i.resultsForAllSites);return n}())}}}window.personalizationManager?window.personalizationManager.addPersonalizedContentLoaded(function(){e()}):document.addEventListener("DOMContentLoaded",function(){e()})}(jQuery); //# sourceMappingURL=Search-box.min.js.map
URL: https://www.infarmbureau.com/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a function that sends a POST request to a server-side endpoint to set a URL identifier. While it includes some potentially risky behaviors, such as sending user data (the current URL) to an external server, the overall intent seems to be benign and related to a legitimate application functionality. The use of the `async: false` option is not recommended, as it can lead to performance issues, but it does not necessarily indicate malicious behavior. Overall, this script poses a low risk and is likely part of a legitimate application." }
function setUrlIdentifier(url) { const actionUrl = '/StartMultilineQuote/SetUrlIdentifier'; const postData = { selectedUrl: url + " - " + window.location.href }; $.ajax({ url: actionUrl, type: 'POST', data: postData, async: false }); }
URL: https://www.gstatic.com/cv/js/sender/v1/cast_sende... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that loads the Google Cast SDK for Chrome. It checks the user's browser version, loads the necessary scripts from trusted Google domains, and handles the availability of the Cast API. While it uses some legacy practices like `XDomainRequest`, the overall behavior is consistent with its intended purpose and does not exhibit any high-risk indicators." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ 'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d]; return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="AssertionError";var w=function(a,b){throw new v("Failure"+(a?": "+a:""),Array.prototype.slice.call(arguments,1));};var x;var A=function(a,b){this.g=b===z?a:""};A.prototype.toString=function(){return this.g+""};var z={};var B=function(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},C=function(a){return!!document.currentScript&&(-1!=document.currentScript.src.indexOf("?"+a)\|\|-1!=document.currentScript.src.indexOf("&"+a))},D=function(){return"function"==typeof window.__onGCastApiAvailable?window.__onGCastApiAvailable:null},F=function(a){a.length?E(a.shift(),function(){F(a)}):G()},H=function(a){return"chrome-extension://"+a+"/cast_sender.js"},E=function(a,b,e){var c=document.createElement("script"); c.onerror=b;e&&(c.onload=e);if(void 0===x)if(b=null,(e=m.trustedTypes)&&e.createPolicy){try{b=e.createPolicy("goog#html",{createHTML:t,createScript:t,createScriptURL:t})}catch(y){m.console&&m.console.error(y.message)}x=b}else x=b;a=(b=x)?b.createScriptURL(a):a;a=new A(a,z);a:{try{var g=c&&c.ownerDocument,k=g&&(g.defaultView\|\|g.parentWindow);k=k\|\|m;if(k.Element&&k.Location){var f=k;break a}}catch(y){}f=null}if(f&&"undefined"!=typeof f.HTMLScriptElement&&(!c\|\|!(c instanceof f.HTMLScriptElement)&&(c instanceof f.Location\|\|c instanceof f.Element))){f=typeof c;if("object"==f&&null!=c\|\|"function"==f)try{var d=c.constructor.displayName\|\|c.constructor.name\|\|Object.prototype.toString.call(c)}catch(y){d="<object could not be stringified>"}else d=void 0===c?"undefined":null===c?"null":typeof c;w("Argument is not a %s (or a non-Element, non-Location mock); got: %s","HTMLScriptElement",d)}a instanceof A&&a.constructor===A?d=a.g:(d=typeof a,w("expected object of type TrustedResourceUrl, got '"+a+"' of type "+("object"!= d?d:a?Array.isArray(a)?"array":d:"null")),d="type_error:TrustedResourceUrl");c.src=d;(d=c.ownerDocument&&c.ownerDocument.defaultView)&&d!=m?d=q(d.document):(null===p&&(p=q(m.document)),d=p);d&&c.setAttribute("nonce",d);(document.head\|\|document.documentElement).appendChild(c)},I=function(){var a=B(),b=[];if(1<a){var e=a-1;b.push("//www.gstatic.com/eureka/clank/"+a+"/cast_sender.js");b.push("//www.gstatic.com/eureka/clank/"+e+"/cast_sender.js")}return b},G=function(){var a=D();a&&a(!1,"No cast extension found")}, K=function(){if(J){var a=2,b=D(),e=function(){a--;0==a&&b&&b(!0)};window.__onGCastApiAvailable=e;E("//www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js",G,e)}},J=C("loadCastFramework")\|\|C("loadCastApplicationFramework"),L=["pkedcjkdefgpdelpbcmbmeomcjbeemfm","enhhojjnijigcajfphajepfemndkmdlo"];if(0<=window.navigator.userAgent.indexOf("Android")&&0<=window.navigator.userAgent.indexOf("Chrome/")&&window.navigator.presentation){if(60<=B()){K();var M=I();M.push("//www.gstatic.com/eureka/clank/cast_sender.js");F(M)}}else if(!window.chrome\|\|!window.navigator.presentation\|\|0<=window.navigator.userAgent.indexOf("Edge"))G();else if(89<=B()){K();var N=I(),O=N.push,P=O.apply,h=L.map(H),Q;if(h instanceof Array)Q=h;e
URL: https://www.infarmbureau.com/... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a benign script that checks for a specific cookie and adjusts the visibility of HTML elements based on the presence of a custom header. This behavior is likely related to personalization or customization functionality, which is a common and legitimate use case. The script does not exhibit any high-risk indicators, such as dynamic code execution, data exfiltration, or suspicious redirects. Therefore, the overall risk score is low." }
var cookie = document.cookie.split(';') .map(function (s) { return s.trim() }) .find(function (s) { return s.indexOf('ifbi-personalization') > -1 }) var hasCustomHeader = cookie && cookie.indexOf('customHeader=True'); document.querySelector('.agency-header').hidden = !hasCustomHeader; document.querySelector('.primary-header').hidden = hasCustomHeader;
URL: https://collector-44978.us.tvsquared.com/tv2track.... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be the Piwik web analytics tracking client, which is a legitimate and widely-used open-source analytics platform. The code does not exhibit any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. It primarily focuses on JSON serialization and parsing, which are common practices in web development. While the code uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script is likely benign and intended for legitimate analytics purposes." }
/! Piwik - Web Analytics * * JavaScript tracking client * * @link http://piwik.org * @source https://github.com/piwik/piwik/blob/master/js/piwik.js * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt) / if(typeof JSON2!=="object"){JSON2={}}(function(){function d(f){return f<10?"0"+f:f}function l(n,m){var f=Object.prototype.toString.apply(n);if(f==="[object Date]"){return isFinite(n.valueOf())?n.getUTCFullYear()+"-"+d(n.getUTCMonth()+1)+"-"+d(n.getUTCDate())+"T"+d(n.getUTCHours())+":"+d(n.getUTCMinutes())+":"+d(n.getUTCSeconds())+"Z":null}if(f==="[object String]"\|\|f==="[object Number]"\|\|f==="[object Boolean]"){return n.valueOf()}if(f!=="[object Array]"&&typeof n.toJSON==="function"){return n.toJSON(m)}return n}var c=new RegExp("[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]","g"),e='\\\\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]',i=new RegExp("["+e,"g"),j,b,k={"\b":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\\\"},h; function a(f){i.lastIndex=0;return i.test(f)?'"'+f.replace(i,function(m){var n=k[m];return typeof n==="string"?n:"\\u"+("0000"+m.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+f+'"'}function g(s,p){var n,m,t,f,q=j,o,r=p[s];if(r&&typeof r==="object"){r=l(r,s)}if(typeof h==="function"){r=h.call(p,s,r)}switch(typeof r){case"string":return a(r);case"number":return isFinite(r)?String(r):"null";case"boolean":case"null":return String(r);case"object":if(!r){return"null"}j+=b;o=[];if(Object.prototype.toString.apply(r)==="[object Array]"){f=r.length;for(n=0;n<f;n+=1){o[n]=g(n,r)\|\|"null"}t=o.length===0?"[]":j?"[\n"+j+o.join(",\n"+j)+"\n"+q+"]":"["+o.join(",")+"]";j=q;return t}if(h&&typeof h==="object"){f=h.length;for(n=0;n<f;n+=1){if(typeof h[n]==="string"){m=h[n];t=g(m,r);if(t){o.push(a(m)+(j?": ":":")+t)}}}}else{for(m in r){if(Object.prototype.hasOwnProperty.call(r,m)){t=g(m,r);if(t){o.push(a(m)+(j?": ":":")+t)}}}}t=o.length===0?"{}":j?"{\n"+j+o.join(",\n"+j)+"\n"+q+"}":"{"+o.join(",")+"}";j=q; return t}}if(typeof JSON2.stringify!=="function"){JSON2.stringify=function(o,m,n){var f;j="";b="";if(typeof n==="number"){for(f=0;f<n;f+=1){b+=" "}}else{if(typeof n==="string"){b=n}}h=m;if(m&&typeof m!=="function"&&(typeof m!=="object"\|\|typeof m.length!=="number")){throw new Error("JSON2.stringify")}return g("",{"":o})}}if(typeof JSON2.parse!=="function"){JSON2.parse=function(o,f){var n;function m(s,r){var q,p,t=s[r];if(t&&typeof t==="object"){for(q in t){if(Object.prototype.hasOwnProperty.call(t,q)){p=m(t,q);if(p!==undefined){t[q]=p}else{delete t[q]}}}}return f.call(s,r,t)}o=String(o);c.lastIndex=0;if(c.test(o)){o=o.replace(c,function(p){return"\\u"+("0000"+p.charCodeAt(0).toString(16)).slice(-4)})}if((new RegExp("^[\\],:{}\\s]$")).test(o.replace(new RegExp('\\\\(?:["\\\\/bfnrt]\|u[0-9a-fA-F]{4})',"g"),"@").replace(new RegExp('"[^"\\\\\n\r]"\|true\|false\|null\|-?\\d+(?:\\.\\d)?(?:[eE][+\\-]?\\d+)?',"g"),"]").replace(new RegExp("(?:^\|:\|,)(?:\\s*\\[)+","g"),""))){n=eval("("+o+")"); return typeof f==="function"?m({"":n},""):n}throw new SyntaxError("JSON2.parse")}}}());if(typeof _tvq!=="object"){_tvq=[]}if(typeof TV2Track!=="object"){TV2Track=(function(){var g,a={},p=document,c=navigator,D=screen,z=window,d=z.performance\|\|z.mozPerformance\|\|z.msPerformance\|\|z.webkitPerformance,m=false,x=[],j=z.encodeURIComponent,y=z.decodeURIComponent,e=unescape,E,H,A;function r(P){var i=typeof P;return i!=="undefined"}function n(i){return typeof i==="function"}function C(i){return typeof i==="object"}function k(i){return typeof i==="string"\|\|i instanceof String}function K(){var P,R,Q;for(P=0;P<arguments.length;P+=1){Q=arguments[P];R=Q.shift();if(k(R)){E[R].apply(E,Q)}else{R.apply(E,Q)}}}function N(R,Q,P,i){if(R.addEventListener){R.addEventListener(Q,P,i);return true}if(R.attachEvent){return R.attachEvent("on"+Q,P)}R["on"+Q]=P}function I(Q,T){var P="",S,R;for(S
URL: https://www.infarmbureau.com/ruxitagentjs_ICANVfqr... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet exhibits a mix of behaviors, some of which raise moderate concerns. While it appears to have legitimate purposes related to analytics and configuration, it also demonstrates some practices that require further review. The key factors contributing to the medium risk score are: 1. Moderate-Risk Indicators: - External Data Transmission: The script sends user data to third-party domains via XHR and fetch, which could potentially include sensitive information. - Fallback Domains: The script uses multiple fallback domains, some of which may be of unknown or dubious reputation. 2. Contextual Adjustments: - Trusted Domains: The script interacts with some known, reputable domains (e.g., microsoft.com, google.com), which mitigates the risk to some extent. - Analytics/Telemetry: The script's intent appears to align with typical analytics or telemetry functionality, which reduces the risk score. Overall, the script demonstrates a mix of behaviors that warrant further investigation to ensure the data collection and transmission practices are transparent and aligned with the user's expectations. Additional review of the script's purpose, the nature of the data being transmitted, and the reputation of the involved domains would be recommended." }
/* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ */ (function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ta=document.cookie.includes("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ta}function bb(){return void 0===eb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function kb(){var Ta;if(bb()){var Sa=eb.dT_,Xa=null===Sa\|\|void 0===Sa?void 0:Sa.platformPrefix,Ua;if(Ua=!Sa\|\|Xa){var Pa;(Ua=null===Sa\|\|void 0===Sa?void 0:Sa.minAgentVersion)&& "10303241106123517"<"".concat(Ua)?(console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"),Ua=!1):(Ua=(null===(Pa=document.currentScript)\|\|void 0===Pa?void 0:Pa.getAttribute("data-dtconfig"))\|\|"#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Xa&&!Ua.includes("cuc=".concat(Xa))?(console.log("[CookiePrefix/initConfig] value of platformPrefix [".concat(Xa,'] does not match the "cuc" value in the current config - initConfig will not initialize!')), Ua=!1):Ua=!0)}Ua&&(Pa=(Ta={},Ta.cfg="#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Ta.iCE=bb,Ta.platformCookieOffset=null===Sa\|\|void 0===Sa?void 0:Sa.platformCookieOffset,Ta),Xa&&(Pa.platformPrefix=Xa),eb.dT_=Pa)}}this.dT_&&dT_.prm&&dT_.prm();var eb="undefined"!==typeof globalThis?globalThis:"undefined"!==typeof window?window:void 0;if(!("documentMode"in document)\|\|isNaN(document.documentMode)){var cb=eb.dT_;!cb\|\|!cb.cfg&&cb.platformPrefix?kb():cb.gCP\|\| (eb.console.log("Duplicate agent injection detected, turning off redundant initConfig."),cb.di=1)}})(); (function(){function Ka(g,q,F){if(F\|\|2===arguments.length)for(var C=0,Y=q.length,O;C<Y;C++)!O&&C in q\|\|(O\|\|(O=Array.prototype.slice.call(q,0,C)),O[C]=q[C]);return g.concat(O\|\|Array.prototype.slice.call(q))}function bb(g){var q;return function(){if(q)return q;var F,C,Y,O,nb=-1!==Xe?Xe:(null===(C=null===(F=Wa.dT_)\|\|void 0===F?void 0:F.scv)\|\|void 0===C?void 0:C.call(F,"postfix"))\|\|(null===(O=null===(Y=Wa.dT_)\|\|void 0===Y?void 0:Y.gCP)\|\|void 0===O?void 0:O.call(Y));return q=F=(Xe=nb)?"".concat(g).concat(nb): g}}function kb(){var g=0;try{g=Math.round(Wa.performance.timeOrigin)}catch(q){}if(0>=g\|\|isNaN(g)\|\|!isFinite(g)){ye.push({severity:"Warning",type:"ptoi",text:"performance.timeOrigin is invalid, with a value of [".concat(g,"]. Falling back to performance.timing.navigationStart")});g=0;try{g=Wa.performance.timing.navigationStart}catch(q){}g=0>=g\|\|isNaN(g)\|\|!isFinite(g)?Lf:g}u=g;t=eb;return u}function eb(){return u}function cb(){return t()}function Ta(){var g,q=0;if(null===(g=null===Wa\|\|void 0===Wa?void 0: Wa.performance)\|\|void 0===g?0:g.now)try{q=Math.round(Wa.performance.now())}catch(F){}return 0>=q\|\|isNaN(q)\|\|!isFinite(q)?(new Date).getTime()-t():q}function Sa(g,q){if(!q)return"";var F=g+"=";g=q.indexOf(F);if(0>g)return"";for(;0<=g;){if(0===g\|\|" "===q.charAt(g-1)\|\|";"===q.charAt(g-1))return F=g+F.length,g=q.indexOf(";",g),0<=g?q.substring(F,g):q.substring(F);g=q.indexOf(F,g+F.length)}return""}function Xa(g){return Sa(g,document.cookie)}function Ua(){}function Pa(g,q){void 0===q&&(q=document.cookie); return Sa(g,q)}function Za(){}function rb(g,q){return function(){g.apply(q,arguments)}}function qa(g){if(!(this instanceof qa))throw new TypeError("Promises must be constructed via new");if("function"!==typeof g)throw new TypeError("not a function");this.oa=0;this.sc=!1;this.sa=void 0;this.Ia=[];S(g,this)}function ta(g,q){for(;3===g.oa;)g=g.sa;0===g.oa?g.Ia.push(q):(g.sc=!0,qa.Hb(function(){var F=1===g.oa?q.Re:q.Se;if(null===F)(1===g.oa?Ha:Da)(q.promise,g.sa);else{try{var C=F(g.sa)}catch(Y){Da(q.promise, Y);return}Ha(q.promise,C)}}))}function Ha(g,q){try{if(q===g)throw new TypeError("A promise cannot be resolved with itself.");if(q&&("object"===typeof q\|\|"function
URL: https://farmalytics.infarmbureau.com/farmalytics.m... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate analytics and tracking script with no clear indicators of malicious intent. While it uses some legacy practices like `XDomainRequest`, the overall behavior is consistent with typical analytics functionality. The script retrieves referrer information, sets cookies, and generates a unique identifier based on campaign parameters. There are no signs of dynamic code execution, data exfiltration, or redirects to suspicious domains. The script seems to be focused on providing analytics and tracking capabilities, which is a common and expected behavior for many websites." }
!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Farmalytics=t()}(this,(function(){"use strict";const e="https://farmalytics.infarmbureau.com",t=["utm_source","utm_content","utm_campaign","utm_medium","utm_id","utm_term"],o={"(facebook).(ad_id)":{source:"Facebook",medium:"social-paid"},facebook:{source:"Facebook",medium:"social"},tiktok:{source:"TikTok",medium:"social"},twitter:{source:"Twitter",medium:"social"},linkedin:{source:"LinkedIn",medium:"social"},youtube:{source:"Youtube",medium:"social"},gmail:{source:"Gmail",medium:"email"},google:{source:"Google",medium:"organic"},wallethub:{source:"WalletHub",medium:"social"},yelp:{source:"Yelp",medium:"social"},clearsurance:{source:"Clearsurance",medium:"social"}},r="FAV2";var n=(()=>{let e=(()=>{let e={};try{e=JSON.parse(localStorage.getItem(r)\|\|"{}")}catch(e){console.error(e.message)}return e\|\|{}})();const t=()=>{localStorage.setItem(r,JSON.stringify(e))};return{getItem:t=>e[t],update(o={}){e=Object.assign(Object.assign({},e),o),t()},setItem(o,r){e[o]=r,t()},deleteItem(o){delete e[o],t()},clear(){e={},t()}}})();const i=e=>{const t="undefined"!=typeof window?window.document:void 0,r=e\|\|(null==t?void 0:t.referrer);if(""!=r&&r)return(e=>{const t=Object.keys(o).find((t=>e.search(new RegExp(t,"gi"))>-1));if(t){const e=o[t];return e.created=new Date,e}})(r)}; /! js-cookie v3.0.5 \| MIT / function c(e){for(var t=1;t<arguments.length;t++){var o=arguments[t];for(var r in o)e[r]=o[r]}return e}var s=function e(t,o){function r(e,r,n){if("undefined"!=typeof document){"number"==typeof(n=c({},o,n)).expires&&(n.expires=new Date(Date.now()+864e5n.expires)),n.expires&&(n.expires=n.expires.toUTCString()),e=encodeURIComponent(e).replace(/%(2[346B]\|5E\|60\|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var i="";for(var s in n)n[s]&&(i+="; "+s,!0!==n[s]&&(i+="="+n[s].split(";")[0]));return document.cookie=e+"="+t.write(r,e)+i}}return Object.create({set:r,get:function(e){if("undefined"!=typeof document&&(!arguments.length\|\|e)){for(var o=document.cookie?document.cookie.split("; "):[],r={},n=0;n<o.length;n++){var i=o[n].split("="),c=i.slice(1).join("=");try{var s=decodeURIComponent(i[0]);if(r[s]=t.read(c,s),e===s)break}catch(e){}}return e?r[e]:r}},remove:function(e,t){r(e,"",c({},t,{expires:-1}))},withAttributes:function(t){return e(this.converter,c({},this.attributes,t))},withConverter:function(t){return e(c({},this.converter,t),this.attributes)}},{attributes:{value:Object.freeze(o)},converter:{value:Object.freeze(t)}})}({read:function(e){return'"'===e[0]&&(e=e.slice(1,-1)),e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(e){return encodeURIComponent(e).replace(/%(2[346BF]\|3[AC-F]\|40\|5[BDE]\|60\|7[BCD])/g,decodeURIComponent)}},{path:"/"});class a{}a.cookieName="farmalytics",a.proxyFarmalyticsCookieName="!Proxy!apiProxyfarmalyticsClientId",a.farmalyticsCookieName="farmalyticsClientId",a.save=e=>{s.set(a.cookieName,JSON.stringify(e))},a.saveCookies=e=>{null!==e.clientId&&void 0!==e.clientId&&(s.set(a.farmalyticsCookieName,e.clientId,{domain:".infarmbureau.com",secure:!0}),s.set(a.proxyFarmalyticsCookieName,e.clientId,{domain:".infarmbureau.com",secure:!0}))},a.get=()=>{const e=s.get(a.cookieName);if(e){var t=JSON.parse(e);if(t)return t}return null};const u=e=>(e=>{let t=0;const o=JSON.stringify(e);for(let e=0;e<o.length;++e)t+=o.charCodeAt(e),t+=t<<10,t^=t>>6;return t+=t<<3,t^=t>>11,((t+(t<<15)&4294967295)>>>0).toString(16)})(`${e.campaign}${e.medium}${e.source}`),l=(()=>{const o={sources:[],propertyId:null,clientId:null,shouldTrack:!1},r=()=>{let e=null;const t=Object.keys(localStorage).find((e=>e.includes("_ga")));if(t){const o=localStorage.getItem(t);if(o){const t=o.split(".");t.length>=2&&(e=t.slice(-2).join("."))}}if(!e){const t=document.cookie.split("; ").find((e=>e.startsWith("_ga")));if(t){const o=t.split("=")[1];if(o){const t=o.split(".");t.l
URL: https://www.infarmbureau.com/WebResource.axd?d=Njx... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a personalization tracking script that collects and stores user data, such as page visits and URLs, using cookies. While it exhibits some potentially concerning behaviors, such as using custom encoding/decoding functions and storing user data, the overall intent seems to be for legitimate personalization and analytics purposes. The script does not contain any clear indicators of malicious behavior, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. Therefore, the risk score is assessed as low, with a score of 3." }
var PersonalizationTracker = null; !function () { "use strict"; PersonalizationTracker = { _canTrack: !1, _pageId: null, _url: !1, track: function (e) { if (PersonalizationTracker._canTrack = e, PersonalizationTracker._canTrack) { if (!PersonalizationTracker._readCookie("sf-prs-ss")) { var r = 1e4 * Date.now() + 621355968e9; PersonalizationTracker._createCookie("sf-prs-ss", r) } if (!PersonalizationTracker._readCookie("sf-prs-lu")) { var a = window.top \|\| window; PersonalizationTracker._createCookie("sf-prs-lu", a.location.href) } PersonalizationTracker._pageId && PersonalizationTracker.trackPage(PersonalizationTracker._pageId), PersonalizationTracker._url && PersonalizationTracker.trackUrl() } else PersonalizationTracker._createCookie("sf-prs-ss", "", -1), PersonalizationTracker._createCookie("sf-prs-lu", "", -1), PersonalizationTracker._createCookie("sf-prs-vp", "", -1), PersonalizationTracker._createCookie("sf-prs-vu", "", -1) }, trackPage: function (e) { if (this._pageId = e.replace(/-/g, "").toLowerCase(), this._canTrack) { var r = this._readCookie("sf-prs-vp") \|\| ""; r && (r = this._base64ToHex(r)); for (var a = r.match(/.{1,32}/g) \|\| [], n = !1, o = 0; o < a.length; o++)if (a[o] === this._pageId) { n = !0; break } n \|\| (a.length > 49 && (a = a.slice(a.length - 49, a.length)), a.push(this._pageId), r = a.join(""), r = this._hexToBase64(r), this._createCookie("sf-prs-vp", r)) } }, trackUrl: function () { var e = (window.top \|\| window).location.href, r = e.indexOf("#"); if (r > -1 && (e = e.substring(0, r)), this._url = e, this._canTrack) { var a = this._readCookie("sf-prs-vu") \|\| ""; a && (a = this._lzwDecode(a)); for (var n = a.split("#") \|\| [], o = !1, t = 0; t < n.length; t++)if (n[t] === this._url) { o = !0; break } if (!o) { for (n.push(this._url), 0 === (a = n.join("#")).indexOf("#") && (a = a.substring(1)), a = this._lzwEncode(a); a.length > 1e3;) { if (n.length < 2) return; 0 === (a = (n = n.slice(1, n.length)).join("#")).indexOf("#") && (a = a.substring(1)), a = this._lzwEncode(a) } this._createCookie("sf-prs-vu", a) } } }, _createCookie: function (e, r, a) { var n = ""; if (a) { var o = new Date; o.setTime(o.getTime() + 24 * a * 60 * 60 * 1e3); n = "; expires=" + o.toGMTString() } else n = ""; document.cookie = e + "=" + r + n + "; path=/;SameSite=Lax" }, _readCookie: function (e) { for (var r = e + "=", a = document.cookie.split(";"), n = 0; n < a.length; n++) { for (var o = a[n]; " " == o.charAt(0);)o = o.substring(1, o.length); if (0 == o.indexOf(r)) return o.substring(r.length, o.length) } return null }, _hexToBase64: function (e) { return btoa(String.fromCharCode.apply(null, e.replace(/\r\|\n/g, "").replace(/([\da-fA-F]{2}) ?/g, "0x$1 ").replace(/ +$/, "").split(" "))) }, _base64ToHex: function (e) { for (var r = 0, a = atob(e.replace(/[ \r\n]+$/, "")), n = []; r < a.length; ++r) { var o = a.charCodeAt(r).toString(16); 1 === o.length && (o = "0" + o), n[n.length] = o } return n.join("") }, _lzwEncode: function (e) { for (var r, a = {}, n = (e \|\| "").split(""), o = n[0], t = 256, i = [], s = 1; s < n.length; s++)null != a[o + (r = n[s])] ? o += r : (i.push(o.length > 1 ? a[o] : o.charCodeAt(0)), a[o + r] = t, o = r, t++); i.push(o.length > 1 ? a[o] : o.charCodeAt(0)); for (s = 0; s < i.length; s++)i[s] = String.fromCharCode(i[s]); var c = i.join(""); return encodeURI(c) }, _lzwDecode: function (e) { for (var r, a = {}, n = (decodeURI(e) \|\| "").split(""), o = n[0], t = o, i = 256, s = [o], c = 1; c < n.length; c++) { var l = n[c].charCodeAt(0); r = l < 256 ? n[c] : a[l] ? a[l] : t + o, s.push(r), o = r.charAt(0), a[i] = t + o, t = r, i++ } return s.join("") } }, window.TrackingConsentManager ? (TrackingConsentManager.addEventListener("ConsentChanged", PersonalizationTracker.track), PersonalizationTracker.track(TrackingConsentManager.canTrackCurrentUser())) : PersonalizationTracker.track(!0); var e = document.getElementById("PersonalizationTracker"), r = JSON.parse(e.innerText); if (!r) throw new Error("Personaliza
URL: https://www.infarmbureau.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We do more than cover you. We care for you.", "prominent_button_name": "GET A QUOTE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.infarmbureau.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We do more than cover you. We care for you.", "prominent_button_name": "GET A QUOTE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.infarmbureau.com/ResourcePackages/IFBI... Model: Joe Sandbox AI	```json { "risk_score": 7, "reasoning": "The script uses dynamic code execution with 'eval', which is a high-risk indicator. It also sends data to an external API endpoint via fetch, which is a moderate-risk indicator. The use of 'eval' suggests potential for executing arbitrary code, increasing the risk score significantly. No trusted domains or legitimate analytics context is evident to reduce the score." }
/! For license information please see main.js.LICENSE.txt / (()=>{var __webpack_modules__={959:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";__webpack_require__.d(__webpack_exports__,{W:()=>StartQuoteController});var _material_dialog__WEBPACK_IMPORTED_MODULE_1__=__webpack_require__(4825),_utils_go_to_quote__WEBPACK_IMPORTED_MODULE_0__=__webpack_require__(6498),StartQuoteController=function(){function StartQuoteController(){var _this=this;this.defaultLine=[],this.isBundleable=!1,this.bundleDialogGenerated=!1,this.submitQuoteRequest=function(){_this.isBundleable?_this.showBundleDialog():_this.goToQuotePage(_this.defaultLine)},this.showBundleDialog=function(){var e=_material_dialog__WEBPACK_IMPORTED_MODULE_1__.W.attachTo(document.querySelector(".bundle-dialog"));_this.bundleDialogGenerated=!0,e.open()},this.handleFormSubmit=function(e){e.preventDefault(),_this.submitQuoteRequest()},this.goToQuotePage=function(businessLines){var agentCode=document.querySelector(".agentCodeInput").value;_this.bundleDialogGenerated&&(document.querySelector(".linear-progress").style.display="grid",document.querySelector(".mdc-dialog__scrim").style.zIndex="2"),(0,_utils_go_to_quote__WEBPACK_IMPORTED_MODULE_0__.Q)(businessLines,eval(agentCode))}}return StartQuoteController}()},5416:(e,t,n)=>{"use strict";function i(e,t){return fetch(e,{method:"POST",credentials:"include",headers:{"Content-Type":"application/json","X-Requested-With":"XMLHttpRequest"},body:JSON.stringify(t)}).then((function(e){return e.ok?e.json():e.text().then((function(e){throw new Error(e)}))})).catch((function(e){throw e}))}n.d(t,{s:()=>i})},6498:(e,t,n)=>{"use strict";n.d(t,{Q:()=>o});var i=n(5416),r=function(e,t,n,i,r){this.selectedProductLines=e\|\|[],this.agentCode=t,this.subProducerAgentId=n,this.utmCampaign=i,this.sourcePagePath=r};function o(e,t,n,o,a,s){var u=new r(e,void 0!==o?o:t,a,s);(0,i.s)("/api/StartQuote",u).then((function(e){var t=new URL(e);n?t.searchParams.append("referralCode",n):console.log("No referral code found");var i=s\|\|"dlsm";(window.location.href.includes("/drive-less-save-more")\|\|s)&&t.searchParams.append("utm_campaign",i),window.location.href=t.href}))}},8366:(e,t,n)=>{"use strict";n.d(t,{B:()=>o});var i=n(649),r=n(436),o=function(){function e(e,t){for(var n=[],r=2;r<arguments.length;r++)n[r-2]=arguments[r];this.root_=e,this.initialize.apply(this,i.fl(n)),this.foundation_=void 0===t?this.getDefaultFoundation():t,this.foundation_.init(),this.initialSyncWithDOM()}return e.attachTo=function(t){return new e(t,new r.K({}))},e.prototype.initialize=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t]},e.prototype.getDefaultFoundation=function(){throw new Error("Subclasses must override getDefaultFoundation to return a properly configured foundation class")},e.prototype.initialSyncWithDOM=function(){},e.prototype.destroy=function(){this.foundation_.destroy()},e.prototype.listen=function(e,t,n){this.root_.addEventListener(e,t,n)},e.prototype.unlisten=function(e,t,n){this.root_.removeEventListener(e,t,n)},e.prototype.emit=function(e,t,n){var i;void 0===n&&(n=!1),"function"==typeof CustomEvent?i=new CustomEvent(e,{bubbles:n,detail:t}):(i=document.createEvent("CustomEvent")).initCustomEvent(e,n,!1,t),this.root_.dispatchEvent(i)},e}()},436:(e,t,n)=>{"use strict";n.d(t,{K:()=>i});var i=function(){function e(e){void 0===e&&(e={}),this.adapter_=e}return Object.defineProperty(e,"cssClasses",{get:function(){return{}},enumerable:!0,configurable:!0}),Object.defineProperty(e,"strings",{get:function(){return{}},enumerable:!0,configurable:!0}),Object.defineProperty(e,"numbers",{get:function(){return{}},enumerable:!0,configurable:!0}),Object.defineProperty(e,"defaultAdapter",{get:function(){return{}},enumerable:!0,configurable:!0}),e.prototype.init=function(){},e.prototype.destroy=function(){},e}()},4825:(e,t,n)=>{"use strict";n.d(t,{W:()=>m});var i=n(649),r=n(8366),o=n(5120),a=n(5858),s=n(436),u={CLOSING:"mdc-dialog--closing",OPEN:
URL: https://www.infarmbureau.com/ Model: Joe Sandbox AI	{ "brands": [ "Indiana Farm Bureau Insurance" ] }
	{ "brands": [ "Indiana Farm Bureau Insurance" ] }
URL: https://www.infarmbureau.com/ Model: Joe Sandbox AI	{ "brands": [ "Indiana Farm Bureau Insurance" ] }
	{ "brands": [ "Indiana Farm Bureau Insurance" ] }
URL: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please use your registered email address to log into your account instead of your username.", "prominent_button_name": "LOGIN", "text_input_field_labels": [ "Email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20 Model: Joe Sandbox AI	{ "brands": [ "Indiana Farm Bureau Insurance" ] }
	{ "brands": [ "Indiana Farm Bureau Insurance" ] }
URL: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please use your registered email address to log into your account instead of your username.", "prominent_button_name": "LOGIN", "text_input_field_labels": [ "Please enter your Sign in name", "Email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20 Model: Joe Sandbox AI	{ "brands": [ "Indiana Farm Bureau Insurance" ] }
	{ "brands": [ "Indiana Farm Bureau Insurance" ] }
URL: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20 Model: Joe Sandbox AI	```json{ "legit_domain": "infarmbureau.com", "classification": "known", "reasons": [ "The URL 'login.infarmbureau.com' is a subdomain of 'infarmbureau.com', which matches the brand 'Indiana Farm Bureau Insurance'.", "The domain 'infarmbureau.com' is a plausible abbreviation for 'Indiana Farm Bureau Insurance'.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The brand 'Indiana Farm Bureau Insurance' is not globally recognized but is known regionally, hence classified as 'known'." ], "riskscore": 2}
URL: login.infarmbureau.com Brands: Indiana Farm Bureau Insurance Input Fields: Email
URL: https://login.infarmbureau.com/ifbcpb2cprd.onmicrosoft.com/b2c_1a_signup_signin_passwordreset_oam_customer/oauth2/v2.0/authorize?client_id=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7&scope=https%3A%2F%2Fifbcpb2cprd.onmicrosoft.com%2Fifb_services%2FOAMAPI.Read%20 Model: Joe Sandbox AI	```json{ "legit_domain": "infarmbureau.com", "classification": "known", "reasons": [ "The brand 'Indiana Farm Bureau Insurance' is associated with the domain 'infarmbureau.com'.", "The URL 'login.infarmbureau.com' is a subdomain of 'infarmbureau.com', which is a legitimate domain for Indiana Farm Bureau Insurance.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Sign in name' and 'Email' are typical for a login page and do not raise immediate suspicion." ], "riskscore": 2}
URL: login.infarmbureau.com Brands: Indiana Farm Bureau Insurance Input Fields: Please enter your Sign in name, Email

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	148849
Entropy (8bit):	5.704681584458362
Encrypted:	false
SSDEEP:	1536:3RekfudTwzlmzibkJuqUS41zUXgGd+h1i8uFE6C0ZsPBXKga7Dur2cxPH:3ukzlmzAgcSizUXTUXiPFEH0Zsh/
MD5:	68363EAEB78C4B43314E98C7C67B5895
SHA1:	AF8062B3BFE1EEB03D6E0277BE8E4888C17BC590
SHA-256:	692133BB41F9F0C1BC68BF2DAE8D4D2C50EF4AB30357173D3791A23AC82D73A6
SHA-512:	1D65DC168AC902B1606C12596506B350347B037636D7699E86C5B372010A5C280A4D24267F7087479081E28A86DC47B348FEF5A6794AD1FC324629DFE2F7AA88
Malicious:	false
Reputation:	low
URL:	https://cdn.infarmbureau.com/farmhand/V2/latest/farmhand-utils.css
Preview:	..f-z-0{z-index:0}.f-z-100{z-index:100}.f-z-200{z-index:200}.f-z-300{z-index:300}.f-z-400{z-index:400}.f-z-500{z-index:500}.f-z-600{z-index:600}.f-z-700{z-index:700}.f-z-800{z-index:800}.f-z-900{z-index:900}.f-z-1000{z-index:1000}.f-display-none{display:none}.f-display-inline{display:inline}.f-display-inline-block{display:inline-block}.f-display-inline-flex{display:inline-flex}.f-display-block{display:block}.f-clickable,.f-clickable-zoom,.f-clickable-shrink,a.f-item{position:relative;cursor:pointer}.f-clickable::before,.f-clickable-zoom::before,.f-clickable-shrink::before,a.f-item::before{position:absolute;content:"";top:0;left:0;right:0;bottom:0;transition:background 0.2s ease-out;cursor:pointer}.f-clickable-zoom{transition:all 0.2s ease-in-out}.f-clickable-zoom:hover{transition:all 0.2s ease-in-out;transform:scale(1.1)}.f-clickable-shrink{transition:all 0.2s ease-in-out}.f-clickable-shrink:hover{transition:all 0.2s ease-in-out;transform:scale(0.98)}.f-clickable:hover::before,.f-cli

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	2380
Entropy (8bit):	4.699284172538497
Encrypted:	false
SSDEEP:	48:lS3m48dM9QH+WXmk3KOPxU2OPWWGMZRoxoXCOduOxj+P:lum48dM9Qyk35PxOPWW3vdXCOduOU
MD5:	01E04C7CD29CFD8D76558EFE02536B44
SHA1:	E1459BF44C410DCD91C3D1699F7DE5B80E74AE2A
SHA-256:	5554770295EED9E781E11318AA951D9A001AE5D472AFFCBE79931DFFF08E9E61
SHA-512:	713FE31622EB7135AE859CCE955C4E68B2C5154A2E0518B654C27B385047F566DD72624F7168D48329B28D7234B251D3F4AE1AD9892A259359A91F4A50060FFE
Malicious:	false
Reputation:	low
Preview:	export const userMessages = new Map([. [. 'UI-1001',. 'We are sorry, your Online Account Manager registration has expired. Please Register again.',. ],. ['UI-1003', 'The account has already been registered. Please log in.'],. [. 'UI-1004',. 'Your Online Account Manager registration has not been completed. ' +. 'Select the link in the validation email that was sent to you and log in within 24 hours ' +. 'to complete registration. If it has been more than 24 hours since you received the ' +. 'validation email, you must complete the registration process again.<br /> <br /> To help ensure ' +. 'successful delivery of all email, please add ' +. "<a href='mailto:onlineaccountmanager@infarmbureau.com'>onlineaccountmanager@infarmbureau.com</a> " +. 'to your address book or approved senders.',. ],. [. 'UI-1005',. 'If the email address provided matches your account email address, ' +. 'an email has been sent to reset your password.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2432
Entropy (8bit):	4.669763085221398
Encrypted:	false
SSDEEP:	48:cen9DLeriIyYDwMt7nWSy24DWx3JyfEMjJcLhgH6+It:n9f0jU6nAbD+ZyvWlgHrA
MD5:	844563E7D3B0BDA259CBEC9B7B178FC0
SHA1:	AAA4FEFFC3BA029A72BB60296DA360CFD0843563
SHA-256:	6317F7BCC2C8CE7B2AFE27BB61C1FE188A61E42CB7F9D9F33B647B28507A5482
SHA-512:	1A9A720BD05139A34F3E32F0EF1D142B80593F891DE85FAA13ABC6DA6E9D7944F57EF903AF2CFFC29D0FF877FC974A435DA1A89DB353A07466D4A954F0D4B9F4
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/life-insurance-matters/heart.svg?sfvrsn=57e924ba_2
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="50px" viewBox="0 0 56 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-1009.000000, -823.000000)" fill="#AF180E">.. <g id="CTA/Item" transform="translate(1009.000000, 819.000000)">.. <g id="Icon/Life">.. <path d="M15.2727273,4.66666667 C11.0432134,4.66666667 7.207991,6.03670016 4.43465909,8.65237626 C1.66132737,11.2680586 0,15.1113918 0,19.7456163 C0,27.1508406 5.07111691,33.381667 10.8778409,38.8299007 C16.6845649,44.2781344 23.3771217,49.0701452 27.0454545,53.2413009 C27.2870822,53.5117428 27.6347403,53.6666667 28,53.6666667 C28.3652597,53.6666667 28.7129178,53.5117428 28.9545455,53.2413009 C32.6228783,49.0701452 39.3154345,44.2781344 45.1221591,38

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	834
Entropy (8bit):	5.262486312703814
Encrypted:	false
SSDEEP:	24:3Tx5Nf34hNh/LhKIebA1O/wvCRBVagjifk8oEmBLXl:Dyd6APvuBogjKBmBL1
MD5:	5C7B10EEBBA12EAD566A23A5201ED459
SHA1:	EC8D8B2101A1F7812083C181F69BC216B69879D8
SHA-256:	D804F7639DF78B49994231694C660A9753AFB901C92F12AE08CE5DDEB94642BF
SHA-512:	3915A364F0508BA8BD1386C27A986C8C7EE414DD015DA1AC17EE4CB112EE6F8EE786812E5666E4A6C9EC81FD374F66AF244783437AB7F07841FEBB065FE9B8CC
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/default-album/icons/linkedin.svg
Preview:	<?xml version="1.0"?>..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]>..<svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <g>.. <path d="M409.391,511.359V317.203c0,0-5.75-51.938-56-51.938c-50.219,0-59.406,49.375-59.406,49.375v196.719h-103.5l1.688-320.719 h100.125l-0.813,40.313c0,0,20.876-52.688,99.531-52.688c78.625,0,114.25,45.188,120.875,129.688c0,84.531,0,203.406,0,203.406 H409.391z M63.547,145.078c-35.563,0-64.438-25.438-64.438-56.875s28.875-56.938,64.438-56.938s64.438,25.5,64.438,56.938 S99.109,145.078,63.547,145.078z M127.422,511.734H0.172V191.453l127.25-0.813V511.734z" />.. </g>..</svg>

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	33718
Entropy (8bit):	5.600671129958146
Encrypted:	false
SSDEEP:	384:uYRgyq+e8L9x9KWcdwxEUpW84Gtry4BL8qyCkm3paPSbq18LqWH3X2Ckete8:2+1L9OYEUD49fHCddbWokete8
MD5:	ADFCF8F7164FCC5E3118337503FE7EBD
SHA1:	5E610A5C07B94B0AE755440EFD315652A09432CF
SHA-256:	FA0CA1B6BE30E279F3DE76BFFC8F6781352A8D1A6798D5EEE82D321C6705B13A
SHA-512:	DEF82F81F9444C71D710A7CC7BE6837765488E0CDA9647847034924F726F379288F15A6EC916A483C33B0D46B9C83EA5F76E960780A351F56E0162C99A2402E8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;'use strict';var $qy=function(p){p.mutedAutoplay=!1;p.endSeconds=NaN;p.limitedPlaybackDurationInSeconds=NaN;g.kB(p)},LSv=function(){return{L:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},j:[{L:"path",TB:!0,B:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3 -1.01,.80 -1.21,1.40 l 0,-7.90 -3.28,0 z

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	1588
Entropy (8bit):	7.47130826717875
Encrypted:	false
SSDEEP:	48:U1/l+mF4738Zq9DiYqh1ilMfJWfcgfXoI5v:ENPF47MZ0i31OMfJacgfNx
MD5:	05604EC86CB9CAFB60855A5627844980
SHA1:	BE0104D3956889BD1E53ECE7F498D38BACEAD20A
SHA-256:	A43325264A26E1E33D505C403B6703F51D2520CE28B6D4412AE11D810D3153D5
SHA-512:	A2705178131F8353BC4F1BA76EAB597F22E19C910E925F16370416D4E7CEF724FC3F44B98DBA1FC1A03AF4BC92FDBE980289240A924FBCC5DCB12E40702F61ED
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Picasa..............................................................................................................................................D.D..........................................5...........................!..."1QTq.....ABb.Ua.............................................................!..1Q"A....a....#bqr.............?..<..0......`...0......`...0.3.\|W.L...k.Q$..S+...G.....%V.y..n7.9...=.W.:..W.~0zg....'O.....p..B...`......i..#Fm.y..."EyX.1...s....\|.:Z..I.6tY....P.W..mQ......n.....g.......?...gX._..uZkf..x..'.V.XgP......u.....G..$....0...........vU.O..j.....h...=.n..K.S8&xi...>'.I........O.f..}..,..+..c#.e...;..}.B..@.l.(.P.`..h.{H.-....L..%.Z8u.=z}A.V...&t..I$F@.zb-..C.........:.....P.....U...~.V....u.v.?.7a8.......Q..O.4.....,.4Q.D..++F.$....2C2.!=H...U\...M.E.........Y...3...d...&..a._O.A.Z.&....ny...G.`e;s.'e.a..je,..+.r........ov.....cu.K.c.U.?>U..b..9.Kg)=..<@IS..kiF.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	17679
Entropy (8bit):	7.969158339966027
Encrypted:	false
SSDEEP:	384:RU7qGcyokC95Xl1I9wB/rTujj2k7AMoThnl0:RUjcyjd9wBcj2l0
MD5:	EE92409BE2F4B61321B6057C03E67626
SHA1:	70340473120C37A5086A66B30A9ABE566750CC29
SHA-256:	FD0BDDF250A4EEAE35574A268B993B5730F8D9ECF96950DAB7BB31B6B4623F15
SHA-512:	932B636B58D9CBEB54EA7CA22698D73ABB638FF8F7D71A5A7548EE8FCC9F6B8BAFA15671D9DB2356B990F4C42E4F58F921A1FBEDA6A187535AD50633AB0B9C4E
Malicious:	false
Reputation:	low
URL:	https://oam.infarmbureau.com/assets/images/pwa/android-chrome-192x192.png
Preview:	.PNG........IHDR...............P...JiCCPICC Profile..H..W.XS...[RIh..H..."H..B. U...@B.1!..e.\."........b..(.........oR@...{.;.7..9s..J..;..N.O.Au......Y.SRY.G..( ..`......(.e..wy{.ZC........=.P.....8] ..B...../...@.z.yR%.....&..T.3.X...Re...x'.d..'..@...Y..L.}.bW.@,.@..q._..@......J..C.7<...L....2......C.ri.o....-.9...vp.D..8e.o7..G1...Izt.......T...T.""Qm......3...U.......0INt.F..!..B.W.Z ..&h\|...........A.!.5..<.....";...!.r........9c.\|qR4...3...j..P....)...@.+..........8..,W>X/.X$.FkpU.(!B...S.o.q.P.N....'F.."....k...%..z.Ni^p....4'Vc.S.9.J.....x./...........&....x.b.... .p@.`....`:........K=..x@.2...h4.......B.'DB ...V..A>...... C5......!... ..V..$C..#...#:....r.:6.Di4.A^..%1..B. ...q.<....5..7.......=.1....p..I.9M\$......:a.0M.....AV.<......g.&....#..@...j9............JA).(A...=...=.X.=..C.\......>>.N..=.{Kl1..k.ag..X.`aG.f.<vH..V.#......'..............z.OX.\|?..t.,.8S..b.7....G.`........._S......<.UW................g....~-.t

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2517525
Entropy (8bit):	5.690974226342676
Encrypted:	false
SSDEEP:	24576:NqB3uhOPREBiqOBbXAum6UrGoeIoHIGfNnznE1oOM6dPUVETY:NqB3uhmVq0TY0oeIoH1fNnuP/TY
MD5:	024B23A8B08CC3328B495440038A9AFC
SHA1:	FDDC0A6A8DEDF81BD8F1C9A901EB0B23CD37B38C
SHA-256:	39C616373C47E2774B7212F5C66A6EBDB91A27A6AA35D037D0FF604F919B81E4
SHA-512:	DC27C531C9D77ACBB02B137764507DBC183E8E9CF009A08BB08F9CDCE487BA7B1BC91F1DE5B0018AD7663BE18374BD724C2C26C2C3E6371F367557E20A2BB8C9
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (742), with no line terminators
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	5.5974535727150565
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEH6it5eoAXdT1TiUMGT2IWaEuwl8DuPaBWzZH:hMiRO9DuAPNTN8G9POXO8
MD5:	18988E88289E01CCD5A03F09C08A1CBB
SHA1:	8557311C73A0FACE9A9E5FADE375D4D866A33171
SHA-256:	6D754311CD5BFD8E73136F228F94BCF2010E5D6E8B3525F027EF5ADDD69FF0F5
SHA-512:	923E7591247169BE30366313DA91041C85FEE90136557FC827C2926D42D20D473224CAE2846276AB08CD9228C2FE900F8413467B994979638E637FB0683A010E
Malicious:	false
Reputation:	low
URL:	https://8339572.fls.doubleclick.net/activityi;dc_pre=CLWe2ujH64oDFbuDgwcdSrArRQ;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLWe2ujH64oDFbuDgwcdSrArRQ;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=*;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F"/></body></html>

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2276), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	123476
Entropy (8bit):	4.764681887543027
Encrypted:	false
SSDEEP:	1536:bSp/F68RY9Ym8nKdgVJV5F1Cn0vB/C06HCP0OiOKPK:b4F68RY9Y4CVJV5zCnK/CFCPJiOKS
MD5:	5A8FCE6EAE5C6BB09A47C52466EC486F
SHA1:	4930F3063F01346C2A238664E09B8DA52EBD8550
SHA-256:	245764E0BA17E4B8B5610351D1698B636A9F611979A7D7AFB2DC5745A8C8722D
SHA-512:	5BC40A71DBD2D170FBAF309267F58C2847894C451E79B14809378EA4413A166AAB6DBB933BCF9F443AF0E3D076F6AA7668759F9991F5A31208B44D5534475D9B
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/
Preview:	<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>...Indiana Farm Bureau Insurance..</title> <script type="text/javascript" src="/ruxitagentjs_ICANVfqru_10303241106123517.js" data-dtconfig="rid=RID_2418\|rpid=-2136355344\|domain=infarmbureau.com\|reportUrl=/rb_bf40802pra\|app=9a75f8cfaaed44c6\|cuc=g7j0dusa\|mel=100000\|featureHash=ICANVfqru\|dpvc=1\|lastModification=1736364532155\|tp=500,50,0\|rdnt=1\|uxrgce=1\|agentUri=/ruxitagentjs_ICANVfqru_10303241106123517.js"></script><link rel="preload" as="style" href="//cdn.infarmbureau.com/farmhand/V1/consumer/theme.css" onload="this.onload=null;this.rel='stylesheet'" type="text/css" /> <link rel="stylesheet" href="//cdn.infarmbureau.com/farmhand/V1/consumer/theme.css" type="text/css" /> <link rel="preload" as="style" href="//unpkg.com/material-components-web@3.2.0/dist/material-components-web.min.css" type=

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	179504
Entropy (8bit):	5.345321704344366
Encrypted:	false
SSDEEP:	1536:9wovhwvwV3sMwH+0G+ZBTr9ix6HeTX0XLDDDbGw5wyPGbFkKvyraIGw:RhwvwV8Mw9ZXixontAFkqon
MD5:	B7439FEE52BD06FCA840F47D0070CE89
SHA1:	C227008AB9E30A92FA2542418D879CDDEBC3A965
SHA-256:	1D8FC9555793CECEB306A49881AF4A8A92F419C9D64653821C9A842123073793
SHA-512:	1DF7D5C97E82665D6D7768EFA05729B7421C266BB79822F43EC4FC694BE9D83F88DA99B47686D5CBEA56D602DF5BAD043D82A100D4771801FE6D120FC2DC92B6
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.60031afbf51fb3e88a5b.js
Preview:	/! For license information please see modules.60031afbf51fb3e88a5b.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	5.452126526071473
Encrypted:	false
SSDEEP:	12:TMGTIMu5E4BcSONfRFD4hNuFS//KYRldZsllK+BbdJ/:3Tx5Nf34hNh/Lkf
MD5:	4BCBA30DDD91BF84204E7DB0CFA54796
SHA1:	B8DA812CB88949A45B5A141DE89C373C016D5181
SHA-256:	D305DCC8CBE44AECD3C8594EA4A18574E809185F8A0B372AF87FC48931F360F7
SHA-512:	B668A169779EB1A921A83E146E198F3296E0D05D9282126D72D67AF0F38E174685BC199AC5645CC00C7945034452365671B639729ACAF9B431A744FBF903CF0E
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/default-album/icons/facebook.svg
Preview:	<?xml version="1.0"?>..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]>..<svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <g>.. <path d="M191.844,511.5V288.375h-68.313V188h69.875v-83.063c0,0,3.188-104.625,92.813-105.438h99.75V98h-61.875 c0,0-26.125,0-26.125,29.438c0,29.375,0,62.313,0,62.313h89.5l-10.75,100.313h-77.188V511.5H191.844z" />.. </g>..</svg>

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452)
Category:	downloaded
Size (bytes):	849067
Entropy (8bit):	5.306399072513743
Encrypted:	false
SSDEEP:	24576:hEwcatYCQKVIm6Yr/R7ABK4PUWnX4nT+xG5S:hEwcatYCQKVIm6Yr/R7ABK4PUWnX4nTW
MD5:	9CB6BD57C6F6C4520DDB78D392CD5D9B
SHA1:	2E82F6981E7DD33C41161D971AA4A0957B1CED5B
SHA-256:	8DBE2A01B90AC6AB9906C52D9691A4D2CF1515F88F7A78DEB6E7A66B8E3173CD
SHA-512:	EFF62606D8A621CD572B8D6A6F6A0D04D75F614CAA47190DB3CFC0A03F0B88122FE0056A80E45AF01E4574299805A7E622216869C5CD8DD64F3F33AD555183A9
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/ResourcePackages/IFBIRedesign/assets/dist/main.js?v=638659012120000000
Preview:	/! For license information please see main.js.LICENSE.txt /.(()=>{var __webpack_modules__={959:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";__webpack_require__.d(__webpack_exports__,{W:()=>StartQuoteController});var _material_dialog__WEBPACK_IMPORTED_MODULE_1__=__webpack_require__(4825),_utils_go_to_quote__WEBPACK_IMPORTED_MODULE_0__=__webpack_require__(6498),StartQuoteController=function(){function StartQuoteController(){var _this=this;this.defaultLine=[],this.isBundleable=!1,this.bundleDialogGenerated=!1,this.submitQuoteRequest=function(){_this.isBundleable?_this.showBundleDialog():_this.goToQuotePage(_this.defaultLine)},this.showBundleDialog=function(){var e=_material_dialog__WEBPACK_IMPORTED_MODULE_1__.W.attachTo(document.querySelector(".bundle-dialog"));_this.bundleDialogGenerated=!0,e.open()},this.handleFormSubmit=function(e){e.preventDefault(),_this.submitQuoteRequest()},this.goToQuotePage=function(businessLines){var agentCode=document.query

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4009
Entropy (8bit):	4.473197640367199
Encrypted:	false
SSDEEP:	96:49v43BHDBDEfNKLH1PJOwVKDy//SiLSixC:mv6VPJjww/TSN
MD5:	324DAF0291CF5903CFE4123F8A9D6AF0
SHA1:	D4AEAD9DAEF0C65E724AFEBB1C9108FFEDC00881
SHA-256:	8D3C8A74D4FC0C49FCBEEDCA10BD7A5131094A71D0A0DFFFDC45B12F52DA5B5F
SHA-512:	1707D70395AB9F9A0D997467CB3A3FF127D5EDEE483B943A7043DAE78CC62B1D673BDC12917D3F50181116CD45004962629DD5FB4BE04C664D683DF6FD121462
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="17.935" viewBox="0 0 17.867 17.935">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(-0.587 -0.809)">.. <g id="Needs-Assessment---Intro" transform="translate(0.587 0.809)">.. <g id="CTA_Item-Copy-4" transform="translate(0 0)">.. <g id="Icon_Farm-Crop" transform="translate(0 0)">.. <path id="Combined-Shape" class="cls-1" d="M14.424,5.1a.379.379,0,0,1,.379.379V12.3a.379.379,0,0,1-.758,0V5.475A.379.379,0,0,1,14.424,5.1Zm0,8.341a.379.379,0,0,1,.379.379v4.549a.379.379,0,0,1-.758,0V13.816A.379.379,0,0,1,14.424,13.437ZM4.567,9.645a.379.379,0,0,1,.379.379v1.516a.379.379,0,1,1-.758,0V10.025A.379.379,0,0,1,4.567,9.645Zm0,3.033a.379.379,0,0,1,.379.379v5.308a.379.379,0,0,1-.758,0V13.057A.379.379,0,0,1,4.567,12.678Zm10.672-11.5L15.82.809V1.5a5.172,5.172,0,0,1-.3,2.209c-.39.7-1.088,

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	dropped
Size (bytes):	240411
Entropy (8bit):	5.561893582761496
Encrypted:	false
SSDEEP:	3072:6J3a4IwyIJ/rca9cO0UNGzlwvOfyk3pBuciOgb6xc+E3OPoKugIaj2i:S9yIJDca9NGpUsBiNuxc+E3OPoKuD2
MD5:	02886A973CADE55AE537080CA242BD9F
SHA1:	0A8F23620D0702ADE47C145161BFF5192102A041
SHA-256:	3B90048A4937A557A68CEAAE581A764ED46294DAA9CF7AE8618CB50E3EAE602C
SHA-512:	243CAD57534157DA4AFE7951C3A42CB43A60108F5EEF541E4279E31568C59A5C5F29CE0927FCCE841B7F172BE4B4CD3A2098C2380BF1CBDB0FA8ACF2E65D5E48
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-8339572","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"",

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	5.255760682068363
Encrypted:	false
SSDEEP:	24:YILv34sTL3PGeSq5eq5J1DdIbhW3iQrCI7G3TI3rSDKI7NLS:YILvIsTLGeSq5eq5JCKcTwSDw
MD5:	2FB8D6DF2601ABE9888377168C155CCD
SHA1:	C3F155A02E024A49B941C9BE370181DDB040B33D
SHA-256:	529E5D168A02C54D21ECF8131BC7CABE505066BCFAE1D911159D522ED5FF5ED9
SHA-512:	6E378E681D31D269F19E6687D93C8AFBA0A8000491C2BF869CA3F29A6DE822863ADE258766C8EF0B2BE98B4FFD85295A0CE0592498FC76798612D35697AA5EA2
Malicious:	false
Reputation:	low
Preview:	{"@odata.context":"https://www.infarmbureau.com/api/shared-content-blocks/$metadata#contentitems(Title,Content)","value":[{"Title":"2010 Member Deals","Content":"<a href=\"https://www.infbhealthplans.com/\" target=\"_blank\"><img src=\"https://www.infarmbureau.com/images/default-album/oam_oct2020_600x312.jpg?sfvrsn=e803aba_0\" data-displaymode=\"Original\" alt=\"OAM_Oct2020_600x312\" title=\"OAM_Oct2020_600x312\" style=\"vertical-align: middle;\" class=\"img-responsive\" /></a><br />"},{"Title":"2108 Claims","Content":"<img src=\"https://www.infarmbureau.com/images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1\" alt=\"Claims\" class=\"img-responsive\" sf-size=\"100\" />"},{"Title":"2208 LIAM","Content":"<a target=\"_blank\" href=\"https://www.infarmbureau.com/life?c=hereforyou\"><img src=\"https://www.infarmbureau.com/images/life-insurance-matters/life-insurance.jpg?sfvrsn=69793dba_1\" alt=\"life insurance\" class=\"img-responsive\" sf-size=\"100\" /></a>\n"}]}

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2432
Entropy (8bit):	4.669763085221398
Encrypted:	false
SSDEEP:	48:cen9DLeriIyYDwMt7nWSy24DWx3JyfEMjJcLhgH6+It:n9f0jU6nAbD+ZyvWlgHrA
MD5:	844563E7D3B0BDA259CBEC9B7B178FC0
SHA1:	AAA4FEFFC3BA029A72BB60296DA360CFD0843563
SHA-256:	6317F7BCC2C8CE7B2AFE27BB61C1FE188A61E42CB7F9D9F33B647B28507A5482
SHA-512:	1A9A720BD05139A34F3E32F0EF1D142B80593F891DE85FAA13ABC6DA6E9D7944F57EF903AF2CFFC29D0FF877FC974A435DA1A89DB353A07466D4A954F0D4B9F4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="50px" viewBox="0 0 56 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-1009.000000, -823.000000)" fill="#AF180E">.. <g id="CTA/Item" transform="translate(1009.000000, 819.000000)">.. <g id="Icon/Life">.. <path d="M15.2727273,4.66666667 C11.0432134,4.66666667 7.207991,6.03670016 4.43465909,8.65237626 C1.66132737,11.2680586 0,15.1113918 0,19.7456163 C0,27.1508406 5.07111691,33.381667 10.8778409,38.8299007 C16.6845649,44.2781344 23.3771217,49.0701452 27.0454545,53.2413009 C27.2870822,53.5117428 27.6347403,53.6666667 28,53.6666667 C28.3652597,53.6666667 28.7129178,53.5117428 28.9545455,53.2413009 C32.6228783,49.0701452 39.3154345,44.2781344 45.1221591,38

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11811)
Category:	downloaded
Size (bytes):	13104
Entropy (8bit):	5.3967713107738575
Encrypted:	false
SSDEEP:	192:kbnL75tmjHCR/UeHjXWb2pTOnstdo5CpcNNOWqRObyAzJ3NSp:kbnLGjURHjXo2BtcCvOby0J3NSp
MD5:	9543B86D219219CA0E7B8C68C54B55DC
SHA1:	AEC345FF930DBCED1D12A24D3DF4984D1CE42D0F
SHA-256:	AAEBDE9D4ED12321F3BE430E8CFD7F608DA98CFF530FE43F30CCED001E3F1D98
SHA-512:	8EC099C49447D58C40963056CB4B35DA1189C417E20FD43F67DBB9F2FDEC5885DF62646C19B55A45D72DDCF83D35FA7414203664D18CB987364243B6870D6B75
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-31017.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":31017,"rec_value":0.0,"state_change_listen_mode":"manual","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","csq_theme","error_reporting","feedback.embeddable_widget","feedback.widgetV2","feedback.w

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41178)
Category:	dropped
Size (bytes):	41181
Entropy (8bit):	5.506570824151046
Encrypted:	false
SSDEEP:	768:j21xCdwVi9Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8gdEN:ib3kr8V8vShi98Iiph3I4C
MD5:	5B7F3D5D52BE0A385D899FF0FC459E1B
SHA1:	2FE6859D9A54A610918DB03FDB0173214BD46A50
SHA-256:	E6B8A90A2870483ACE67380FF4A64B39BFECB7952A432393470D76A6614FC62C
SHA-512:	9FCA9353E409DA95843FEB2659036C4F8198AC8B4A3C3C1237A57E8152E76C67864B42669D70ED9DEF2DAD83C177732EF635DA68AF1601F60893BEDBB75D3CD2
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1414
Entropy (8bit):	5.048860604703411
Encrypted:	false
SSDEEP:	24:2dVB5AALfshNz6n7P14xxyaS9WgEIFFlMY08ltOwcmel7zGXOCq0ewSs4:cV/AQfs2n7P14HEWgEIFrllSWXIpw34
MD5:	89A69101E234DB30C84FBBCF092F817A
SHA1:	2E629563D0820853ABEAC87C1A74D798046214FD
SHA-256:	EC3897CB13CAEAFAE7BE0FF73792E4D89FB0CF705B2B9C9F76741E9768C37DC8
SHA-512:	C2C12EF8F6DC6CA604C1E9D52B70BAB364548D9B2E8B3772EA217098859FEDD37EF9974853DB26045294DE7CF14A52A997C08C151D88B87C40E2355C725997B5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">.. <g>.. <g>.. <path d="M512,97.248c-19.04,8.352-39.328,13.888-60.48,16.576c21.76-12.992,38.368-33.408,46.176-58.016.....c-20.288,12.096-42.688,20.64-66.56,25.408C411.872,60.704,384.416,48,354.464,48c-58.112,0-104.896,47.168-104.896,104.992.....c0,8.32,0.704,16.32,2.432,23.936c-87.264-4.256-164.48-46.08-216.352-109.792c-9.056,15.712-14.368,33.696-14.368,53.056.....c0,36.352,18.72,68.576,46.624,87.232c-16.864-0.32-33.408-5.216-47.424-12.928c0,0.32,0,0.736,0,1.152.....c0,51.008,36.384,93.376,84.096,103.136c-8.544,2.336-17.856,3.456-27.52,3.456c-6.72,0-13.504-0.384-19.872-1.792.....c13.6,41.568,52.192,72.128,98.08,73.12c-35.712,27.936

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26196, version 1.0
Category:	downloaded
Size (bytes):	26196
Entropy (8bit):	7.992239660426418
Encrypted:	true
SSDEEP:	768:mc7WUq4nvthu4D83aqu/hK6jO2wbTqP9khH:mezqYtVeahO22GP9kH
MD5:	CCD616A17621401B05E04AFF02498365
SHA1:	70F51A016C0E20F665973848B9EE4B080232FC57
SHA-256:	4CA6B213241815A702F4BCC48945EA383CB8B32EF60547BDB4436B4B6CAB420A
SHA-512:	BE38B799CE62DD2C3147E64403393B2C71406D9B8C51C2468A3EABB60AB8FACF7C87B1E63498E34A68F89AFD14ECF77C75F6FC0D724CDE9F846321C409A3A47D
Malicious:	false
Reputation:	low
URL:	https://cdn.infarmbureau.com/farmhand/V1/fonts/121784c1-863c-4e49-b682-625ea7de55b0.woff2
Preview:	wOF2......fT..........e.........................?LINO(.`..`..P. ..f........3.6.$..@..b..D.. ..u. ....K.'..~u..A^H.....6..S.M.m:x..q..],..._6......H:.V.V?..'].rh.T1Iv.....L..H.....6W...#..T..e.i.........wI.....2.H....T.cZapc..9..{..H....E..dx?N.N.yL....{.......#\.....%.R....#.r.....N..d.M.......~...!Ox.I.~.B. .H....(.SQ.....E_.w...b..^..z..b... .0.....Q..]...2........[...0`.>...b..Wg..nr.C..l...F....9.......m.9.0...9.5.0 ....T..I..5MqK-.u...........<..Lh7...."bz............F..O.......O...r.._...`........-........_....$\|..?.ZO^..1s.aO....T.C.HA.!.1...........x...kA......\[....7...o.w...>'.(......o.I...)..F+X>..K.....Q.\|...{.l".X....T..Z..... ........N.......{.f.%.....$.2).4.{+.~o.d......r@:{2.......C.V...A_......]..M....\|.R0...C\|........E.O....B..l..p...0..\.. .[....t../......6...].q...y<\..B......r...v.J.pZ.h}_.i. .nx.zVr.[.....B.;.S......Aj...av.....=.X....}.N2..~..}.I..2[.c4#...c..$%.......#...V.j.E.{[8.BH;;.>y.l.j........

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-44978.us.tvsquared.com/tv2track.php?action_name=Indiana%20Farm%20Bureau%20Insurance&idsite=TV-5454092718-1&rec=1&r=168345&h=11&m=21&s=34&url=https%3A%2F%2Fwww.infarmbureau.com%2F&_id=fe57b8effe7e4586&_idts=1736526094&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=912
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1327
Entropy (8bit):	4.965576568551669
Encrypted:	false
SSDEEP:	24:2d/A9jgkZc92yTGMg8UuNASGXBhxUqWL+8NGs6vIwthzbwFpMy:c6jG92Np8uBcqWK20IYhAFpMy
MD5:	DCB7C9E5101911D250C951CAA083C3B0
SHA1:	EFFC86D1D3E957DEF5205DCA21C110B74EF4E105
SHA-256:	5DFA0719B3CF0A14B44A751F71EE2802A0B4B88C07AD282E23FBD345B9F11AC6
SHA-512:	64A59513BCDF69AA6FF52F0F42AAD5ECFDCBBA973D9390B24B3011999AFD416734AF74B46E3099EE771BD17148B10DD96E4B8A6BD9CE6C07E5B015B7007B655B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="15.634" viewBox="0 0 17.867 15.634">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(0 -0.667)">.. <g id="Needs-Assessment---Intro" transform="translate(0 0.667)">.. <g id="CTA_Item" transform="translate(0 0)">.. <g id="Icon_Life" transform="translate(0 0)">.. <path id="Path" class="cls-1" d="M4.873,4.667A4.968,4.968,0,0,0,1.415,5.938,4.753,4.753,0,0,0,0,9.478c0,2.363,1.618,4.351,3.471,6.089s3.988,3.267,5.158,4.6a.41.41,0,0,0,.609,0c1.17-1.331,3.306-2.86,5.158-4.6s3.471-3.726,3.471-6.089a4.753,4.753,0,0,0-1.415-3.539,4.968,4.968,0,0,0-3.458-1.272,4.708,4.708,0,0,0-3.109,1.1A.4.4,0,0,0,10,6.489a.409.409,0,0,0,.419-.124,3.92,3.92,0,0,1,2.576-.9,4.148,4.148,0,0,1,2.9,1.052,3.913,3.913,0,0,1,1.161,2.957c0,1.995-1.42,3.82-3.217,5.506-1.673,1.57-3.605,2.981-4.9,4.347-1.3-1.3

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1229
Entropy (8bit):	4.95383481417861
Encrypted:	false
SSDEEP:	24:3F8OY7aKugZFA5OY7aKTHpwYmOOk4TfenEPCa5YmOOk4TfenEPCD:3aOEaCZS5OEavrOOlKa5rOOlKD
MD5:	65500542740B747DBC5D7C704D021046
SHA1:	12A96EE8625A9CB88999BFEB53FF937F5B37F192
SHA-256:	5F3CE5CB8E865FA07422B7A1B598D648615343EC667CD968D78897F953879186
SHA-512:	C718C961D73C695DA2F739BF8E8D2685920C0995B52D15782871CFE8AECCB2C48686288B3EB692FF5A84238CFC41294343CA3CCB42A1F737A288B0ABF339648B
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons\|Material+Icons+Outlined&display=swap
Preview:	/* fallback /.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}./ fallback */.@font-face {. font-family: 'Material Icons Outlined';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/materialiconsoutlined/v109/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}...material-icons-outlined {. font-family: 'Material Icons Outlined';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-h

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 128352, version 1.0
Category:	downloaded
Size (bytes):	128352
Entropy (8bit):	7.998349465466699
Encrypted:	true
SSDEEP:	3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y
MD5:	53436ACA8627A49F4DEAAA44DC9E3C05
SHA1:	0BC0C675480D94EC7E8609DDA6227F88C5D08D2C
SHA-256:	8265F64786397D6B832D1CA0AAFDF149AD84E72759FFFA9F7272E91A0FB015D1
SHA-512:	6655E0426EB0C78A7CB4D4216A3AF7A6EDD50ABA8C92316608B1F79B8FC15F895CBA9314BEB7A35400228786E2A78A33E8C03322DA04E0DA94C2F109241547E8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
Preview:	wOF2.......`......~....................................D.`..........,..t..X..6.$..p. ..z. [.\.M.B.....-..VT .&"..Qc.=.U..XwD...7Q.v.a..; (...I........+.I..%...._.v.:..N.Y....;J.V...+..S..9Z...X.J........_0)c`[vb?.".P.E..Q......."p.v..........3.Zm`k":8..Kk........UR%U2...<....'a.L.4.&....P.X...,z5.j<++....ff..X1I.......%.Z<.UT.G.)L........;.A....O~ev...-z....^.\|.....pE..@.t.7...4..>...}.U[y...O8....\|m.L04....t...g...../...&.E...."...q.1.(..g.&?;...Vx..\|.-p=......;...a..Q\|L8..}..$.I.2.tI8...O..Q...k+;..N.hf.M...t..(..\...O.......:n.... v..}H...\|B<..'..r...1..B, .....6.&...6.x.i.=...r......Os.._...g.{W$VD..A1........B[.<un...t......k..n0........ ..O&.....%.@..c..Tv...pT.Np...U...%j+ZP....@.....b..........~...f..D..... ...O$....\|......$W842...S.....2.pIL.....Z.[.xo.r.{.d)I.P.-)0..K.`.~,.8..[...m..3d....A..v.s.d..KW..j.4.Ic.m..,.P........../W.j...>B..BJ.........[?.....$."...-...K.P.R..K.....Dz(..7_...=.....b.C...2..4F.+....P...f.#.q.G.G8.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65278)
Category:	downloaded
Size (bytes):	268099
Entropy (8bit):	5.045159565490642
Encrypted:	false
SSDEEP:	1536:a/BsLxHx9bnmCC76ExCOoUe3Hv7lG5wp1pdMkuM7iRglQN1rdq1ePQQiKjk1w4:9C7E
MD5:	14054FB113A790E49BD1A609F09EB25A
SHA1:	48FB90835AD414506B1EA0B6EEC02D08165925EF
SHA-256:	99E088ADC4A664E237E868C3E2E200DF03FCCA5FE383C2818292F80776EFE439
SHA-512:	8B9D2F52E0F2FC6E3690B8D2E4099E331331708D1DE6447EFBEA79E932A9B66C7A57B7CA471F3841893FD6DFAF70734506ED757D15C1606F21F7132DE9CAE807
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/material-components-web@3.2.0/dist/material-components-web.min.css
Preview:	/*. @license. * Copyright Google LLC All Rights Reserved.. . Use of this source code is governed by an MIT-style license that can be. * found in the LICENSE file at https://github.com/material-components/material-components-web/blob/master/LICENSE. */..mdc-button{font-family:Roboto, sans-serif;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;font-size:.875rem;line-height:2.25rem;font-weight:500;letter-spacing:.0892857143em;text-decoration:none;text-transform:uppercase;padding:0 8px 0 8px;display:inline-flex;position:relative;align-items:center;justify-content:center;box-sizing:border-box;min-width:64px;height:36px;border:none;outline:none;line-height:inherit;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-appearance:none;overflow:hidden;vertical-align:middle;border-radius:4px}.mdc-button::-moz-focus-inner{padding:0;border:0}.mdc-button:active{outline:none}.mdc-button:hover{cursor:pointer}.mdc-button:disabled{backgro

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	dropped
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53624)
Category:	dropped
Size (bytes):	54903
Entropy (8bit):	5.710715163123397
Encrypted:	false
SSDEEP:	768:jrBpR5A/yvsBpUrgmgGVbddlDCIAJBWFrevESaeOJV24Lcc6pXQUpncsunF:jrLAnC8m13dwIACrKYJVVT6pH2F
MD5:	812113DB16365B6B4783F3425982B6F4
SHA1:	C6A80834B26E7E52053C588EF27DFBE61754D628
SHA-256:	F29F9952DD8EFEBE88BA66394F3518D9167842F12D55FBDFFCC6180E3A8F2B73
SHA-512:	DFA937F76AF9919AC36B9FEB6EC2FF9F0565810909967F38380A7E332FBE35B9381A46E6FD1AE46AE026F2FAF15E4F1D658C8D0DBF73A99997EE55E837DE86CB
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function X(w){return w}var D=function(w,l,W,b,z,r,A,Y,c,Q,U,t){for(t=47,U=12;;)try{if(t==87)break;else{if(t==l)return U=12,c;if(t==47)c=A,Y=J.trustedTypes,t=37;else if(t==11)U=12,t=b;else{if(t==31)return c;t==b?t=J.console?w:l:t==W?(U=33,c=Y.createPolicy(r,{createHTML:k,createScript:k,createScriptURL:k}),t=l):t==37?t=Y&&Y.createPolicy?W:31:t==w&&(J.console[z](Q.message),t=l)}}}catch(E){if(U==12)throw E;U==33&&(Q=E,t=11)}},k=function(w){return X.call(this,w)},J=this\|\|self;(0,eval)(function(w,l){return(l=D(29,24,41,25,"error","ad",null))&&w.eval(l.createScript("1"))===1?function(W){return l.createScript(W)}:function(W){return""+W}}(J)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	545
Entropy (8bit):	5.244164980821216
Encrypted:	false
SSDEEP:	12:6NXPqhV6YIKOfWlIX4A6ZVtw3R1CFlwFBCkBHpnHwOGSS9q:uCuYIDX5iaR1AwDtFASSo
MD5:	8E1D21FD40EE7CBD0EF26CFA42575410
SHA1:	6F68641625E05E9163DAEB97D3F9794993305F6B
SHA-256:	7DF66773DAD77033D7188661DCC25BEC77759EFBF592EEAF0D3B226A37D53B1C
SHA-512:	F6C9C6CF9F5C18396A652697E2D28FC03419CFE44BA4B243B6CE664864A121C86008A7CD4FB987C1A0702DA177AE8B7C7FC6EA487A5516845E65B5F7BEBC8491
Malicious:	false
Reputation:	low
URL:	https://cdn.aws.infarmbureau.com/b2c/oam/scripts/login-ifbi.js
Preview:	import {. setMessage,. initializeLoginPage,. getMarketingWells,. retryLoginHack,.} from "./login-common.js";.import { userMessages } from "./user-messages/user-messages-ifbi.js";.$(function () {. var siteFinityUrl = "https://www.infarmbureau.com/api/shared-content-blocks/contentitems?$filter=Tags/any(t:t%20eq%203e234c5e-3205-6b8a-9f2e-ff03000bf66e)%20and%20Category/any(c:c%20eq%20dd1d4c5e-3205-6b8a-9f2e-ff03000bf66e)&$select=Title,Content";. initializeLoginPage("");. setMessage(userMessages);. getMarketingWells(siteFinityUrl);.});.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9284)
Category:	downloaded
Size (bytes):	245020
Entropy (8bit):	5.453937864649824
Encrypted:	false
SSDEEP:	3072:6FLeYH8W1WJ/37Oec8NteqZEbkxZNsucrl0xYurPK7d3OCX:6FLeYcgWJzm8NNfFcrHurPK7d3/X
MD5:	645219BB69D1C9F06CC935CC54DC1C2A
SHA1:	F14ACE0F9745356BC77D888857EF32A5EADC8615
SHA-256:	5332FD32D8BE28EB2531721220E8C3C561000378988BE4B4D7F97568F0B3F224
SHA-512:	CB41C3768945DA663B54A29758D6BDFFFD4666C6EEEB253017748831CB424CB54113CFE9DF06959E980E0A7B9EACB6F0D9DD1016B3A9B1BC900FAB79A30AF837
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	downloaded
Size (bytes):	68544
Entropy (8bit):	5.353273780967634
Encrypted:	false
SSDEEP:	768:zDoev7ihlr+MwjqU+s2SL3iY0w2+4PMdj4dZOfDxh1GiqxvC+24VfRzYshiP/Xt5:zD7Dihlr+MUQKI0f9h1Gib4LA8Bs
MD5:	A07833512D877DC182973CF42CDA7D79
SHA1:	28DCFE97957BBB239FCE68DBF64BB22338ABE500
SHA-256:	83146C62110F911CBC9E66DAA824D1F4E1D8F8AA6508AA45FE061932DB65FA27
SHA-512:	3656CCE575FC835853AA0B0F4AAF38D65DD3E4CA5985E1E64A9C211F6D5350A640D4AC48EE90507F7C3657E804DB9CB6DBB6A80B4475C12FF658C75CF4EB29AF
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.59/clarity.js
Preview:	/* clarity-js v0.7.59: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return br},get start(){return yr},get stop(){return wr},get track(){return hr}}),e=Object.freeze({__proto__:null,get clone(){return Xr},get compute(){return Yr},get data(){return jr},get keys(){return Ar},get reset(){return qr},get start(){return Hr},get stop(){return Fr},get trigger(){return Wr},get update(){return Ur}}),n=Object.freeze({__proto__:null,get check(){return Zr},get compute(){return $r},get data(){return Dr},get start(){return Kr},get stop(){return ti},get trigger(){return Qr}}),a=Object.freeze({__proto__:null,get compute(){return ui},get data(){return ei},get log(){return oi},get reset(){return ci},get start(){return ri},get stop(){return ii},get updates(){return ni}}),r=Object.freeze({__proto__:null,get callback(){return wi},get callbacks(){return di},get clear(){return bi},get consent(){return yi},get data(){return li},

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24916, version 1.0
Category:	downloaded
Size (bytes):	24916
Entropy (8bit):	7.991009716193423
Encrypted:	true
SSDEEP:	384:uYbTg01q5hUzc2OgaJHSh8yljtcxYeA4APeaRAS9F5ERElW/U2bS7+QBafb47G6Q:ucTg01raOT6meADeSFliUYSjBMc7Ys0
MD5:	93F285BC9A6981949665D702695DD611
SHA1:	DBF8D5C58B4A02C36F4C3B63F75A51E0A3A03A78
SHA-256:	A5730E449543483355516BA9182935BAA937A91BF3DC55A03F2CE0075E57545D
SHA-512:	82D175AD2B2BCF860564C44E2282ECA2E9D3297903CD74309CA202C21E372CDB1938E01F1331131D35D1353A297B5C32BBDDE90CA6619D4B18F388A4A2500068
Malicious:	false
Reputation:	low
URL:	https://cdn.infarmbureau.com/farmhand/V1/fonts/be607c9f-3c81-41b4-b7ad-17af005c80bb.woff2
Preview:	wOF2......aT..........`.........................?LINO(.`..`..P.,..f..... ....6.$..@..~..D.. .... ..>...'.....;..?....Y.....'o....M.S.....i....g...2m...b...80JHw..U.).l..C......y...0i .4........Z...x\.e-W.Y..q..Ry.O~.z5TM.`.."n...BH......t...}B}....d..............`.........ij.....t8c.n...O....!,T..9..%C........w...d2.. ..!!~R..id(..x.v+0...3.L.2M..}.>..N.u}..g..oiM..=Q.p. ...3......3hn...v...W..."..T..mvD.bL....$......:.......J{..........m.....?.v/.p@..".(W..e.D^.4..L..\...W.KiG.ky?....>m......es....5.I.P.[Ur.%{.v...b..-...sX.A.?..x..[t.t...>".W...^%..2..'k...Vg........o.S.N._.Z$.oN....0e.....G.T.-...g...`.@..u9-c.9.gjM.yUVOt.W....^.m....V...2..=..ley.v...U....].}.>..^g.~..i.-SeR..U&E..\|O..._._.Z......fN...!....E..A_....K.$.?u.Y...];...H..x...;.z..-g......\.j.O.5..Oa.V........(..(.......}..%.J-..A...}......._.. q.r7..]u.sY...G....GR.K...&m...Q{ .ck.iv.ri..v.-...[.}...v...aJ<.....V....(k......N...@.."T.s.........+.c.:.....J..el:......

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Canon, model=Canon EOS-1D X Mark II, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CC 2019 (Macintosh), datetime=2020:05:07 16:22:52], baseline, precision 8, 509x339, components 3
Category:	dropped
Size (bytes):	140777
Entropy (8bit):	7.948979097125077
Encrypted:	false
SSDEEP:	3072:ZhK0HpXP3tP0MPPf3TEN6BpsnJ/Srfc7NTldP6ROzY05qzjSL6Sg:ZhnV7PfYB6W1rPPY08k69
MD5:	310767AC22F8B55423E7F0A98789E149
SHA1:	3CA50B74F61BD242687259C886FF72EEF389A446
SHA-256:	2E06E41813EA4B1A31E3E90373591D0089B9CACA03BC1808E7EAD903DD78881A
SHA-512:	B2E7A061FA06E15CAB6617C1852E073002EEC66311148F26D5FAF1B1A4FF0A52DE8823D7F9076B57D23DD512FB5BC7E26BD8A43D4CF1EE6892455DEB3543F504
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,...."=Exif..II*...................................................................(...........1...$.......2...........;.......................i...........l...Canon.Canon EOS-1D X Mark II.H.......H.......Adobe Photoshop CC 2019 (Macintosh).2020:05:07 16:22:52.JAY DAVISON.SOL STOCK LTD....!........................."...........'...........0...........2...................0230....................................................................................................................30..........30..........30......................`...........@.......................................................................................1...........2.......$...4.......D...5.......^.......................2019:11:07 09:46:33.2019:11:07 09:46:33..t.@B....F.@B..........................................168016000087..........#.......................EF16-35mm f/2.8L III USM..7030000577..........................................(...............................k.......H.......H.......

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.1239716416499608
Encrypted:	false
SSDEEP:	12:7NE2Opw41NZfBUhlOR7KfT4wUFWfv6XgK2q55555555555555R:72nw4NBUuDe6XgKFN
MD5:	2685ED1CE7689EDD1F57EA94B12320DD
SHA1:	BD928A5BE7C60A80F6815518F732A840C2F0B40A
SHA-256:	C54C7F265DD46A11115DDD8DFED9EB4F6C3DC50DB6C8F4A7458682ED797C075D
SHA-512:	6958D5F8662516536D7BFE90CD9F1DAFDA08FF67E449D61AF02358BA5B1DA3F67CE151D3390C16F9259BAA75529748AC1630748BDF3EFA65135962D0549DFF4E
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@................................................................................................................................................................................................................................................................................... .#. .#. .#.!#X.$...$...$...!"Kq .#. .#. .#. .#. .#. .#} .#w.... .#. .#. .#. ).$...$...$...$,. .#. .#. .#. .#. .#. .#. .#..... .#. .#. .#. .#.$...$...$...$... .#. .#. .#. .#. .#. .#......... .#i .#. .#. .#.#+..$...$...$... .%. .#. .#. .#. .#. .#......... .#' .#. .#. .#. .#.!$c."%x."%x.! 3a .#. .#. .#. .#. .#c............ .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#......... .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#;.... .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#9.... .#W .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#...............................................................................................................

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=312, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=600], baseline, precision 8, 600x312, components 3
Category:	downloaded
Size (bytes):	108230
Entropy (8bit):	6.919246089980465
Encrypted:	false
SSDEEP:	1536:NMRhXMRhnfBXdwlmNEMVmh1hhDpehkhZoDMRzwlVWSSvsQ:NMRhXMRhclUdSeaoDmklOvsQ
MD5:	430BE060AADD561BFD0DAFA7708A4903
SHA1:	73E37BA2ED291E7B8F8437A1DEA6EBFAE73D3258
SHA-256:	30637E34FFAAA8DD28293912AEA746CFB574F598E9F5CAB10B0644BC4A633EFF
SHA-512:	E011348FCFCAE88397DC295018C433E0EE8AFD91C15325C6A2D82D3103F5F930F37D3631313446313BB390B182DD8E84CE6C42F43934AFABE3BA5D901A16ADB3
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/default-album/oam_oct2020_600x312.jpg?sfvrsn=e803aba_0
Preview:	......Exif..II*...............X...........8...........................................................................(...........1...!.......2...........i...........$..............'.......'..Adobe Photoshop 21.2 (Macintosh).2020:10:05 11:54:33..............0221....................X...........8...............................r...........z...(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...n.^)..$....;....?.j.....H.....$....a8.+A...'S.^s..v......;.j..9...a2.....

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	dropped
Size (bytes):	20818
Entropy (8bit):	5.592463908396929
Encrypted:	false
SSDEEP:	384:XIgJV0fiJF+sLQld20p28JXHABsOEsoc1/1hUP88J1c7lVMF/fQpDUriKo36n:tJV6iJfwgvoc1/1hUP07jMxIpPKoqn
MD5:	A1F3145E1DC107AAD3B57974B8817B57
SHA1:	507EA38AA8AD7BBE3AB3FA7E4C85016E3DCA2960
SHA-256:	A463AA6666CE0ABCABF8033013CFE881FDBFB570389AFF471D400A45B3A496D4
SHA-512:	8ADDDA4A0F27DB8DCE9706E87C1C5716949EA8111E05A7CEE46E027252D0EEECAB2DCADD02CA505021DB7DFF7ADF88272027A4FE156DAA95A1D75F7CC73C2822
Malicious:	false
Reputation:	low
Preview:	/!. Piwik - Web Analytics. . JavaScript tracking client. . @link http://piwik.org. * @source https://github.com/piwik/piwik/blob/master/js/piwik.js. * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt). */.if(typeof JSON2!=="object"){JSON2={}}(function(){function d(f){return f<10?"0"+f:f}function l(n,m){var f=Object.prototype.toString.apply(n);if(f==="[object Date]"){return isFinite(n.valueOf())?n.getUTCFullYear()+"-"+d(n.getUTCMonth()+1)+"-"+d(n.getUTCDate())+"T"+d(n.getUTCHours())+":"+d(n.getUTCMinutes())+":"+d(n.getUTCSeconds())+"Z":null}if(f==="[object String]"\|\|f==="[object Number]"\|\|f==="[object Boolean]"){return n.valueOf()}if(f!=="[object Array]"&&typeof n.toJSON==="function"){return n.toJSON(m)}return n}var c=new RegExp("[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]","g"),e='\\\\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\uf

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	76214
Entropy (8bit):	5.410596142530115
Encrypted:	false
SSDEEP:	1536:R7hpwPC9ZVK01QYaKTZ02LKVsdmpyKcicIx:R7V9ZVKBYaKj8wKcHIx
MD5:	E3A5B8155CBB9C7450E69C0B2F362E4C
SHA1:	FD58965798ECBD7EAECECA870F72245CD0E50BD5
SHA-256:	1D0AE3B70EC392CBE1F81E2EE3CF727DF1B45A1143E2FCA09476997DD2D8CC42
SHA-512:	10FCF71E93C30B54BF6D7A877269492739B9E3A946D262923DDEB04DC408836657CF308BC1E304DA9E24AE1DAF7D1762AE4BCF6EE9805F05ED16AD31ED5F31D0
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64394), with CRLF line terminators
Category:	dropped
Size (bytes):	255004
Entropy (8bit):	5.159727244731597
Encrypted:	false
SSDEEP:	3072:1DPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:lNdIVWjNS9cdzAV
MD5:	2F88A274C37F92311B7D67ADDF20F9B3
SHA1:	60BFAA672F3BEDA0AD1A68271260A41C007EA567
SHA-256:	0CCB877C24002BBF8CD3E5D108E45894EF99160A5AF07D2514E9E856B5A0051C
SHA-512:	3E216B907D61C8166658E5962D99AC1B56431E216BBDBBB9357F861D3F2D1E53063AA3A8C30BCE6A217EBEF82B139154893D66EF79B36B5E58B4A4988252767F
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14.. http://jqueryui.com..* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sor

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1629)
Category:	dropped
Size (bytes):	197863
Entropy (8bit):	5.634019761675848
Encrypted:	false
SSDEEP:	3072:j/WHfxwoUoyAevjDpc6zCRf60tjHpnAX/+Tn6:zWHNevv26zWfRnAXmT6
MD5:	2777DBEF9F1177594206BBA127917176
SHA1:	26866EA6620152434D88F5923870FD060288C647
SHA-256:	216BD502D399CFD3F497709099F5EC5666DF7847410D4728257301E5AF680E16
SHA-512:	0037CD98BB8AA28A5E4EA68DFCCFC287A262A20072A4FC99226A2A88A09ECBDA07BB1764BFE484C0DEF483D11A06AD0BD1B647245D4E968E9D13ED7BF4230775
Malicious:	false
Reputation:	low
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ /.(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ta=document.cookie.includes("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ta}function bb(){return void 0===eb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function kb(){var Ta;if(bb()){var Sa=eb.dT_,Xa=null===Sa\|\|void 0===Sa?void 0:Sa.platformPrefix,Ua;if(Ua=!Sa\|\|Xa){var Pa;(Ua=null===Sa\|\|void 0===Sa?void 0:Sa.minAgentVersion)&&."10303241106123517"<"".concat(Ua)?(console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"),Ua=!1):(Ua=(null===(Pa=document.currentScript)\|\|void 0===Pa?void 0:Pa.getAttribute("data-dtconfig"))\|\|"#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Xa&&!Ua.i

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	584
Entropy (8bit):	5.452126526071473
Encrypted:	false
SSDEEP:	12:TMGTIMu5E4BcSONfRFD4hNuFS//KYRldZsllK+BbdJ/:3Tx5Nf34hNh/Lkf
MD5:	4BCBA30DDD91BF84204E7DB0CFA54796
SHA1:	B8DA812CB88949A45B5A141DE89C373C016D5181
SHA-256:	D305DCC8CBE44AECD3C8594EA4A18574E809185F8A0B372AF87FC48931F360F7
SHA-512:	B668A169779EB1A921A83E146E198F3296E0D05D9282126D72D67AF0F38E174685BC199AC5645CC00C7945034452365671B639729ACAF9B431A744FBF903CF0E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]>..<svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <g>.. <path d="M191.844,511.5V288.375h-68.313V188h69.875v-83.063c0,0,3.188-104.625,92.813-105.438h99.75V98h-61.875 c0,0-26.125,0-26.125,29.438c0,29.375,0,62.313,0,62.313h89.5l-10.75,100.313h-77.188V511.5H191.844z" />.. </g>..</svg>

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6471), with no line terminators
Category:	downloaded
Size (bytes):	6471
Entropy (8bit):	6.0023189398725805
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaYElc4jK4h3qsrEc4jK4h3qsrj:12cV9sT3AW7NIzkG4eha4eho
MD5:	7ACA46DE96124287B08ACBE321747F17
SHA1:	A54B22B305064F9F8F9DFE159C2A2232A69CF702
SHA-256:	4E2CEBA652139283D7A5D25AFA4193CA7C35A3A372AF1BD6F5F0F316B27728E7
SHA-512:	DEDAA77D1A70F32D6C0496E226A5C50340684C51C1BD09088D03ED6C81181E1DBFE30859C3EAFA47D6C384DFF03F22396E0F845E118B6E26EC3A4DAEDDFDE300
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/573981699/?random=1736526093885&cv=11&fst=1736526093885&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65321)
Category:	downloaded
Size (bytes):	180224
Entropy (8bit):	4.947929072115777
Encrypted:	false
SSDEEP:	1536:igMnMOMgMwMtMFMHQncM0yeLhLKbbW2QzOrZj1HCgSWDQLcOsL7WRHiRHmRH50Nf:AcM0yeMq2eOrZj1igSWDbL
MD5:	A05A16878F3C75A5EA95756AB6D39487
SHA1:	E55E1938C5BBDB785F866B0032F9B0C7D808CC83
SHA-256:	026461772F92697C7BEA1669684712DB79DEF2E4A0241F3FA2441727A0CD562B
SHA-512:	CE85FD6FDB8B04A604EFB5A3A54728368296C21115771E4AECFBD1E0DBD18A50D8AE1D995A325144F2B36DC8CFAE5835B3947051835335B915404A17CE3C3773
Malicious:	false
Reputation:	low
URL:	https://oam.infarmbureau.com/styles.d88015f63e1dc000.css
Preview:	/!. Font Awesome Free 6.5.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */.fa{font-family:var(--fa-style-family, "Font Awesome 6 Free");font-weight:var(--fa-style, 900)}.fa,.fa-classic,.fa-sharp,.fas,.fa-solid,.far,.fa-regular,.fab,.fa-brands{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display, inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fas,.fa-classic,.fa-solid,.far,.fa-regular{font-family:"Font Awesome 6 Free"}.fab,.fa-brands{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;lin

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	244
Entropy (8bit):	5.200513417943616
Encrypted:	false
SSDEEP:	6:hxuJzhqIzyYk+qRU4zEdxXZiqd6AAldHclYlHWsPALOLis8K34QL:hYXc4xXgqSFcSAfL3sbIQL
MD5:	C18E0A7CC06F06D4F544D0648D0CFBB9
SHA1:	DAB16F38E89398B6CB6D4D842D2BE2BC14373B0C
SHA-256:	92A5AAFCF0BCC28DD50A39F5D0745EB401D152F5BCB6CEFAD2D422D300929C40
SHA-512:	A950F8CD83E73DC9CE03F3B64545A345F5490C18E4E56ED418AC44599263D54818FCB794478DB2487B133A6BE7C3E553ACC3861B97809A3F69ED9271948A4519
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /collect/v2/data-centers/b9914fdb-2e6f-d6bb-b0aa-8ae951f29484/datasources/IFBI_MFSF_To_DevDEC/interactions</pre>.</body>.</html>.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10689)
Category:	dropped
Size (bytes):	408996
Entropy (8bit):	5.652428723527316
Encrypted:	false
SSDEEP:	12288:NKpEam40FzE/xjizjdFyf3F97UieFbbPgaICntml4Th0w/Ik5g64HuMLoRqCncYf:NSEam40Fz6xjizTyf3F97UieFbbPgaIO
MD5:	7EEB619DB0614BB5DCDEEB4722713250
SHA1:	E9E119160DEC1753B4E87B31E97E0808926CE7D3
SHA-256:	7DAC63C25BB4B6321961DC65C64DF8DE4DFBD59A5BECC570A55CC700BD95FB9A
SHA-512:	29DEF9A3F45CC848CED96EA99510ECE8C981B2DE11AC52904914A628E854A839F1F902576A1B9E91187BBF72AAAC44C883BCC035CD147EA5D10CC86B425FE1C1
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=992\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=992\u0026hl=en-US\u0026"],null,null,null,1,"992",["https://khms0.google.com/kh?v=992\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=992\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en-US\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=163\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2616
Entropy (8bit):	4.993707596800748
Encrypted:	false
SSDEEP:	48:c5ZYHefDl1mHB6SPl5WsqUM4SMUpYRUCPWb2vqm3Ncy4/AgRnlb3yFyOoMyEvtOE:KSIDMnWsPlSbuTXqm3N3ElnleQJEvtD
MD5:	CE30A95B1D417C2D08F814FCB7C8A7DB
SHA1:	5F4A12247FB7D3521A1B9AE45FBE8DEBFBE1D1C6
SHA-256:	CC99DF19D2709E5D6A161D325086AE9300C00D0BC276C36D3BF5E816988ACD6A
SHA-512:	400565F575E8B4404C25989BC111799F98CE5C1B60D285E45B7CCC2936C66868E7831EE39D853A4C808F92D795BD808B3357FF691F759661F3592D0C69485613
Malicious:	false
Reputation:	low
URL:	https://cdn.infarmbureau.com/farmhand/0.0.3/assets/ifbi-symbol.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="120px" height="68px" viewBox="0 0 120 68" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.1.1 (8761) - http://www.bohemiancoding.com/sketch -->. <title>ifbi-symbol</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g id="ifbi-symbol" sketch:type="MSArtboardGroup">. <path d="M60.829,49.959 C58.796,58.698 50.525,58.358 50.525,58.358 L36.859,58.358 C36.859,58.358 38.004,52.26 40.433,43.428 C43.065,34.782 50.103,35.032 50.103,35.032 L64.403,35.032 C64.403,35.032 63.055,42.046 60.829,49.959 Z" id="Shape" fill="#EE3124" sketch:type="MSShapeGroup"></path>. <path d="M26.109,11.225 L69.963,11.225 L64.716,32.124 L49.816,32.124 C49.816,32.124 39.297,31.516

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	downloaded
Size (bytes):	20818
Entropy (8bit):	5.592463908396929
Encrypted:	false
SSDEEP:	384:XIgJV0fiJF+sLQld20p28JXHABsOEsoc1/1hUP88J1c7lVMF/fQpDUriKo36n:tJV6iJfwgvoc1/1hUP07jMxIpPKoqn
MD5:	A1F3145E1DC107AAD3B57974B8817B57
SHA1:	507EA38AA8AD7BBE3AB3FA7E4C85016E3DCA2960
SHA-256:	A463AA6666CE0ABCABF8033013CFE881FDBFB570389AFF471D400A45B3A496D4
SHA-512:	8ADDDA4A0F27DB8DCE9706E87C1C5716949EA8111E05A7CEE46E027252D0EEECAB2DCADD02CA505021DB7DFF7ADF88272027A4FE156DAA95A1D75F7CC73C2822
Malicious:	false
Reputation:	low
URL:	https://collector-44978.us.tvsquared.com/tv2track.js
Preview:	/!. Piwik - Web Analytics. . JavaScript tracking client. . @link http://piwik.org. * @source https://github.com/piwik/piwik/blob/master/js/piwik.js. * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt). */.if(typeof JSON2!=="object"){JSON2={}}(function(){function d(f){return f<10?"0"+f:f}function l(n,m){var f=Object.prototype.toString.apply(n);if(f==="[object Date]"){return isFinite(n.valueOf())?n.getUTCFullYear()+"-"+d(n.getUTCMonth()+1)+"-"+d(n.getUTCDate())+"T"+d(n.getUTCHours())+":"+d(n.getUTCMinutes())+":"+d(n.getUTCSeconds())+"Z":null}if(f==="[object String]"\|\|f==="[object Number]"\|\|f==="[object Boolean]"){return n.valueOf()}if(f!=="[object Array]"&&typeof n.toJSON==="function"){return n.toJSON(m)}return n}var c=new RegExp("[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]","g"),e='\\\\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\uf

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=312, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=600], baseline, precision 8, 600x312, components 3
Category:	dropped
Size (bytes):	228636
Entropy (8bit):	7.695312668315422
Encrypted:	false
SSDEEP:	3072:lIGINlddodqKOIIK4EJaOYLN9TlKR9jOaj+e5gFGKQ6lV/56+MXkyPyFbrPPJOs:l/gyKDEJaOIYt3hM/vp82brXP
MD5:	E9486CFAC6FA4125547821BCD65DFB91
SHA1:	5703499F522A60BB488D3F2D11E0E2F1A0507AE9
SHA-256:	6DBCF8AAA04934168D568D5E3E41A0FD61F52AA6C6D71D95883F599D534C5D91
SHA-512:	1B9A15C33473F22E05912C12B54090B61EDB27EEA2C90B35D665E9CAA23D589F8EBBBAFC4112053DAD462ABFBD3C4F394FE03499BF6996A2097A6B1E9CF5848B
Malicious:	false
Reputation:	low
Preview:	.....ZExif..II*...............X...........8...........................................................................(...........1...!.......2...........i...........$..............'.......'..Adobe Photoshop 22.4 (Macintosh).2021:08:12 16:01:12..............0221....................X...........8...............................r...........z...(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..,..ag.+...J..h0].{+k....[Z...................@{v1....[.+..o.5....C

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	dropped
Size (bytes):	2517525
Entropy (8bit):	5.690974226342676
Encrypted:	false
SSDEEP:	24576:NqB3uhOPREBiqOBbXAum6UrGoeIoHIGfNnznE1oOM6dPUVETY:NqB3uhmVq0TY0oeIoH1fNnuP/TY
MD5:	024B23A8B08CC3328B495440038A9AFC
SHA1:	FDDC0A6A8DEDF81BD8F1C9A901EB0B23CD37B38C
SHA-256:	39C616373C47E2774B7212F5C66A6EBDB91A27A6AA35D037D0FF604F919B81E4
SHA-512:	DC27C531C9D77ACBB02B137764507DBC183E8E9CF009A08BB08F9CDCE487BA7B1BC91F1DE5B0018AD7663BE18374BD724C2C26C2C3E6371F367557E20A2BB8C9
Malicious:	false
Reputation:	low
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7002)
Category:	downloaded
Size (bytes):	8833
Entropy (8bit):	5.498103791678781
Encrypted:	false
SSDEEP:	192:pIUKupNQxaUxPEtk2a6BaOLxtOZCTbKTPsGDzY037P2Mull7s:pQj2K+xSCTbKTPsGDzPLP2Mu8
MD5:	9AB3FBF8C24136765020FAB5AE84C0CB
SHA1:	0213ABB8E3BF343B7164B712A4D9BD11B5A769A6
SHA-256:	80FF0A0AFF5C181A3306A49FDC6131EADED13329CC6172F05F6CA446C483A889
SHA-512:	3A9A2F844704633BE94EB5EB2765F7238C9F5B758AADD5FBA1537605A1DD0299C240F5089F73209098A09548991264916E2BE40B10A817BEFF84E2BFDF70C373
Malicious:	false
Reputation:	low
URL:	https://zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_40n45Auaibhuy9M
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","BrandTier":"XKSoO91Vvb","zoneId":"ZN_40n45Auaibhuy9M"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.**Version

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2909), with CRLF line terminators
Category:	downloaded
Size (bytes):	2953
Entropy (8bit):	5.131881813735936
Encrypted:	false
SSDEEP:	48:O/DNV91IVkRBB5QUXnMZw8l9VWG5+Fzt1OrXJvNSaSX25mp8LspkG5nzt//6N3GH:SzACWx9HwFzt12PSX3p2Ej5l/6N2H
MD5:	17202AC81D997ED2BBF8147255D898E7
SHA1:	E43A8F50D495B668C99C66BCD96714F7EEBFF77C
SHA-256:	733B93117418C343E14681E14E15781FB39AC42D62B4291F5338E3FB6DFB4C35
SHA-512:	721017EFF80DE607C6B9F1C326F4349A5603FD1ADEAFD18E453D5A98DB1F3130C6C3957EF022057267EE908238EE63BCA48F56004C0BE0984F9B83B4A9760EC5
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.min.js?package=IFBIRedesign&v=MTUuMC44MjAwLjA%3d
Preview:	!function(l){function e(){for(var e=l('[data-sf-role="searchTextBoxId"]'),t=0;t<e.length;t++){var s=l(e[t]);n({resultsUrl:s.siblings('[data-sf-role="resultsUrl"]').first().val(),indexCatalogue:s.siblings('[data-sf-role="indexCatalogue"]').first().val(),disableSuggestions:l.parseJSON(s.siblings('[data-sf-role="disableSuggestions"]').first().val()),minSuggestionLength:s.siblings('[data-sf-role="minSuggestionLength"]').first().val(),suggestionFields:s.siblings('[data-sf-role="suggestionFields"]').first().val(),language:s.siblings('[data-sf-role="language"]').first().val(),siteId:s.siblings('[data-sf-role="siteId"]').first().val(),suggestionsRoute:s.siblings('[data-sf-role="suggestionsRoute"]').first().val(),searchTextBoxSelector:s.val(),searchButtonSelector:s.siblings('[data-sf-role="searchButtonId"]').first().val(),scoringSettingsSelector:s.siblings('[data-sf-role="scoringSettings"]').first().val(),resultsForAllSites:s.siblings('[data-sf-role="searchInAllSitesInTheIndex"]').first().val()

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (737), with no line terminators
Category:	downloaded
Size (bytes):	737
Entropy (8bit):	5.607397648789132
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHl6qtHLdLwTiUMGT2IWaEuwl8DuPaBWzZH:hMiRO9rmHxc8G9POXO8
MD5:	5806B2004FDED38C323306DF7D5427C1
SHA1:	0B903B340DFC118517EA0B6DD7596E0F318C9DE6
SHA-256:	0D87D32E3EDBAC94F0FC3BC2A0223F8105E47213138B5BC208364B7E8B45D6E1
SHA-512:	BAE69BC94373D6BC2B6A7C22026F0FFD80BB933182173A93A38F1D6739439B151436680EBF4AEFF1351825700AFD79CA9C1E6DCC608D8E21CBF733E8E55F7C95
Malicious:	false
Reputation:	low
URL:	https://8339572.fls.doubleclick.net/activityi;dc_pre=CO-P2ujH64oDFU-jgwcddVgQ1Q;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CO-P2ujH64oDFU-jgwcddVgQ1Q;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=*;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F"/></body></html>

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4490)
Category:	downloaded
Size (bytes):	6044
Entropy (8bit):	5.323660086548434
Encrypted:	false
SSDEEP:	96:mhAXGqPq0yT8TrSC93SRa0p73Se1hluGpPeD11AqHJ2KF2WF2Ccuiwum6EfLQGRr:miXBPq0S8vSC93SRRp739xhpmxCqPsWd
MD5:	E6FD297930829B599B330183A1EF5582
SHA1:	2BFFF93D8A95DA3E413C3099233B327093CA0397
SHA-256:	5AC8AE61A9A6934BA795B4F6FB00A53C04C3EB5FEA5616FE7088855DBB010788
SHA-512:	74FCFF0354286BA99DC5521C524FFA7B0A304B54AD09FF0F6CF87519C3F0C6E7A95B50E7F40C38B4A4F90CF177F53C2724F938D3269725B8B4EE40542CAA32B5
Malicious:	false
Reputation:	low
URL:	https://farmalytics.infarmbureau.com/farmalytics.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Farmalytics=t()}(this,(function(){"use strict";const e="https://farmalytics.infarmbureau.com",t=["utm_source","utm_content","utm_campaign","utm_medium","utm_id","utm_term"],o={"(facebook).*(ad_id)":{source:"Facebook",medium:"social-paid"},facebook:{source:"Facebook",medium:"social"},tiktok:{source:"TikTok",medium:"social"},twitter:{source:"Twitter",medium:"social"},linkedin:{source:"LinkedIn",medium:"social"},youtube:{source:"Youtube",medium:"social"},gmail:{source:"Gmail",medium:"email"},google:{source:"Google",medium:"organic"},wallethub:{source:"WalletHub",medium:"social"},yelp:{source:"Yelp",medium:"social"},clearsurance:{source:"Clearsurance",medium:"social"}},r="FAV2";var n=(()=>{let e=(()=>{let e={};try{e=JSON.parse(localStorage.getItem(r)\|\|"{}")}catch(e){console.error(e.message)}return e\|\|{}}

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10689)
Category:	downloaded
Size (bytes):	408996
Entropy (8bit):	5.652428723527316
Encrypted:	false
SSDEEP:	12288:NKpEam40FzE/xjizjdFyf3F97UieFbbPgaICntml4Th0w/Ik5g64HuMLoRqCncYf:NSEam40Fz6xjizTyf3F97UieFbbPgaIO
MD5:	7EEB619DB0614BB5DCDEEB4722713250
SHA1:	E9E119160DEC1753B4E87B31E97E0808926CE7D3
SHA-256:	7DAC63C25BB4B6321961DC65C64DF8DE4DFBD59A5BECC570A55CC700BD95FB9A
SHA-512:	29DEF9A3F45CC848CED96EA99510ECE8C981B2DE11AC52904914A628E854A839F1F902576A1B9E91187BBF72AAAC44C883BCC035CD147EA5D10CC86B425FE1C1
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?libraries=places&key=AIzaSyDyt48xa3hHyPRLMK07PC3N552oTwByAo4
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=992\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=992\u0026hl=en-US\u0026"],null,null,null,1,"992",["https://khms0.google.com/kh?v=992\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=992\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en-US\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=163\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	31192
Entropy (8bit):	4.096047235122194
Encrypted:	false
SSDEEP:	384:zo/jZ5swttsVuG2ehN156DnX7oNrkxoZFLzH4cAy+v1SGp5q0Lzj7Mxmz97nY80:zytz7G2ejODLhCLzI19zjg230
MD5:	D9015052472B84C2BB9F1902808297AA
SHA1:	9F9A4A24008EF5FFAF8C9E686F323832634FC5DC
SHA-256:	498F8F435A47B3E980272F8588AED4DBFB8BD7FF963E469E3D4FA1B8C7455BCC
SHA-512:	9C32C367AB9C2E83F2B96C7D7FF52A89857CDA2F9373B334A71A50CDD449DDCD44422F2205150BA98B3317B467E1DA98ED9E574C45DDFF73A6103CD7B3BB33BA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 17.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="484.211px" height="71.053px" viewBox="183.053 234.947 484.211 71.053".. enable-background="new 183.053 234.947 484.211 71.053" xml:space="preserve">.<g>..<path fill="#EE3124" d="M243.403,273.032c0,0-1.348,7.014-3.574,14.927c-2.033,8.739-10.304,8.399-10.304,8.399h-13.666...c0,0,1.145-6.098,3.574-14.93c2.632-8.646,9.67-8.396,9.67-8.396H243.403z"/>..<path stroke="#000000" stroke-width="0.9863" d="M205.109,249.225h43.854l-5.247,20.899h-14.9c0,0-10.519-0.608-12.65,9.436...c-2.438,9.533-4.03,15.601-4.03,15.601h-18.742L205.109,249.225z"/>..<path stroke="#000000" stroke-width="0.9863" d="M252.847,249.154h24.543c0,0,9.512-0.527,9.324

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1287
Entropy (8bit):	5.078387674407001
Encrypted:	false
SSDEEP:	24:2d/AxccskZc92EyUG4c9f2+qq8tDI1aKLLzPkLT/UBhMsToa7:cBB92FrRyq+DibkXoMtm
MD5:	AC1D21BADA31ABE4A007EDD9F4140684
SHA1:	23BA95AFEAF2FCDA6A77448E1B582FA9395951FA
SHA-256:	BD522D4A09F5B6907272ABC72FE75A9E08C6269CF3FC77663312C0E109924AB4
SHA-512:	FFA64750277E9DF7922FA88CCBC820DFC68DCE1A5BF0552DF4F358E8EC5287DF6F57F4792CDD26CB86DF912573DCAC9F752CB8587715A4ADA2C3889DBB936445
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/header/menu-icons/home.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="17.123" viewBox="0 0 17.867 17.123">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(0 -0.333)">.. <g id="Needs-Assessment---Intro" transform="translate(0 0.333)">.. <g id="CTA_Item-Copy-2" transform="translate(0 0)">.. <g id="Icon_Home" transform="translate(0 0)">.. <g id="Group_19">.. <path id="Shape" class="cls-1" d="M15.261,11.639a.372.372,0,0,1,.372.372v7.072a.372.372,0,0,1-.372.372H10.795a.372.372,0,0,1-.372-.372V14.245H7.445v4.839a.372.372,0,0,1-.372.372H2.606a.372.372,0,0,1-.372-.372V11.639a.372.372,0,1,1,.744,0v7.072H6.7V13.873a.372.372,0,0,1,.372-.372h3.722a.372.372,0,0,1,.372.372v4.839h3.722v-6.7A.372.372,0,0,1,15.261,11.639Zm2.5-.635a.372.372,0,1,1-.526.526l-8.3-8.3-8.3,8.3A.372.372,0,1,1,.109,11L8.67,2.442a.372.372,0,0,1,.526,0ZM11.911,3.822a.37

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (4188), with no line terminators
Category:	dropped
Size (bytes):	4191
Entropy (8bit):	5.114302743441512
Encrypted:	false
SSDEEP:	48:xvTmCcxNDbT2g03nkfmTHqsk04CoDAL1iQBq/cS5gsT+iS+VQEM4SSF4grqam1:BKH5MNk04CorzTXLF4aqv
MD5:	58340F3121BDBB73645B3E9C55FF5AC2
SHA1:	CBC7F40A0251F2ADF86C4049948D2F89ADF749F2
SHA-256:	6399AB4770551E8F40E94D5030C29AF730CEC63C52088C032A7AAB25AF070D85
SHA-512:	97EAF9D52458D843438C0F3BD3A3D23A4E169F29215A0A32A3E456281F8CFB214358818E1537D8F875CAE18FF79DE4F1E4502CB0276C687D13DFD0C1425BD944
Malicious:	false
Reputation:	low
Preview:	.var PersonalizationTracker = null; !function () { "use strict"; PersonalizationTracker = { _canTrack: !1, _pageId: null, _url: !1, track: function (e) { if (PersonalizationTracker._canTrack = e, PersonalizationTracker._canTrack) { if (!PersonalizationTracker._readCookie("sf-prs-ss")) { var r = 1e4 * Date.now() + 621355968e9; PersonalizationTracker._createCookie("sf-prs-ss", r) } if (!PersonalizationTracker._readCookie("sf-prs-lu")) { var a = window.top \|\| window; PersonalizationTracker._createCookie("sf-prs-lu", a.location.href) } PersonalizationTracker._pageId && PersonalizationTracker.trackPage(PersonalizationTracker._pageId), PersonalizationTracker._url && PersonalizationTracker.trackUrl() } else PersonalizationTracker._createCookie("sf-prs-ss", "", -1), PersonalizationTracker._createCookie("sf-prs-lu", "", -1), PersonalizationTracker._createCookie("sf-prs-vp", "", -1), PersonalizationTracker._createCookie("sf-prs-vu", "", -1) }, trackPage: function (e) { if (this._pageId = e.rep

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64464, version 4.262
Category:	downloaded
Size (bytes):	64464
Entropy (8bit):	7.997087814135465
Encrypted:	true
SSDEEP:	1536:wOhGmmMET1VwoQNDerkOtxhncPvaAAGzw9jD8RlhANsK1q:JhkhVINDerkO+aAAGA/aANX1q
MD5:	4B5A84AAF1C9485E060C503A0FF8CADB
SHA1:	574EA2698C03AE9477DB2EA3BAF460EE32F1A7EA
SHA-256:	3C4A1BB7CE3234407184F0D80CC4DEC075E4AD616B44DCC5778E1CFB1BC24019
SHA-512:	05196036C41398616C077925FC4BF252E81F11B6EBEF8745047D75CB2C8B80441B8C3593F4D5B2617089E9F3D8D957F9EDCDF8E43993661A277BE8F4B6A32111
Malicious:	false
Reputation:	low
URL:	https://cdn.infarmbureau.com/farmhand/V1/fonts/fontawesome-webfont.woff2?v=4.4.0
Preview:	wOF2...................q........................?FFTM....`..j.....\..X.6.$..D..r.. .....7?webf.[f......!...8...4..D...U..a.....f......GE.L..n..@UU._....A.{..{.)).4c....2i..\|.I.N../l.j...:..o.r..A.h$W<.@.3.....c.+VNt..tz.8..h..:.:....W6....e'[T.,.d47n.a.6.nlsm.c..li....K.w..c.f..3.&......&.m^....O...{..-r.......]~Ck.SM..UfH...>.F......G..Z1..X.aY..[.(...X.e..._..o.S..8.s@.....oy...5#d......x....LTUw....dT....W..:.9@..(....EBL...0.TP@.{f.=usF/ts.n.\.v]..W..._...].3.O...j.."...H.&..~?..A....B.s.0...?..5..;...8....(....w.....1......@X%..A.\..8.....[R..`...F..F.Q5h...BJ.NP...~D...........`$3......Wg.,Wg...{....!........S...H...t..?...+..K.dSL7.O.l#&...>...@.K<.6u'....Wr.q.....Tu......F.8.....1..f...T..}U.....I...<..>"....p.xxy.?..........`..By...Zm.?......X...Vnj.S.^.....j...x3..9...@7..t....:.gS[Y>.&,8............5.).w...e.eI.I....9..^..wj.d;.d')<$.0..[v...~fz..;..N..vJ..]F......*S=..b....I......7uk.....)...L\w.k.n.vq.=#S.=..L.kx#....

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	584
Entropy (8bit):	5.452126526071473
Encrypted:	false
SSDEEP:	12:TMGTIMu5E4BcSONfRFD4hNuFS//KYRldZsllK+BbdJ/:3Tx5Nf34hNh/Lkf
MD5:	4BCBA30DDD91BF84204E7DB0CFA54796
SHA1:	B8DA812CB88949A45B5A141DE89C373C016D5181
SHA-256:	D305DCC8CBE44AECD3C8594EA4A18574E809185F8A0B372AF87FC48931F360F7
SHA-512:	B668A169779EB1A921A83E146E198F3296E0D05D9282126D72D67AF0F38E174685BC199AC5645CC00C7945034452365671B639729ACAF9B431A744FBF903CF0E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]>..<svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <g>.. <path d="M191.844,511.5V288.375h-68.313V188h69.875v-83.063c0,0,3.188-104.625,92.813-105.438h99.75V98h-61.875 c0,0-26.125,0-26.125,29.438c0,29.375,0,62.313,0,62.313h89.5l-10.75,100.313h-77.188V511.5H191.844z" />.. </g>..</svg>

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	dropped
Size (bytes):	301733
Entropy (8bit):	5.563138965270235
Encrypted:	false
SSDEEP:	3072:F03a4IwyIJ/rNaRHO0YNGzlwvOfyk3pBuYgyzOgMiExYx2wE3OPoKSpQ2j2i:29yIJDNaRmGpUsiyzNM8x2wE3OPoKS+K
MD5:	D6D85C184601C3987F44978F070199F2
SHA1:	D29994690F3771EE26CDD798CCD2E6824B03D887
SHA-256:	9399DDB015982DC4D77D767D472B60966B35A688E78CD372116E3A434A14835D
SHA-512:	4BE844FDBC735D5CFC4561FA461151C7BB20DAA092A09010564AB213BA7E5EDCE06CE74B4D2C27535A116AA07B264958A2FDCD550080390FD21354D0D1D9044E
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":17,"vtp_instanceDestinationId":"AW-573981699","tag_id":11},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.105195573108474
Encrypted:	false
SSDEEP:	3:InRo8/ZoS8/ZoS8/ZoS8/ZYn:Z8/ZoS8/ZoS8/ZoS8/ZYn
MD5:	A93F367CF1815B392ED23889C6938032
SHA1:	3A7A4CA2B55CE9FF962B1C608F0CE33EA4B9CF7E
SHA-256:	3CE9BD9727549A8C0C3DA5D4E5D404F460FC3E88EB81BEE98664CB223D45EF48
SHA-512:	31C1FB77EB7806934E91E1E75B32E75FDC6D2A0C8BB2773296672B133BE03CEFECEF5BED5D42A1EA503883DBF5F55483481D53CA7879CD974D79B32888837D75
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAmjRPLIsseHPBIFDZ9Mi5ASBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2RYZVO?alt=proto
Preview:	Ci0KBw2fTIuQGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	30890
Entropy (8bit):	5.396932157292168
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4u4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4u4N10kv0O/zrYe1M
MD5:	98B9165C656FE6F97795C201CEE846FF
SHA1:	64025C3AF6409B69EFDE90FE7BCF5F4EBE041D87
SHA-256:	59A9D57AF366253D0FE1C99B747BDC9D8B4D1B1E5152A6BE96681E3D2C25C1D6
SHA-512:	D84C30A07C961FEB909741F386CA8B627DD078366441EFD73E506238FBEA3A4F5B7BD8E17297896D396C1A9F705B8CCB08C1071F91E7BC8318F7655CFF286EEC
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40444)
Category:	downloaded
Size (bytes):	476933
Entropy (8bit):	5.608899642367717
Encrypted:	false
SSDEEP:	6144:n4JAiQ9yIJDtxaXcGtUskxzNM8x2wE3OPoKoUB4972jAYqmfD:4JJ6JZ4XtINM8AeJy7vmr
MD5:	77D4040C5259AB3F4D138A57DAFD5512
SHA1:	503F8AFD66009A0E4894D02E15CBA409FA7DB89B
SHA-256:	092A4E47C7849DF0DE2FB6190166D351063F07FA03B2501224F04748C25B6D8C
SHA-512:	B969C9D607E013437777332F162E680A51AB7371691BCF7983B4E3E765CF7C5A7EC125E4D841D90B921B1D73AD56FA6A0DC1FBFCA18C6DE4EC16F1357BEE33E7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-7179S89KQB&l=dataLayer&cx=c&gtm=45He5190v76386024za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":74,"tag_id":9},{"function":"__ogt_ip_mark","priority":64,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":11},{"function":"__ogt_1p_data_v2","priority":64,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_aut

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4009
Entropy (8bit):	4.473197640367199
Encrypted:	false
SSDEEP:	96:49v43BHDBDEfNKLH1PJOwVKDy//SiLSixC:mv6VPJjww/TSN
MD5:	324DAF0291CF5903CFE4123F8A9D6AF0
SHA1:	D4AEAD9DAEF0C65E724AFEBB1C9108FFEDC00881
SHA-256:	8D3C8A74D4FC0C49FCBEEDCA10BD7A5131094A71D0A0DFFFDC45B12F52DA5B5F
SHA-512:	1707D70395AB9F9A0D997467CB3A3FF127D5EDEE483B943A7043DAE78CC62B1D673BDC12917D3F50181116CD45004962629DD5FB4BE04C664D683DF6FD121462
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/header/menu-icons/farm-icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="17.935" viewBox="0 0 17.867 17.935">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(-0.587 -0.809)">.. <g id="Needs-Assessment---Intro" transform="translate(0.587 0.809)">.. <g id="CTA_Item-Copy-4" transform="translate(0 0)">.. <g id="Icon_Farm-Crop" transform="translate(0 0)">.. <path id="Combined-Shape" class="cls-1" d="M14.424,5.1a.379.379,0,0,1,.379.379V12.3a.379.379,0,0,1-.758,0V5.475A.379.379,0,0,1,14.424,5.1Zm0,8.341a.379.379,0,0,1,.379.379v4.549a.379.379,0,0,1-.758,0V13.816A.379.379,0,0,1,14.424,13.437ZM4.567,9.645a.379.379,0,0,1,.379.379v1.516a.379.379,0,1,1-.758,0V10.025A.379.379,0,0,1,4.567,9.645Zm0,3.033a.379.379,0,0,1,.379.379v5.308a.379.379,0,0,1-.758,0V13.057A.379.379,0,0,1,4.567,12.678Zm10.672-11.5L15.82.809V1.5a5.172,5.172,0,0,1-.3,2.209c-.39.7-1.088,

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	405468
Entropy (8bit):	5.175645713324672
Encrypted:	false
SSDEEP:	1536:hIzoaFUgMnTthFgVMMMg7UDBcpILvPptpm8p7M6oya+MOn4yBOx5juDEnXrDJc7M:ioaFU5FgqMMg7UDBcMpoyAufNwcb8o3m
MD5:	E94AFCD9E618B8EFDE7CADF9B0A20EB8
SHA1:	3C4C5D48600AA0EDB8C26ADA3AA546F9436FE867
SHA-256:	A66DB85A1D0CD32D4E2D98A9AE6E5AE21761FFD0341CAF706C2DAD434C1A3DD2
SHA-512:	F2E2896007E2F8D2C87CCE1F864B39A9941DEE809B2E13E9F02E88B2F857E34414078F7F82270C555AB6BE3C1F825F61DD986BBA9D1E26FA82A2C51D3149C2FE
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	22580
Entropy (8bit):	7.987931088564268
Encrypted:	false
SSDEEP:	384:/zfZ1pg9F71CwL/CSWp/ZRWcAA2fp3GTQ4hh8T+7gLj5Iog/8Xd1dg:7RDg9FAwLnCZRWcHQp300TuidIo68XdQ
MD5:	95721AA5F38F909E45C7B19D0176FFAC
SHA1:	384E381D3BEBA2547D0EA3DE6E3ECAEC09F3ECA9
SHA-256:	CF785DD2EE8BD1162A9EFFC4F62E91A2EE66C34BA3A61C6647786CB8FF077FCA
SHA-512:	19E67FD26E31CBE2442B9C8B6A3B59FFF35B59EFE58CDCA6A1A061EE5490FD8D61D0F1C10C0B1BA76C9E1B6C1EAFA70C7EB186A6DC948AD578217FC01386F55B
Malicious:	false
Reputation:	low
Preview:	RIFF,X..WEBPVP8 X..0........>m2.H$"........gnUr~...JO0.......&p.?........).....(..}..L%...`Y..71..N....1..ZR<7.?..H.....U..}.{.o._m..[...g.V.....U..}.{.o._m..[...g.V.....U..}.{.o._m...ci.2w:..C.....8...._(._..&.uP.E..H......e....(a..t..V]r..B.8.E..;.+...z.....[.0:...[p....[u.'..r......:..........N&...G..7.5....auHiMK\H$......o.{e.%.X.qD..W.\.u{J..d.....b;...h..^=.Q..NP..ux.i>P/L..X.v.PKV.....7k..4..">.Z+L........(..}..-Kpu....^.6..M.,~..:..:!GNcO.{A6.WP.0.L5...jTO.}..\|.....!.k....i...4..Ma1.Od.U.Q......B[-...:.D....5Y.....~B.2..:.......\|Kj..s .CF..kr_..}h......b.F@B.bL>.e(....Wh:"W...!w.....~b..j.<.!......H3..G1.V..Y4..I&;..qH...............o.F..q.{...s...g`..w....!`..'....+...;.[.H.1po..<s-.9.W.....S.mv....j...b.jhpi.1rB..o...2+.%.Z}C.d...1;RJ..............c........'..$.....D....V@l..;p.......D.Ij....`..?.<>8.......:E..b%FGTx..[......h*.S...-.6&ySss.#U..._.......e....;K.....s.&.........6M.\|.yH.#.>K.....i...b....z#nuW.c5r.'...f..~8\|.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3936
Entropy (8bit):	4.990859289118207
Encrypted:	false
SSDEEP:	96:NXK8HjTyuU29mTEGK00IrsiYcDGdX3TGEOW:Na8DTyuU29mTEo8FDz9
MD5:	B7D40027408388EAB81F82D210AA65D5
SHA1:	5DB9E3A8DF94AA8F22BF891EB30D814832DFA546
SHA-256:	B32B9EF3D22C1BA37A0946F7163D7F7DBE7009761B2C46B910081E50200CF959
SHA-512:	00BDB18884248D15AB8F8864E35F09E62385FA0BDBA830CF29018F28A4860C6C78B12840153634C6DFA4528CAF567E0C44E0B8B513DCA7848B23C8991FF69EED
Malicious:	false
Reputation:	low
URL:	https://cdn.aws.infarmbureau.com/b2c/oam/scripts/login-common.js
Preview:	function getMarketingWells(siteFinityUrl) {. $.ajax({. url: siteFinityUrl,. type: "GET",. dataType: "json",. success: function (data) {. var contentArray = data.value;. var marketingWellIndex = 1;. $.each(contentArray, function (index) {. if (index >= contentArray.length - 3) {. var marketingWellId = "#marketingWell" + marketingWellIndex;. var marketingWellAnchorTag = this.Content;. $(marketingWellId).append(marketingWellAnchorTag);. ++marketingWellIndex;. }. });. $("[id^=marketingWell] > a").attr("target", "_blank");. },. error: function (xhr, status) {. console.log("Could not get marketing wells from Sitefinity");. },. });.}..function doesValueExist(value) {. return value != undefined && value.length > 0;.}..function setMessage(messages) {. var messageValue = new URLSearchParams(location.search).get("message");. if (doesValueExist(messageValue) && messages != undefined) {. $("

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3936
Entropy (8bit):	4.990859289118207
Encrypted:	false
SSDEEP:	96:NXK8HjTyuU29mTEGK00IrsiYcDGdX3TGEOW:Na8DTyuU29mTEo8FDz9
MD5:	B7D40027408388EAB81F82D210AA65D5
SHA1:	5DB9E3A8DF94AA8F22BF891EB30D814832DFA546
SHA-256:	B32B9EF3D22C1BA37A0946F7163D7F7DBE7009761B2C46B910081E50200CF959
SHA-512:	00BDB18884248D15AB8F8864E35F09E62385FA0BDBA830CF29018F28A4860C6C78B12840153634C6DFA4528CAF567E0C44E0B8B513DCA7848B23C8991FF69EED
Malicious:	false
Reputation:	low
Preview:	function getMarketingWells(siteFinityUrl) {. $.ajax({. url: siteFinityUrl,. type: "GET",. dataType: "json",. success: function (data) {. var contentArray = data.value;. var marketingWellIndex = 1;. $.each(contentArray, function (index) {. if (index >= contentArray.length - 3) {. var marketingWellId = "#marketingWell" + marketingWellIndex;. var marketingWellAnchorTag = this.Content;. $(marketingWellId).append(marketingWellAnchorTag);. ++marketingWellIndex;. }. });. $("[id^=marketingWell] > a").attr("target", "_blank");. },. error: function (xhr, status) {. console.log("Could not get marketing wells from Sitefinity");. },. });.}..function doesValueExist(value) {. return value != undefined && value.length > 0;.}..function setMessage(messages) {. var messageValue = new URLSearchParams(location.search).get("message");. if (doesValueExist(messageValue) && messages != undefined) {. $("

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1931
Entropy (8bit):	4.882374837111987
Encrypted:	false
SSDEEP:	48:cXbsrK8keSkWvMrOArTOIee1jfaTK24miele:NzkdfUrDTOITjfY6
MD5:	47988392E1762BBA09063CCD8353FF19
SHA1:	33C80B75D4D3B249176CCFC61DD7718F54386BDC
SHA-256:	BDEDCA9E8B5F5056A6F0D5469CE5849F37518717E47FB5D4D77DE996C4F6506B
SHA-512:	B97D916581FD4676D1B09299BCF63A5E8E27D4B7F3AFD9378A82127CD8300347F3F951A35238836B9D9CD3B1693AC7471785E31C1B30419D112FCEFD7D4E46CC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="39px" height="40px" viewBox="0 0 39 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 3</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-385.000000, -1092.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-3" transform="translate(376.000000, 1083.000000)">.. <g id="Icon/Life-Copy">.. <path d="M25.2074432,32.5253851 C26.9310162,34.2187916 28,36.5762673 28,39.1834175 C28,44.3380752 23.8213243,48.5167508 18.6666667,48.5167508 C13.512009,48.5167508 9.33333333,44.3380752 9.33333333,39.1834175 C9.33333333,34.0287598 13.512009,29.8500842 18.6666667,29.8500842 C20.3669205,29.8500842 21.9609878,30.304723 23.3339322,31.0990644 L45.2293591,9.20363757 C45.4246212,9.00837542 45.7412037,9.00837542 45.9364658,9.20363757 L46.8

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5179
Entropy (8bit):	4.229991818803107
Encrypted:	false
SSDEEP:	96:feEdXdJkgJiqxF4VZVfNfudZgGLZ/KKdIvxD7Q6EiE7NZ85pi1:WEdtygVxF+VfNfugGLBKmIvxXQ6/E7B
MD5:	3BA7BA193B6106B819A845A3EF550F5D
SHA1:	1F1B1E89C9135CE3E34C2687DD78F76F8B16474F
SHA-256:	3549C0777BF7CB50A04299154BD68326F32F1814F826B1CF324F481905502A59
SHA-512:	FFC74B66F8F0E6346CF0C36578CED13545EF4FECB654D446ED310937310BD6FE4F29E21B6FCDE1A0839DC052E267526301E7CE804534F048B602BF24178E64B9
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/icons/car.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="52px" height="42px" viewBox="0 0 52 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-378.000000, -826.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy" transform="translate(376.000000, 819.000000)">.. <g id="Icon/Auto">.. <path d="M21,44.3333333 L21,46.6666667 C21,47.9553311 19.9553311,49 18.6666667,49 L11.6666667,49 C10.3780023,49 9.33333333,47.9553311 9.33333333,46.6666667 L9.33333333,44.3333333 L9.234301,44.3333333 C5.4328609,44.3333333 2.33333333,41.0655132 2.33333333,37.0693208 L2.33333333,28.1341732 C2.33333333,25.4643899 3.28166953,22.9169679 4.95306888,20.971115 C3.83934722,20.7945723 2.98792632,19.8300495 2.98792632,18.6666667 L2.98792632,14 C2.987926

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	979
Entropy (8bit):	5.083726492503765
Encrypted:	false
SSDEEP:	24:2dO6faGKjk8DgNG4gduotTVW7Prl2gPPgZ:cxiGKxDgV83ofl2cgZ
MD5:	74B9201C1AB9E40A05FF1DEA46638FF4
SHA1:	BA2BAB78A2B943F23CCE2001D79D5BD1B3004EF7
SHA-256:	45B114AA9902DF4604172DC50966A7083FA27CFB07D5F46FD7D73C99FEDDDFB2
SHA-512:	CAAE066015FB06ABC6C97E2636B92F346898806DBB6B75C643837C67ED9258951C9862A9DED393DD49C8062E08A1EDA62185A2582BC27AACAF8D0BB78B0F750C
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/header/menu-icons/finance-icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg id="coin" xmlns="http://www.w3.org/2000/svg" width="17.492" height="17.492" viewBox="0 0 17.492 17.492">.. <defs>.. <style>.. .cls-1 {.. fill: #2c2c2c;.. }.. </style>.. </defs>.. <g id="Group_22">.. <g id="Group_21">.. <path id="Path_76" class="cls-1" d="M14.931,2.562A8.746,8.746,0,0,0,2.562,14.931,8.746,8.746,0,0,0,14.931,2.562ZM8.746,16.467a7.721,7.721,0,1,1,7.721-7.721A7.73,7.73,0,0,1,8.746,16.467Z" />.. </g>.. </g>.. <g id="Group_24" transform="translate(6.038 3.293)">.. <g id="Group_23">.. <path id="Path_77" class="cls-1" d="M179.991,101.341h-1.1a1.134,1.134,0,1,1,0-2.268h2.2a.512.512,0,1,0,0-1.025h-1.134V96.913a.512.512,0,1,0-1.025,0v1.134h-.036a2.159,2.159,0,1,0,0,4.318h1.1a1.134,1.134,0,0,1,0,2.269h-2.2a.512.512,0,0,0,0,1.025h1.134v1.134a.512.512,0,1,0,1.025,0V105.66h.036a2.159,2.159,0,0,0,0-4.318Z" transform="translate(-176.734 -96.401)" />.. </g>.. </g>..</svg>

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (9659)
Category:	downloaded
Size (bytes):	370688
Entropy (8bit):	5.136088088336723
Encrypted:	false
SSDEEP:	6144:/rF2p7CABEDEGEZBWEFEhZOENETEwE3RBCzE4jE2:/rF2p7CAfBaZVRuF
MD5:	6204F6FB4BC28C2829FF4D67C9690D38
SHA1:	BD8B3373CE58EA02497AED43DDE1632BA00E05E0
SHA-256:	60F8CEA5F95236BA19C5C66A36AF44D4818BF117264E528692CD29488B15500D
SHA-512:	8648D0B8281C14906BAD31D748362BBD938DF43062194242B48970FD41388D5B43E3389C86BEE81F5A200008A1E9383679884D789AC9D3763D321D05A1B27C50
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/ResourcePackages/IFBIRedesign/assets/dist/main.css?v=638659012120000000
Preview:	/****************************************************. Embedded locally for demo purpose only.****************************************************/.@font-face {. font-family: "DIN regular";. font-display: fallback;. src: url("../Fonts/DIN-family/bc176270-17fa-4c78-a343-9fe52824e501.woff") format("woff");. font-weight: 200;. font-style: normal;.}..body {. font-family: 'DIN regular', 'Roboto', Helvetica, arial !important;. color: #222223 !important;. background-color: #fff;. overflow-y: scroll;. -webkit-overflow-scrolling: touch;.}../**************************************************. Ashish: Farmhand Override.******************************************************/..text-xl {. font-size: 36px;. line-height: 36px;. margin-bottom: -1px;.}...no-list-style{. list-style:none;.}..no-list-style li a{. color: #222223;.}...list-unstyled a {. text-decoration: none;.}...list-unstyled a:hover, .list-unstyled a:focus {. text-decoration: under

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41178)
Category:	downloaded
Size (bytes):	41181
Entropy (8bit):	5.506570824151046
Encrypted:	false
SSDEEP:	768:j21xCdwVi9Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8gdEN:ib3kr8V8vShi98Iiph3I4C
MD5:	5B7F3D5D52BE0A385D899FF0FC459E1B
SHA1:	2FE6859D9A54A610918DB03FDB0173214BD46A50
SHA-256:	E6B8A90A2870483ACE67380FF4A64B39BFECB7952A432393470D76A6614FC62C
SHA-512:	9FCA9353E409DA95843FEB2659036C4F8198AC8B4A3C3C1237A57E8152E76C67864B42669D70ED9DEF2DAD83C177732EF635DA68AF1601F60893BEDBB75D3CD2
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.old.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2539)
Category:	dropped
Size (bytes):	227526
Entropy (8bit):	5.538671530089171
Encrypted:	false
SSDEEP:	3072:7M3a4IwyIJ/r3a+I0HXGWlwvOfyk3pB/OgC6xc+E3OPoKt1Cc9n2i:I9yIJD3ayG0Us/NXxc+E3OPoKKcv
MD5:	C71132F584FBDD72CC07B7B02FA55F3E
SHA1:	CBB6ACF05A2BA8E8785BA9CD5C329D2213188364
SHA-256:	CC40700CE3C70D148D9C50DA0105450390596AB2E77D261F2B89EEAA770F1AC2
SHA-512:	616276E55138622A6EF324B08031D5D9281372BA3981D9BD31308105FFE04045F0BA6C51E8E3EDBEA2C954200D823A8C1A2873F8D80D9F119EF4066A3B2C5FD8
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"13",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__smm","vtp_setDefaultValue":false,"vtp_input":["macro",1],"vtp_map":["list",["map","key","oam-qag.infarmbureau.com","value","G-V7PP9GLL32"],["map","key","oam-dev.infarmbureau.com","value","G-53P6B6MDRL"],["map","key","localhost","value","G-53P6B6MDRL"],["map","key","oam.infarmbureau.com","value","G-ZM31Q2H51M"],["map","key","oam-dev.eaststreetins.com","value","G-C2YQ18J3M1"],["map","key","oam-qag.eaststreetins.com","value","G-NX6WFY7ENF"],["map","key","oam.eaststreetins.com","value","G-L6DCKC1Q3H"],["map","key","oam.unitedhomelife.com","value","G-GYBCJ2309S"],["map","key","oam-dev.unitedhomelife.com","value","G-DWFFV96E0H"],["map","key","oam-qag.unitedhomelife.com","value","G-42V84XWXY7"]]},{"function":"__v","vtp_d

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	5226787
Entropy (8bit):	5.645344697360603
Encrypted:	false
SSDEEP:	49152:19j+LJHsyuOBhbQYvXXbgJjzzuEV6GfSze+O6Q62E+/ttB5UOjvWmSbig+01ATLK:rjQBVkvyZ/wSz30aH
MD5:	95BC98E414CE82C4637CFB11D42A7D37
SHA1:	2EC0326084F43987B1D91A6041193D2AF7FF380E
SHA-256:	94108C3B94BB9B0FB1D7E658F23CF509A8BC260CA3F9E5FF6683521881E07311
SHA-512:	5914D732B3F7FE75AEE56E48BB95F0A319B06E980C7F0AE4C3DAA7B5C12612FC5941158CA574F6C9E5B1350AA9026035206315439E7B9B80F62C9D164E477306
Malicious:	false
Reputation:	low
URL:	https://oam.infarmbureau.com/main.37a156e426df75ac.js
Preview:	(self.webpackChunkOAMClient=self.webpackChunkOAMClient\|\|[]).push([[179],{2676:(ze,be,B)=>{"use strict";function R(t){return"function"==typeof t}function g(t){const e=t(n=>{Error.call(n),n.stack=(new Error).stack});return e.prototype=Object.create(Error.prototype),e.prototype.constructor=e,e}const T=g(t=>function(e){t(this),this.message=e?`${e.length} errors occurred during unsubscription:\n${e.map((n,o)=>`${o+1}) ${n.toString()}`).join("\n ")}`:"",this.name="UnsubscriptionError",this.errors=e});function P(t,i){if(t){const e=t.indexOf(i);0<=e&&t.splice(e,1)}}class x{constructor(i){this.initialTeardown=i,this.closed=!1,this._parentage=null,this._finalizers=null}unsubscribe(){let i;if(!this.closed){this.closed=!0;const{_parentage:e}=this;if(e)if(this._parentage=null,Array.isArray(e))for(const r of e)r.remove(this);else e.remove(this);const{initialTeardown:n}=this;if(R(n))try{n()}catch(r){i=r instanceof T?r.errors:[r]}const{_finalizers:o}=this;if(o){this._finalizers=null;for(const r of o)

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F?
Preview:	<html></html>

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	502
Entropy (8bit):	4.6800250026684775
Encrypted:	false
SSDEEP:	6:vknYJq9KBeQCULh/t2GnYgGW8NwD9MiJbwX7B79i8eJGezXXhCvNiLkmX7B79S6i:rJq2dNHYDzX0e7BU8exhcNiv7B86TNiL
MD5:	A951B3583BBC0E5914195CF1879292BA
SHA1:	2EF8B745A6D5EA33EEA1B4807DDDE5A6F2561B75
SHA-256:	6259A61368422A1C0BE85628FE4CC9AE22461B33D99E456EF3CDAB72B0B6B59B
SHA-512:	6C48EAE7CF8D70401253AAA307F163609AE788822FFC5923BCB7C1DD7538B5A6B696FBDDC94A259B32449E6FD6E65CAADBDFD6BF71FE723BFD89DF7CEFC1866F
Malicious:	false
Reputation:	low
URL:	https://oam.infarmbureau.com/manifest.json
Preview:	{. "name": "Indiana Farm Bureau Insurance Online Account Manager",. "short_name": "INFB Insurance",. "theme_color": "#a41604",. "background_color": "#eaeaea",. "display": "standalone",. "scope": "/",. "start_url": "/mobile",. "icons": [. {. "src": "assets/images/pwa/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "assets/images/pwa/android-chrome-512x512.png",. "sizes": "512x512",. "type": "image/png". }. ].}.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2687
Entropy (8bit):	4.69656787291195
Encrypted:	false
SSDEEP:	48:cqzgleSLMzjTEvTjVfZ6cR1acb8S8L/M1Ny6VhNld9i4FbwaJgB:XgldozXELjJZDr8L/MZNlXS
MD5:	91C8A817C7D550C1FF978356F09CF425
SHA1:	9C67EE2489D68C16E4449C90535C9A8D7F267CF9
SHA-256:	0E3A3E5C24B3B0C475A1FC0CE94EB77B7C6B5A8439625B64315616DC14FA85D8
SHA-512:	432528F487A2A5BC3B25E054B049FF9052C0F61B9AB71913F722F2FFDFAA9A2AE140A3150B8EBBB240637AC975ADA47E86114A2C5E42DD8E7FCEF9EEB4F85504
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/life-insurance-matters/home.svg?sfvrsn=51e924ba_2
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="54px" viewBox="0 0 56 54" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 2</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-693.000000, -821.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-2" transform="translate(693.000000, 819.000000)">.. <g id="Icon/Home">.. <g>.. <path d="M47.8330134,31.5001336 C48.4770082,31.5001336 48.9996649,32.0216305 48.9996649,32.6667934 L48.9996649,54.8333395 C48.9996649,55.4785031 48.4770082,56 47.8330134,56 L33.8331563,56 C33.187999,56 32.6665047,55.4785031 32.6665047,54.8333395 L32.6665047,39.6667553 L23.3332666,39.6667553 L23.3332666,54.8333395 C23.3332666,55.4785031 22.8106036,56 22.1666087,56 L8.16675797,56 C7.52159437,56 7.00010004,55.4785031 7.00010

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1931
Entropy (8bit):	4.882374837111987
Encrypted:	false
SSDEEP:	48:cXbsrK8keSkWvMrOArTOIee1jfaTK24miele:NzkdfUrDTOITjfY6
MD5:	47988392E1762BBA09063CCD8353FF19
SHA1:	33C80B75D4D3B249176CCFC61DD7718F54386BDC
SHA-256:	BDEDCA9E8B5F5056A6F0D5469CE5849F37518717E47FB5D4D77DE996C4F6506B
SHA-512:	B97D916581FD4676D1B09299BCF63A5E8E27D4B7F3AFD9378A82127CD8300347F3F951A35238836B9D9CD3B1693AC7471785E31C1B30419D112FCEFD7D4E46CC
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/life-insurance-matters/key.svg?sfvrsn=54e924ba_2
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="39px" height="40px" viewBox="0 0 39 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 3</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-385.000000, -1092.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-3" transform="translate(376.000000, 1083.000000)">.. <g id="Icon/Life-Copy">.. <path d="M25.2074432,32.5253851 C26.9310162,34.2187916 28,36.5762673 28,39.1834175 C28,44.3380752 23.8213243,48.5167508 18.6666667,48.5167508 C13.512009,48.5167508 9.33333333,44.3380752 9.33333333,39.1834175 C9.33333333,34.0287598 13.512009,29.8500842 18.6666667,29.8500842 C20.3669205,29.8500842 21.9609878,30.304723 23.3339322,31.0990644 L45.2293591,9.20363757 C45.4246212,9.00837542 45.7412037,9.00837542 45.9364658,9.20363757 L46.8

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1200
Entropy (8bit):	5.158667864287214
Encrypted:	false
SSDEEP:	24:2dVB5AALfshNzUDnUFgzvEs4jneDgpt2oKrx:cV/AQfs46grF+EgnNIx
MD5:	F2D04A2CECE6CD872B7D9867B4560A3F
SHA1:	80F9569766CF75E2287958BFF954B96440E16D5D
SHA-256:	81C32CBFDE32750141BCA39DF4C7009F2E116A1C2B771CCC8369F4DA78FEB067
SHA-512:	0F00BE0953A880AF8CE92FE63FDC7D5110B875A6388692A2998D9C72141DE552F2E16CF2FD1B23FCEB7C7C06F4ECE749DAD7B3D3E88DDF70B25C5D2EDC2A9A8B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">.. <g>.. <g>.. <path d="M352,0H160C71.648,0,0,71.648,0,160v192c0,88.352,71.648,160,160,160h192c88.352,0,160-71.648,160-160V160.....C512,71.648,440.352,0,352,0z M464,352c0,61.76-50.24,112-112,112H160c-61.76,0-112-50.24-112-112V160C48,98.24,98.24,48,160,48.....h192c61.76,0,112,50.24,112,112V352z" />.. </g>.. </g>.. <g>.. <g>.. <path d="M256,128c-70.688,0-128,57.312-128,128s57.312,128,128,128s128-57.312,128-128S326.688,128,256,128z M256,336.....c-44.096,0-80-35.904-80-80c0-44.128,35.904-80,80-80s80,35.872,80,80C336,300.096,300.096,336,256,336z" />.. </g>.. </g>.. <g>.. <g>.. <circle cx="393.6" cy="118.4" r="1

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1926
Entropy (8bit):	4.874813349775333
Encrypted:	false
SSDEEP:	48:cXbsrK8keSkWvMrOArTOIee1jfaTK24mied:NzkdfUrDTOITjfYT
MD5:	BF06C9DBC9FC4310B3D8D54C0205D982
SHA1:	778D41141B511F29781A41694DC573C5FEE0F399
SHA-256:	53277A2C55625E1E4E419453F8A75A8939CB7C04F5F771C2AA40C7132038C1A2
SHA-512:	892B56E0F0E9836AAAE9A940942AB6CD37EFE3196A8D33B6B866A658320EDD72975033C2C96A401741BEB45DE2372E59421007BAB6A9F0BF489134FE6123B765
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="39px" height="40px" viewBox="0 0 39 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 3</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-385.000000, -1092.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-3" transform="translate(376.000000, 1083.000000)">.. <g id="Icon/Life-Copy">.. <path d="M25.2074432,32.5253851 C26.9310162,34.2187916 28,36.5762673 28,39.1834175 C28,44.3380752 23.8213243,48.5167508 18.6666667,48.5167508 C13.512009,48.5167508 9.33333333,44.3380752 9.33333333,39.1834175 C9.33333333,34.0287598 13.512009,29.8500842 18.6666667,29.8500842 C20.3669205,29.8500842 21.9609878,30.304723 23.3339322,31.0990644 L45.2293591,9.20363757 C45.4246212,9.00837542 45.7412037,9.00837542 45.9364658,9.20363757 L46.8

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	121453
Entropy (8bit):	5.5342244810545225
Encrypted:	false
SSDEEP:	3072:XG4/fEBo6Ix1o0Yaq9MHXrgcIcjVmpIE5v+7hH0MOTonmrdec:XG0p1o0YaBH7gcIcjVmpIE5v+7hH0MOb
MD5:	E7010502041E061D1C9EAFF784779EE5
SHA1:	A3ACE234630FD0BAF2DB3960EDB6773E4E79E1A7
SHA-256:	32485A2A560041182E10794B23CF8326D43AE73B6A79C4CA40875740581699CD
SHA-512:	94A6248371843733DE0656C5D322681C734E2662DAA2AA4FA952A56FF7799A99231DE631564EC4F5089CE46BD0541AB4D41B855E3747F7D8AAE8671A5CBD8401
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var pl=function(p){g.Dq(p,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.QL()).toString(36));return p},Cl=function(p,C,V){Array.isArray(V)\|\|(V=[String(V)]);.g.zQy(p.S,C,V)},x88=function(p){if(p instanceof g.XU)return p;.if(typeof p.cI=="function")return p.cI(!1);if(g.ea(p)){var C=0,V=new g.XU;V.next=function(){for(;;){if(C>=p.length)return g.EU;if(C in p)return g.dx(p[C++]);C++}};.return V}throw Error("Not implemented");},Yd1=function(p,C,V){if(g.ea(p))g.lr(p,C,V);.else for(p=x88(p);;){var N=p.next();if(N.done)break;C.call(V,N.value,void 0,p)}},zoy=function(p,C){var V=[];.Yd1(C,function(N){try{var H=g.q8.prototype.C.call(this,N,!0)}catch(X){if(X=="Storage: Invalid value was encountered")return;throw X;}H===void 0?V.push(N):g.rU9(H)&&V.push(N)},p);.return V},Ror=function(p,C){zoy(p,C).forEach(function(V){g.q8.prototype.remove.call(this,V)},p)},nFr=function(p){if(p.a$){if(p.a$.locationOverri

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17752)
Category:	downloaded
Size (bytes):	41866
Entropy (8bit):	5.41116118786766
Encrypted:	false
SSDEEP:	384:JPqYVPqYvc3IHfdreJTLDnMy7b0C4JrdYYxLrE14RjI1IwJSsZjP:JDVDvc3IHfdreJTLD/0CcxLro4i1rP
MD5:	2BF26082B973A7020B53DDE351FF754F
SHA1:	EAA90B786E245F1754B08394B2DEDA8132D7AEE6
SHA-256:	4B415C49FD30D7AF7471731C1F69FCD16C02200AABA177AF2F60595E0C554B2D
SHA-512:	2FFBA3797010747DD6FDD7DF5A19E1F1D4D42901B053BA70113A522A9427061AF89F57F5DFDE6E13F67367D5BA9F9DC476EB2C75DB70424E108605EC2F92C5C1
Malicious:	false
Reputation:	low
URL:	https://oam.infarmbureau.com/
Preview:	.<html data-critters-container>. <head>. <base href="/">. <meta charset="utf-8">. <title>OAM</title>. <meta name="description" content>. <meta name="viewport" content="width=device-width, initial-scale=1">. <link rel="stylesheet" href="//cdn.infarmbureau.com/farmhand/V1/consumer/theme.css">. <style type="text/css">@font-face{font-family:'Material Icons';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2) format('woff2');}@font-face{font-family:'Material Icons Outlined';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/materialiconsoutlined/v109/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUcel5euIg.woff2) format('woff2');}.material-icons{font-family:'Material Icons';font-weight:normal;font-style:normal;font-size:24px;line-height:1;letter-spacing:normal;text-transform:none;display:inline-block;white-space:nowrap;word-wrap:normal;direction:ltr;-webkit-font-feature-settings:'li

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	downloaded
Size (bytes):	337918
Entropy (8bit):	5.579146119644203
Encrypted:	false
SSDEEP:	6144:p4jZ9yIJDtxaf6GaUs6hNsx2wE3OPoKOUI172jAYqmjo:ijNJZ4fEANsAe+17vmE
MD5:	B7A1FEABE3E0123375B5D9787412C8B2
SHA1:	A04341FF020CA1AC1E8ACBE6DA97999B4A72B1B5
SHA-256:	A986B68A02BC398EB040545D476891F662C944A4B406E96AD0372A539768B00E
SHA-512:	4F77978843A248B290B018EAE479D2225EE218CECEB29851B01E5F9063E89342FB214BB26C7EB69417C6C5D8A6E4AFF0646C602210FE316EBA79F336DA1351DB
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-ZM31Q2H51M&l=dataLayer&cx=c&gtm=45He5190v9116062240za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ip_mark","priority":13,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":8},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vt

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9247
Entropy (8bit):	4.138713130030993
Encrypted:	false
SSDEEP:	192:yidv7YwnNGfRa+ll7XQ4IhLL+FHF4jE3khHsVW0Wh5w24/OFHWBfsjhYjf:VSLXQBhLL+GZh5w2NOiSjf
MD5:	4688535D818B3C4C4CF29C83A384C6D6
SHA1:	6569CDC41ABAA59E75106A42800DE6CFF5FA3434
SHA-256:	E9ADA5170E52929DB8489E53D32DBFDF3A9BE9D1EEA13343D582488ED6A5A994
SHA-512:	E55486674034C2E8FBFC6CAFFD024CCCB24E9D936824E7D1FE3868CE032FDF467F57E9AACD025A0422F91B37FED8649CFB539D1105509BD6231B6B3D3636E551
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/life-insurance-matters/farm.svg?sfvrsn=50e924ba_2
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="56px" viewBox="0 0 56 56" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 4</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-693.000000, -1083.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-4" transform="translate(693.000000, 1083.000000)">.. <g id="Icon/Farm-Crop">.. <path d="M43.1666667,14 C43.8109989,14 44.3333333,14.5223345 44.3333333,15.1666667 L44.3333333,36.1666667 C44.3333333,36.8109989 43.8109989,37.3333333 43.1666667,37.3333333 C42.5223345,37.3333333 42,36.8109989 42,36.1666667 L42,15.1666667 C42,14.5223345 42.5223345,14 43.1666667,14 Z M43.1666667,39.6666667 C43.8109989,39.6666667 44.3333333,40.1890011 44.3333333,40.8333333 L44.3333333,54.8333333 C44.3333333,55.4776655 43.8109989,56 4

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1287
Entropy (8bit):	5.086862946382653
Encrypted:	false
SSDEEP:	24:2d/A9jgkZc9tKG4cMIiN3npSWFtH+WKseJ3UL8MtMsH:c6jG9nRuNLtHpe3UAMtM+
MD5:	AD929C1E2A82624F270D71F74717A21D
SHA1:	8361CC33AB7B465A339DCFBD0CAC36D32CAFF6E6
SHA-256:	152DDA22E7280D74D86BEB81735DE2A38E38AE52F425F4C90A276A8F879B473C
SHA-512:	FF2A7741D45810464B27345FBA13DFC701661AEBFEDC6390BF9146B3CD29FCA54A98E3A58ECC3480846AB7980C3538BFC84969733989A05BF65306491BB2F350
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/header/menu-icons/business-icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="15.634" viewBox="0 0 17.867 15.634">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(-195 175.667)">.. <g id="Needs-Assessment---Intro" transform="translate(195 -175.667)">.. <g id="CTA_Item-Copy-5" transform="translate(0 0)">.. <g id="Icon_Business" transform="translate(0 0)">.. <path id="Combined-Shape" class="cls-1" d="M6.328,6.056H1.117a.372.372,0,0,0-.372.372V9.406A2.606,2.606,0,0,0,3.35,12.011H14.517a2.606,2.606,0,0,0,2.606-2.606V6.428a.372.372,0,0,0-.372-.372ZM.744,11.512V16.85a.372.372,0,0,0,.372.372H16.75a.372.372,0,0,0,.372-.372V11.512a3.344,3.344,0,0,1-2.606,1.244H3.35A3.344,3.344,0,0,1,.744,11.512ZM17.867,9.406V16.85a1.118,1.118,0,0,1-1.117,1.117H1.117A1.118,1.118,0,0,1,0,16.85V6.056a.744.744,0,0,1,.744-.744H5.956V3.078A.745.745,0,0,1,6.7,2.333h4.467a.745.7

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	890
Entropy (8bit):	6.0482049379392055
Encrypted:	false
SSDEEP:	24:CVvG5sPDYrJwNaiqpmtpZIKzjPXLKEMrXlEfl9:wG5HrJ1hmt3d/7KEKGT
MD5:	C1144663ED14FB33F90F6F3D0AC19064
SHA1:	8C8F35E19A69DE32D46FA90768580C7EBF927081
SHA-256:	F95F6AE6B1B7D778AA48166A659EA5437B62189F088A943A1EDB0F90F5CF639F
SHA-512:	11BDB2406316E09594D05342105A7AF4A88E664F95066EDE90308477EB9A540CFBBADFEB8640A5B77646CFD2C6DCBE78A61E34E8BD0E88F3ED283E2CBBE9B571
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/ResourcePackages/IFBIRedesign/favicon-16x16.png
Preview:	.PNG........IHDR.............(-.S....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE......................................................................................................................................../".1$.1$.%....................(..1$.2%u...............0#.2$,..............,...2%.1$.1$./"..................c...2$.1$.1$.%...........1$......O...XtRNS...!.#...........b..................B<........Du..................x...X...!%....'..4....bKGDZ........tIME.........[.....IDAT..c` .021....+++.;...'.7........10..D....8..g....#$...4..lD...............V........,...1...i...E...5H..-.JD..}d..#..'g..WW7w.O/o3..._?..........0 #.9........ C.-...%tEXtdate:create.2018-12-20T20:28:01+01:00......%tEXtdate:modify.2018-12-20T20:28:01+01:00.=J...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2689)
Category:	downloaded
Size (bytes):	4855
Entropy (8bit):	5.810027888616248
Encrypted:	false
SSDEEP:	96:BCt3dA05uKG3dA0wzGxHaL8c79OjTcxJDvq1GerTJeEaUmlSEFuC1B:WR5fkRwSx6L8c7yTUvI3dBmZX1B
MD5:	9E2BE93CEE0BB55E1B059215A5DE57C5
SHA1:	EFC6E3D782431AA315C7AA135F7B14BD47F2705F
SHA-256:	9BCBD4515BF4248C6B0DF3461928C808C49679D2916FCB6A9E66710FDD9BFA1B
SHA-512:	7BE093178AB697BD2C921FF2D60F7ABBD475478AF32A7722CFB02ACFDD40558320C13E8527E2265F68D2C0CCAAD84FD4076AF5EAA074E62A9304A2C38151ED6F
Malicious:	false
Reputation:	low
URL:	https://cdn.aws.infarmbureau.com/b2c/oam/css/ifbi.css
Preview:	.grey-light {. height: 81px;. border-bottom: 5px solid #7b7d7c;.}...uhl-button-primary {. background: #b40e45;. color: #fff;.}...uhl-branding {. -webkit-tap-highlight-color: transparent;. font-family: 'DIN regular', -apple-system, Roboto, Helvetica, arial;. font-size: 16px;. line-height: 1.42857;. box-sizing: border-box;. background-color: transparent;. color: #222223;. text-decoration: none;. transition: all 0.1s ease 0s;. background-image: url(https://cdn.infarmbureau.com/uhl/united-home-life-logo.png),. url(https://cdn.infarmbureau.com/uhl/united-farm-family-logo.png);. background-position: left, right;. background-repeat: no-repeat, no-repeat;. background-size: 82px 48px, 113px 48px;. text-indent: -10000px;. overflow: hidden;. width: 203px;. margin: 12px 0px 0px 15px;. float: left;. height: 55px;.}...eastst-branding {. font-family: 'DIN regular', -apple-system, Roboto, Helvetica, arial;. font-size: 16px;. line-height: 1.42857;. box-sizing: border-box;.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.290277891359698
Encrypted:	false
SSDEEP:	24:E1MCXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1MCXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	5A13A6ACEA2053F0803A679994BF95A4
SHA1:	8B085792E5A6B6496CCFEE8939B262097791A9C5
SHA-256:	5039D00D6C216E14B323E0B0934940FC29123FDB861750AC29F95D46C24D60EE
SHA-512:	9162E9DCB913B47C188F445C5034BDA3232B2E6AD5E839F0ADFAE1CFE255E4F14AF1AB8CDA5301D58ABBBD8008824270A46D88F8BA8B71D6E9C6B292F822DD9A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33849), with no line terminators
Category:	dropped
Size (bytes):	33849
Entropy (8bit):	5.399453682658507
Encrypted:	false
SSDEEP:	768:Y/eMRCfjJgWiqB1Ke9XRz0AsSJ6aasVZTQikMf3IO+GT8ZOT/gresp8dJSbnccKU:EvEgW9tSTYM
MD5:	3903B81D84AC1DFEE901D5D9A59AD519
SHA1:	6EFBDDC25E43209013043030F296E9A97791FBCE
SHA-256:	031C9479B9913AAA65BB89E7C9516CA0EBB4598B5D6107EFF29C2641DB817409
SHA-512:	8E0F250B416FC7F06AE67B790BFDC98AF9F403F7CB0EBE1522387B5E60F0D53580FFD5787C32A3130C923F03FF2C7B6D9E5177EF25A24747A064AA3E9A63874C
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkOAMClient=self.webpackChunkOAMClient\|\|[]).push([[429],{5321:(ie,Ee,de)=>{de(8332)},8332:()=>{!function(e){const n=e.performance;function i(L){n&&n.mark&&n.mark(L)}function o(L,T){n&&n.measure&&n.measure(L,T)}i("Zone");const c=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function a(L){return c+L}const y=!0===e[a("forceDuplicateZoneCheck")];if(e.Zone){if(y\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}let d=(()=>{class L{static#e=this.__symbol__=a;static assertZonePatched(){if(e.Promise!==oe.ZoneAwarePromise)throw new Error("Zone.js has detected that ZoneAwarePromise `(window\|global).Promise` has been overwritten.\nMost likely cause is that a Promise polyfill has been loaded after Zone.js (Polyfilling Promise api is not necessary when zone.js is loaded. If you must load one, do so before loading zone.js.)")}static get root(){let t=L.current;for(;t.parent;)t=t.parent;return t}static get current(){return U.zone}stati

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	dropped
Size (bytes):	337901
Entropy (8bit):	5.579071196350585
Encrypted:	false
SSDEEP:	6144:p4jZ9yIJDtxa9rGaUs6hNsx2wE3OPoKOUI172jAYqmjo:ijNJZ499ANsAe+17vmE
MD5:	4F2B88ADDEEB83D4264CBE4A9980E828
SHA1:	9ED637DFE1CB7F718B4E5618A586A54E0E3E81E0
SHA-256:	BC7A5235D4F36D58906E5651BDD7572108E868E55A2E704F1A1142B24F1451D8
SHA-512:	75CA1E5D5FB0370DD735D51089FED156A9A87CA254BCF66F8AF9D95CD67D4B81381212A3131940F619E2B9FB46F438ED62A4BF7E5A150AB10188E6626A42B5EE
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ip_mark","priority":13,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":8},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vt

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	339582
Entropy (8bit):	5.620224928082496
Encrypted:	false
SSDEEP:	3072:avUSCmK9i0H108liQNie0rw5RMTu7Vj6GvBoNJyMf:a8SStH108lNNt0rSRMy7VjXvu6+
MD5:	9965EC042D533FB56BAFC3BEA2135437
SHA1:	6F8297E0E9B924B271F511AC2039D0A9C2788904
SHA-256:	13A9629223335969B254D033D51FB9D5115DB4F22E2163488C6FCC2E7E6EBD39
SHA-512:	E37649EF89A72B0487711AEE18D3D0B02B843C63722B72D2C0DE5D561835BA5D9E2EAC6ACA92CDF9707918C202DF6AD5CC17BF8745DEAB5B32B3406C7F674CEC
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=da(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	31192
Entropy (8bit):	4.096047235122194
Encrypted:	false
SSDEEP:	384:zo/jZ5swttsVuG2ehN156DnX7oNrkxoZFLzH4cAy+v1SGp5q0Lzj7Mxmz97nY80:zytz7G2ejODLhCLzI19zjg230
MD5:	D9015052472B84C2BB9F1902808297AA
SHA1:	9F9A4A24008EF5FFAF8C9E686F323832634FC5DC
SHA-256:	498F8F435A47B3E980272F8588AED4DBFB8BD7FF963E469E3D4FA1B8C7455BCC
SHA-512:	9C32C367AB9C2E83F2B96C7D7FF52A89857CDA2F9373B334A71A50CDD449DDCD44422F2205150BA98B3317B467E1DA98ED9E574C45DDFF73A6103CD7B3BB33BA
Malicious:	false
Reputation:	low
URL:	https://cdn.infarmbureau.com/farmhand/V1/assets/ifbi-horizontal.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 17.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="484.211px" height="71.053px" viewBox="183.053 234.947 484.211 71.053".. enable-background="new 183.053 234.947 484.211 71.053" xml:space="preserve">.<g>..<path fill="#EE3124" d="M243.403,273.032c0,0-1.348,7.014-3.574,14.927c-2.033,8.739-10.304,8.399-10.304,8.399h-13.666...c0,0,1.145-6.098,3.574-14.93c2.632-8.646,9.67-8.396,9.67-8.396H243.403z"/>..<path stroke="#000000" stroke-width="0.9863" d="M205.109,249.225h43.854l-5.247,20.899h-14.9c0,0-10.519-0.608-12.65,9.436...c-2.438,9.533-4.03,15.601-4.03,15.601h-18.742L205.109,249.225z"/>..<path stroke="#000000" stroke-width="0.9863" d="M252.847,249.154h24.543c0,0,9.512-0.527,9.324

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	990
Entropy (8bit):	5.255760682068363
Encrypted:	false
SSDEEP:	24:YILv34sTL3PGeSq5eq5J1DdIbhW3iQrCI7G3TI3rSDKI7NLS:YILvIsTLGeSq5eq5JCKcTwSDw
MD5:	2FB8D6DF2601ABE9888377168C155CCD
SHA1:	C3F155A02E024A49B941C9BE370181DDB040B33D
SHA-256:	529E5D168A02C54D21ECF8131BC7CABE505066BCFAE1D911159D522ED5FF5ED9
SHA-512:	6E378E681D31D269F19E6687D93C8AFBA0A8000491C2BF869CA3F29A6DE822863ADE258766C8EF0B2BE98B4FFD85295A0CE0592498FC76798612D35697AA5EA2
Malicious:	false
Reputation:	low
URL:	"https://www.infarmbureau.com/api/shared-content-blocks/contentitems?$filter=Tags/any(t:t%20eq%203e234c5e-3205-6b8a-9f2e-ff03000bf66e)%20and%20Category/any(c:c%20eq%20dd1d4c5e-3205-6b8a-9f2e-ff03000bf66e)&$select=Title,Content"
Preview:	{"@odata.context":"https://www.infarmbureau.com/api/shared-content-blocks/$metadata#contentitems(Title,Content)","value":[{"Title":"2010 Member Deals","Content":"<a href=\"https://www.infbhealthplans.com/\" target=\"_blank\"><img src=\"https://www.infarmbureau.com/images/default-album/oam_oct2020_600x312.jpg?sfvrsn=e803aba_0\" data-displaymode=\"Original\" alt=\"OAM_Oct2020_600x312\" title=\"OAM_Oct2020_600x312\" style=\"vertical-align: middle;\" class=\"img-responsive\" /></a><br />"},{"Title":"2108 Claims","Content":"<img src=\"https://www.infarmbureau.com/images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1\" alt=\"Claims\" class=\"img-responsive\" sf-size=\"100\" />"},{"Title":"2208 LIAM","Content":"<a target=\"_blank\" href=\"https://www.infarmbureau.com/life?c=hereforyou\"><img src=\"https://www.infarmbureau.com/images/life-insurance-matters/life-insurance.jpg?sfvrsn=69793dba_1\" alt=\"life insurance\" class=\"img-responsive\" sf-size=\"100\" /></a>\n"}]}

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.982750422851284
Encrypted:	false
SSDEEP:	3:bugNi3GZNdvF1MK2A7QpDww1rY:buAi3ovdwDww1M
MD5:	EA9F973DF2A4809B7A62E859F3EEC865
SHA1:	8A24975882005C5F334BD4DB15231B5BB00C5DAB
SHA-256:	69981D1CBA9AF97CDF5E24804C122E91740AFA85037C900E8681C3A5DD64A057
SHA-512:	F2935137E08154E081E59898A068047058F2FE8F636CAA9C4E44A059ADDA535D03AE0F3A46FFF689B5EDA1D95A394BC7B60991EA80889AE5CFD5863E8DCDD1BF
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmeaqlG0GJEdBIFDT0opfYSBQ1lIZnq?alt=proto
Preview:	CjsKEQ09KKX2GgQICRgBGgQIVhgCCiYNZSGZ6hoECEsYAioZCApSFQoLIUAkIyouLV8/JiUQARj/////Dw==

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1003
Entropy (8bit):	5.14468830667988
Encrypted:	false
SSDEEP:	12:TMHd/AboEiSVEKc9yn/kOdNVtdhdNNG4crlOl/I16W47jUYNFs/dA597mxNCHPz1:2d/AbakZc9NCPzG4cqW6JMUMwHPzIT4
MD5:	BD1FE798BFB2E23D0EB5CB66F0A6B28D
SHA1:	EEEEC997824CE0293CF7968EEF3D3B4D0C3A3757
SHA-256:	1B1BCE381732C7D2B74EBFAEE02013A6C7F5E9DA3F07128D0865A8E688ACF161
SHA-512:	30CADA1FBE1BCFB2044B6FB11FF6D999FCCD6DEEB8BDE886C8D54F38F1FF15355EF4BBE123FC289CE8FA055D7EE287BB1499C41CD1DBC3BA5D566626F6553523
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/header/menu-icons/renters-icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="18.277" viewBox="0 0 17.867 18.277">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(-0.333 -0.057)">.. <g id="Needs-Assessment---Intro" transform="translate(0.333 0.057)">.. <g id="CTA_Item-Copy-3" transform="translate(0 0)">.. <g id="Icon_Life-Copy" transform="translate(0 0)">.. <path id="Combined-Shape" class="cls-1" d="M16.686,19.927a4.313,4.313,0,1,1-.868-.661L25.959,9.125a.232.232,0,0,1,.328,0l.437.437a.232.232,0,0,1,0,.328l-2.017,2.017,2.426,2.426a.232.232,0,0,1,0,.328L26.7,15.1a.232.232,0,0,1-.328,0L23.942,12.67l-.876.876,1.365,1.365a.232.232,0,0,1,0,.328l-.437.437a.232.232,0,0,1-.328,0L22.3,14.311Zm-3.03,6.326a3.242,3.242,0,1,0-3.242-3.242A3.242,3.242,0,0,0,13.656,26.253Z" transform="translate(-9.333 -9.057)" />.. </g>.. </g>.. </g>.. </g>..</s

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1204
Entropy (8bit):	5.146289402157772
Encrypted:	false
SSDEEP:	24:2dVB5AALfshNz1UfEKBspac/2sUbDRTM6jLqULYMT:cV/AQfspORBzcuDPRTdcQ
MD5:	59A4C185A3E6549751EC7C0256DC11A4
SHA1:	77A6C5CF4167770ADC208307AF989EEEBE9DFC65
SHA-256:	720E49E890B2F552F29CC56998A566FBF9871B498155146EC3E428C575B228E2
SHA-512:	75E6B7B61B05114C9CD4C6234B776F4BB2886206A0A1845C6EF428ABB60CC07FFE1F62ED4B0C65B79D89D46D0DE79B25C76ECFB1A11807F6474FE29882BCCE13
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">.. <g>.. <g>.. <path d="M490.24,113.92c-13.888-24.704-28.96-29.248-59.648-30.976C399.936,80.864,322.848,80,256.064,80.....c-66.912,0-144.032,0.864-174.656,2.912c-30.624,1.76-45.728,6.272-59.744,31.008C7.36,138.592,0,181.088,0,255.904.....C0,255.968,0,256,0,256c0,0.064,0,0.096,0,0.096v0.064c0,74.496,7.36,117.312,21.664,141.728.....c14.016,24.704,29.088,29.184,59.712,31.264C112.032,430.944,189.152,432,256.064,432c66.784,0,143.872-1.056,174.56-2.816.....c30.688-2.08,45.76-6.56,59.648-31.264C504.704,373.504,512,330.688,512,256.192c0,0,0-0.096,0-0.16c0,0,0-0.064,0-0.096.....C512,181.088,504.704,138.592,490.24,113.92z M192,352V160l160,96

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://bob.dmpxs.com/bob_002.gif?bob_bk=1&eid=4312
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2909), with CRLF line terminators
Category:	dropped
Size (bytes):	2953
Entropy (8bit):	5.131881813735936
Encrypted:	false
SSDEEP:	48:O/DNV91IVkRBB5QUXnMZw8l9VWG5+Fzt1OrXJvNSaSX25mp8LspkG5nzt//6N3GH:SzACWx9HwFzt12PSX3p2Ej5l/6N2H
MD5:	17202AC81D997ED2BBF8147255D898E7
SHA1:	E43A8F50D495B668C99C66BCD96714F7EEBFF77C
SHA-256:	733B93117418C343E14681E14E15781FB39AC42D62B4291F5338E3FB6DFB4C35
SHA-512:	721017EFF80DE607C6B9F1C326F4349A5603FD1ADEAFD18E453D5A98DB1F3130C6C3957EF022057267EE908238EE63BCA48F56004C0BE0984F9B83B4A9760EC5
Malicious:	false
Reputation:	low
Preview:	!function(l){function e(){for(var e=l('[data-sf-role="searchTextBoxId"]'),t=0;t<e.length;t++){var s=l(e[t]);n({resultsUrl:s.siblings('[data-sf-role="resultsUrl"]').first().val(),indexCatalogue:s.siblings('[data-sf-role="indexCatalogue"]').first().val(),disableSuggestions:l.parseJSON(s.siblings('[data-sf-role="disableSuggestions"]').first().val()),minSuggestionLength:s.siblings('[data-sf-role="minSuggestionLength"]').first().val(),suggestionFields:s.siblings('[data-sf-role="suggestionFields"]').first().val(),language:s.siblings('[data-sf-role="language"]').first().val(),siteId:s.siblings('[data-sf-role="siteId"]').first().val(),suggestionsRoute:s.siblings('[data-sf-role="suggestionsRoute"]').first().val(),searchTextBoxSelector:s.val(),searchButtonSelector:s.siblings('[data-sf-role="searchButtonId"]').first().val(),scoringSettingsSelector:s.siblings('[data-sf-role="scoringSettings"]').first().val(),resultsForAllSites:s.siblings('[data-sf-role="searchInAllSitesInTheIndex"]').first().val()

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1926
Entropy (8bit):	4.874813349775333
Encrypted:	false
SSDEEP:	48:cXbsrK8keSkWvMrOArTOIee1jfaTK24mied:NzkdfUrDTOITjfYT
MD5:	BF06C9DBC9FC4310B3D8D54C0205D982
SHA1:	778D41141B511F29781A41694DC573C5FEE0F399
SHA-256:	53277A2C55625E1E4E419453F8A75A8939CB7C04F5F771C2AA40C7132038C1A2
SHA-512:	892B56E0F0E9836AAAE9A940942AB6CD37EFE3196A8D33B6B866A658320EDD72975033C2C96A401741BEB45DE2372E59421007BAB6A9F0BF489134FE6123B765
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/icons/key.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="39px" height="40px" viewBox="0 0 39 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 3</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-385.000000, -1092.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-3" transform="translate(376.000000, 1083.000000)">.. <g id="Icon/Life-Copy">.. <path d="M25.2074432,32.5253851 C26.9310162,34.2187916 28,36.5762673 28,39.1834175 C28,44.3380752 23.8213243,48.5167508 18.6666667,48.5167508 C13.512009,48.5167508 9.33333333,44.3380752 9.33333333,39.1834175 C9.33333333,34.0287598 13.512009,29.8500842 18.6666667,29.8500842 C20.3669205,29.8500842 21.9609878,30.304723 23.3339322,31.0990644 L45.2293591,9.20363757 C45.4246212,9.00837542 45.7412037,9.00837542 45.9364658,9.20363757 L46.8

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 31812, version 1.0
Category:	downloaded
Size (bytes):	31812
Entropy (8bit):	7.985402247908976
Encrypted:	false
SSDEEP:	768:i2U3fCnhdzBJDHMCo250l079rfeHNDgElZdGAxk75z5pycEuE+:kvg9J750E9rfeH9Fz4FpFEuE+
MD5:	FB5C316290F8E04FD47095299B941273
SHA1:	F32218CB31DB314E9D1C82F803EFA6D818B29903
SHA-256:	B37E35D4A7BBF76CE885AB7640DD6D8E4B5129E8F2820F3A8F1B76BA6C544E47
SHA-512:	CB4DA9578E9D74466497AD04D8D4EF0ED43C93CF1BE3DEFCDCA09726ADDAEF0C5BD4403F804B501A2BD675CA141EDCAB295F4ED05CDF66896B5EAB376A59C086
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/fonts/neutrafaceslabtext-bold-webfont.woff
Preview:	wOFF......\|D......:.........................FFTM............v1LQGDEF......."...$....GPOS......%.....z...GSUB..'....0.....R.{OS/2..(....W...`p@\|.cmap..)H...........5cvt ..*....H...H.r.8fpgm..+D.......a.A..gasp..,<............glyf..,D..9h..h....head..e....6...6..J[hhea..e........$.Y.Yhmtx..f....$........loca..h(.........'..maxp..i.... ... ....name..j.......@.M3.post..y.........#H..prep..{....}.....A............E......j........x.c`d``..b. f.BF.;@\|.......c..(.....x..]}...u.;.H..F......I../.. d.".o$$..I`...0R..M.Hqpl+..1.%.(6...D.....e.R[.(..'.[E.q.?....TM....^.....;..v...\|t..~...Wu).\u.......;.....A.T..j6.._.z...z.Z.{;...........<....T.t.Gu..y.~.....Y.......LW.km.G....O.....G..v.y......g.zzzn.....yr.;s..7..a./g.v..YC...:1..Y...H~o..r..{.z..........qW.;..............o}.8..ww....G.H.q.}%....]..._...........3w..Ms..}u...1J/r..~J.^/..4'......Q.N..._.[4o._~._.FI.^..G..v...c...#s{.?.....f..(O..<..O..(.=...YTK.u5.kKUN-k.j9.fU.n.....,d_-D^....PK....zr.:.._.'.Q

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1287
Entropy (8bit):	5.078387674407001
Encrypted:	false
SSDEEP:	24:2d/AxccskZc92EyUG4c9f2+qq8tDI1aKLLzPkLT/UBhMsToa7:cBB92FrRyq+DibkXoMtm
MD5:	AC1D21BADA31ABE4A007EDD9F4140684
SHA1:	23BA95AFEAF2FCDA6A77448E1B582FA9395951FA
SHA-256:	BD522D4A09F5B6907272ABC72FE75A9E08C6269CF3FC77663312C0E109924AB4
SHA-512:	FFA64750277E9DF7922FA88CCBC820DFC68DCE1A5BF0552DF4F358E8EC5287DF6F57F4792CDD26CB86DF912573DCAC9F752CB8587715A4ADA2C3889DBB936445
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="17.123" viewBox="0 0 17.867 17.123">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(0 -0.333)">.. <g id="Needs-Assessment---Intro" transform="translate(0 0.333)">.. <g id="CTA_Item-Copy-2" transform="translate(0 0)">.. <g id="Icon_Home" transform="translate(0 0)">.. <g id="Group_19">.. <path id="Shape" class="cls-1" d="M15.261,11.639a.372.372,0,0,1,.372.372v7.072a.372.372,0,0,1-.372.372H10.795a.372.372,0,0,1-.372-.372V14.245H7.445v4.839a.372.372,0,0,1-.372.372H2.606a.372.372,0,0,1-.372-.372V11.639a.372.372,0,1,1,.744,0v7.072H6.7V13.873a.372.372,0,0,1,.372-.372h3.722a.372.372,0,0,1,.372.372v4.839h3.722v-6.7A.372.372,0,0,1,15.261,11.639Zm2.5-.635a.372.372,0,1,1-.526.526l-8.3-8.3-8.3,8.3A.372.372,0,1,1,.109,11L8.67,2.442a.372.372,0,0,1,.526,0ZM11.911,3.822a.37

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x312, components 3
Category:	dropped
Size (bytes):	64273
Entropy (8bit):	7.971571551808143
Encrypted:	false
SSDEEP:	1536:dc8d3hk3i/4gliFi2T6bYDaptydbIVxqG32ZoAg1X/:HdRkyQW06bYDapQ9I532ZoAY/
MD5:	76DFF96EA6BE0BE9A186B2C2CBEA3ECB
SHA1:	3E6C6E97778ECB38022D7636C40C71D0B09DAB89
SHA-256:	537425AACB9DE118FC253F07DADD95B611E3F5F755C4A43A06B80758D414926F
SHA-512:	A7DA8A00B1355FF9E98926770EC0C2A37B102AF3373B37137606F8B37C4F2DDCD89188B37D1B9787BA790E8B1B433B355369C14F2F092A382C25EBCE9C6594D5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......E......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3CF589B51D7211ED8DB393D933D248FF" xmpMM:InstanceID="xmp.iid:3CF589B41D7211ED8DB393D933D248FF" xmp:CreatorTool="Adobe Photoshop 2022 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C87A64741B85FCB2C13B99FF7E2F2D13" stRef:documentID="C87A64741B85FCB2C13B99FF7E2F2D13"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................................

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	649
Entropy (8bit):	5.117112083527551
Encrypted:	false
SSDEEP:	12:TMHdzdK/3KuJUIBXl+AVb9v3bkzeHakK+Dg2LQ0ZIukQLk0r9jygEY+/BvaKiHfH:2dJk6uJUIu+BKeHfK+D7LPIuhLllT+pq
MD5:	C92E80D5DFDC80AD22955749A6F65390
SHA1:	AE9D04C6CFBAF92D7A19D4606EB69F25813EDE63
SHA-256:	B8752A86A2C92A2F0288CEC6BA2FE44034FAA649C6A8C93F317209F6D243228E
SHA-512:	69283CD0FF99039380CFA01DC9DE2B1F359860840095BE05E0476ED7F338341E88BCA423CBC230BB932A9E05B6331D600084B0A1E4C88E042001E18CDD7F9E0B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-16"?>..<svg width="1200" height="1227" viewBox="0 0 1200 1227" fill="none" xmlns="http://www.w3.org/2000/svg">.. <g clip-path="url(#clip0_251_2)">.. <path d="M714.163 519.284L1160.89 0H1055.03L667.137 450.887L357.328 0H0L468.492 681.821L0 1226.37H105.866L515.491 750.218L842.672 1226.37H1200L714.137 519.284H714.163ZM569.165 687.828L521.697 619.934L144.011 79.6944H306.615L611.412 515.685L658.88 583.579L1055.08 1150.3H892.476L569.165 687.854V687.828Z" fill="black" />.. </g>.. <defs>.. <clipPath id="clip0_251_2">.. <rect width="1200" height="1227" fill="white" />.. </clipPath>.. </defs>..</svg>

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	1588
Entropy (8bit):	7.47130826717875
Encrypted:	false
SSDEEP:	48:U1/l+mF4738Zq9DiYqh1ilMfJWfcgfXoI5v:ENPF47MZ0i31OMfJacgfNx
MD5:	05604EC86CB9CAFB60855A5627844980
SHA1:	BE0104D3956889BD1E53ECE7F498D38BACEAD20A
SHA-256:	A43325264A26E1E33D505C403B6703F51D2520CE28B6D4412AE11D810D3153D5
SHA-512:	A2705178131F8353BC4F1BA76EAB597F22E19C910E925F16370416D4E7CEF724FC3F44B98DBA1FC1A03AF4BC92FDBE980289240A924FBCC5DCB12E40702F61ED
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_mTqeaJMXAz6DHPPU8ICZM6fP3tmkBqOPGBxeBi3sGiVqU=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Picasa..............................................................................................................................................D.D..........................................5...........................!..."1QTq.....ABb.Ua.............................................................!..1Q"A....a....#bqr.............?..<..0......`...0......`...0.3.\|W.L...k.Q$..S+...G.....%V.y..n7.9...=.W.:..W.~0zg....'O.....p..B...`......i..#Fm.y..."EyX.1...s....\|.:Z..I.6tY....P.W..mQ......n.....g.......?...gX._..uZkf..x..'.V.XgP......u.....G..$....0...........vU.O..j.....h...=.n..K.S8&xi...>'.I........O.f..}..,..+..c#.e...;..}.B..@.l.(.P.`..h.{H.-....L..%.Z8u.=z}A.V...&t..I$F@.zb-..C.........:.....P.....U...~.V....u.v.?.7a8.......Q..O.4.....,.4Q.D..++F.$....2C2.!=H...U\...M.E.........Y...3...d...&..a._O.A.Z.&....ny...G.`e;s.'e.a..je,..+.r........ov.....cu.K.c.U.?>U..b..9.Kg)=..<@IS..kiF.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7002)
Category:	dropped
Size (bytes):	8833
Entropy (8bit):	5.498103791678781
Encrypted:	false
SSDEEP:	192:pIUKupNQxaUxPEtk2a6BaOLxtOZCTbKTPsGDzY037P2Mull7s:pQj2K+xSCTbKTPsGDzPLP2Mu8
MD5:	9AB3FBF8C24136765020FAB5AE84C0CB
SHA1:	0213ABB8E3BF343B7164B712A4D9BD11B5A769A6
SHA-256:	80FF0A0AFF5C181A3306A49FDC6131EADED13329CC6172F05F6CA446C483A889
SHA-512:	3A9A2F844704633BE94EB5EB2765F7238C9F5B758AADD5FBA1537605A1DD0299C240F5089F73209098A09548991264916E2BE40B10A817BEFF84E2BFDF70C373
Malicious:	false
Reputation:	low
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","BrandTier":"XKSoO91Vvb","zoneId":"ZN_40n45Auaibhuy9M"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.**Version

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=660, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=872], progressive, precision 8, 872x660, components 3
Category:	dropped
Size (bytes):	98981
Entropy (8bit):	7.910916946392518
Encrypted:	false
SSDEEP:	1536:zvzUvz06bNAA3CUQcxUo71y2h3W8OOo4+gnK9IbJ0MGFi8DNwDfpk7M:zbUbB53Thn71t3czb79a82Dfpk7M
MD5:	1C16193458939FFF974B2830EF39B137
SHA1:	795E9BAF5894820951A80DC8B0F9821531424D8C
SHA-256:	18D35D8C55EC7A4F138907D72C645904839E933B356615FA02BEADD81DED8B0F
SHA-512:	A435648275DE2E790D7438BAE277AA1BB4A93A24E70EDF715E5C1F0D6795E58C2D83F74ACCC621F9F17A4A3654F0E18022D033D05598E2B63E769906C8B00F0D
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*...............h.......................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 24.3 (Macintosh).2023:12:06 08:29:44..............0231.......................h...........................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................y...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...N..-.....X...$.A.F..\4...RSZ.[Y?...?Y........Q. .T.T.....0`.;#iv.7..$9.O

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	979
Entropy (8bit):	5.083726492503765
Encrypted:	false
SSDEEP:	24:2dO6faGKjk8DgNG4gduotTVW7Prl2gPPgZ:cxiGKxDgV83ofl2cgZ
MD5:	74B9201C1AB9E40A05FF1DEA46638FF4
SHA1:	BA2BAB78A2B943F23CCE2001D79D5BD1B3004EF7
SHA-256:	45B114AA9902DF4604172DC50966A7083FA27CFB07D5F46FD7D73C99FEDDDFB2
SHA-512:	CAAE066015FB06ABC6C97E2636B92F346898806DBB6B75C643837C67ED9258951C9862A9DED393DD49C8062E08A1EDA62185A2582BC27AACAF8D0BB78B0F750C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg id="coin" xmlns="http://www.w3.org/2000/svg" width="17.492" height="17.492" viewBox="0 0 17.492 17.492">.. <defs>.. <style>.. .cls-1 {.. fill: #2c2c2c;.. }.. </style>.. </defs>.. <g id="Group_22">.. <g id="Group_21">.. <path id="Path_76" class="cls-1" d="M14.931,2.562A8.746,8.746,0,0,0,2.562,14.931,8.746,8.746,0,0,0,14.931,2.562ZM8.746,16.467a7.721,7.721,0,1,1,7.721-7.721A7.73,7.73,0,0,1,8.746,16.467Z" />.. </g>.. </g>.. <g id="Group_24" transform="translate(6.038 3.293)">.. <g id="Group_23">.. <path id="Path_77" class="cls-1" d="M179.991,101.341h-1.1a1.134,1.134,0,1,1,0-2.268h2.2a.512.512,0,1,0,0-1.025h-1.134V96.913a.512.512,0,1,0-1.025,0v1.134h-.036a2.159,2.159,0,1,0,0,4.318h1.1a1.134,1.134,0,0,1,0,2.269h-2.2a.512.512,0,0,0,0,1.025h1.134v1.134a.512.512,0,1,0,1.025,0V105.66h.036a2.159,2.159,0,0,0,0-4.318Z" transform="translate(-176.734 -96.401)" />.. </g>.. </g>..</svg>

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.105195573108474
Encrypted:	false
SSDEEP:	3:InjZoS8/ZoS8/ZoS8/ZoS9yLn:8ZoS8/ZoS8/ZoS8/ZoSM
MD5:	AFC8D4D6EB08A56A4ACFC73EE6C8E70F
SHA1:	751813794F0EA329817FF51BC1EDF73DA1663E63
SHA-256:	135CF31437952E586706C5EE91717FC6FA845DD524A6EFE91968B62D79136F52
SHA-512:	63A0B4573D65C0C7900DFC059EDE260E5EE11052EF1F9BD11C5CE68D1288C1CBFFA644D4561E9EF448DA8ACA2D3F7B7E652C141B9E6C0CDBB2785113180BD665
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAlmKmRwrWZwCRIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2fTIuQ?alt=proto
Preview:	Ci0KBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2fTIuQGgA=

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6265), with no line terminators
Category:	dropped
Size (bytes):	6265
Entropy (8bit):	5.9711766458816316
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaYElclIjK4hj4yYIuNsclIjK4hm:12cV9sT3AW7NIzkGCe6aZNCe6aZ9
MD5:	BCF9011C97CF945C0305E8AAE4F310E8
SHA1:	BB561476E2DC50E57B06D16B202F3B4740C0EF90
SHA-256:	4ED5456349F40147147305FF4FE9B073BADAD25DCB5B42E89418BD264D8795DA
SHA-512:	48A6994241078AEA56107B71F3C9E7B4C0BC00A58579F83EB9CF70B149D9EF0DAF4A1DFE2CD2EBD2FC8F54F35F500C91A9EF01811D0FDC43D749F24604E51BA0
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1003
Entropy (8bit):	5.14468830667988
Encrypted:	false
SSDEEP:	12:TMHd/AboEiSVEKc9yn/kOdNVtdhdNNG4crlOl/I16W47jUYNFs/dA597mxNCHPz1:2d/AbakZc9NCPzG4cqW6JMUMwHPzIT4
MD5:	BD1FE798BFB2E23D0EB5CB66F0A6B28D
SHA1:	EEEEC997824CE0293CF7968EEF3D3B4D0C3A3757
SHA-256:	1B1BCE381732C7D2B74EBFAEE02013A6C7F5E9DA3F07128D0865A8E688ACF161
SHA-512:	30CADA1FBE1BCFB2044B6FB11FF6D999FCCD6DEEB8BDE886C8D54F38F1FF15355EF4BBE123FC289CE8FA055D7EE287BB1499C41CD1DBC3BA5D566626F6553523
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="18.277" viewBox="0 0 17.867 18.277">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(-0.333 -0.057)">.. <g id="Needs-Assessment---Intro" transform="translate(0.333 0.057)">.. <g id="CTA_Item-Copy-3" transform="translate(0 0)">.. <g id="Icon_Life-Copy" transform="translate(0 0)">.. <path id="Combined-Shape" class="cls-1" d="M16.686,19.927a4.313,4.313,0,1,1-.868-.661L25.959,9.125a.232.232,0,0,1,.328,0l.437.437a.232.232,0,0,1,0,.328l-2.017,2.017,2.426,2.426a.232.232,0,0,1,0,.328L26.7,15.1a.232.232,0,0,1-.328,0L23.942,12.67l-.876.876,1.365,1.365a.232.232,0,0,1,0,.328l-.437.437a.232.232,0,0,1-.328,0L22.3,14.311Zm-3.03,6.326a3.242,3.242,0,1,0-3.242-3.242A3.242,3.242,0,0,0,13.656,26.253Z" transform="translate(-9.333 -9.057)" />.. </g>.. </g>.. </g>.. </g>..</s

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (36210), with CRLF line terminators
Category:	downloaded
Size (bytes):	353644
Entropy (8bit):	5.0629671674236585
Encrypted:	false
SSDEEP:	3072:G5+SqkiBsGTXQThn7qqAVRld6AOtalKe1XVaLxrVDnSw:OqkiB9XQThnOqAV7d6AOtalKnDSw
MD5:	FB2ABC213FD901B4DFEEE95390B7D127
SHA1:	FA894EB0A252C99B0174D5A0B0989DBF52F26E1C
SHA-256:	CF8EBF2BAFF8289C04BE2E330213AADF33921382EF6967B04B7BF19741BCFBAD
SHA-512:	FB410DFBD11D70E04B83A3EAFC33824A054FE3509D528FCF0A797FB396FD572A82776FD4E064925A9E80C83392405CAA63061E52CFBA51E2DBDE645B7531F61C
Malicious:	false
Reputation:	low
URL:	https://cdn.infarmbureau.com/farmhand/V1/consumer/theme.css
Preview:	@charset "UTF-8";@import url(//fast.fonts.net/t/1.css?apiType=css&projectid=1b1b60c1-c56a-45c6-a9b5-03ac3c306ea3);@font-face{font-family:"DIN regular";src:url(../fonts/3e0b2cd7-9657-438b-b4af-e04122e8f1f7.eot?#iefix) format("eot")}@font-face{font-family:"DIN regular";src:url(../fonts/3e0b2cd7-9657-438b-b4af-e04122e8f1f7.eot?#iefix);src:url(../fonts/3e0b2cd7-9657-438b-b4af-e04122e8f1f7.eot?#iefix) format("eot"),url(../fonts/de1216be-00c2-43c0-9c45-3e7f925eb519.woff2) format("woff2"),url(../fonts/bc176270-17fa-4c78-a343-9fe52824e501.woff) format("woff"),url(../fonts/3516f91d-ac48-42cd-acfe-1be691152cc4.ttf) format("truetype"),url(../fonts/d1b1e866-a411-42ba-8f75-72bf28e23694.svg#d1b1e866-a411-42ba-8f75-72bf28e23694) format("svg");font-weight:300;font-style:normal}@font-face{font-family:"DIN regular";src:url(../fonts/da088ecc-a53c-4831-a95b-6fd81b5b338a.eot?#iefix) format("eot")}@font-face{font-family:"DIN regular";src:url(../fonts/da088ecc-a53c-4831-a95b-6fd81b5b338a.eot?#iefix);src:url(

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4490)
Category:	dropped
Size (bytes):	6044
Entropy (8bit):	5.323660086548434
Encrypted:	false
SSDEEP:	96:mhAXGqPq0yT8TrSC93SRa0p73Se1hluGpPeD11AqHJ2KF2WF2Ccuiwum6EfLQGRr:miXBPq0S8vSC93SRRp739xhpmxCqPsWd
MD5:	E6FD297930829B599B330183A1EF5582
SHA1:	2BFFF93D8A95DA3E413C3099233B327093CA0397
SHA-256:	5AC8AE61A9A6934BA795B4F6FB00A53C04C3EB5FEA5616FE7088855DBB010788
SHA-512:	74FCFF0354286BA99DC5521C524FFA7B0A304B54AD09FF0F6CF87519C3F0C6E7A95B50E7F40C38B4A4F90CF177F53C2724F938D3269725B8B4EE40542CAA32B5
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Farmalytics=t()}(this,(function(){"use strict";const e="https://farmalytics.infarmbureau.com",t=["utm_source","utm_content","utm_campaign","utm_medium","utm_id","utm_term"],o={"(facebook).*(ad_id)":{source:"Facebook",medium:"social-paid"},facebook:{source:"Facebook",medium:"social"},tiktok:{source:"TikTok",medium:"social"},twitter:{source:"Twitter",medium:"social"},linkedin:{source:"LinkedIn",medium:"social"},youtube:{source:"Youtube",medium:"social"},gmail:{source:"Gmail",medium:"email"},google:{source:"Google",medium:"organic"},wallethub:{source:"WalletHub",medium:"social"},yelp:{source:"Yelp",medium:"social"},clearsurance:{source:"Clearsurance",medium:"social"}},r="FAV2";var n=(()=>{let e=(()=>{let e={};try{e=JSON.parse(localStorage.getItem(r)\|\|"{}")}catch(e){console.error(e.message)}return e\|\|{}}

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2935
Entropy (8bit):	4.779883255643436
Encrypted:	false
SSDEEP:	48:cKoVSYfzA7JpJp32wUdrV8233Qcv3eybJYoK+3ybJVw0Q:yVFfaLPDJc2WYXaWVk
MD5:	05622D6D60FD45B0FC09FF9B8803FB5D
SHA1:	8D3B30A0DCEAA52359BD56866DB4F3AD45C13667
SHA-256:	DEA01D7C55C8D6DD4EA8D8D8CE8E83D211DFD77C8E2C3ECBE6B723C532949C74
SHA-512:	A398D19A2B816A1ED9EF511DF253BB65F74262CA57A73AC2FF0B482009EEDCFB5BCC68ABA84D1432C042E1D55C10194DC505C273112C383971DCF982EC322DFA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="16.156" height="16.783" viewBox="0 0 16.156 16.783">.. <g id="discount" transform="translate(0.211 0.235)">.. <g id="Group_266" transform="translate(0 0)">.. <g id="Group_265">.. <path id="Path_313" d="M25.335,8.41a.481.481,0,0,1,0-.425l.612-1.251a1.424,1.424,0,0,0-.614-1.89L24.1,4.191a.481.481,0,0,1-.25-.344l-.241-1.372A1.424,1.424,0,0,0,22,1.307l-1.379.2a.481.481,0,0,1-.4-.131L19.22.4a1.423,1.423,0,0,0-1.988,0l-1,.968a.481.481,0,0,1-.4.131l-1.379-.2a1.423,1.423,0,0,0-1.608,1.168L12.6,3.847a.481.481,0,0,1-.25.344l-1.23.653a1.424,1.424,0,0,0-.614,1.89l.612,1.251a.481.481,0,0,1,0,.425l-.612,1.251a1.424,1.424,0,0,0,.614,1.89l1.23.653a.481.481,0,0,1,.25.344l.241,1.372a1.423,1.423,0,0,0,1.4,1.183,1.463,1.463,0,0,0,.2-.014l1.379-.2a.48.48,0,0,1,.4.131l1,.968a1.423,1.423,0,0,0,1.988,0l1-.968a.481.481,0,0,1,.4-.131l1.379.2a1.423,1.423,0,0,0,1.608-1.168l.241-1.372a.481.481,0,0,1,.25-.344l1.23

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.1239716416499608
Encrypted:	false
SSDEEP:	12:7NE2Opw41NZfBUhlOR7KfT4wUFWfv6XgK2q55555555555555R:72nw4NBUuDe6XgKFN
MD5:	2685ED1CE7689EDD1F57EA94B12320DD
SHA1:	BD928A5BE7C60A80F6815518F732A840C2F0B40A
SHA-256:	C54C7F265DD46A11115DDD8DFED9EB4F6C3DC50DB6C8F4A7458682ED797C075D
SHA-512:	6958D5F8662516536D7BFE90CD9F1DAFDA08FF67E449D61AF02358BA5B1DA3F67CE151D3390C16F9259BAA75529748AC1630748BDF3EFA65135962D0549DFF4E
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/favicon.ico
Preview:	............ .h.......(....... ..... .....@................................................................................................................................................................................................................................................................................... .#. .#. .#.!#X.$...$...$...!"Kq .#. .#. .#. .#. .#. .#} .#w.... .#. .#. .#. ).$...$...$...$,. .#. .#. .#. .#. .#. .#. .#..... .#. .#. .#. .#.$...$...$...$... .#. .#. .#. .#. .#. .#......... .#i .#. .#. .#.#+..$...$...$... .%. .#. .#. .#. .#. .#......... .#' .#. .#. .#. .#.!$c."%x."%x.! 3a .#. .#. .#. .#. .#c............ .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#......... .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#;.... .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#9.... .#W .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#. .#...............................................................................................................

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31968)
Category:	downloaded
Size (bytes):	53449
Entropy (8bit):	5.207291309972639
Encrypted:	false
SSDEEP:	1536:JWoeU8Edp6kJnaR49DefwM4eA7Erwf3zapyTwhOB:coeU8Yp6kJnaR49DefwM4/7Ers9B
MD5:	F59081902C40DD03031B8C9641DAF5AF
SHA1:	DEE6F40237E10E8FDF3BCBE85F46AB53132D8744
SHA-256:	6ED4B8C931A6E99222E5BAC9A4C3F03A411BC58BECBB981F27711A058684781C
SHA-512:	19F47D1C6566F6B97F8CB185B562F962431FD32858E4823F940808CD854E4CC6EC6360D904491E6CD0A446B113CE840F8763A47C75E58B4DCCEAFDB5022F26C7
Malicious:	false
Reputation:	low
URL:	https://cdn.insight.sitefinity.com/sdk/sitefinity-insight-client.min.3.1.27.js
Preview:	var sfDataIntell=sfDataIntell\|\|{};sfDataIntell.constants={sdkVersion:"js-3.1.41",cookieName:"sf-data-intell-subject",docsCookieName:"sf-ins-lst-doc-trckd",sessionCookieName:"sf-ins-ssid",pageVisitIdCookieName:"sf-ins-pv-id",sfTrackingIdsStorageKey:"sf-tr-ids-storage",sfSessionIdsStorageKey:"sf-ss-ids-storage",endpoints:{apiServer:"https://api.insight.sitefinity.com"},headers:{authorization:"Authorization",datacenterkey:"x-dataintelligence-datacenterkey",subject:"x-dataintelligence-subject",ids:"x-dataintelligence-ids",datasource:"x-dataintelligence-datasource",contacts:"x-dataintelligence-contacts",sdkVersion:"x-dataintelligence-sdk-version"},crossDomainTrackingMessages:{getClientGroup:"getClientGroup",setClientTestGroup:"setClientTestGroup",getClientJourney:"getClientJourney",setClientJourney:"setClientJourney",hubReady:"hubReady"},crossDomainTrackingQueryParamKey:"instrck",crossDomainTrackingParams:{apiKeyParam:"a",subjectIdParam:"s",dataSourceParam:"d",timeCreatedParam:"t",sessionId

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452)
Category:	dropped
Size (bytes):	849067
Entropy (8bit):	5.306399072513743
Encrypted:	false
SSDEEP:	24576:hEwcatYCQKVIm6Yr/R7ABK4PUWnX4nT+xG5S:hEwcatYCQKVIm6Yr/R7ABK4PUWnX4nTW
MD5:	9CB6BD57C6F6C4520DDB78D392CD5D9B
SHA1:	2E82F6981E7DD33C41161D971AA4A0957B1CED5B
SHA-256:	8DBE2A01B90AC6AB9906C52D9691A4D2CF1515F88F7A78DEB6E7A66B8E3173CD
SHA-512:	EFF62606D8A621CD572B8D6A6F6A0D04D75F614CAA47190DB3CFC0A03F0B88122FE0056A80E45AF01E4574299805A7E622216869C5CD8DD64F3F33AD555183A9
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.js.LICENSE.txt /.(()=>{var __webpack_modules__={959:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";__webpack_require__.d(__webpack_exports__,{W:()=>StartQuoteController});var _material_dialog__WEBPACK_IMPORTED_MODULE_1__=__webpack_require__(4825),_utils_go_to_quote__WEBPACK_IMPORTED_MODULE_0__=__webpack_require__(6498),StartQuoteController=function(){function StartQuoteController(){var _this=this;this.defaultLine=[],this.isBundleable=!1,this.bundleDialogGenerated=!1,this.submitQuoteRequest=function(){_this.isBundleable?_this.showBundleDialog():_this.goToQuotePage(_this.defaultLine)},this.showBundleDialog=function(){var e=_material_dialog__WEBPACK_IMPORTED_MODULE_1__.W.attachTo(document.querySelector(".bundle-dialog"));_this.bundleDialogGenerated=!0,e.open()},this.handleFormSubmit=function(e){e.preventDefault(),_this.submitQuoteRequest()},this.goToQuotePage=function(businessLines){var agentCode=document.query

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=660, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=872], progressive, precision 8, 872x660, components 3
Category:	downloaded
Size (bytes):	98981
Entropy (8bit):	7.910916946392518
Encrypted:	false
SSDEEP:	1536:zvzUvz06bNAA3CUQcxUo71y2h3W8OOo4+gnK9IbJ0MGFi8DNwDfpk7M:zbUbB53Thn71t3czb79a82Dfpk7M
MD5:	1C16193458939FFF974B2830EF39B137
SHA1:	795E9BAF5894820951A80DC8B0F9821531424D8C
SHA-256:	18D35D8C55EC7A4F138907D72C645904839E933B356615FA02BEADD81DED8B0F
SHA-512:	A435648275DE2E790D7438BAE277AA1BB4A93A24E70EDF715E5C1F0D6795E58C2D83F74ACCC621F9F17A4A3654F0E18022D033D05598E2B63E769906C8B00F0D
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/default-album/men-in-blue-jeans-jacket-and-glasses-reclining-on-chair-happily-after-bundling-his-insurance-and-get-discounted-rates15dd5c5e32056b8a9f2eff03000bf66e.jpg?sfvrsn=d8d837ba_0
Preview:	......Exif..MM.*...............h.......................................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 24.3 (Macintosh).2023:12:06 08:29:44..............0231.......................h...........................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................y...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...N..-.....X...$.A.F..\4...RSZ.[Y?...?Y........Q. .T.T.....0`.;#iv.7..$9.O

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 460 x 443, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	84423
Entropy (8bit):	7.992074751947247
Encrypted:	true
SSDEEP:	1536:urTAz9iEl+xpdPRNRNKC7Ojh52FfUNHyqmAhQWX0itiU5Pl60vZAIgUbQfGQOo7m:oTgiIifRAcq0FfqSzAGWXpiU5PQmZAZY
MD5:	97D49D5F821102EBE6060FC4C6802F78
SHA1:	DB432FCD260241480270BB4BE116B0EDFF619096
SHA-256:	D9CD7B19452EA9DC4F2199D0C4E2A16996E64AC506AFB67CB4ADB995343F1CC0
SHA-512:	2B6BB285FE4F57E1B793C687E6CF3D35F17BFC89CE19BE80D22E3DCE4803F6C79D4F87F9F97DA1EDB0F60BA0ADADB1006FD0CA052F73DB2293D7DD47182DB3DE
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/homepage-hero-images/people-hero/happy-family-with-kids-in-front-of-indiana-skyline-min.png?sfvrsn=a91532ba_1
Preview:	.PNG........IHDR.............y"U.....gAMA......a.....sRGB.........pHYs.................PLTEGpLc_Zum_faW.........^]\KH;...>-(3".....32.jO...hg.^\.....t......oYK4]A+.vZ..Yy.., ....s:2%xX=...\|^.HrL.../* ....qN9$cE(.Z>.tp.oU.ga\y.f......Kc.....),......"&..........:].......8Vy.ec.y.j.;;.I0'......[Y.ON..&..ed8 .136...n.b.]^'.rH0+Gj.i.M-.. .DB..rpN'..ml.:9..\|Ww;"....q.fb.FF.dbA...{.B!\|T=.,L.ZY.S:.v........{y..:..a.^Do...{.....Db..mH....R2.........~}.Z@.......qn.PM...XT..L..y_b@0.GD....fJ..oS..s...b>.cLS4#.QP...Z5.wM.AA.....66..k.]B.*+..D....u^L........vv.tT.k@..~....00.~l..Z.v.rW...`...lN....p.........t...RN.....>.&&.=<...m.jV.#...........x.}h.t^....qQ.....!..dRJN.40.....bak.KHfOH.88E..`.6....u]T.B0wpz...br.$%)..........DH....W\...l_..).ts.yt.es. ...v..u..W....vT....f.m.f......K.Uc.P.jw.....3tRNS.:.+4.'F.............6[^~....n................YFP...F.IDATx..{P...._1.x.j.o..J.o.{../3..e..~.?...NtOeG.ew..dv..(..$&....n.

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1629)
Category:	downloaded
Size (bytes):	197863
Entropy (8bit):	5.634019761675848
Encrypted:	false
SSDEEP:	3072:j/WHfxwoUoyAevjDpc6zCRf60tjHpnAX/+Tn6:zWHNevv26zWfRnAXmT6
MD5:	2777DBEF9F1177594206BBA127917176
SHA1:	26866EA6620152434D88F5923870FD060288C647
SHA-256:	216BD502D399CFD3F497709099F5EC5666DF7847410D4728257301E5AF680E16
SHA-512:	0037CD98BB8AA28A5E4EA68DFCCFC287A262A20072A4FC99226A2A88A09ECBDA07BB1764BFE484C0DEF483D11A06AD0BD1B647245D4E968E9D13ED7BF4230775
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/ruxitagentjs_ICANVfqru_10303241106123517.js
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ /.(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ta=document.cookie.includes("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ta}function bb(){return void 0===eb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function kb(){var Ta;if(bb()){var Sa=eb.dT_,Xa=null===Sa\|\|void 0===Sa?void 0:Sa.platformPrefix,Ua;if(Ua=!Sa\|\|Xa){var Pa;(Ua=null===Sa\|\|void 0===Sa?void 0:Sa.minAgentVersion)&&."10303241106123517"<"".concat(Ua)?(console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"),Ua=!1):(Ua=(null===(Pa=document.currentScript)\|\|void 0===Pa?void 0:Pa.getAttribute("data-dtconfig"))\|\|"#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Xa&&!Ua.i

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2251
Entropy (8bit):	4.647834810328793
Encrypted:	false
SSDEEP:	48:cenxzDkeSMPTzPFTYXxxEYQEI2ecXk3be:nxzId0XPFk2YTdbXkK
MD5:	6D224E8C8114DCC60C4E29DB7AE754D6
SHA1:	5B41541CC6DFB872D769D931D03CCEBD3CA84843
SHA-256:	1695067651C2FB9559EB62A9B889A53CF49E312F0975E3B28B70E8511D38B885
SHA-512:	ED7FA14C08BB95DE6C7106F7D46AF33820C9ED3709D0D157BCF98ADFB1ECD5C1E0A59557226EABB9B9DE5E01782FD947B402845784C3A3124D02C584D0AF756B
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/life-insurance-matters/business.svg?sfvrsn=56e924ba_2
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="50px" viewBox="0 0 56 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 5</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-1009.000000, -1085.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-5" transform="translate(1009.000000, 1083.000000)">.. <g id="Icon/Business">.. <path d="M19.8333333,14 L3.5,14 C2.85600031,14 2.33333333,14.5226666 2.33333333,15.1666667 L2.33333333,19.8333333 L2.33333333,24.5 C2.33333333,29.0103255 5.98967454,32.6666667 10.5,32.6666667 L45.5,32.6666667 C50.0103255,32.6666667 53.6666667,29.0103255 53.6666667,24.5 L53.6666667,19.8333333 L53.6666667,15.1666667 C53.6666667,14.5226666 53.1440003,14 52.5,14 L19.8333333,14 Z M2.33333333,31.1002234 L2.33333333,47.8333333 C2.3333333

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5179
Entropy (8bit):	4.229991818803107
Encrypted:	false
SSDEEP:	96:feEdXdJkgJiqxF4VZVfNfudZgGLZ/KKdIvxD7Q6EiE7NZ85pi1:WEdtygVxF+VfNfugGLBKmIvxXQ6/E7B
MD5:	3BA7BA193B6106B819A845A3EF550F5D
SHA1:	1F1B1E89C9135CE3E34C2687DD78F76F8B16474F
SHA-256:	3549C0777BF7CB50A04299154BD68326F32F1814F826B1CF324F481905502A59
SHA-512:	FFC74B66F8F0E6346CF0C36578CED13545EF4FECB654D446ED310937310BD6FE4F29E21B6FCDE1A0839DC052E267526301E7CE804534F048B602BF24178E64B9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="52px" height="42px" viewBox="0 0 52 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-378.000000, -826.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy" transform="translate(376.000000, 819.000000)">.. <g id="Icon/Auto">.. <path d="M21,44.3333333 L21,46.6666667 C21,47.9553311 19.9553311,49 18.6666667,49 L11.6666667,49 C10.3780023,49 9.33333333,47.9553311 9.33333333,46.6666667 L9.33333333,44.3333333 L9.234301,44.3333333 C5.4328609,44.3333333 2.33333333,41.0655132 2.33333333,37.0693208 L2.33333333,28.1341732 C2.33333333,25.4643899 3.28166953,22.9169679 4.95306888,20.971115 C3.83934722,20.7945723 2.98792632,19.8300495 2.98792632,18.6666667 L2.98792632,14 C2.987926

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	5.452126526071473
Encrypted:	false
SSDEEP:	12:TMGTIMu5E4BcSONfRFD4hNuFS//KYRldZsllK+BbdJ/:3Tx5Nf34hNh/Lkf
MD5:	4BCBA30DDD91BF84204E7DB0CFA54796
SHA1:	B8DA812CB88949A45B5A141DE89C373C016D5181
SHA-256:	D305DCC8CBE44AECD3C8594EA4A18574E809185F8A0B372AF87FC48931F360F7
SHA-512:	B668A169779EB1A921A83E146E198F3296E0D05D9282126D72D67AF0F38E174685BC199AC5645CC00C7945034452365671B639729ACAF9B431A744FBF903CF0E
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/footer/facebook.svg?sfvrsn=2b7424ba_2
Preview:	<?xml version="1.0"?>..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]>..<svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <g>.. <path d="M191.844,511.5V288.375h-68.313V188h69.875v-83.063c0,0,3.188-104.625,92.813-105.438h99.75V98h-61.875 c0,0-26.125,0-26.125,29.438c0,29.375,0,62.313,0,62.313h89.5l-10.75,100.313h-77.188V511.5H191.844z" />.. </g>..</svg>

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F?
Preview:	<html></html>

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	dropped
Size (bytes):	79789
Entropy (8bit):	5.316053921703045
Encrypted:	false
SSDEEP:	1536:4Nzw/WRwzcOYw0OL484tz6STVdcNANA2Ae:4FpRwzcOYTp6STVdX
MD5:	B60F5EED12273A0FC6D4D1B83CE9AB3A
SHA1:	5FCDD04B7C1A8BB93980CAE79A972F2655226015
SHA-256:	945B88EF669DED280836CF5628FF13BBE817E6616A37420897A24D767EDB05C6
SHA-512:	1D964C159E111A4BA4AB56DA9E230019C1FB69B25593D71A73AED39D6516E32DB09A352BDE9AC3D344AA8268248797C1DCD9E44A667A598EF0FD3B81510713E4
Malicious:	false
Reputation:	low
Preview:	./@preserve.Version 2.22.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.22.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.22.0"]\|\|[]).push([[8],{17:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"f",(function(){return

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	17679
Entropy (8bit):	7.969158339966027
Encrypted:	false
SSDEEP:	384:RU7qGcyokC95Xl1I9wB/rTujj2k7AMoThnl0:RUjcyjd9wBcj2l0
MD5:	EE92409BE2F4B61321B6057C03E67626
SHA1:	70340473120C37A5086A66B30A9ABE566750CC29
SHA-256:	FD0BDDF250A4EEAE35574A268B993B5730F8D9ECF96950DAB7BB31B6B4623F15
SHA-512:	932B636B58D9CBEB54EA7CA22698D73ABB638FF8F7D71A5A7548EE8FCC9F6B8BAFA15671D9DB2356B990F4C42E4F58F921A1FBEDA6A187535AD50633AB0B9C4E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............P...JiCCPICC Profile..H..W.XS...[RIh..H..."H..B. U...@B.1!..e.\."........b..(.........oR@...{.;.7..9s..J..;..N.O.Au......Y.SRY.G..( ..`......(.e..wy{.ZC........=.P.....8] ..B...../...@.z.yR%.....&..T.3.X...Re...x'.d..'..@...Y..L.}.bW.@,.@..q._..@......J..C.7<...L....2......C.ri.o....-.9...vp.D..8e.o7..G1...Izt.......T...T.""Qm......3...U.......0INt.F..!..B.W.Z ..&h\|...........A.!.5..<.....";...!.r........9c.\|qR4...3...j..P....)...@.+..........8..,W>X/.X$.FkpU.(!B...S.o.q.P.N....'F.."....k...%..z.Ni^p....4'Vc.S.9.J.....x./...........&....x.b.... .p@.`....`:........K=..x@.2...h4.......B.'DB ...V..A>...... C5......!... ..V..$C..#...#:....r.:6.Di4.A^..%1..B. ...q.<....5..7.......=.1....p..I.9M\$......:a.0M.....AV.<......g.&....#..@...j9............JA).(A...=...=.X.=..C.\......>>.N..=.{Kl1..k.ag..X.`aG.f.<vH..V.#......'..............z.OX.\|?..t.,.8S..b.7....G.`........._S......<.UW................g....~-.t

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	76214
Entropy (8bit):	5.410596142530115
Encrypted:	false
SSDEEP:	1536:R7hpwPC9ZVK01QYaKTZ02LKVsdmpyKcicIx:R7V9ZVKBYaKj8wKcHIx
MD5:	E3A5B8155CBB9C7450E69C0B2F362E4C
SHA1:	FD58965798ECBD7EAECECA870F72245CD0E50BD5
SHA-256:	1D0AE3B70EC392CBE1F81E2EE3CF727DF1B45A1143E2FCA09476997DD2D8CC42
SHA-512:	10FCF71E93C30B54BF6D7A877269492739B9E3A946D262923DDEB04DC408836657CF308BC1E304DA9E24AE1DAF7D1762AE4BCF6EE9805F05ED16AD31ED5F31D0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1686000021639755?v=2.9.179&r=stable&domain=login.infarmbureau.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1629)
Category:	downloaded
Size (bytes):	294346
Entropy (8bit):	5.599706778526083
Encrypted:	false
SSDEEP:	3072:j/WHfxwoUoyAevjDpc6zCRf60tjHr9a1++Q90ePxm3143nAX/sw:zWHNevv26zWf4+2Wxm3CnAXEw
MD5:	2A2DA9BE25CFE94E6B61B1FFC451D194
SHA1:	D50D467D1E2EF0BEE34D9167269F9F3BE99D404B
SHA-256:	E201B9336364064A958D1CC7E3380F67AEF545919F969CE746ACD471616FF33C
SHA-512:	A2CE29CA0B93DF401F90E1CD206B6A4DF8A2C52355D1115028CF03D8EB9D88505CB90A783EC79B63E8D567409A40E5AE9EA871202654692425205C8B06C87560
Malicious:	false
Reputation:	low
URL:	https://oam.infarmbureau.com/ruxitagentjs_ICANQVfghqru_10303241106123517.js
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ /.(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ta=document.cookie.includes("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ta}function bb(){return void 0===eb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function kb(){var Ta;if(bb()){var Sa=eb.dT_,Xa=null===Sa\|\|void 0===Sa?void 0:Sa.platformPrefix,Ua;if(Ua=!Sa\|\|Xa){var Pa;(Ua=null===Sa\|\|void 0===Sa?void 0:Sa.minAgentVersion)&&."10303241106123517"<"".concat(Ua)?(console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"),Ua=!1):(Ua=(null===(Pa=document.currentScript)\|\|void 0===Pa?void 0:Pa.getAttribute("data-dtconfig"))\|\|"#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Xa&&!Ua.i

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2616
Entropy (8bit):	4.993707596800748
Encrypted:	false
SSDEEP:	48:c5ZYHefDl1mHB6SPl5WsqUM4SMUpYRUCPWb2vqm3Ncy4/AgRnlb3yFyOoMyEvtOE:KSIDMnWsPlSbuTXqm3N3ElnleQJEvtD
MD5:	CE30A95B1D417C2D08F814FCB7C8A7DB
SHA1:	5F4A12247FB7D3521A1B9AE45FBE8DEBFBE1D1C6
SHA-256:	CC99DF19D2709E5D6A161D325086AE9300C00D0BC276C36D3BF5E816988ACD6A
SHA-512:	400565F575E8B4404C25989BC111799F98CE5C1B60D285E45B7CCC2936C66868E7831EE39D853A4C808F92D795BD808B3357FF691F759661F3592D0C69485613
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="120px" height="68px" viewBox="0 0 120 68" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.1.1 (8761) - http://www.bohemiancoding.com/sketch -->. <title>ifbi-symbol</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g id="ifbi-symbol" sketch:type="MSArtboardGroup">. <path d="M60.829,49.959 C58.796,58.698 50.525,58.358 50.525,58.358 L36.859,58.358 C36.859,58.358 38.004,52.26 40.433,43.428 C43.065,34.782 50.103,35.032 50.103,35.032 L64.403,35.032 C64.403,35.032 63.055,42.046 60.829,49.959 Z" id="Shape" fill="#EE3124" sketch:type="MSShapeGroup"></path>. <path d="M26.109,11.225 L69.963,11.225 L64.716,32.124 L49.816,32.124 C49.816,32.124 39.297,31.516

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	22580
Entropy (8bit):	7.987931088564268
Encrypted:	false
SSDEEP:	384:/zfZ1pg9F71CwL/CSWp/ZRWcAA2fp3GTQ4hh8T+7gLj5Iog/8Xd1dg:7RDg9FAwLnCZRWcHQp300TuidIo68XdQ
MD5:	95721AA5F38F909E45C7B19D0176FFAC
SHA1:	384E381D3BEBA2547D0EA3DE6E3ECAEC09F3ECA9
SHA-256:	CF785DD2EE8BD1162A9EFFC4F62E91A2EE66C34BA3A61C6647786CB8FF077FCA
SHA-512:	19E67FD26E31CBE2442B9C8B6A3B59FFF35B59EFE58CDCA6A1A061EE5490FD8D61D0F1C10C0B1BA76C9E1B6C1EAFA70C7EB186A6DC948AD578217FC01386F55B
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/MZTWt2RchgA/sddefault.webp
Preview:	RIFF,X..WEBPVP8 X..0........>m2.H$"........gnUr~...JO0.......&p.?........).....(..}..L%...`Y..71..N....1..ZR<7.?..H.....U..}.{.o._m..[...g.V.....U..}.{.o._m..[...g.V.....U..}.{.o._m...ci.2w:..C.....8...._(._..&.uP.E..H......e....(a..t..V]r..B.8.E..;.+...z.....[.0:...[p....[u.'..r......:..........N&...G..7.5....auHiMK\H$......o.{e.%.X.qD..W.\.u{J..d.....b;...h..^=.Q..NP..ux.i>P/L..X.v.PKV.....7k..4..">.Z+L........(..}..-Kpu....^.6..M.,~..:..:!GNcO.{A6.WP.0.L5...jTO.}..\|.....!.k....i...4..Ma1.Od.U.Q......B[-...:.D....5Y.....~B.2..:.......\|Kj..s .CF..kr_..}h......b.F@B.bL>.e(....Wh:"W...!w.....~b..j.<.!......H3..G1.V..Y4..I&;..qH...............o.F..q.{...s...g`..w....!`..'....+...;.[.H.1po..<s-.9.W.....S.mv....j...b.jhpi.1rB..o...2+.%.Z}C.d...1;RJ..............c........'..$.....D....V@l..;p.......D.Ij....`..?.<>8.......:E..b%FGTx..[......h*.S...-.6&ySss.#U..._.......e....;K.....s.&.........6M.\|.yH.#.>K.....i...b....z#nuW.c5r.'...f..~8\|.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	649
Entropy (8bit):	5.117112083527551
Encrypted:	false
SSDEEP:	12:TMHdzdK/3KuJUIBXl+AVb9v3bkzeHakK+Dg2LQ0ZIukQLk0r9jygEY+/BvaKiHfH:2dJk6uJUIu+BKeHfK+D7LPIuhLllT+pq
MD5:	C92E80D5DFDC80AD22955749A6F65390
SHA1:	AE9D04C6CFBAF92D7A19D4606EB69F25813EDE63
SHA-256:	B8752A86A2C92A2F0288CEC6BA2FE44034FAA649C6A8C93F317209F6D243228E
SHA-512:	69283CD0FF99039380CFA01DC9DE2B1F359860840095BE05E0476ED7F338341E88BCA423CBC230BB932A9E05B6331D600084B0A1E4C88E042001E18CDD7F9E0B
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/footer/xlogo-twitter-logo.svg?sfvrsn=948136ba_1
Preview:	<?xml version="1.0" encoding="utf-16"?>..<svg width="1200" height="1227" viewBox="0 0 1200 1227" fill="none" xmlns="http://www.w3.org/2000/svg">.. <g clip-path="url(#clip0_251_2)">.. <path d="M714.163 519.284L1160.89 0H1055.03L667.137 450.887L357.328 0H0L468.492 681.821L0 1226.37H105.866L515.491 750.218L842.672 1226.37H1200L714.137 519.284H714.163ZM569.165 687.828L521.697 619.934L144.011 79.6944H306.615L611.412 515.685L658.88 583.579L1055.08 1150.3H892.476L569.165 687.854V687.828Z" fill="black" />.. </g>.. <defs>.. <clipPath id="clip0_251_2">.. <rect width="1200" height="1227" fill="white" />.. </clipPath>.. </defs>..</svg>

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1287
Entropy (8bit):	5.086862946382653
Encrypted:	false
SSDEEP:	24:2d/A9jgkZc9tKG4cMIiN3npSWFtH+WKseJ3UL8MtMsH:c6jG9nRuNLtHpe3UAMtM+
MD5:	AD929C1E2A82624F270D71F74717A21D
SHA1:	8361CC33AB7B465A339DCFBD0CAC36D32CAFF6E6
SHA-256:	152DDA22E7280D74D86BEB81735DE2A38E38AE52F425F4C90A276A8F879B473C
SHA-512:	FF2A7741D45810464B27345FBA13DFC701661AEBFEDC6390BF9146B3CD29FCA54A98E3A58ECC3480846AB7980C3538BFC84969733989A05BF65306491BB2F350
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="15.634" viewBox="0 0 17.867 15.634">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(-195 175.667)">.. <g id="Needs-Assessment---Intro" transform="translate(195 -175.667)">.. <g id="CTA_Item-Copy-5" transform="translate(0 0)">.. <g id="Icon_Business" transform="translate(0 0)">.. <path id="Combined-Shape" class="cls-1" d="M6.328,6.056H1.117a.372.372,0,0,0-.372.372V9.406A2.606,2.606,0,0,0,3.35,12.011H14.517a2.606,2.606,0,0,0,2.606-2.606V6.428a.372.372,0,0,0-.372-.372ZM.744,11.512V16.85a.372.372,0,0,0,.372.372H16.75a.372.372,0,0,0,.372-.372V11.512a3.344,3.344,0,0,1-2.606,1.244H3.35A3.344,3.344,0,0,1,.744,11.512ZM17.867,9.406V16.85a1.118,1.118,0,0,1-1.117,1.117H1.117A1.118,1.118,0,0,1,0,16.85V6.056a.744.744,0,0,1,.744-.744H5.956V3.078A.745.745,0,0,1,6.7,2.333h4.467a.745.7

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Canon, model=Canon EOS-1D X Mark II, orientation=upper-left, xresolution=175, yresolution=183, resolutionunit=2, software=Adobe Photoshop CC 2019 (Macintosh), datetime=2020:05:07 16:22:52], baseline, precision 8, 509x339, components 3
Category:	downloaded
Size (bytes):	140777
Entropy (8bit):	7.948979097125077
Encrypted:	false
SSDEEP:	3072:ZhK0HpXP3tP0MPPf3TEN6BpsnJ/Srfc7NTldP6ROzY05qzjSL6Sg:ZhnV7PfYB6W1rPPY08k69
MD5:	310767AC22F8B55423E7F0A98789E149
SHA1:	3CA50B74F61BD242687259C886FF72EEF389A446
SHA-256:	2E06E41813EA4B1A31E3E90373591D0089B9CACA03BC1808E7EAD903DD78881A
SHA-512:	B2E7A061FA06E15CAB6617C1852E073002EEC66311148F26D5FAF1B1A4FF0A52DE8823D7F9076B57D23DD512FB5BC7E26BD8A43D4CF1EE6892455DEB3543F504
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/default-album/community-involvement.jpg?sfvrsn=8a9c3dba_0
Preview:	......JFIF.....,.,...."=Exif..II*...................................................................(...........1...$.......2...........;.......................i...........l...Canon.Canon EOS-1D X Mark II.H.......H.......Adobe Photoshop CC 2019 (Macintosh).2020:05:07 16:22:52.JAY DAVISON.SOL STOCK LTD....!........................."...........'...........0...........2...................0230....................................................................................................................30..........30..........30......................`...........@.......................................................................................1...........2.......$...4.......D...5.......^.......................2019:11:07 09:46:33.2019:11:07 09:46:33..t.@B....F.@B..........................................168016000087..........#.......................EF16-35mm f/2.8L III USM..7030000577..........................................(...............................k.......H.......H.......

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4480, bps=182, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, width=6720], baseline, precision 8, 509x339, components 3
Category:	downloaded
Size (bytes):	151062
Entropy (8bit):	7.937371403026828
Encrypted:	false
SSDEEP:	3072:SdWyV84vXsB0/+JtRB25DbMJUsdADmoCNf:tRgXqTJt0MJUs9oof
MD5:	F799CDE9B833289ECA2B79217D8BB4F7
SHA1:	861B97BB8B30C4D9A993AA9AC32A5D781A770FBB
SHA-256:	C6E1A1074FD199CE3E6DDE771425C6E09C456E883961A0747C29A2C96EB9B055
SHA-512:	0ADBD93BC65DD31C34559C8FB145265B0D1CD517247C90A5A92D1E63A80178A76846B44B74FA37B13EB0B29557FD359A7B5DA034A67E4779D325E74A6B165095
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/default-album/careers.jpg?sfvrsn=3e9d3dba_0
Preview:	......JFIF.....,.,...."oExif..II...............@...............................................................................................................(...........1...$.......2...........i....... .............Canon.Canon EOS 5D Mark IV.H.......H.......Adobe Photoshop CC 2019 (Macintosh).2019:07:05 12:59:42..!........................."...........'....... ...0...........2....... ...........0231................................................................................................................................94..........94......................@..................................."...............................................................1..........2.......8...4.......X...5.......t.......................2019:06:16 13:19:01.2019:06:16 13:19:01.+02:00......@B......@B..........................UU......UU......078053006663..................................20mm F1.4 DG HSM \| Art 015..0000000000........................................(...................................

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17698), with no line terminators
Category:	dropped
Size (bytes):	17698
Entropy (8bit):	5.330321951477942
Encrypted:	false
SSDEEP:	384:I/Q66A4xo1rjYKha4BMoxojIjZRDv021Kudq89UfnlYwNjtBkb4hVc:I/oA4xMYKha4BCItRD821KOz9SHNjtBk
MD5:	B16C2631B3B4D5AFBFE9589A84DA4916
SHA1:	DE919F2B0D93A7B2DEA7D6FC6A52BB95AD16A617
SHA-256:	487B5C89F3869C78CC95737CA7F38873FDD764730ECD0C8CB67D925037188480
SHA-512:	00140ADD52DCE55669B2C780B962EAF472BAB1E2F54877681AE0F1507520143BE9AB8A06693B0622413F677312D736227F1EB9431AC0D8225F6AEC4448AEC4BF
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";const n="6.21.0_ad40570",t="https://t.teads.tv/track",e="https://cm.teads.tv/v2/advertiser",o="https://cm.teads.tv/v3/conversion",i="tag",a="js-web",c="js-gtm";let r=!1;const d=Date.now();function s(){return window.advertiser_domain}function l(){return window.teads_buyer_pixel_id}function u(){return!0===window.teads_post_message_event_to_opener}function p(){return!0===window.teads_post_message_event_to_window}function w(n){window.teads_iab_consent_data=n}function _(){return window.teads_iab_consent_data}function v(n){window.teads_usp_consent_data=n}function f(){return window.teads_usp_consent_data}function g(){return window.teads_gdpr_advertiser}function m(){return window.teads_ccpa_advertiser}function y(){return!0===window.teads_tracking_allowed}function I(n){window.teads_auction_id=n}function h(){return window.teads_auction_id}function E(n){const t=window.teads_auction_id_forwarded_by\|\|{};t[n]=!0,window.teads_auction_id_forwarded_by=t}function k(n){window.teads_ses

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	dropped
Size (bytes):	545
Entropy (8bit):	5.244164980821216
Encrypted:	false
SSDEEP:	12:6NXPqhV6YIKOfWlIX4A6ZVtw3R1CFlwFBCkBHpnHwOGSS9q:uCuYIDX5iaR1AwDtFASSo
MD5:	8E1D21FD40EE7CBD0EF26CFA42575410
SHA1:	6F68641625E05E9163DAEB97D3F9794993305F6B
SHA-256:	7DF66773DAD77033D7188661DCC25BEC77759EFBF592EEAF0D3B226A37D53B1C
SHA-512:	F6C9C6CF9F5C18396A652697E2D28FC03419CFE44BA4B243B6CE664864A121C86008A7CD4FB987C1A0702DA177AE8B7C7FC6EA487A5516845E65B5F7BEBC8491
Malicious:	false
Reputation:	low
Preview:	import {. setMessage,. initializeLoginPage,. getMarketingWells,. retryLoginHack,.} from "./login-common.js";.import { userMessages } from "./user-messages/user-messages-ifbi.js";.$(function () {. var siteFinityUrl = "https://www.infarmbureau.com/api/shared-content-blocks/contentitems?$filter=Tags/any(t:t%20eq%203e234c5e-3205-6b8a-9f2e-ff03000bf66e)%20and%20Category/any(c:c%20eq%20dd1d4c5e-3205-6b8a-9f2e-ff03000bf66e)&$select=Title,Content";. initializeLoginPage("");. setMessage(userMessages);. getMarketingWells(siteFinityUrl);.});.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	dropped
Size (bytes):	121453
Entropy (8bit):	5.5342244810545225
Encrypted:	false
SSDEEP:	3072:XG4/fEBo6Ix1o0Yaq9MHXrgcIcjVmpIE5v+7hH0MOTonmrdec:XG0p1o0YaBH7gcIcjVmpIE5v+7hH0MOb
MD5:	E7010502041E061D1C9EAFF784779EE5
SHA1:	A3ACE234630FD0BAF2DB3960EDB6773E4E79E1A7
SHA-256:	32485A2A560041182E10794B23CF8326D43AE73B6A79C4CA40875740581699CD
SHA-512:	94A6248371843733DE0656C5D322681C734E2662DAA2AA4FA952A56FF7799A99231DE631564EC4F5089CE46BD0541AB4D41B855E3747F7D8AAE8671A5CBD8401
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var pl=function(p){g.Dq(p,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.QL()).toString(36));return p},Cl=function(p,C,V){Array.isArray(V)\|\|(V=[String(V)]);.g.zQy(p.S,C,V)},x88=function(p){if(p instanceof g.XU)return p;.if(typeof p.cI=="function")return p.cI(!1);if(g.ea(p)){var C=0,V=new g.XU;V.next=function(){for(;;){if(C>=p.length)return g.EU;if(C in p)return g.dx(p[C++]);C++}};.return V}throw Error("Not implemented");},Yd1=function(p,C,V){if(g.ea(p))g.lr(p,C,V);.else for(p=x88(p);;){var N=p.next();if(N.done)break;C.call(V,N.value,void 0,p)}},zoy=function(p,C){var V=[];.Yd1(C,function(N){try{var H=g.q8.prototype.C.call(this,N,!0)}catch(X){if(X=="Storage: Invalid value was encountered")return;throw X;}H===void 0?V.push(N):g.rU9(H)&&V.push(N)},p);.return V},Ror=function(p,C){zoy(p,C).forEach(function(V){g.q8.prototype.remove.call(this,V)},p)},nFr=function(p){if(p.a$){if(p.a$.locationOverri

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2380
Entropy (8bit):	4.699284172538497
Encrypted:	false
SSDEEP:	48:lS3m48dM9QH+WXmk3KOPxU2OPWWGMZRoxoXCOduOxj+P:lum48dM9Qyk35PxOPWW3vdXCOduOU
MD5:	01E04C7CD29CFD8D76558EFE02536B44
SHA1:	E1459BF44C410DCD91C3D1699F7DE5B80E74AE2A
SHA-256:	5554770295EED9E781E11318AA951D9A001AE5D472AFFCBE79931DFFF08E9E61
SHA-512:	713FE31622EB7135AE859CCE955C4E68B2C5154A2E0518B654C27B385047F566DD72624F7168D48329B28D7234B251D3F4AE1AD9892A259359A91F4A50060FFE
Malicious:	false
Reputation:	low
URL:	https://cdn.aws.infarmbureau.com/b2c/oam/scripts/user-messages/user-messages-ifbi.js
Preview:	export const userMessages = new Map([. [. 'UI-1001',. 'We are sorry, your Online Account Manager registration has expired. Please Register again.',. ],. ['UI-1003', 'The account has already been registered. Please log in.'],. [. 'UI-1004',. 'Your Online Account Manager registration has not been completed. ' +. 'Select the link in the validation email that was sent to you and log in within 24 hours ' +. 'to complete registration. If it has been more than 24 hours since you received the ' +. 'validation email, you must complete the registration process again.<br /> <br /> To help ensure ' +. 'successful delivery of all email, please add ' +. "<a href='mailto:onlineaccountmanager@infarmbureau.com'>onlineaccountmanager@infarmbureau.com</a> " +. 'to your address book or approved senders.',. ],. [. 'UI-1005',. 'If the email address provided matches your account email address, ' +. 'an email has been sent to reset your password.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2687
Entropy (8bit):	4.69656787291195
Encrypted:	false
SSDEEP:	48:cqzgleSLMzjTEvTjVfZ6cR1acb8S8L/M1Ny6VhNld9i4FbwaJgB:XgldozXELjJZDr8L/MZNlXS
MD5:	91C8A817C7D550C1FF978356F09CF425
SHA1:	9C67EE2489D68C16E4449C90535C9A8D7F267CF9
SHA-256:	0E3A3E5C24B3B0C475A1FC0CE94EB77B7C6B5A8439625B64315616DC14FA85D8
SHA-512:	432528F487A2A5BC3B25E054B049FF9052C0F61B9AB71913F722F2FFDFAA9A2AE140A3150B8EBBB240637AC975ADA47E86114A2C5E42DD8E7FCEF9EEB4F85504
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="54px" viewBox="0 0 56 54" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 2</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-693.000000, -821.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-2" transform="translate(693.000000, 819.000000)">.. <g id="Icon/Home">.. <g>.. <path d="M47.8330134,31.5001336 C48.4770082,31.5001336 48.9996649,32.0216305 48.9996649,32.6667934 L48.9996649,54.8333395 C48.9996649,55.4785031 48.4770082,56 47.8330134,56 L33.8331563,56 C33.187999,56 32.6665047,55.4785031 32.6665047,54.8333395 L32.6665047,39.6667553 L23.3332666,39.6667553 L23.3332666,54.8333395 C23.3332666,55.4785031 22.8106036,56 22.1666087,56 L8.16675797,56 C7.52159437,56 7.00010004,55.4785031 7.00010

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1200
Entropy (8bit):	5.158667864287214
Encrypted:	false
SSDEEP:	24:2dVB5AALfshNzUDnUFgzvEs4jneDgpt2oKrx:cV/AQfs46grF+EgnNIx
MD5:	F2D04A2CECE6CD872B7D9867B4560A3F
SHA1:	80F9569766CF75E2287958BFF954B96440E16D5D
SHA-256:	81C32CBFDE32750141BCA39DF4C7009F2E116A1C2B771CCC8369F4DA78FEB067
SHA-512:	0F00BE0953A880AF8CE92FE63FDC7D5110B875A6388692A2998D9C72141DE552F2E16CF2FD1B23FCEB7C7C06F4ECE749DAD7B3D3E88DDF70B25C5D2EDC2A9A8B
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/footer/instagram.svg?sfvrsn=a47124ba_2
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">.. <g>.. <g>.. <path d="M352,0H160C71.648,0,0,71.648,0,160v192c0,88.352,71.648,160,160,160h192c88.352,0,160-71.648,160-160V160.....C512,71.648,440.352,0,352,0z M464,352c0,61.76-50.24,112-112,112H160c-61.76,0-112-50.24-112-112V160C48,98.24,98.24,48,160,48.....h192c61.76,0,112,50.24,112,112V352z" />.. </g>.. </g>.. <g>.. <g>.. <path d="M256,128c-70.688,0-128,57.312-128,128s57.312,128,128,128s128-57.312,128-128S326.688,128,256,128z M256,336.....c-44.096,0-80-35.904-80-80c0-44.128,35.904-80,80-80s80,35.872,80,80C336,300.096,300.096,336,256,336z" />.. </g>.. </g>.. <g>.. <g>.. <circle cx="393.6" cy="118.4" r="1

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	993
Entropy (8bit):	5.290277891359698
Encrypted:	false
SSDEEP:	24:E1MCXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1MCXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	5A13A6ACEA2053F0803A679994BF95A4
SHA1:	8B085792E5A6B6496CCFEE8939B262097791A9C5
SHA-256:	5039D00D6C216E14B323E0B0934940FC29123FDB861750AC29F95D46C24D60EE
SHA-512:	9162E9DCB913B47C188F445C5034BDA3232B2E6AD5E839F0ADFAE1CFE255E4F14AF1AB8CDA5301D58ABBBD8008824270A46D88F8BA8B71D6E9C6B292F822DD9A
Malicious:	false
Reputation:	low
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31968)
Category:	dropped
Size (bytes):	53449
Entropy (8bit):	5.207291309972639
Encrypted:	false
SSDEEP:	1536:JWoeU8Edp6kJnaR49DefwM4eA7Erwf3zapyTwhOB:coeU8Yp6kJnaR49DefwM4/7Ers9B
MD5:	F59081902C40DD03031B8C9641DAF5AF
SHA1:	DEE6F40237E10E8FDF3BCBE85F46AB53132D8744
SHA-256:	6ED4B8C931A6E99222E5BAC9A4C3F03A411BC58BECBB981F27711A058684781C
SHA-512:	19F47D1C6566F6B97F8CB185B562F962431FD32858E4823F940808CD854E4CC6EC6360D904491E6CD0A446B113CE840F8763A47C75E58B4DCCEAFDB5022F26C7
Malicious:	false
Reputation:	low
Preview:	var sfDataIntell=sfDataIntell\|\|{};sfDataIntell.constants={sdkVersion:"js-3.1.41",cookieName:"sf-data-intell-subject",docsCookieName:"sf-ins-lst-doc-trckd",sessionCookieName:"sf-ins-ssid",pageVisitIdCookieName:"sf-ins-pv-id",sfTrackingIdsStorageKey:"sf-tr-ids-storage",sfSessionIdsStorageKey:"sf-ss-ids-storage",endpoints:{apiServer:"https://api.insight.sitefinity.com"},headers:{authorization:"Authorization",datacenterkey:"x-dataintelligence-datacenterkey",subject:"x-dataintelligence-subject",ids:"x-dataintelligence-ids",datasource:"x-dataintelligence-datasource",contacts:"x-dataintelligence-contacts",sdkVersion:"x-dataintelligence-sdk-version"},crossDomainTrackingMessages:{getClientGroup:"getClientGroup",setClientTestGroup:"setClientTestGroup",getClientJourney:"getClientJourney",setClientJourney:"setClientJourney",hubReady:"hubReady"},crossDomainTrackingQueryParamKey:"instrck",crossDomainTrackingParams:{apiKeyParam:"a",subjectIdParam:"s",dataSourceParam:"d",timeCreatedParam:"t",sessionId

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=3820817&time=1736526095378&url=https%3A%2F%2Fwww.infarmbureau.com%2F
Preview:	{}

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1100, components 3
Category:	downloaded
Size (bytes):	197512
Entropy (8bit):	7.98066744421351
Encrypted:	false
SSDEEP:	3072:KI0zKCM+VlflYuZym/xE2UogTLMT1hDRqBX/V3tuICFYnKDSUP76K1zu2t4fJmcW:sKGVlflPgw2wqd9rC1bTKRbFqm0
MD5:	8D9CFB102E3F81BBCE7E24B02B03C068
SHA1:	83F0467B56B1D328283D95EEBC51FEE5D7F51459
SHA-256:	26C709F4CA3E49A6DB8F41275DD4779DB00F1A1CBBA6472003952DB5EE230190
SHA-512:	21B9DBCF9796754169344446D61AF9EABC22DB3701D3582141D8F6B50C45D6A25C94F262830DACF6FB136799DE9103112A90BB2192F7668B97AAD81AA4085A6C
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/homepage-hero-images/hero-banner/indiana-farm-bureau-background_125207343-0852-4dc5-bedc-4a47705856ea.png?sfvrsn=683a33ba_1
Preview:	......JFIF....................................,.".".,B)0))0)B;G:6:G;iSIISizfafz................................,.".".,B)0))0)B;G:6:G;iSIISizfafz................L.@.."...................................................B.Q..lX.(-..X@..T......1".YV.Y+F.JiD.im..12....I...d.E.......(. %...""$..3....i....J [-.V....A!....U5....@..DU[D7....h.9.V.e....)`.......P.@@(.b"$...a._.....%.PEU)h...A...YaEE..A`.P.h3f..4).V..,#.cM......A@.R.P... .B.,."#(.DL._....,......R...R...u.......,..%%.R.\..[V%..-.2I.u....R."KK@...T.. .....ab......2$...........@...)h........)....J.......B..X....Br..aw... ...d.[JA@.XT...B(......@A.I#3O.....KZ%....eP.....J)Ie.@4.H@.EE.F.[d...4.,..<..S..h.Z.-V..,.mj...,.......!..A..H.&b_......e.,(R.5-."R.9..KAA7.R ."...l..%..n..) .....m.."..L.u.zt......@.(. .B...A..2..d...k6.K.,,...-XfYE. .PP....PK...ab...Z[m..B..k9.t$......xng........`........ K....d.&k..........B.YU.EX2.YIKVUSP..,..D..--.U..Q@..BF.Z....Y...ye...F.E[.)`.@..%..P....,.$H. ....

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2539)
Category:	downloaded
Size (bytes):	227526
Entropy (8bit):	5.538601083709429
Encrypted:	false
SSDEEP:	3072:7M3a4IwyIJ/r3aAI0HXGWlwvOfyk3pB/OgC6xc+E3OPoKt1Cc9n2i:I9yIJD3awG0Us/NXxc+E3OPoKKcv
MD5:	44A8663B0A76EF29C65621B079BD7FFD
SHA1:	4CA940A7E14789716E853F92595029224FFAC756
SHA-256:	E03F25144D6155C3D20301367392FB3D97751D49A622938C66B54B5D2F0B001E
SHA-512:	AE1D97F3E0BF3B43EAAAF703BBC0CD6831EBFD290C194945CD2FB221B74061679A65E4D7CB6631E667BA02F753716C4AF0D448D72BC7CB75A4B4092D959B9485
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-K8M96N7
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"13",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__smm","vtp_setDefaultValue":false,"vtp_input":["macro",1],"vtp_map":["list",["map","key","oam-qag.infarmbureau.com","value","G-V7PP9GLL32"],["map","key","oam-dev.infarmbureau.com","value","G-53P6B6MDRL"],["map","key","localhost","value","G-53P6B6MDRL"],["map","key","oam.infarmbureau.com","value","G-ZM31Q2H51M"],["map","key","oam-dev.eaststreetins.com","value","G-C2YQ18J3M1"],["map","key","oam-qag.eaststreetins.com","value","G-NX6WFY7ENF"],["map","key","oam.eaststreetins.com","value","G-L6DCKC1Q3H"],["map","key","oam.unitedhomelife.com","value","G-GYBCJ2309S"],["map","key","oam-dev.unitedhomelife.com","value","G-DWFFV96E0H"],["map","key","oam-qag.unitedhomelife.com","value","G-42V84XWXY7"]]},{"function":"__v","vtp_d

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24988, version 1.0
Category:	downloaded
Size (bytes):	24988
Entropy (8bit):	7.9904835891789086
Encrypted:	true
SSDEEP:	384:POmPHuTR2TveH2nT9+quY/5el4RNfXS0evm+nAxiLV3o79Qr6XhUI9RQcH83U/:tHs8v1wO+nAxiL279E6XNTQcH83U/
MD5:	2D70ECFBA83F1B8C993D7497DB083BB0
SHA1:	017A59AB067F511336A885E63BF6358543A1FB95
SHA-256:	606AEBA72580863B6F94F94A6B9D4BDA72F17FF65E4ADB951356D2A7F545707E
SHA-512:	CC6576C5A8EEE083A51B0F2F2ED824B8BA58F24B574384C74BEB7B522500846AF13256A9D3D5C0D2B4D0007E3FF3AD6FDD46A39BFA893282AE34B35371E7549E
Malicious:	false
Reputation:	low
URL:	https://cdn.infarmbureau.com/farmhand/V1/fonts/44e7b0fa-6c8d-43c2-b19e-f1e3ce9ea57c.woff2
Preview:	wOF2......a...........a6........................?LINO(.`..`..P."..f.....8....6.$..@.."..D.. .... ....}.G..wP!..GK....sS.[.u'3...=x.q{..6...G.....s..1.`....A.....Y.I.....R.D..d...}V...~8GX&..R.WS5.]f.Y4...G...5...U.....u.[..........za.O.S....N.S..\..T..!h#h.hX..?....._}..e.u.o......f....~..j...y.Ln..0.%%%...}...'./....[..1....l...QYa....l6.E!ilsC4g.$.d......8.,.$N.$..V4-uZ.P.R..:m....'...o.z}...?.{.,Bh.P}......R$q&.t\|]...%....WR....C..$.d.m.u`.......K2......e......@...$.v.W.....'.l<...2.y.....<.6.......s......].....<C.#\|.t.-.[.i....s.w.\...,......PP..Z:L.v.t...xn.\..>.$(.G.4...[..1s.a....q.L...N...5..i.....>1..=.}TH......xEX..V...}.....p..3.H.+X...0.f..}.....y...Y.c{7..!z=A..._.>..Y.Y...r.>.......@]:..........`.]yE..z..9......2.Z5`V...^.z...T.K./=.z..]>.v.<#..4....4..\A.Y@\|.EC.._uk....d..e.u&Y4.....R.ms.2N.x..KR_...K..]vz..#....-mu.0.t...P.W.R.Ujun.D.=...l..@..sZbI..\i(..p'.B./..giw._.R..`N)........lQH3*..0.....EA..........~..\.....p.... ...j...F.Y'"..

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	dropped
Size (bytes):	33718
Entropy (8bit):	5.600671129958146
Encrypted:	false
SSDEEP:	384:uYRgyq+e8L9x9KWcdwxEUpW84Gtry4BL8qyCkm3paPSbq18LqWH3X2Ckete8:2+1L9OYEUD49fHCddbWokete8
MD5:	ADFCF8F7164FCC5E3118337503FE7EBD
SHA1:	5E610A5C07B94B0AE755440EFD315652A09432CF
SHA-256:	FA0CA1B6BE30E279F3DE76BFFC8F6781352A8D1A6798D5EEE82D321C6705B13A
SHA-512:	DEF82F81F9444C71D710A7CC7BE6837765488E0CDA9647847034924F726F379288F15A6EC916A483C33B0D46B9C83EA5F76E960780A351F56E0162C99A2402E8
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var $qy=function(p){p.mutedAutoplay=!1;p.endSeconds=NaN;p.limitedPlaybackDurationInSeconds=NaN;g.kB(p)},LSv=function(){return{L:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},j:[{L:"path",TB:!0,B:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3 -1.01,.80 -1.21,1.40 l 0,-7.90 -3.28,0 z

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	dropped
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=312, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=600], baseline, precision 8, 600x312, components 3
Category:	dropped
Size (bytes):	108230
Entropy (8bit):	6.919246089980465
Encrypted:	false
SSDEEP:	1536:NMRhXMRhnfBXdwlmNEMVmh1hhDpehkhZoDMRzwlVWSSvsQ:NMRhXMRhclUdSeaoDmklOvsQ
MD5:	430BE060AADD561BFD0DAFA7708A4903
SHA1:	73E37BA2ED291E7B8F8437A1DEA6EBFAE73D3258
SHA-256:	30637E34FFAAA8DD28293912AEA746CFB574F598E9F5CAB10B0644BC4A633EFF
SHA-512:	E011348FCFCAE88397DC295018C433E0EE8AFD91C15325C6A2D82D3103F5F930F37D3631313446313BB390B182DD8E84CE6C42F43934AFABE3BA5D901A16ADB3
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...............X...........8...........................................................................(...........1...!.......2...........i...........$..............'.......'..Adobe Photoshop 21.2 (Macintosh).2020:10:05 11:54:33..............0221....................X...........8...............................r...........z...(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...n.^)..$....;....?.j.....H.....$....a8.+A...'S.^s..v......;.j..9...a2.....

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	83350
Entropy (8bit):	5.446564930743328
Encrypted:	false
SSDEEP:	1536:R7hpwPC9ZVK01QYaKTZ02LKVsdmpyKcicIBUt:R7V9ZVKBYaKj8wKcHIi
MD5:	5D0141A99966CC0A61C7A31DAEDCA623
SHA1:	69696E8EEA5722D85B384A4840610E50A952FE19
SHA-256:	7592C419B3ABD6329C5190F898BBCF4DB133C0A21CD18107EF69144A34D5EA4A
SHA-512:	09ECEFE7107E1CED3E8E2388324E1F4100F2BFB9B8AE7C92FC228635437448A67C3CC8FF2D2DD1F6642B68EA8E57E34C02BDA2374663D72980821C89F2828F9E
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1414
Entropy (8bit):	5.048860604703411
Encrypted:	false
SSDEEP:	24:2dVB5AALfshNz6n7P14xxyaS9WgEIFFlMY08ltOwcmel7zGXOCq0ewSs4:cV/AQfs2n7P14HEWgEIFrllSWXIpw34
MD5:	89A69101E234DB30C84FBBCF092F817A
SHA1:	2E629563D0820853ABEAC87C1A74D798046214FD
SHA-256:	EC3897CB13CAEAFAE7BE0FF73792E4D89FB0CF705B2B9C9F76741E9768C37DC8
SHA-512:	C2C12EF8F6DC6CA604C1E9D52B70BAB364548D9B2E8B3772EA217098859FEDD37EF9974853DB26045294DE7CF14A52A997C08C151D88B87C40E2355C725997B5
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/default-album/icons/twitter.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">.. <g>.. <g>.. <path d="M512,97.248c-19.04,8.352-39.328,13.888-60.48,16.576c21.76-12.992,38.368-33.408,46.176-58.016.....c-20.288,12.096-42.688,20.64-66.56,25.408C411.872,60.704,384.416,48,354.464,48c-58.112,0-104.896,47.168-104.896,104.992.....c0,8.32,0.704,16.32,2.432,23.936c-87.264-4.256-164.48-46.08-216.352-109.792c-9.056,15.712-14.368,33.696-14.368,53.056.....c0,36.352,18.72,68.576,46.624,87.232c-16.864-0.32-33.408-5.216-47.424-12.928c0,0.32,0,0.736,0,1.152.....c0,51.008,36.384,93.376,84.096,103.136c-8.544,2.336-17.856,3.456-27.52,3.456c-6.72,0-13.504-0.384-19.872-1.792.....c13.6,41.568,52.192,72.128,98.08,73.12c-35.712,27.936

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/573981699?random=1736526093885&cv=11&fst=1736526093885&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11811)
Category:	dropped
Size (bytes):	13104
Entropy (8bit):	5.3967713107738575
Encrypted:	false
SSDEEP:	192:kbnL75tmjHCR/UeHjXWb2pTOnstdo5CpcNNOWqRObyAzJ3NSp:kbnLGjURHjXo2BtcCvOby0J3NSp
MD5:	9543B86D219219CA0E7B8C68C54B55DC
SHA1:	AEC345FF930DBCED1D12A24D3DF4984D1CE42D0F
SHA-256:	AAEBDE9D4ED12321F3BE430E8CFD7F608DA98CFF530FE43F30CCED001E3F1D98
SHA-512:	8EC099C49447D58C40963056CB4B35DA1189C417E20FD43F67DBB9F2FDEC5885DF62646C19B55A45D72DDCF83D35FA7414203664D18CB987364243B6870D6B75
Malicious:	false
Reputation:	low
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":31017,"rec_value":0.0,"state_change_listen_mode":"manual","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","csq_theme","error_reporting","feedback.embeddable_widget","feedback.widgetV2","feedback.w

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1945
Entropy (8bit):	3.9744026244812622
Encrypted:	false
SSDEEP:	48:cHGSp+rnA/n/GJRg5ZLptI3JaKR1V5oexJ/Z:CB0rnYn/eIZLpt+pTfoOJh
MD5:	2FB7147E7461F6E38BBD7E56D4FA3DFD
SHA1:	D207C485BA00A3539053B2B62A0D3DB866B77596
SHA-256:	56F6843B96B6957217D20C57A5FD48B90A3ED1DC70A152CD71A9EC7743AF65F3
SHA-512:	0B37D59A31B3F7151DFE174072FBE85AF5043F34E8D1084893D72F319ADE7F4A6656156B62F8D77401ECFEEE24FCBDCDD5D505B45FB1F3528DE361CC53EC1814
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/header/menu-icons/umbrella.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="16.129" height="19.355" viewBox="0 0 16.129 19.355">.. <path id="umbrella" d="M21.112,9.113a.315.315,0,0,0,.014-.067s0-.009,0-.014A8.073,8.073,0,0,0,13.387.976V.323a.323.323,0,0,0-.645,0V.976A8.073,8.073,0,0,0,5,9.032c0,.005,0,.009,0,.015a.3.3,0,0,0,.014.067.344.344,0,0,0,.016.055.322.322,0,0,0,.032.047.318.318,0,0,0,.044.054s.005.008.009.011a.311.311,0,0,0,.038.021.3.3,0,0,0,.059.032.3.3,0,0,0,.069.014c.014,0,.026.008.04.008l.014,0a.315.315,0,0,0,.071-.014.291.291,0,0,0,.051-.015.32.32,0,0,0,.05-.034.327.327,0,0,0,.051-.041s.008-.005.012-.01a2.192,2.192,0,0,1,1.687-.851,2.192,2.192,0,0,1,1.687.851c.006.007.015.01.022.017a.3.3,0,0,0,.02.025A.332.332,0,0,0,9.03,9.3a.289.289,0,0,0,.049.026.3.3,0,0,0,.08.017.348.348,0,0,0,.035.007l.015,0a.484.484,0,0,0,.112-.027A.291.291,0,0,0,9.366,9.3.274.274,0,0,0,9.4,9.28c.008-.006.011-.015.018-.023a.28.28,0,0,0,.024-.02,2.194,2.194,0,0,1,1.688-.851,2.166,2.166,0,0

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CO-P2ujH64oDFU-jgwcddVgQ1Q;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=*;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1204
Entropy (8bit):	5.146289402157772
Encrypted:	false
SSDEEP:	24:2dVB5AALfshNz1UfEKBspac/2sUbDRTM6jLqULYMT:cV/AQfspORBzcuDPRTdcQ
MD5:	59A4C185A3E6549751EC7C0256DC11A4
SHA1:	77A6C5CF4167770ADC208307AF989EEEBE9DFC65
SHA-256:	720E49E890B2F552F29CC56998A566FBF9871B498155146EC3E428C575B228E2
SHA-512:	75E6B7B61B05114C9CD4C6234B776F4BB2886206A0A1845C6EF428ABB60CC07FFE1F62ED4B0C65B79D89D46D0DE79B25C76ECFB1A11807F6474FE29882BCCE13
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/footer/youtube.svg?sfvrsn=2a7424ba_2
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">.. <g>.. <g>.. <path d="M490.24,113.92c-13.888-24.704-28.96-29.248-59.648-30.976C399.936,80.864,322.848,80,256.064,80.....c-66.912,0-144.032,0.864-174.656,2.912c-30.624,1.76-45.728,6.272-59.744,31.008C7.36,138.592,0,181.088,0,255.904.....C0,255.968,0,256,0,256c0,0.064,0,0.096,0,0.096v0.064c0,74.496,7.36,117.312,21.664,141.728.....c14.016,24.704,29.088,29.184,59.712,31.264C112.032,430.944,189.152,432,256.064,432c66.784,0,143.872-1.056,174.56-2.816.....c30.688-2.08,45.76-6.56,59.648-31.264C504.704,373.504,512,330.688,512,256.192c0,0,0-0.096,0-0.16c0,0,0-0.064,0-0.096.....C512,181.088,504.704,138.592,490.24,113.92z M192,352V160l160,96

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	890
Entropy (8bit):	6.0482049379392055
Encrypted:	false
SSDEEP:	24:CVvG5sPDYrJwNaiqpmtpZIKzjPXLKEMrXlEfl9:wG5HrJ1hmt3d/7KEKGT
MD5:	C1144663ED14FB33F90F6F3D0AC19064
SHA1:	8C8F35E19A69DE32D46FA90768580C7EBF927081
SHA-256:	F95F6AE6B1B7D778AA48166A659EA5437B62189F088A943A1EDB0F90F5CF639F
SHA-512:	11BDB2406316E09594D05342105A7AF4A88E664F95066EDE90308477EB9A540CFBBADFEB8640A5B77646CFD2C6DCBE78A61E34E8BD0E88F3ED283E2CBBE9B571
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE......................................................................................................................................../".1$.1$.%....................(..1$.2%u...............0#.2$,..............,...2%.1$.1$./"..................c...2$.1$.1$.%...........1$......O...XtRNS...!.#...........b..................B<........Du..................x...X...!%....'..4....bKGDZ........tIME.........[.....IDAT..c` .021....+++.;...'.7........10..D....8..g....#$...4..lD...............V........,...1...i...E...5H..-.JD..}d..#..'g..WW7w.O/o3..._?..........0 #.9........ C.-...%tEXtdate:create.2018-12-20T20:28:01+01:00......%tEXtdate:modify.2018-12-20T20:28:01+01:00.=J...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1327
Entropy (8bit):	4.965576568551669
Encrypted:	false
SSDEEP:	24:2d/A9jgkZc92yTGMg8UuNASGXBhxUqWL+8NGs6vIwthzbwFpMy:c6jG92Np8uBcqWK20IYhAFpMy
MD5:	DCB7C9E5101911D250C951CAA083C3B0
SHA1:	EFFC86D1D3E957DEF5205DCA21C110B74EF4E105
SHA-256:	5DFA0719B3CF0A14B44A751F71EE2802A0B4B88C07AD282E23FBD345B9F11AC6
SHA-512:	64A59513BCDF69AA6FF52F0F42AAD5ECFDCBBA973D9390B24B3011999AFD416734AF74B46E3099EE771BD17148B10DD96E4B8A6BD9CE6C07E5B015B7007B655B
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/header/menu-icons/life-icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="15.634" viewBox="0 0 17.867 15.634">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(0 -0.667)">.. <g id="Needs-Assessment---Intro" transform="translate(0 0.667)">.. <g id="CTA_Item" transform="translate(0 0)">.. <g id="Icon_Life" transform="translate(0 0)">.. <path id="Path" class="cls-1" d="M4.873,4.667A4.968,4.968,0,0,0,1.415,5.938,4.753,4.753,0,0,0,0,9.478c0,2.363,1.618,4.351,3.471,6.089s3.988,3.267,5.158,4.6a.41.41,0,0,0,.609,0c1.17-1.331,3.306-2.86,5.158-4.6s3.471-3.726,3.471-6.089a4.753,4.753,0,0,0-1.415-3.539,4.968,4.968,0,0,0-3.458-1.272,4.708,4.708,0,0,0-3.109,1.1A.4.4,0,0,0,10,6.489a.409.409,0,0,0,.419-.124,3.92,3.92,0,0,1,2.576-.9,4.148,4.148,0,0,1,2.9,1.052,3.913,3.913,0,0,1,1.161,2.957c0,1.995-1.42,3.82-3.217,5.506-1.673,1.57-3.605,2.981-4.9,4.347-1.3-1.3

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9247
Entropy (8bit):	4.138713130030993
Encrypted:	false
SSDEEP:	192:yidv7YwnNGfRa+ll7XQ4IhLL+FHF4jE3khHsVW0Wh5w24/OFHWBfsjhYjf:VSLXQBhLL+GZh5w2NOiSjf
MD5:	4688535D818B3C4C4CF29C83A384C6D6
SHA1:	6569CDC41ABAA59E75106A42800DE6CFF5FA3434
SHA-256:	E9ADA5170E52929DB8489E53D32DBFDF3A9BE9D1EEA13343D582488ED6A5A994
SHA-512:	E55486674034C2E8FBFC6CAFFD024CCCB24E9D936824E7D1FE3868CE032FDF467F57E9AACD025A0422F91B37FED8649CFB539D1105509BD6231B6B3D3636E551
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="56px" viewBox="0 0 56 56" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 4</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-693.000000, -1083.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-4" transform="translate(693.000000, 1083.000000)">.. <g id="Icon/Farm-Crop">.. <path d="M43.1666667,14 C43.8109989,14 44.3333333,14.5223345 44.3333333,15.1666667 L44.3333333,36.1666667 C44.3333333,36.8109989 43.8109989,37.3333333 43.1666667,37.3333333 C42.5223345,37.3333333 42,36.8109989 42,36.1666667 L42,15.1666667 C42,14.5223345 42.5223345,14 43.1666667,14 Z M43.1666667,39.6666667 C43.8109989,39.6666667 44.3333333,40.1890011 44.3333333,40.8333333 L44.3333333,54.8333333 C44.3333333,55.4776655 43.8109989,56 4

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25245)
Category:	dropped
Size (bytes):	25246
Entropy (8bit):	4.02663208613348
Encrypted:	false
SSDEEP:	384:KdCTualZaOGpDmseaMDtF3dPyfp7nDUpMJzCO154L2l6g8WzFNCT00wZ+ht3Wfni:K0qpDfG5datIL2csYP3WfmA/QbL3
MD5:	8219DD37BB0283F9755BDDED0C9F2D22
SHA1:	30F6DFA2E62BF39E67ECBA22E012EDECCA29F9DD
SHA-256:	C8879B289784C2F0E524C601EE26BD458AB9D35A527C22CE582904004E47D018
SHA-512:	C8455AC979A15AFA586E05D104E268D5DFD5B620376F62814AC709852D3B214F1A8E7F22EBB1BF52654148644BD7BD9EE8AC5E940848580EBCBCEA887455BEA1
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";"function"==typeof SuppressedError&&SuppressedError;var r,n,t={IT_TREATMENT:0,IT_ALLOW:{7408:!0,7904:!0,9517:!0,9724:!0,10596:!0,12144:!0,12799:!0,14413:!0,17974:!0,18274:!0,19850:!0,22871:!0,23213:!0,23320:!0,25533:!0,25751:!0,27749:!0,28731:!0,28827:!0,30332:!0,30463:!0,30879:!0,31956:!0,32249:!0,32808:!0,32842:!0,33598:!0,33765:!0,34071:!0,34576:!0,35076:!0,36215:!0,36504:!0,37536:!0,38262:!0,38950:!0,40394:!0,40735:!0,41424:!0,41581:!0,41761:!0,42105:!0,42599:!0,43442:!0,44e3:!0,45040:!0,45593:!0,46649:!0,47169:!0,47724:!0,47807:!0,47813:!0,48472:!0,48816:!0,48909:!0,52235:!0,52304:!0,54077:!0,55730:!0,55970:!0,59505:!0,62142:!0,63483:!0,64091:!0,66664:!0,66684:!0,67900:!0,68098:!0,69263:!0,70131:!0,75233:!0,78242:!0,78672:!0,79374:!0,79891:!0,81588:!0,83791:!0,85969:!0,87805:!0,88452:!0,89013:!0,89458:!0,89622:!0,90301:!0,90820:!0,94343:!0,96365:!0,96816:!0,96853:!0,96878:!0,101394:!0,101830:!0,101989:!0,103646:!0,104326:!0,104825:!0,105409:!0,107508:!0,10

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9211
Entropy (8bit):	3.786149399364375
Encrypted:	false
SSDEEP:	192:k/b7DfPk7SNeaVSw8vm/LsX+oUmvB53xstynmH:+b/k7el8vm/W+oUAgynm
MD5:	B35FB28F35C438BB25C0B180B39AF5D5
SHA1:	3952E8CACE98756E2E730240EEC14B6BE4516A78
SHA-256:	E272376876019A54DAF5C755C7BC9208FEDE526EFB091D30340B0BF66283FB59
SHA-512:	605D44E8047DEAF055B86DE606F56244C97CD7D82124DA7DC702A3730CFB9E0589EE2BAB60460ADEC16B85E4F857649D1F7DA5409A8F612E67DFFC7EED1A486C
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/ResourcePackages/IFBIRedesign/assets/dist/images/inside-story.svg
Preview:	<svg width="104" height="14" viewBox="0 0 104 14" fill="none" xmlns="http://www.w3.org/2000/svg">..<path d="M0.17 0.94C0.17 0.82 0.23 0.76 0.35 0.76H2.636C2.756 0.76 2.816 0.82 2.816 0.94V12.82C2.816 12.94 2.756 13 2.636 13H0.35C0.23 13 0.17 12.94 0.17 12.82V0.94ZM5.16219 0.94C5.16219 0.82 5.22219 0.76 5.34219 0.76H7.50219C7.63419 0.76 7.73619 0.82 7.80819 0.94L12.1282 8.644H12.2182V0.94C12.2182 0.82 12.2782 0.76 12.3982 0.76H14.4322C14.5522 0.76 14.6122 0.82 14.6122 0.94V12.82C14.6122 12.94 14.5522 13 14.4322 13H12.2902C12.1582 13 12.0562 12.94 11.9842 12.82L7.64619 5.134H7.55619V12.82C7.55619 12.94 7.49619 13 7.37619 13H5.34219C5.22219 13 5.16219 12.94 5.16219 12.82V0.94ZM21.0791 13.198C20.5991 13.198 20.1251 13.15 19.6571 13.054C19.2011 12.97 18.7691 12.856 18.3611 12.712C17.9531 12.556 17.5751 12.376 17.2271 12.172C16.8911 11.968 16.6031 11.752 16.3631 11.524C16.2671 11.428 16.2611 11.326 16.3451 11.218L17.7131 9.652C17.7851 9.556 17.8751 9.55 17.9831 9.634C18.3911 9.958 18.8651 10

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	downloaded
Size (bytes):	301733
Entropy (8bit):	5.563174986194605
Encrypted:	false
SSDEEP:	3072:F03a4IwyIJ/rNaRnO0YNGzlwvOfyk3pBuYgyzOgMiExYx2wE3OPoKSpQ2j2i:29yIJDNaRGGpUsiyzNM8x2wE3OPoKS+K
MD5:	ED23DE98FF37A1D3ACF38ACE12E6AFB9
SHA1:	554E37FD2CBA32B4DF28C2BA0223AA8ED92FC075
SHA-256:	D7D4B454ED3D71EA648F4425F71D2D45CA1A4A8E104127BB6B3BF408EA686AE9
SHA-512:	96B22AB55F666DDE55C5E489707DD331787194DA128C6B53D9ED295A1DFCF671E88DCD98098D64511F737FD92E69B30056E88DA1A94D910257B53B9D601C488E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-573981699&l=dataLayer&cx=c&gtm=45He5190v76386024za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":17,"vtp_instanceDestinationId":"AW-573981699","tag_id":11},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40444)
Category:	dropped
Size (bytes):	511347
Entropy (8bit):	5.61104063756594
Encrypted:	false
SSDEEP:	6144:n4JAi/qWD69yIJDtxat+GtUskxzNM9x2wE3OPoKoUB4972jAYqmfD:4JJ/MJZ4tvINM9AeJy7vmr
MD5:	C8C14F7B2F426F1CE6A39509F8A00593
SHA1:	89AEA972C30E6BE8E7C5704FB4AF10B64DF71D63
SHA-256:	F6705805925CC49E83E533999941CF8448F429A0FA34BA914B1F837B03800940
SHA-512:	384B8BA9DF6FFE3024048EDD331D6A9CD8DD0FB30588985253B7D449F10346722DFAAD32BAC5EC3B7F978107EF915424DEFAE868463DAC9515FF3C184F2261E3
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":74,"tag_id":9},{"function":"__ogt_ip_mark","priority":64,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":11},{"function":"__ogt_1p_data_v2","priority":64,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_aut

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	339582
Entropy (8bit):	5.620224928082496
Encrypted:	false
SSDEEP:	3072:avUSCmK9i0H108liQNie0rw5RMTu7Vj6GvBoNJyMf:a8SStH108lNNt0rSRMy7VjXvu6+
MD5:	9965EC042D533FB56BAFC3BEA2135437
SHA1:	6F8297E0E9B924B271F511AC2039D0A9C2788904
SHA-256:	13A9629223335969B254D033D51FB9D5115DB4F22E2163488C6FCC2E7E6EBD39
SHA-512:	E37649EF89A72B0487711AEE18D3D0B02B843C63722B72D2C0DE5D561835BA5D9E2EAC6ACA92CDF9707918C202DF6AD5CC17BF8745DEAB5B32B3406C7F674CEC
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=da(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4480, bps=182, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, width=6720], baseline, precision 8, 509x339, components 3
Category:	dropped
Size (bytes):	151062
Entropy (8bit):	7.937371403026828
Encrypted:	false
SSDEEP:	3072:SdWyV84vXsB0/+JtRB25DbMJUsdADmoCNf:tRgXqTJt0MJUs9oof
MD5:	F799CDE9B833289ECA2B79217D8BB4F7
SHA1:	861B97BB8B30C4D9A993AA9AC32A5D781A770FBB
SHA-256:	C6E1A1074FD199CE3E6DDE771425C6E09C456E883961A0747C29A2C96EB9B055
SHA-512:	0ADBD93BC65DD31C34559C8FB145265B0D1CD517247C90A5A92D1E63A80178A76846B44B74FA37B13EB0B29557FD359A7B5DA034A67E4779D325E74A6B165095
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,...."oExif..II...............@...............................................................................................................(...........1...$.......2...........i....... .............Canon.Canon EOS 5D Mark IV.H.......H.......Adobe Photoshop CC 2019 (Macintosh).2019:07:05 12:59:42..!........................."...........'....... ...0...........2....... ...........0231................................................................................................................................94..........94......................@..................................."...............................................................1..........2.......8...4.......X...5.......t.......................2019:06:16 13:19:01.2019:06:16 13:19:01.+02:00......@B......@B..........................UU......UU......078053006663..................................20mm F1.4 DG HSM \| Art 015..0000000000........................................(...................................

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	8919
Entropy (8bit):	4.257373054113982
Encrypted:	false
SSDEEP:	192:OrNi1ulRQGrxMUFww4Fw1P4rn/PNcQcWTk37M1zbXT:OskR1q5w1mcQcWTk37Mpj
MD5:	F2A362804B5C7F370506F55CC25484D8
SHA1:	29DB8D2879F9B6BF71B862969E1600CE6E03D853
SHA-256:	5CFBC8D0CA0DF46A5731865C0620B86104DFD3070498D295C0F917CA7123DFAD
SHA-512:	222E8155AFB67BD8390F84D71B881AD012B6EB150E033FBFEC370CFB0643866F5B2B7EEAA3F918DD556D5B7530DFC6C9AC1E3955AD073E3D18CE2EFB4809FB2E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>. <head>. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <meta. name="viewport". content="width=device-width, initial-scale=1, shrink-to-fit=no". />.. <title>OAM</title>. <link. rel="stylesheet". href="https://cdn.aws.infarmbureau.com/b2c/oam/css/badge.css". type="text/css". data-preload="true". />. <link. rel="stylesheet". href="//cdn.infarmbureau.com/farmhand/V1/consumer/theme.css". data-preload="true". />. <link. rel="stylesheet". href="https://cdn.aws.infarmbureau.com/b2c/oam/css/ifbi.css". data-preload="true". />. <link. rel="icon". href="//www.infarmbureau.com/favicon.ico". type="image/x-icon". />. </head>.. <body class="login">. Segment Pixel - ifbi.customer.exclusion.sgmt - DO NOT MODIFY -->. <img. src="https://secure.adnxs.com/seg?add=5001888&t=2". width="1". height="1". style="display: flex". />.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (6952), with no line terminators
Category:	downloaded
Size (bytes):	6955
Entropy (8bit):	5.009445363344897
Encrypted:	false
SSDEEP:	96:oHX7uqok98PvgyjG4fZJ1Sw/Tslz2S/4+d97s96zpeB7ZQHCnTyUJY4Dd:oruqWBa+J1B/T8zFNg6wb98A
MD5:	C03E86FC76A8375FE41A754006EE1407
SHA1:	48875D16428F9323052E5C5A8F516D14A5F001D9
SHA-256:	51089E01E3673C42219CC9EBA2CAF10C91F8A5C92C8C17AB123A7EC12E749872
SHA-512:	4FC1708F4F370E9810478754AD0A19E60858090680C4F334308AC58DC9118F9A70CD098C2D560A3E7792EAC6BC214DA9F235CCB2B273EFA85D98A12BA3E0EACF
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/WebResource.axd?d=HtQyXelCu6mzSPcVcvK_BigCsvhj3k9AyASkTLjzpE6ZzTM8CyelTzobRwbtiayklPS3tRPWiC2Mfac5xrEjhEkbRYdW8mst-e31IIzbJxiFQCEg4TekxOM93tmByJ7y_Rw0R7xpeLjRkl3Xg4lIGeW0fLIRRijq3NA77zscXCl-lF_3Z_vEfc6gdWAsAUV7mwkYARkkqqmWE_yj2UzHtJHrfYoIYOPAjdO9iVqiUSI1&t=638343388180000000
Preview:	.InsightInitScript = { _settings: null, _client: null, _createClient: function (t) { InsightInitScript._client = new sfDataIntell.Client({ apiKey: InsightInitScript._settings.apiKey, source: InsightInitScript._settings.applicationName, apiServerUrl: InsightInitScript._settings.apiServerUrl, trackingCookieDomain: InsightInitScript._settings.trackingCookieDomain, maxAgeForTrackingCookieInDays: InsightInitScript._settings.maxAgeForTrackingCookieInDays, slidingExpirationForTrackingCookie: InsightInitScript._settings.slidingExpirationForTrackingCookie, trackYouTubeVideos: InsightInitScript._settings.trackYouTubeVideos, trackVimeoVideos: InsightInitScript._settings.trackVimeoVideos, crossDomainTrackingEntries: InsightInitScript._settings.crossDomainTrackingEntries, sessionLengthInMinutes: InsightInitScript._settings.sessionLengthInMinutes, trackPageVisits: !0, trackVideos: !0, instrument: !0, trackBrowserInformation: !0, trackDocuments: !0, docsHrefTestExpressions: InsightInitScript._setti

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53624)
Category:	downloaded
Size (bytes):	54903
Entropy (8bit):	5.710715163123397
Encrypted:	false
SSDEEP:	768:jrBpR5A/yvsBpUrgmgGVbddlDCIAJBWFrevESaeOJV24Lcc6pXQUpncsunF:jrLAnC8m13dwIACrKYJVVT6pH2F
MD5:	812113DB16365B6B4783F3425982B6F4
SHA1:	C6A80834B26E7E52053C588EF27DFBE61754D628
SHA-256:	F29F9952DD8EFEBE88BA66394F3518D9167842F12D55FBDFFCC6180E3A8F2B73
SHA-512:	DFA937F76AF9919AC36B9FEB6EC2FF9F0565810909967F38380A7E332FBE35B9381A46E6FD1AE46AE026F2FAF15E4F1D658C8D0DBF73A99997EE55E837DE86CB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/8p-ZUt2O_r6IumY5TzUY2RZ4QvEtVfvf_MYYDjqPK3M.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function X(w){return w}var D=function(w,l,W,b,z,r,A,Y,c,Q,U,t){for(t=47,U=12;;)try{if(t==87)break;else{if(t==l)return U=12,c;if(t==47)c=A,Y=J.trustedTypes,t=37;else if(t==11)U=12,t=b;else{if(t==31)return c;t==b?t=J.console?w:l:t==W?(U=33,c=Y.createPolicy(r,{createHTML:k,createScript:k,createScriptURL:k}),t=l):t==37?t=Y&&Y.createPolicy?W:31:t==w&&(J.console[z](Q.message),t=l)}}}catch(E){if(U==12)throw E;U==33&&(Q=E,t=11)}},k=function(w){return X.call(this,w)},J=this\|\|self;(0,eval)(function(w,l){return(l=D(29,24,41,25,"error","ad",null))&&w.eval(l.createScript("1"))===1?function(W){return l.createScript(W)}:function(W){return""+W}}(J)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64394), with CRLF line terminators
Category:	downloaded
Size (bytes):	255004
Entropy (8bit):	5.159727244731597
Encrypted:	false
SSDEEP:	3072:1DPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:lNdIVWjNS9cdzAV
MD5:	2F88A274C37F92311B7D67ADDF20F9B3
SHA1:	60BFAA672F3BEDA0AD1A68271260A41C007EA567
SHA-256:	0CCB877C24002BBF8CD3E5D108E45894EF99160A5AF07D2514E9E856B5A0051C
SHA-512:	3E216B907D61C8166658E5962D99AC1B56431E216BBDBBB9357F861D3F2D1E53063AA3A8C30BCE6A217EBEF82B139154893D66EF79B36B5E58B4A4988252767F
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/ScriptResource.axd?d=Uf8BQcxRshYGUr_fjsqPCBSdjzXOm_t5et9A1wGjARLGg2L5Ezgga_iZnwtZ8RB6l6Q1M8i7GmOf-IlJG5cMmNfEEPOhyQY7YWTF770_Yo6T82I7fR9JwEfzW2mekqS_OLcTtrBVyYpFm6pC69AFXN_RS7_tPK1Rhv2mGyj6T3XiJSqAuOgFuDXVDD7x_G0j0&t=7ed91ff1
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14.. http://jqueryui.com..* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sor

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/api/myagent
Preview:	null

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	364
Entropy (8bit):	4.561528284615616
Encrypted:	false
SSDEEP:	6:2LGa3ymyCE//MzGCFiM1wBJPwcQK5DrIt6xfeGYqX3OLGhw47Jsr4z+LibIEBE7L:2f3ymyCEIiMRhykgIaOEsrq1EiE7yyyu
MD5:	45100DDBE4FB816CA7BA9F16F494964A
SHA1:	B7A62A6E65E6CBF915B895CE14952250387295D9
SHA-256:	CCE2184EC089BABC70DED47B8474C543F6A5FF013E4BFD9DBAE8689489BB13BA
SHA-512:	08D730DB7FF2E5EE9BEF496CAC3341ECDEC96D579FD034087813FC9CBC87008824EE9577409BCB6002815FD441A7A05EF1B860A6340E59AFEF5181CB2665D674
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, false, false, false, false, false);..

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2270
Entropy (8bit):	4.785326134056941
Encrypted:	false
SSDEEP:	24:2d/n5dkZc9NTPBG4cGt8ZbgxcWpbhNgmdJkRT4gFW0JOPmFvgWNfqLPUOW6Jk3kn:cB/9N0RYmbwJkFGKOXCwyZ07ipiWlKDL
MD5:	BDF9568BC1FFED790957E8EF488F84BB
SHA1:	1CC0B2DEE2B1893B042A771F9212FED7BF9E99BE
SHA-256:	EF23B8158AAB0F4ADB85E6C9E9CAB37A18A2525BBBF63CBF73412CC9A9FF0EC7
SHA-512:	2C43603E586745DAADD99B2262B350018E928180124972D4A64835F22601683346219A294F421ADDFB71FD8DCE11E059B6477849198275FF901502FB49383F4B
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/header/menu-icons/car-icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="16.867" height="13.801" viewBox="0 0 16.867 13.801">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(-0.333)">.. <g id="Needs-Assessment---Intro" transform="translate(0.333 0)">.. <g id="CTA_Item-Copy" transform="translate(0)">.. <g id="Icon_Auto" transform="translate(0)">.. <path id="Shape" class="cls-1" d="M8.467,19.267v.767A.767.767,0,0,1,7.7,20.8H5.4a.767.767,0,0,1-.767-.767v-.767H4.6A2.335,2.335,0,0,1,2.333,16.88V13.944a3.616,3.616,0,0,1,.861-2.354.767.767,0,0,1-.646-.757V9.3a.767.767,0,0,1,.767-.767H4.633a.77.77,0,0,1,.3.061A3.62,3.62,0,0,1,7.921,7h5.815a3.347,3.347,0,0,1,2.292.951,3.7,3.7,0,0,1,.629.734.768.768,0,0,1,.458-.152h1.318A.767.767,0,0,1,19.2,9.3v1.533a.767.767,0,0,1-.767.767h-.087a3.616,3.616,0,0,1,.854,2.344V16.88a2.336,2.336,0,0,1-2.269,2.387H16.9v.767a.767.767,0,0

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-7179S89KQB&gacid=1564115657.1736526094&gtm=45je5190v890033544z876386024za200zb76386024&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102123608~102198178&z=1623100686
Preview:	<html></html>

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	96705
Entropy (8bit):	5.228470338380378
Encrypted:	false
SSDEEP:	1536:EVpXOWPGHRGUvJEzxPNLgyLuG6XV3yV/QtJ+j1YeO4PFWYit:EVoWPGHRGUvJEzxOMQV3yV/ERaNWYit
MD5:	1DD63DE72CF1F702324245441844BE13
SHA1:	58A8BDCDCB398AF7DB424357DF70DF18E7B30E9D
SHA-256:	5201C813C37A4168CC5C20C701D4391FD0A55625F97EB9F263A74FB52B52FD0E
SHA-512:	532D1E907B433AB97785CF632D9637A957152BAF0BA57879C856CBAA469BFFECA22C4F99485679539944B27068D39E70F7D44282594F999142454DA57329A11B
Malicious:	false
Reputation:	low
URL:	https://az416426.vo.msecnd.net/scripts/a/ai.0.js
Preview:	"use strict";var AI,Microsoft,__extends=this&&this.__extends\|\|function(){var i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])};return function(e,t){function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}}();function _endsWith(e,t){var n=e.length,i=n-t.length;return e.substring(0<=i?i:0,n)===t}!function(e){e.ApplicationInsights\|\|(e.ApplicationInsights={})}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){},(e.Telemetry\|\|(e.Telemetry={})).Base=t}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){this.ver=1,this.sampleRate=100,this.tags={}},(e.Telemetry\|\|(e.Telemetry={})).Envelope=t}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Context={})}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Co

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	834
Entropy (8bit):	5.262486312703814
Encrypted:	false
SSDEEP:	24:3Tx5Nf34hNh/LhKIebA1O/wvCRBVagjifk8oEmBLXl:Dyd6APvuBogjKBmBL1
MD5:	5C7B10EEBBA12EAD566A23A5201ED459
SHA1:	EC8D8B2101A1F7812083C181F69BC216B69879D8
SHA-256:	D804F7639DF78B49994231694C660A9753AFB901C92F12AE08CE5DDEB94642BF
SHA-512:	3915A364F0508BA8BD1386C27A986C8C7EE414DD015DA1AC17EE4CB112EE6F8EE786812E5666E4A6C9EC81FD374F66AF244783437AB7F07841FEBB065FE9B8CC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]>..<svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <g>.. <path d="M409.391,511.359V317.203c0,0-5.75-51.938-56-51.938c-50.219,0-59.406,49.375-59.406,49.375v196.719h-103.5l1.688-320.719 h100.125l-0.813,40.313c0,0,20.876-52.688,99.531-52.688c78.625,0,114.25,45.188,120.875,129.688c0,84.531,0,203.406,0,203.406 H409.391z M63.547,145.078c-35.563,0-64.438-25.438-64.438-56.875s28.875-56.938,64.438-56.938s64.438,25.5,64.438,56.938 S99.109,145.078,63.547,145.078z M127.422,511.734H0.172V191.453l127.25-0.813V511.734z" />.. </g>..</svg>

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/5190/sw_iframe.html?origin=https%3A%2F%2Fwww.infarmbureau.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=312, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=600], baseline, precision 8, 600x312, components 3
Category:	downloaded
Size (bytes):	250802
Entropy (8bit):	7.738368861520174
Encrypted:	false
SSDEEP:	3072:lIGINlddodqKOIIK4EJaOYLN9TlKR9jOaj+e5gFGKQ6lV/56+MXkyPyFbrPPJOmR:l/gyKDEJaOIYt3hM/vp82brXxeO
MD5:	3538DBD5DC70C984173C7E7B7A05A5B7
SHA1:	1B2A9309D33464FF2131C7ACAA3E9D405CA9C9EE
SHA-256:	2DB28C578DC06C2EC91219B0A369620C69CEFCEF1907F3C0D56529F16F78253B
SHA-512:	90932A534B38ECDFCD89E4325F765AFE24837EF8B4F13A5C6F0A86785D115C6EA2220B0551FF6AC57944461F3E114891347D22BEDAFB06473AC3516BEFA6D70B
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/default-album/claims.jpg?Status=Master&sfvrsn=f8f638ba_1
Preview:	.....ZExif..II*...............X...........8...........................................................................(...........1...!.......2...........i...........$..............'.......'..Adobe Photoshop 22.4 (Macintosh).2021:08:12 16:01:12..............0221....................X...........8...............................r...........z...(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..,..ag.+...J..h0].{+k....[Z...................@{v1....[.+..o.5....C

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 460 x 443, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	84423
Entropy (8bit):	7.992074751947247
Encrypted:	true
SSDEEP:	1536:urTAz9iEl+xpdPRNRNKC7Ojh52FfUNHyqmAhQWX0itiU5Pl60vZAIgUbQfGQOo7m:oTgiIifRAcq0FfqSzAGWXpiU5PQmZAZY
MD5:	97D49D5F821102EBE6060FC4C6802F78
SHA1:	DB432FCD260241480270BB4BE116B0EDFF619096
SHA-256:	D9CD7B19452EA9DC4F2199D0C4E2A16996E64AC506AFB67CB4ADB995343F1CC0
SHA-512:	2B6BB285FE4F57E1B793C687E6CF3D35F17BFC89CE19BE80D22E3DCE4803F6C79D4F87F9F97DA1EDB0F60BA0ADADB1006FD0CA052F73DB2293D7DD47182DB3DE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............y"U.....gAMA......a.....sRGB.........pHYs.................PLTEGpLc_Zum_faW.........^]\KH;...>-(3".....32.jO...hg.^\.....t......oYK4]A+.vZ..Yy.., ....s:2%xX=...\|^.HrL.../* ....qN9$cE(.Z>.tp.oU.ga\y.f......Kc.....),......"&..........:].......8Vy.ec.y.j.;;.I0'......[Y.ON..&..ed8 .136...n.b.]^'.rH0+Gj.i.M-.. .DB..rpN'..ml.:9..\|Ww;"....q.fb.FF.dbA...{.B!\|T=.,L.ZY.S:.v........{y..:..a.^Do...{.....Db..mH....R2.........~}.Z@.......qn.PM...XT..L..y_b@0.GD....fJ..oS..s...b>.cLS4#.QP...Z5.wM.AA.....66..k.]B.*+..D....u^L........vv.tT.k@..~....00.~l..Z.v.rW...`...lN....p.........t...RN.....>.&&.=<...m.jV.#...........x.}h.t^....qQ.....!..dRJN.40.....bak.KHfOH.88E..`.6....u]T.B0wpz...br.$%)..........DH....W\...l_..).ts.yt.es. ...v..u..W....vT....f.m.f......K.Uc.P.jw.....3tRNS.:.+4.'F.............6[^~....n................YFP...F.IDATx..{P...._1.x.j.o..J.o.{../3..e..~.?...NtOeG.ew..dv..(..$&....n.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	96705
Entropy (8bit):	5.228470338380378
Encrypted:	false
SSDEEP:	1536:EVpXOWPGHRGUvJEzxPNLgyLuG6XV3yV/QtJ+j1YeO4PFWYit:EVoWPGHRGUvJEzxOMQV3yV/ERaNWYit
MD5:	1DD63DE72CF1F702324245441844BE13
SHA1:	58A8BDCDCB398AF7DB424357DF70DF18E7B30E9D
SHA-256:	5201C813C37A4168CC5C20C701D4391FD0A55625F97EB9F263A74FB52B52FD0E
SHA-512:	532D1E907B433AB97785CF632D9637A957152BAF0BA57879C856CBAA469BFFECA22C4F99485679539944B27068D39E70F7D44282594F999142454DA57329A11B
Malicious:	false
Reputation:	low
Preview:	"use strict";var AI,Microsoft,__extends=this&&this.__extends\|\|function(){var i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])};return function(e,t){function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}}();function _endsWith(e,t){var n=e.length,i=n-t.length;return e.substring(0<=i?i:0,n)===t}!function(e){e.ApplicationInsights\|\|(e.ApplicationInsights={})}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){},(e.Telemetry\|\|(e.Telemetry={})).Base=t}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){this.ver=1,this.sampleRate=100,this.tags={}},(e.Telemetry\|\|(e.Telemetry={})).Envelope=t}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Context={})}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Co

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1100, components 3
Category:	dropped
Size (bytes):	197512
Entropy (8bit):	7.98066744421351
Encrypted:	false
SSDEEP:	3072:KI0zKCM+VlflYuZym/xE2UogTLMT1hDRqBX/V3tuICFYnKDSUP76K1zu2t4fJmcW:sKGVlflPgw2wqd9rC1bTKRbFqm0
MD5:	8D9CFB102E3F81BBCE7E24B02B03C068
SHA1:	83F0467B56B1D328283D95EEBC51FEE5D7F51459
SHA-256:	26C709F4CA3E49A6DB8F41275DD4779DB00F1A1CBBA6472003952DB5EE230190
SHA-512:	21B9DBCF9796754169344446D61AF9EABC22DB3701D3582141D8F6B50C45D6A25C94F262830DACF6FB136799DE9103112A90BB2192F7668B97AAD81AA4085A6C
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................,.".".,B)0))0)B;G:6:G;iSIISizfafz................................,.".".,B)0))0)B;G:6:G;iSIISizfafz................L.@.."...................................................B.Q..lX.(-..X@..T......1".YV.Y+F.JiD.im..12....I...d.E.......(. %...""$..3....i....J [-.V....A!....U5....@..DU[D7....h.9.V.e....)`.......P.@@(.b"$...a._.....%.PEU)h...A...YaEE..A`.P.h3f..4).V..,#.cM......A@.R.P... .B.,."#(.DL._....,......R...R...u.......,..%%.R.\..[V%..-.2I.u....R."KK@...T.. .....ab......2$...........@...)h........)....J.......B..X....Br..aw... ...d.[JA@.XT...B(......@A.I#3O.....KZ%....eP.....J)Ie.@4.H@.EE.F.[d...4.,..<..S..h.Z.-V..,.mj...,.......!..A..H.&b_......e.,(R.5-."R.9..KAA7.R ."...l..%..n..) .....m.."..L.u.zt......@.(. .B...A..2..d...k6.K.,,...-XfYE. .PP....PK...ab...Z[m..B..k9.t$......xng........`........ K....d.&k..........B.YU.EX2.YIKVUSP..,..D..--.U..Q@..BF.Z....Y...ye...F.E[.)`.@..%..P....,.$H. ....

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9211
Entropy (8bit):	3.786149399364375
Encrypted:	false
SSDEEP:	192:k/b7DfPk7SNeaVSw8vm/LsX+oUmvB53xstynmH:+b/k7el8vm/W+oUAgynm
MD5:	B35FB28F35C438BB25C0B180B39AF5D5
SHA1:	3952E8CACE98756E2E730240EEC14B6BE4516A78
SHA-256:	E272376876019A54DAF5C755C7BC9208FEDE526EFB091D30340B0BF66283FB59
SHA-512:	605D44E8047DEAF055B86DE606F56244C97CD7D82124DA7DC702A3730CFB9E0589EE2BAB60460ADEC16B85E4F857649D1F7DA5409A8F612E67DFFC7EED1A486C
Malicious:	false
Reputation:	low
Preview:	<svg width="104" height="14" viewBox="0 0 104 14" fill="none" xmlns="http://www.w3.org/2000/svg">..<path d="M0.17 0.94C0.17 0.82 0.23 0.76 0.35 0.76H2.636C2.756 0.76 2.816 0.82 2.816 0.94V12.82C2.816 12.94 2.756 13 2.636 13H0.35C0.23 13 0.17 12.94 0.17 12.82V0.94ZM5.16219 0.94C5.16219 0.82 5.22219 0.76 5.34219 0.76H7.50219C7.63419 0.76 7.73619 0.82 7.80819 0.94L12.1282 8.644H12.2182V0.94C12.2182 0.82 12.2782 0.76 12.3982 0.76H14.4322C14.5522 0.76 14.6122 0.82 14.6122 0.94V12.82C14.6122 12.94 14.5522 13 14.4322 13H12.2902C12.1582 13 12.0562 12.94 11.9842 12.82L7.64619 5.134H7.55619V12.82C7.55619 12.94 7.49619 13 7.37619 13H5.34219C5.22219 13 5.16219 12.94 5.16219 12.82V0.94ZM21.0791 13.198C20.5991 13.198 20.1251 13.15 19.6571 13.054C19.2011 12.97 18.7691 12.856 18.3611 12.712C17.9531 12.556 17.5751 12.376 17.2271 12.172C16.8911 11.968 16.6031 11.752 16.3631 11.524C16.2671 11.428 16.2611 11.326 16.3451 11.218L17.7131 9.652C17.7851 9.556 17.8751 9.55 17.9831 9.634C18.3911 9.958 18.8651 10

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	83350
Entropy (8bit):	5.446564930743328
Encrypted:	false
SSDEEP:	1536:R7hpwPC9ZVK01QYaKTZ02LKVsdmpyKcicIBUt:R7V9ZVKBYaKj8wKcHIi
MD5:	5D0141A99966CC0A61C7A31DAEDCA623
SHA1:	69696E8EEA5722D85B384A4840610E50A952FE19
SHA-256:	7592C419B3ABD6329C5190F898BBCF4DB133C0A21CD18107EF69144A34D5EA4A
SHA-512:	09ECEFE7107E1CED3E8E2388324E1F4100F2BFB9B8AE7C92FC228635437448A67C3CC8FF2D2DD1F6642B68EA8E57E34C02BDA2374663D72980821C89F2828F9E
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1686000021639755?v=2.9.179&r=stable&domain=www.infarmbureau.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3288), with no line terminators
Category:	downloaded
Size (bytes):	3288
Entropy (8bit):	5.293985449178697
Encrypted:	false
SSDEEP:	96:Z0HOsRQqkW9hqnEhi4VFVzED7ISHIJxoGg:ZARQDW98ci4n1EDcFntg
MD5:	653282ADEB0476C5C0CAD325FB3901F7
SHA1:	56002865A7B965DA3AAB88DC8B53EA440E144F11
SHA-256:	D4829AF091B51EC58932135515166F6E26C4EE9AC3B8EC6C1996504156317A6F
SHA-512:	277673C8CDC9B4EAA5DC9D48A205B0980A6A999B137DC4DC096B0BAE7A5AA872D47FF52CBACD112C218B6575BF253EBE54D75E30DC1F45E5DBAB0B3990611C2F
Malicious:	false
Reputation:	low
URL:	https://oam.infarmbureau.com/runtime.cb41eb04fc9ef4ce.js
Preview:	(()=>{"use strict";var e,v={},g={};function r(e){var a=g[e];if(void 0!==a)return a.exports;var t=g[e]={id:e,loaded:!1,exports:{}};return v[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=v,e=[],r.O=(a,t,i,o)=>{if(!t){var n=1/0;for(f=0;f<e.length;f++){for(var[t,i,o]=e[f],s=!0,d=0;d<t.length;d++)(!1&o\|\|n>=o)&&Object.keys(r.O).every(b=>r.O[b](t[d]))?t.splice(d--,1):(s=!1,o<n&&(n=o));if(s){e.splice(f--,1);var u=i();void 0!==u&&(a=u)}}return a}o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[t,i,o]},r.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return r.d(a,{a}),a},(()=>{var a,e=Object.getPrototypeOf?t=>Object.getPrototypeOf(t):t=>t.__proto__;r.t=function(t,i){if(1&i&&(t=this(t)),8&i\|\|"object"==typeof t&&t&&(4&i&&t.__esModule\|\|16&i&&"function"==typeof t.then))return t;var o=Object.create(null);r.r(o);var f={};a=a\|\|[null,e({}),e([]),e(e)];for(var n=2&i&&t;"object"==typeof n&&!~a.indexOf(n);n=e(n))Object.getOwnPropertyNames(n).forEach(s=>f[s]=()=>t[s]);return f.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	364
Entropy (8bit):	4.561528284615616
Encrypted:	false
SSDEEP:	6:2LGa3ymyCE//MzGCFiM1wBJPwcQK5DrIt6xfeGYqX3OLGhw47Jsr4z+LibIEBE7L:2f3ymyCEIiMRhykgIaOEsrq1EiE7yyyu
MD5:	45100DDBE4FB816CA7BA9F16F494964A
SHA1:	B7A62A6E65E6CBF915B895CE14952250387295D9
SHA-256:	CCE2184EC089BABC70DED47B8474C543F6A5FF013E4BFD9DBAE8689489BB13BA
SHA-512:	08D730DB7FF2E5EE9BEF496CAC3341ECDEC96D579FD034087813FC9CBC87008824EE9577409BCB6002815FD441A7A05EF1B860A6340E59AFEF5181CB2665D674
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/17499491.js
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, false, false, false, false, false);..

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5184
Entropy (8bit):	4.23504326510741
Encrypted:	false
SSDEEP:	96:feEdXdJkgJiqxF4VZVfNfudZgGLZ/KKdIvxD7Q6EiE7NZ85pic:WEdtygVxF+VfNfugGLBKmIvxXQ6/E7Y
MD5:	ED6686AA82653AE2803217F4B28E7B47
SHA1:	7D710F15FB9A2787FBF2DDFCA001E2A9331874C0
SHA-256:	98F48D513758BB5AF942487790752D03DFEF20C22941F372359CE9EDDE5A0A60
SHA-512:	F7EDA20097CAA2212C8762C7E2585A31152299C3447A1B4D117215163427BDB90A661C4FD300D38714790141B942FB1C1981D412FD33D93A718903D42E183236
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/life-insurance-matters/car.svg?sfvrsn=55e924ba_2
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="52px" height="42px" viewBox="0 0 52 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-378.000000, -826.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy" transform="translate(376.000000, 819.000000)">.. <g id="Icon/Auto">.. <path d="M21,44.3333333 L21,46.6666667 C21,47.9553311 19.9553311,49 18.6666667,49 L11.6666667,49 C10.3780023,49 9.33333333,47.9553311 9.33333333,46.6666667 L9.33333333,44.3333333 L9.234301,44.3333333 C5.4328609,44.3333333 2.33333333,41.0655132 2.33333333,37.0693208 L2.33333333,28.1341732 C2.33333333,25.4643899 3.28166953,22.9169679 4.95306888,20.971115 C3.83934722,20.7945723 2.98792632,19.8300495 2.98792632,18.6666667 L2.98792632,14 C2.987926

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	downloaded
Size (bytes):	240421
Entropy (8bit):	5.5621864980323785
Encrypted:	false
SSDEEP:	3072:6J3a4IwyIJ/rca9NO0UNGzlwvOfyk3pBuciOgb6xc+E3OPoKugIaj2i:S9yIJDca9sGpUsBiNuxc+E3OPoKuD2
MD5:	BD987B1D3BA4016F30CD279FC5550892
SHA1:	A7F8B3ED077EE203CD252411F1F5F642059078DD
SHA-256:	A9A92AF21614F3B3CE62742C2984326CF83980E9AD693596B6352C691E346269
SHA-512:	10C1FB51E319CF84FBBB687EBDBE7C241612C39A5D60565A4B6F5EC2101346F79DF9893E5A0C6D574BCDDD14D726F10DB8BCDA4E970FD50A9182CBB923F9A193
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-8339572&l=dataLayer&cx=c&gtm=45He5190v76386024za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-8339572","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"",

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (4188), with no line terminators
Category:	downloaded
Size (bytes):	4191
Entropy (8bit):	5.114302743441512
Encrypted:	false
SSDEEP:	48:xvTmCcxNDbT2g03nkfmTHqsk04CoDAL1iQBq/cS5gsT+iS+VQEM4SSF4grqam1:BKH5MNk04CorzTXLF4aqv
MD5:	58340F3121BDBB73645B3E9C55FF5AC2
SHA1:	CBC7F40A0251F2ADF86C4049948D2F89ADF749F2
SHA-256:	6399AB4770551E8F40E94D5030C29AF730CEC63C52088C032A7AAB25AF070D85
SHA-512:	97EAF9D52458D843438C0F3BD3A3D23A4E169F29215A0A32A3E456281F8CFB214358818E1537D8F875CAE18FF79DE4F1E4502CB0276C687D13DFD0C1425BD944
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/WebResource.axd?d=NjxTqR2bqTw1rewxxlkHPpxO0HewYtVlDflpbYInUeVJFzzXK9ps5DCCOpHnJe-GLFYvfIwAYK88tAgrZ4UYiSFoIDxWM5fHSClLQ2OUIH6ur5dZ5UUk2GuBjdo7SvL8SQyR67VUUd5WdQi4Bp1p2rD86Flrj4pL0JXZer5l9HggNFK5Tv2OG7IFtNlP6HEIlaRLk_JT971y9JLQAC_AjXBfDLq38newr_lRYpTjOxM1&t=638343388220000000
Preview:	.var PersonalizationTracker = null; !function () { "use strict"; PersonalizationTracker = { _canTrack: !1, _pageId: null, _url: !1, track: function (e) { if (PersonalizationTracker._canTrack = e, PersonalizationTracker._canTrack) { if (!PersonalizationTracker._readCookie("sf-prs-ss")) { var r = 1e4 * Date.now() + 621355968e9; PersonalizationTracker._createCookie("sf-prs-ss", r) } if (!PersonalizationTracker._readCookie("sf-prs-lu")) { var a = window.top \|\| window; PersonalizationTracker._createCookie("sf-prs-lu", a.location.href) } PersonalizationTracker._pageId && PersonalizationTracker.trackPage(PersonalizationTracker._pageId), PersonalizationTracker._url && PersonalizationTracker.trackUrl() } else PersonalizationTracker._createCookie("sf-prs-ss", "", -1), PersonalizationTracker._createCookie("sf-prs-lu", "", -1), PersonalizationTracker._createCookie("sf-prs-vp", "", -1), PersonalizationTracker._createCookie("sf-prs-vu", "", -1) }, trackPage: function (e) { if (this._pageId = e.rep

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	dropped
Size (bytes):	68544
Entropy (8bit):	5.353273780967634
Encrypted:	false
SSDEEP:	768:zDoev7ihlr+MwjqU+s2SL3iY0w2+4PMdj4dZOfDxh1GiqxvC+24VfRzYshiP/Xt5:zD7Dihlr+MUQKI0f9h1Gib4LA8Bs
MD5:	A07833512D877DC182973CF42CDA7D79
SHA1:	28DCFE97957BBB239FCE68DBF64BB22338ABE500
SHA-256:	83146C62110F911CBC9E66DAA824D1F4E1D8F8AA6508AA45FE061932DB65FA27
SHA-512:	3656CCE575FC835853AA0B0F4AAF38D65DD3E4CA5985E1E64A9C211F6D5350A640D4AC48EE90507F7C3657E804DB9CB6DBB6A80B4475C12FF658C75CF4EB29AF
Malicious:	false
Reputation:	low
Preview:	/* clarity-js v0.7.59: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return br},get start(){return yr},get stop(){return wr},get track(){return hr}}),e=Object.freeze({__proto__:null,get clone(){return Xr},get compute(){return Yr},get data(){return jr},get keys(){return Ar},get reset(){return qr},get start(){return Hr},get stop(){return Fr},get trigger(){return Wr},get update(){return Ur}}),n=Object.freeze({__proto__:null,get check(){return Zr},get compute(){return $r},get data(){return Dr},get start(){return Kr},get stop(){return ti},get trigger(){return Qr}}),a=Object.freeze({__proto__:null,get compute(){return ui},get data(){return ei},get log(){return oi},get reset(){return ci},get start(){return ri},get stop(){return ii},get updates(){return ni}}),r=Object.freeze({__proto__:null,get callback(){return wi},get callbacks(){return di},get clear(){return bi},get consent(){return yi},get data(){return li},

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CLWe2ujH64oDFbuDgwcdSrArRQ;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=*;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25245)
Category:	downloaded
Size (bytes):	25246
Entropy (8bit):	4.02663208613348
Encrypted:	false
SSDEEP:	384:KdCTualZaOGpDmseaMDtF3dPyfp7nDUpMJzCO154L2l6g8WzFNCT00wZ+ht3Wfni:K0qpDfG5datIL2csYP3WfmA/QbL3
MD5:	8219DD37BB0283F9755BDDED0C9F2D22
SHA1:	30F6DFA2E62BF39E67ECBA22E012EDECCA29F9DD
SHA-256:	C8879B289784C2F0E524C601EE26BD458AB9D35A527C22CE582904004E47D018
SHA-512:	C8455AC979A15AFA586E05D104E268D5DFD5B620376F62814AC709852D3B214F1A8E7F22EBB1BF52654148644BD7BD9EE8AC5E940848580EBCBCEA887455BEA1
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";"function"==typeof SuppressedError&&SuppressedError;var r,n,t={IT_TREATMENT:0,IT_ALLOW:{7408:!0,7904:!0,9517:!0,9724:!0,10596:!0,12144:!0,12799:!0,14413:!0,17974:!0,18274:!0,19850:!0,22871:!0,23213:!0,23320:!0,25533:!0,25751:!0,27749:!0,28731:!0,28827:!0,30332:!0,30463:!0,30879:!0,31956:!0,32249:!0,32808:!0,32842:!0,33598:!0,33765:!0,34071:!0,34576:!0,35076:!0,36215:!0,36504:!0,37536:!0,38262:!0,38950:!0,40394:!0,40735:!0,41424:!0,41581:!0,41761:!0,42105:!0,42599:!0,43442:!0,44e3:!0,45040:!0,45593:!0,46649:!0,47169:!0,47724:!0,47807:!0,47813:!0,48472:!0,48816:!0,48909:!0,52235:!0,52304:!0,54077:!0,55730:!0,55970:!0,59505:!0,62142:!0,63483:!0,64091:!0,66664:!0,66684:!0,67900:!0,68098:!0,69263:!0,70131:!0,75233:!0,78242:!0,78672:!0,79374:!0,79891:!0,81588:!0,83791:!0,85969:!0,87805:!0,88452:!0,89013:!0,89458:!0,89622:!0,90301:!0,90820:!0,94343:!0,96365:!0,96816:!0,96853:!0,96878:!0,101394:!0,101830:!0,101989:!0,103646:!0,104326:!0,104825:!0,105409:!0,107508:!0,10

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	8919
Entropy (8bit):	4.257373054113982
Encrypted:	false
SSDEEP:	192:OrNi1ulRQGrxMUFww4Fw1P4rn/PNcQcWTk37M1zbXT:OskR1q5w1mcQcWTk37Mpj
MD5:	F2A362804B5C7F370506F55CC25484D8
SHA1:	29DB8D2879F9B6BF71B862969E1600CE6E03D853
SHA-256:	5CFBC8D0CA0DF46A5731865C0620B86104DFD3070498D295C0F917CA7123DFAD
SHA-512:	222E8155AFB67BD8390F84D71B881AD012B6EB150E033FBFEC370CFB0643866F5B2B7EEAA3F918DD556D5B7530DFC6C9AC1E3955AD073E3D18CE2EFB4809FB2E
Malicious:	false
Reputation:	low
URL:	https://cdn.aws.infarmbureau.com/b2c/oam/customize-ui-ifbi.html?appId=a6bcaad0-7966-4b1c-aae2-4bd7cb252fa7
Preview:	<!DOCTYPE html>.<html>. <head>. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <meta. name="viewport". content="width=device-width, initial-scale=1, shrink-to-fit=no". />.. <title>OAM</title>. <link. rel="stylesheet". href="https://cdn.aws.infarmbureau.com/b2c/oam/css/badge.css". type="text/css". data-preload="true". />. <link. rel="stylesheet". href="//cdn.infarmbureau.com/farmhand/V1/consumer/theme.css". data-preload="true". />. <link. rel="stylesheet". href="https://cdn.aws.infarmbureau.com/b2c/oam/css/ifbi.css". data-preload="true". />. <link. rel="icon". href="//www.infarmbureau.com/favicon.ico". type="image/x-icon". />. </head>.. <body class="login">. Segment Pixel - ifbi.customer.exclusion.sgmt - DO NOT MODIFY -->. <img. src="https://secure.adnxs.com/seg?add=5001888&t=2". width="1". height="1". style="display: flex". />.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33849), with no line terminators
Category:	downloaded
Size (bytes):	33849
Entropy (8bit):	5.399453682658507
Encrypted:	false
SSDEEP:	768:Y/eMRCfjJgWiqB1Ke9XRz0AsSJ6aasVZTQikMf3IO+GT8ZOT/gresp8dJSbnccKU:EvEgW9tSTYM
MD5:	3903B81D84AC1DFEE901D5D9A59AD519
SHA1:	6EFBDDC25E43209013043030F296E9A97791FBCE
SHA-256:	031C9479B9913AAA65BB89E7C9516CA0EBB4598B5D6107EFF29C2641DB817409
SHA-512:	8E0F250B416FC7F06AE67B790BFDC98AF9F403F7CB0EBE1522387B5E60F0D53580FFD5787C32A3130C923F03FF2C7B6D9E5177EF25A24747A064AA3E9A63874C
Malicious:	false
Reputation:	low
URL:	https://oam.infarmbureau.com/polyfills.7a327121b2f16d9d.js
Preview:	"use strict";(self.webpackChunkOAMClient=self.webpackChunkOAMClient\|\|[]).push([[429],{5321:(ie,Ee,de)=>{de(8332)},8332:()=>{!function(e){const n=e.performance;function i(L){n&&n.mark&&n.mark(L)}function o(L,T){n&&n.measure&&n.measure(L,T)}i("Zone");const c=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function a(L){return c+L}const y=!0===e[a("forceDuplicateZoneCheck")];if(e.Zone){if(y\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}let d=(()=>{class L{static#e=this.__symbol__=a;static assertZonePatched(){if(e.Promise!==oe.ZoneAwarePromise)throw new Error("Zone.js has detected that ZoneAwarePromise `(window\|global).Promise` has been overwritten.\nMost likely cause is that a Promise polyfill has been loaded after Zone.js (Polyfilling Promise api is not necessary when zone.js is loaded. If you must load one, do so before loading zone.js.)")}static get root(){let t=L.current;for(;t.parent;)t=t.parent;return t}static get current(){return U.zone}stati

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3288), with no line terminators
Category:	dropped
Size (bytes):	3288
Entropy (8bit):	5.293985449178697
Encrypted:	false
SSDEEP:	96:Z0HOsRQqkW9hqnEhi4VFVzED7ISHIJxoGg:ZARQDW98ci4n1EDcFntg
MD5:	653282ADEB0476C5C0CAD325FB3901F7
SHA1:	56002865A7B965DA3AAB88DC8B53EA440E144F11
SHA-256:	D4829AF091B51EC58932135515166F6E26C4EE9AC3B8EC6C1996504156317A6F
SHA-512:	277673C8CDC9B4EAA5DC9D48A205B0980A6A999B137DC4DC096B0BAE7A5AA872D47FF52CBACD112C218B6575BF253EBE54D75E30DC1F45E5DBAB0B3990611C2F
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e,v={},g={};function r(e){var a=g[e];if(void 0!==a)return a.exports;var t=g[e]={id:e,loaded:!1,exports:{}};return v[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=v,e=[],r.O=(a,t,i,o)=>{if(!t){var n=1/0;for(f=0;f<e.length;f++){for(var[t,i,o]=e[f],s=!0,d=0;d<t.length;d++)(!1&o\|\|n>=o)&&Object.keys(r.O).every(b=>r.O[b](t[d]))?t.splice(d--,1):(s=!1,o<n&&(n=o));if(s){e.splice(f--,1);var u=i();void 0!==u&&(a=u)}}return a}o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[t,i,o]},r.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return r.d(a,{a}),a},(()=>{var a,e=Object.getPrototypeOf?t=>Object.getPrototypeOf(t):t=>t.__proto__;r.t=function(t,i){if(1&i&&(t=this(t)),8&i\|\|"object"==typeof t&&t&&(4&i&&t.__esModule\|\|16&i&&"function"==typeof t.then))return t;var o=Object.create(null);r.r(o);var f={};a=a\|\|[null,e({}),e([]),e(e)];for(var n=2&i&&t;"object"==typeof n&&!~a.indexOf(n);n=e(n))Object.getOwnPropertyNames(n).forEach(s=>f[s]=()=>t[s]);return f.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2677
Entropy (8bit):	4.684418093347435
Encrypted:	false
SSDEEP:	48:cqzgleSLMzjTEvTjVfZ6cR1acb8S8L/M1Ny6VhNld9i4FbwaT/:XgldozXELjJZDr8L/MZNlX3
MD5:	D97E858BC929A733E0A7FC7EEB6A68DA
SHA1:	63609A909F9F39A1E983A1C0CBB7F4916C270D9A
SHA-256:	E601FF2715B37167966BB1D291EA2ACDDF90097F181F7900562E2EDD786DC92A
SHA-512:	C555452DB2E7F6DB2E932CE8D23B5867BA33D02BAB3003088BCBEAAB0472438C1885D31CAE533FBD5EBFE6B36E27622667A67901151C2B3C610C9504B9A9722B
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/icons/home.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="54px" viewBox="0 0 56 54" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 2</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-693.000000, -821.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-2" transform="translate(693.000000, 819.000000)">.. <g id="Icon/Home">.. <g>.. <path d="M47.8330134,31.5001336 C48.4770082,31.5001336 48.9996649,32.0216305 48.9996649,32.6667934 L48.9996649,54.8333395 C48.9996649,55.4785031 48.4770082,56 47.8330134,56 L33.8331563,56 C33.187999,56 32.6665047,55.4785031 32.6665047,54.8333395 L32.6665047,39.6667553 L23.3332666,39.6667553 L23.3332666,54.8333395 C23.3332666,55.4785031 22.8106036,56 22.1666087,56 L8.16675797,56 C7.52159437,56 7.00010004,55.4785031 7.00010

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51062)
Category:	dropped
Size (bytes):	411779
Entropy (8bit):	5.578839937076263
Encrypted:	false
SSDEEP:	6144:D2X2a9yIYDMaRcGWUsiyzNMexc+E3OPoK9zoC:D2X7Y9RWVNMe0eRoC
MD5:	A28638161ECC4047108E9DF25A9D8743
SHA1:	C502F201BB89899E803448BAC3883692D575B455
SHA-256:	17E401905F11ECC9AD9A7920A2DC5AC04E5E01BBF1D8BB6F46490A45B84A0C02
SHA-512:	9113B3C3277B9A3CAEB736E8ECEDE67DFE3301002CB09C289B1CF25E7450EC1986A3202AAA369550821CA83803A34396748A0C21090A1C2353BBB86A0B68F9EE
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"172",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.newUrlFragment","vtp_dataLayerVersion":1},{"function":"__r"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"UA-10399694-1"},{"function":"__jsm","vtp_javascript":["template","(function(){try{var b=ga.getAll(),c;var a=0;for(c=b.length;a\u003Cc;a+=1)if(b[a].get(\"trackingId\")===",["escape",["macro",8

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1234)
Category:	downloaded
Size (bytes):	21351
Entropy (8bit):	5.503622110294562
Encrypted:	false
SSDEEP:	384:HdQm0XyQHiUtmxKLjL9jRiKPS4XYunqu9MVkWth5nXg5d7yFsiTtgfgelMBS5So2:HdR6yeiUtmELjTiMSQ5ndSVkWb5CduFn
MD5:	AC43CF3B4914E73C29910415BD19DB97
SHA1:	AB38BFA238B44E53F05AA778721D9585D0C6EA9D
SHA-256:	FA98E49ACB4BA980865779FA22B7CE1C48BDD56CB44A0FE19A8D6899F5FFE077
SHA-512:	8E36FC6B94073AA48C729342AC02287B0965A4375DB8A6F056F034044F43BCA51CE449FDD581B49839BE592BB4375D3891C90C0AFCCF6C326ED0CD43E27C43C1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/5190/sw.js?origin=https%3A%2F%2Fwww.infarmbureau.com
Preview:	'use strict';var ca=function(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}f(a.next())})},h=function(a){return ca(a())};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var p=this\|\|self;var t,y;a:{for(var da=["CLOSURE_FLAGS"],A=p,B=0;B<da.length;B++)if(A=A[da[B]],A==null){y=null;break a}y=A}var ea=y&&y[610401301];t=ea!=null?ea:!1;var E;const fa=p.navigator;E=fa?fa.userAgentData\|\|null:null;function F(a){return t?E?E.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function G(a){var b;a:{const c=p.navigator;if(c){const d=c.userAgent;if(d){b=d;break a}}b=""}return b.indexOf(a)!=-1};function H(){return t?!!E&&E.brands.length>0:!1}function I(){return H()?F("Chromium"):(G("Chrome")\|\|G("CriOS"))&&!(H()?0:G("Edge"))\|\|G("Silk")};!G("Android")\|\|I();I();G("Safari")&&(I()\|\|(H()?0:G("Coast"))\|\|(H()?0:G("Opera"))\|\|(H()?0:G("Edge"))\|\|(

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9284)
Category:	dropped
Size (bytes):	245020
Entropy (8bit):	5.453937864649824
Encrypted:	false
SSDEEP:	3072:6FLeYH8W1WJ/37Oec8NteqZEbkxZNsucrl0xYurPK7d3OCX:6FLeYcgWJzm8NNfFcrHurPK7d3/X
MD5:	645219BB69D1C9F06CC935CC54DC1C2A
SHA1:	F14ACE0F9745356BC77D888857EF32A5EADC8615
SHA-256:	5332FD32D8BE28EB2531721220E8C3C561000378988BE4B4D7F97568F0B3F224
SHA-512:	CB41C3768945DA663B54A29758D6BDFFFD4666C6EEEB253017748831CB424CB54113CFE9DF06959E980E0A7B9EACB6F0D9DD1016B3A9B1BC900FAB79A30AF837
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
Preview:	null

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51062)
Category:	downloaded
Size (bytes):	411779
Entropy (8bit):	5.578807709043321
Encrypted:	false
SSDEEP:	6144:D2X2a9yIYDMaR6GWUsiyzNMexc+E3OPoK9zoC:D2X7Y9RcVNMe0eRoC
MD5:	32ED96052DF2F52F5A4CD5C0D18AC762
SHA1:	34424276B0ED26BB9C8D57DABCF43076B9AAE1AE
SHA-256:	A9C150211E0E761493935ABDE22F07187390CEBF4A04CD7D9ABC7BC5130D464F
SHA-512:	56EB9380FDBF14392AA85A23C3AEE3863987CC2E9FD64C24248AF1A92D81AB1F2BBE37253182806D6ABC324B5CA9F1F76AB41654963D6CFE51850B8504D95595
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NNN5R8J
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"172",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.newUrlFragment","vtp_dataLayerVersion":1},{"function":"__r"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"UA-10399694-1"},{"function":"__jsm","vtp_javascript":["template","(function(){try{var b=ga.getAll(),c;var a=0;for(c=b.length;a\u003Cc;a+=1)if(b[a].get(\"trackingId\")===",["escape",["macro",8

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	downloaded
Size (bytes):	79789
Entropy (8bit):	5.316053921703045
Encrypted:	false
SSDEEP:	1536:4Nzw/WRwzcOYw0OL484tz6STVdcNANA2Ae:4FpRwzcOYTp6STVdX
MD5:	B60F5EED12273A0FC6D4D1B83CE9AB3A
SHA1:	5FCDD04B7C1A8BB93980CAE79A972F2655226015
SHA-256:	945B88EF669DED280836CF5628FF13BBE817E6616A37420897A24D767EDB05C6
SHA-512:	1D964C159E111A4BA4AB56DA9E230019C1FB69B25593D71A73AED39D6516E32DB09A352BDE9AC3D344AA8268248797C1DCD9E44A667A598EF0FD3B81510713E4
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/8.372e3f9662e7442947d8.chunk.js?Q_CLIENTVERSION=2.22.0&Q_CLIENTTYPE=web&Q_BRANDID=oam.infarmbureau.com
Preview:	./@preserve.Version 2.22.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.22.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.22.0"]\|\|[]).push([[8],{17:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"f",(function(){return

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x312, components 3
Category:	downloaded
Size (bytes):	64273
Entropy (8bit):	7.971571551808143
Encrypted:	false
SSDEEP:	1536:dc8d3hk3i/4gliFi2T6bYDaptydbIVxqG32ZoAg1X/:HdRkyQW06bYDapQ9I532ZoAY/
MD5:	76DFF96EA6BE0BE9A186B2C2CBEA3ECB
SHA1:	3E6C6E97778ECB38022D7636C40C71D0B09DAB89
SHA-256:	537425AACB9DE118FC253F07DADD95B611E3F5F755C4A43A06B80758D414926F
SHA-512:	A7DA8A00B1355FF9E98926770EC0C2A37B102AF3373B37137606F8B37C4F2DDCD89188B37D1B9787BA790E8B1B433B355369C14F2F092A382C25EBCE9C6594D5
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/life-insurance-matters/life-insurance.jpg?sfvrsn=69793dba_1
Preview:	......Exif..II*.................Ducky.......E......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3CF589B51D7211ED8DB393D933D248FF" xmpMM:InstanceID="xmp.iid:3CF589B41D7211ED8DB393D933D248FF" xmp:CreatorTool="Adobe Photoshop 2022 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C87A64741B85FCB2C13B99FF7E2F2D13" stRef:documentID="C87A64741B85FCB2C13B99FF7E2F2D13"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................................

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1945
Entropy (8bit):	3.9744026244812622
Encrypted:	false
SSDEEP:	48:cHGSp+rnA/n/GJRg5ZLptI3JaKR1V5oexJ/Z:CB0rnYn/eIZLpt+pTfoOJh
MD5:	2FB7147E7461F6E38BBD7E56D4FA3DFD
SHA1:	D207C485BA00A3539053B2B62A0D3DB866B77596
SHA-256:	56F6843B96B6957217D20C57A5FD48B90A3ED1DC70A152CD71A9EC7743AF65F3
SHA-512:	0B37D59A31B3F7151DFE174072FBE85AF5043F34E8D1084893D72F319ADE7F4A6656156B62F8D77401ECFEEE24FCBDCDD5D505B45FB1F3528DE361CC53EC1814
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="16.129" height="19.355" viewBox="0 0 16.129 19.355">.. <path id="umbrella" d="M21.112,9.113a.315.315,0,0,0,.014-.067s0-.009,0-.014A8.073,8.073,0,0,0,13.387.976V.323a.323.323,0,0,0-.645,0V.976A8.073,8.073,0,0,0,5,9.032c0,.005,0,.009,0,.015a.3.3,0,0,0,.014.067.344.344,0,0,0,.016.055.322.322,0,0,0,.032.047.318.318,0,0,0,.044.054s.005.008.009.011a.311.311,0,0,0,.038.021.3.3,0,0,0,.059.032.3.3,0,0,0,.069.014c.014,0,.026.008.04.008l.014,0a.315.315,0,0,0,.071-.014.291.291,0,0,0,.051-.015.32.32,0,0,0,.05-.034.327.327,0,0,0,.051-.041s.008-.005.012-.01a2.192,2.192,0,0,1,1.687-.851,2.192,2.192,0,0,1,1.687.851c.006.007.015.01.022.017a.3.3,0,0,0,.02.025A.332.332,0,0,0,9.03,9.3a.289.289,0,0,0,.049.026.3.3,0,0,0,.08.017.348.348,0,0,0,.035.007l.015,0a.484.484,0,0,0,.112-.027A.291.291,0,0,0,9.366,9.3.274.274,0,0,0,9.4,9.28c.008-.006.011-.015.018-.023a.28.28,0,0,0,.024-.02,2.194,2.194,0,0,1,1.688-.851,2.166,2.166,0,0

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2935
Entropy (8bit):	4.779883255643436
Encrypted:	false
SSDEEP:	48:cKoVSYfzA7JpJp32wUdrV8233Qcv3eybJYoK+3ybJVw0Q:yVFfaLPDJc2WYXaWVk
MD5:	05622D6D60FD45B0FC09FF9B8803FB5D
SHA1:	8D3B30A0DCEAA52359BD56866DB4F3AD45C13667
SHA-256:	DEA01D7C55C8D6DD4EA8D8D8CE8E83D211DFD77C8E2C3ECBE6B723C532949C74
SHA-512:	A398D19A2B816A1ED9EF511DF253BB65F74262CA57A73AC2FF0B482009EEDCFB5BCC68ABA84D1432C042E1D55C10194DC505C273112C383971DCF982EC322DFA
Malicious:	false
Reputation:	low
URL:	https://www.infarmbureau.com/images/header/menu-icons/discount.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="16.156" height="16.783" viewBox="0 0 16.156 16.783">.. <g id="discount" transform="translate(0.211 0.235)">.. <g id="Group_266" transform="translate(0 0)">.. <g id="Group_265">.. <path id="Path_313" d="M25.335,8.41a.481.481,0,0,1,0-.425l.612-1.251a1.424,1.424,0,0,0-.614-1.89L24.1,4.191a.481.481,0,0,1-.25-.344l-.241-1.372A1.424,1.424,0,0,0,22,1.307l-1.379.2a.481.481,0,0,1-.4-.131L19.22.4a1.423,1.423,0,0,0-1.988,0l-1,.968a.481.481,0,0,1-.4.131l-1.379-.2a1.423,1.423,0,0,0-1.608,1.168L12.6,3.847a.481.481,0,0,1-.25.344l-1.23.653a1.424,1.424,0,0,0-.614,1.89l.612,1.251a.481.481,0,0,1,0,.425l-.612,1.251a1.424,1.424,0,0,0,.614,1.89l1.23.653a.481.481,0,0,1,.25.344l.241,1.372a1.423,1.423,0,0,0,1.4,1.183,1.463,1.463,0,0,0,.2-.014l1.379-.2a.48.48,0,0,1,.4.131l1,.968a1.423,1.423,0,0,0,1.988,0l1-.968a.481.481,0,0,1,.4-.131l1.379.2a1.423,1.423,0,0,0,1.608-1.168l.241-1.372a.481.481,0,0,1,.25-.344l1.23

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17698), with no line terminators
Category:	downloaded
Size (bytes):	17698
Entropy (8bit):	5.330321951477942
Encrypted:	false
SSDEEP:	384:I/Q66A4xo1rjYKha4BMoxojIjZRDv021Kudq89UfnlYwNjtBkb4hVc:I/oA4xMYKha4BCItRD821KOz9SHNjtBk
MD5:	B16C2631B3B4D5AFBFE9589A84DA4916
SHA1:	DE919F2B0D93A7B2DEA7D6FC6A52BB95AD16A617
SHA-256:	487B5C89F3869C78CC95737CA7F38873FDD764730ECD0C8CB67D925037188480
SHA-512:	00140ADD52DCE55669B2C780B962EAF472BAB1E2F54877681AE0F1507520143BE9AB8A06693B0622413F677312D736227F1EB9431AC0D8225F6AEC4448AEC4BF
Malicious:	false
Reputation:	low
URL:	https://p.teads.tv/teads-fellow.js
Preview:	(()=>{"use strict";const n="6.21.0_ad40570",t="https://t.teads.tv/track",e="https://cm.teads.tv/v2/advertiser",o="https://cm.teads.tv/v3/conversion",i="tag",a="js-web",c="js-gtm";let r=!1;const d=Date.now();function s(){return window.advertiser_domain}function l(){return window.teads_buyer_pixel_id}function u(){return!0===window.teads_post_message_event_to_opener}function p(){return!0===window.teads_post_message_event_to_window}function w(n){window.teads_iab_consent_data=n}function _(){return window.teads_iab_consent_data}function v(n){window.teads_usp_consent_data=n}function f(){return window.teads_usp_consent_data}function g(){return window.teads_gdpr_advertiser}function m(){return window.teads_ccpa_advertiser}function y(){return!0===window.teads_tracking_allowed}function I(n){window.teads_auction_id=n}function h(){return window.teads_auction_id}function E(n){const t=window.teads_auction_id_forwarded_by\|\|{};t[n]=!0,window.teads_auction_id_forwarded_by=t}function k(n){window.teads_ses

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13388, version 1.0
Category:	downloaded
Size (bytes):	13388
Entropy (8bit):	7.981896017121787
Encrypted:	false
SSDEEP:	384:KPp1Y0kc+9CQmQ1My6T5E1nOT3bU4FTCFOZtDN:KvKL9CPQ1GT5EhOTrrZCQN
MD5:	8C4B05D4371467BA1D0BC60839C6DCB9
SHA1:	4B7BAD6C115B963523D3CD7AD52EBF717135E24A
SHA-256:	BF9CFE01317E3758DD38982921DC1F26CC7243237D02E7ED90D3830B6F4E8ED0
SHA-512:	BBC736EA4982C31478FFA27ED69AD7C3EFB1B6A691129A9A9D10DC6D2256022043EE22464F9AA2BAA267DE0C8D95FD7B6D28A8D58BFD997EDB26F152E51243D3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
Preview:	wOF2......4L......k...3..............................Z..\|.`..J.......W..Z..6.$..0. ..t. .0\%.mv...H...h$B.8.L.v..0Q....s..c.c..m[...:...rO........p.(.~....:,...8l...:<........S....7m..3-...+~.9#...2..9....3\..EYm...........d2...@(L.1KbW#.....(+<...u...T..(l,.=U5Q.TL..S9z....S.E...0.J......&)..I...uD'.....'...P.%.....y5'....aae..q........{k'...G.....&&E.......)j.7S.zj......{.T.N..<....^........6...U...8P-@.........c.~\|.C.m../..~Zp._....m:..(....S3. .......H.m.c.....d..(.s.:....VU.wz....g.je.4;...4.A&...Y.yvMx..C..$.AzAvi~.qtA..<.........,..!.....HH&...D.z....).L..5..."...{.2G.Z.2G3.!....-B.....r.0'....!9...[........$H."......JuT....$.....@...)..n..........C..".....";.A.E.Q.:.Q.=B................G."X......P(.p.Ij......8.......y.7...o'2..a......v\|(............j[`.7.&mG.pY.....l8..Y.,...+[..f."7....WC............z..m..'%...;...\X...N....z.....?5.....o.r.g.......6.....n?.P.9....MV...U.g.y..+v4.yn.."...v...f:k...h7.E\|Rw7..l.8..>=..0p..3.h.G.....G

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2251
Entropy (8bit):	4.647834810328793
Encrypted:	false
SSDEEP:	48:cenxzDkeSMPTzPFTYXxxEYQEI2ecXk3be:nxzId0XPFk2YTdbXkK
MD5:	6D224E8C8114DCC60C4E29DB7AE754D6
SHA1:	5B41541CC6DFB872D769D931D03CCEBD3CA84843
SHA-256:	1695067651C2FB9559EB62A9B889A53CF49E312F0975E3B28B70E8511D38B885
SHA-512:	ED7FA14C08BB95DE6C7106F7D46AF33820C9ED3709D0D157BCF98ADFB1ECD5C1E0A59557226EABB9B9DE5E01782FD947B402845784C3A3124D02C584D0AF756B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="50px" viewBox="0 0 56 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 5</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-1009.000000, -1085.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-5" transform="translate(1009.000000, 1083.000000)">.. <g id="Icon/Business">.. <path d="M19.8333333,14 L3.5,14 C2.85600031,14 2.33333333,14.5226666 2.33333333,15.1666667 L2.33333333,19.8333333 L2.33333333,24.5 C2.33333333,29.0103255 5.98967454,32.6666667 10.5,32.6666667 L45.5,32.6666667 C50.0103255,32.6666667 53.6666667,29.0103255 53.6666667,24.5 L53.6666667,19.8333333 L53.6666667,15.1666667 C53.6666667,14.5226666 53.1440003,14 52.5,14 L19.8333333,14 Z M2.33333333,31.1002234 L2.33333333,47.8333333 C2.3333333

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	5226787
Entropy (8bit):	5.645344697360603
Encrypted:	false
SSDEEP:	49152:19j+LJHsyuOBhbQYvXXbgJjzzuEV6GfSze+O6Q62E+/ttB5UOjvWmSbig+01ATLK:rjQBVkvyZ/wSz30aH
MD5:	95BC98E414CE82C4637CFB11D42A7D37
SHA1:	2EC0326084F43987B1D91A6041193D2AF7FF380E
SHA-256:	94108C3B94BB9B0FB1D7E658F23CF509A8BC260CA3F9E5FF6683521881E07311
SHA-512:	5914D732B3F7FE75AEE56E48BB95F0A319B06E980C7F0AE4C3DAA7B5C12612FC5941158CA574F6C9E5B1350AA9026035206315439E7B9B80F62C9D164E477306
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkOAMClient=self.webpackChunkOAMClient\|\|[]).push([[179],{2676:(ze,be,B)=>{"use strict";function R(t){return"function"==typeof t}function g(t){const e=t(n=>{Error.call(n),n.stack=(new Error).stack});return e.prototype=Object.create(Error.prototype),e.prototype.constructor=e,e}const T=g(t=>function(e){t(this),this.message=e?`${e.length} errors occurred during unsubscription:\n${e.map((n,o)=>`${o+1}) ${n.toString()}`).join("\n ")}`:"",this.name="UnsubscriptionError",this.errors=e});function P(t,i){if(t){const e=t.indexOf(i);0<=e&&t.splice(e,1)}}class x{constructor(i){this.initialTeardown=i,this.closed=!1,this._parentage=null,this._finalizers=null}unsubscribe(){let i;if(!this.closed){this.closed=!0;const{_parentage:e}=this;if(e)if(this._parentage=null,Array.isArray(e))for(const r of e)r.remove(this);else e.remove(this);const{initialTeardown:n}=this;if(R(n))try{n()}catch(r){i=r instanceof T?r.errors:[r]}const{_finalizers:o}=this;if(o){this._finalizers=null;for(const r of o)

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	4.763484985156866
Encrypted:	false
SSDEEP:	6:cQhRkRp0lhRSfXkrkI/DQs04aLyBCABXf8:VUm6fXkYILQN/eYWU
MD5:	BF47EB826A4CB221212A9B402AAE64E9
SHA1:	FE1A479A24C7CFA2F9C7638F34E3D50C93820D1F
SHA-256:	6F1F95D9706726F3F6B9DD4E625DF4F506F0C88957E2A4C5D0B696E30F2B6E89
SHA-512:	F3BF8BFF780C475DB2AE72DE1E78E8C896D1B55CF24C158EF453930EC78A8B16DF4331A14223644E28587EFED60E07ACBCAC049C7303997436D60D39195E12F4
Malicious:	false
Reputation:	low
URL:	https://cdn.aws.infarmbureau.com/b2c/oam/css/badge.css
Preview:	.badge.badge-info {. background-color: #4bb3df;.}..#admin-panel {. background-color: red;. text-align: center;. font-size: 2em;. color: white;. font-family: Arial Unicode MS, Arial, sans-serif;. padding-bottom: 10px;.}..a.disabled {. color: gray;. cursor: default;.}.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (6952), with no line terminators
Category:	dropped
Size (bytes):	6955
Entropy (8bit):	5.009445363344897
Encrypted:	false
SSDEEP:	96:oHX7uqok98PvgyjG4fZJ1Sw/Tslz2S/4+d97s96zpeB7ZQHCnTyUJY4Dd:oruqWBa+J1B/T8zFNg6wb98A
MD5:	C03E86FC76A8375FE41A754006EE1407
SHA1:	48875D16428F9323052E5C5A8F516D14A5F001D9
SHA-256:	51089E01E3673C42219CC9EBA2CAF10C91F8A5C92C8C17AB123A7EC12E749872
SHA-512:	4FC1708F4F370E9810478754AD0A19E60858090680C4F334308AC58DC9118F9A70CD098C2D560A3E7792EAC6BC214DA9F235CCB2B273EFA85D98A12BA3E0EACF
Malicious:	false
Reputation:	low
Preview:	.InsightInitScript = { _settings: null, _client: null, _createClient: function (t) { InsightInitScript._client = new sfDataIntell.Client({ apiKey: InsightInitScript._settings.apiKey, source: InsightInitScript._settings.applicationName, apiServerUrl: InsightInitScript._settings.apiServerUrl, trackingCookieDomain: InsightInitScript._settings.trackingCookieDomain, maxAgeForTrackingCookieInDays: InsightInitScript._settings.maxAgeForTrackingCookieInDays, slidingExpirationForTrackingCookie: InsightInitScript._settings.slidingExpirationForTrackingCookie, trackYouTubeVideos: InsightInitScript._settings.trackYouTubeVideos, trackVimeoVideos: InsightInitScript._settings.trackVimeoVideos, crossDomainTrackingEntries: InsightInitScript._settings.crossDomainTrackingEntries, sessionLengthInMinutes: InsightInitScript._settings.sessionLengthInMinutes, trackPageVisits: !0, trackVideos: !0, instrument: !0, trackBrowserInformation: !0, trackDocuments: !0, docsHrefTestExpressions: InsightInitScript._setti

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.684418093347435
Encrypted:	false
SSDEEP:	48:cqzgleSLMzjTEvTjVfZ6cR1acb8S8L/M1Ny6VhNld9i4FbwaT/:XgldozXELjJZDr8L/MZNlX3
MD5:	D97E858BC929A733E0A7FC7EEB6A68DA
SHA1:	63609A909F9F39A1E983A1C0CBB7F4916C270D9A
SHA-256:	E601FF2715B37167966BB1D291EA2ACDDF90097F181F7900562E2EDD786DC92A
SHA-512:	C555452DB2E7F6DB2E932CE8D23B5867BA33D02BAB3003088BCBEAAB0472438C1885D31CAE533FBD5EBFE6B36E27622667A67901151C2B3C610C9504B9A9722B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="56px" height="54px" viewBox="0 0 56 54" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy 2</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-693.000000, -821.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy-2" transform="translate(693.000000, 819.000000)">.. <g id="Icon/Home">.. <g>.. <path d="M47.8330134,31.5001336 C48.4770082,31.5001336 48.9996649,32.0216305 48.9996649,32.6667934 L48.9996649,54.8333395 C48.9996649,55.4785031 48.4770082,56 47.8330134,56 L33.8331563,56 C33.187999,56 32.6665047,55.4785031 32.6665047,54.8333395 L32.6665047,39.6667553 L23.3332666,39.6667553 L23.3332666,54.8333395 C23.3332666,55.4785031 22.8106036,56 22.1666087,56 L8.16675797,56 C7.52159437,56 7.00010004,55.4785031 7.00010

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5184
Entropy (8bit):	4.23504326510741
Encrypted:	false
SSDEEP:	96:feEdXdJkgJiqxF4VZVfNfudZgGLZ/KKdIvxD7Q6EiE7NZ85pic:WEdtygVxF+VfNfugGLBKmIvxXQ6/E7Y
MD5:	ED6686AA82653AE2803217F4B28E7B47
SHA1:	7D710F15FB9A2787FBF2DDFCA001E2A9331874C0
SHA-256:	98F48D513758BB5AF942487790752D03DFEF20C22941F372359CE9EDDE5A0A60
SHA-512:	F7EDA20097CAA2212C8762C7E2585A31152299C3447A1B4D117215163427BDB90A661C4FD300D38714790141B942FB1C1981D412FD33D93A718903D42E183236
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="52px" height="42px" viewBox="0 0 52 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>CTA/Item Copy</title>.. <desc>Created with Sketch.</desc>.. <g id="Screens" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Needs-Assessment---Intro" transform="translate(-378.000000, -826.000000)" fill="#AF180E">.. <g id="CTA/Item-Copy" transform="translate(376.000000, 819.000000)">.. <g id="Icon/Auto">.. <path d="M21,44.3333333 L21,46.6666667 C21,47.9553311 19.9553311,49 18.6666667,49 L11.6666667,49 C10.3780023,49 9.33333333,47.9553311 9.33333333,46.6666667 L9.33333333,44.3333333 L9.234301,44.3333333 C5.4328609,44.3333333 2.33333333,41.0655132 2.33333333,37.0693208 L2.33333333,28.1341732 C2.33333333,25.4643899 3.28166953,22.9169679 4.95306888,20.971115 C3.83934722,20.7945723 2.98792632,19.8300495 2.98792632,18.6666667 L2.98792632,14 C2.987926

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	30890
Entropy (8bit):	5.396932157292168
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4u4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4u4N10kv0O/zrYe1M
MD5:	98B9165C656FE6F97795C201CEE846FF
SHA1:	64025C3AF6409B69EFDE90FE7BCF5F4EBE041D87
SHA-256:	59A9D57AF366253D0FE1C99B747BDC9D8B4D1B1E5152A6BE96681E3D2C25C1D6
SHA-512:	D84C30A07C961FEB909741F386CA8B627DD078366441EFD73E506238FBEA3A4F5B7BD8E17297896D396C1A9F705B8CCB08C1071F91E7BC8318F7655CFF286EEC
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2270
Entropy (8bit):	4.785326134056941
Encrypted:	false
SSDEEP:	24:2d/n5dkZc9NTPBG4cGt8ZbgxcWpbhNgmdJkRT4gFW0JOPmFvgWNfqLPUOW6Jk3kn:cB/9N0RYmbwJkFGKOXCwyZ07ipiWlKDL
MD5:	BDF9568BC1FFED790957E8EF488F84BB
SHA1:	1CC0B2DEE2B1893B042A771F9212FED7BF9E99BE
SHA-256:	EF23B8158AAB0F4ADB85E6C9E9CAB37A18A2525BBBF63CBF73412CC9A9FF0EC7
SHA-512:	2C43603E586745DAADD99B2262B350018E928180124972D4A64835F22601683346219A294F421ADDFB71FD8DCE11E059B6477849198275FF901502FB49383F4B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg xmlns="http://www.w3.org/2000/svg" width="16.867" height="13.801" viewBox="0 0 16.867 13.801">.. <defs>.. <style>.. .cls-1 {.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <g id="Screens" transform="translate(-0.333)">.. <g id="Needs-Assessment---Intro" transform="translate(0.333 0)">.. <g id="CTA_Item-Copy" transform="translate(0)">.. <g id="Icon_Auto" transform="translate(0)">.. <path id="Shape" class="cls-1" d="M8.467,19.267v.767A.767.767,0,0,1,7.7,20.8H5.4a.767.767,0,0,1-.767-.767v-.767H4.6A2.335,2.335,0,0,1,2.333,16.88V13.944a3.616,3.616,0,0,1,.861-2.354.767.767,0,0,1-.646-.757V9.3a.767.767,0,0,1,.767-.767H4.633a.77.77,0,0,1,.3.061A3.62,3.62,0,0,1,7.921,7h5.815a3.347,3.347,0,0,1,2.292.951,3.7,3.7,0,0,1,.629.734.768.768,0,0,1,.458-.152h1.318A.767.767,0,0,1,19.2,9.3v1.533a.767.767,0,0,1-.767.767h-.087a3.616,3.616,0,0,1,.854,2.344V16.88a2.336,2.336,0,0,1-2.269,2.387H16.9v.767a.767.767,0,0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 17:21:09.665733099 CET	49675	443	192.168.2.4	173.222.162.32
Jan 10, 2025 17:21:19.275649071 CET	49675	443	192.168.2.4	173.222.162.32
Jan 10, 2025 17:21:23.126543999 CET	49739	443	192.168.2.4	142.250.185.68
Jan 10, 2025 17:21:23.126594067 CET	443	49739	142.250.185.68	192.168.2.4
Jan 10, 2025 17:21:23.126668930 CET	49739	443	192.168.2.4	142.250.185.68
Jan 10, 2025 17:21:23.126873016 CET	49739	443	192.168.2.4	142.250.185.68
Jan 10, 2025 17:21:23.126884937 CET	443	49739	142.250.185.68	192.168.2.4
Jan 10, 2025 17:21:23.762428045 CET	443	49739	142.250.185.68	192.168.2.4
Jan 10, 2025 17:21:23.762775898 CET	49739	443	192.168.2.4	142.250.185.68
Jan 10, 2025 17:21:23.762804031 CET	443	49739	142.250.185.68	192.168.2.4
Jan 10, 2025 17:21:23.763829947 CET	443	49739	142.250.185.68	192.168.2.4
Jan 10, 2025 17:21:23.763887882 CET	49739	443	192.168.2.4	142.250.185.68
Jan 10, 2025 17:21:23.765135050 CET	49739	443	192.168.2.4	142.250.185.68
Jan 10, 2025 17:21:23.765191078 CET	443	49739	142.250.185.68	192.168.2.4
Jan 10, 2025 17:21:23.805214882 CET	49739	443	192.168.2.4	142.250.185.68
Jan 10, 2025 17:21:23.805248976 CET	443	49739	142.250.185.68	192.168.2.4
Jan 10, 2025 17:21:23.852108955 CET	49739	443	192.168.2.4	142.250.185.68
Jan 10, 2025 17:21:25.100996971 CET	49742	80	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:25.101365089 CET	49743	80	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:25.105887890 CET	80	49742	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:25.105954885 CET	49742	80	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:25.106132030 CET	49742	80	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:25.106177092 CET	80	49743	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:25.106230021 CET	49743	80	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:25.110944986 CET	80	49742	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:25.687058926 CET	80	49742	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:25.725054026 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:25.725152969 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:25.725241899 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:25.725507021 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:25.725528002 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:25.729366064 CET	49742	80	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:26.260647058 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:26.266838074 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:26.266870022 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:26.268551111 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:26.268646955 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:26.273407936 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:26.273514032 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:26.273616076 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:26.273623943 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:26.313117981 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:26.415535927 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:26.415771008 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:26.415874004 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:26.578304052 CET	49744	443	192.168.2.4	198.179.10.65
Jan 10, 2025 17:21:26.578385115 CET	443	49744	198.179.10.65	192.168.2.4
Jan 10, 2025 17:21:26.622889996 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:26.622942924 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:26.623013973 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:26.623276949 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:26.623286963 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.266269922 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.266520977 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.266547918 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.267683983 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.267744064 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.268820047 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.268920898 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.268980980 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.268989086 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.320530891 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.921036959 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.921065092 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.921072960 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.921108007 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.921124935 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.921138048 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.921250105 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.921250105 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.921276093 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.921325922 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.924617052 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.968581915 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.978609085 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.978653908 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.978732109 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.979551077 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.979568005 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.980916023 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.980956078 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.981021881 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.981261969 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.981296062 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.981353998 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.982152939 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.982203007 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.982264042 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.982532978 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.982547998 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.982597113 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.982953072 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.982969999 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.983128071 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.983140945 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.983345032 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.983361959 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.983555079 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:27.983567953 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:27.988466024 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:27.988488913 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:27.988605022 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:27.989279985 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:27.989289045 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:27.994481087 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:27.994514942 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:27.994579077 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:27.994679928 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:27.994714022 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:27.994762897 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:27.995115042 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:27.995126009 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:27.995266914 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:27.995276928 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.007669926 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.007683039 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.007713079 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.007738113 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.007757902 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.007772923 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.007814884 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.009308100 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.009315968 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.009340048 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.009373903 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.009381056 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.009397984 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.009418964 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.093506098 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.093533039 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.093633890 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.093661070 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.093707085 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.094477892 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.094494104 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.094552994 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.094563007 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.094599009 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.095350027 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.095367908 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.095413923 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.095424891 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.095465899 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.097089052 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.097106934 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.097187042 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.097208023 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.097249985 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.179979086 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.180030107 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.180092096 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.180090904 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.180136919 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.180857897 CET	49745	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.180881977 CET	443	49745	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.181416988 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.181458950 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.181539059 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.182495117 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.182507038 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.480155945 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.481208086 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.481226921 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.482187033 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.482245922 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.483208895 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.483258009 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.483412981 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.500046015 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.500355959 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.500384092 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.500832081 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.501235962 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.501297951 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.501363039 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.504620075 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.504796982 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.504822016 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.505119085 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.505388021 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.505429983 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.505470037 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.514637947 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.514862061 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.514875889 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.515841961 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.515907049 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.516220093 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.516266108 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.516330004 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.518917084 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.519093990 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.519117117 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.519285917 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.519423962 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.519429922 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.519454002 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.519571066 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.519601107 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.520390034 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.520445108 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.520520926 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.520569086 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.521313906 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.521336079 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.521394968 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.521466017 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.521560907 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.521794081 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.521817923 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.521888018 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.521955013 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.522077084 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.522077084 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.522083998 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.522346973 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.522347927 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.522355080 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.522360086 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.523341894 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.523406982 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.523703098 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.523741961 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.523803949 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.523809910 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.526827097 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.526838064 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.547322989 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.551322937 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.557584047 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.557609081 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.567326069 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.572669029 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.572668076 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.572679043 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.572690010 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.572690010 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.572695017 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.604594946 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.618267059 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.625643015 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.625693083 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.625721931 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.625752926 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.625772953 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.625792980 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.625818014 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.625818014 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.625854969 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.625859976 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.626091957 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.626132965 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.626137018 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.630390882 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.630415916 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.630537033 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.630551100 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.630649090 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.720128059 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.720155954 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.720186949 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.720351934 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.720366001 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.720398903 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.720546961 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.720602036 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.720638990 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.721684933 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.721705914 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.721740961 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.721759081 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.721765041 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.721769094 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.721790075 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.721808910 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.721838951 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.729927063 CET	49748	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.729954004 CET	443	49748	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.732892990 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.733109951 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.733136892 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.733170033 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.733170986 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.733186960 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.733213902 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.733409882 CET	49756	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.733448982 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.733450890 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.733480930 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.733504057 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.733506918 CET	49756	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.733509064 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.733514071 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.733549118 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.733839989 CET	49756	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.733849049 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.734740973 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.734802008 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.734833956 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.734852076 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.734860897 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.734884977 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.734901905 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.734931946 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.734965086 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.734966040 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.734975100 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.734998941 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.735022068 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.735049009 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.735052109 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.735055923 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.735085964 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.735440016 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.735495090 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.735532999 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.735537052 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.735541105 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.735564947 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.735569954 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.741142988 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.745624065 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.745640039 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.746742010 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.746802092 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.747121096 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.747175932 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.747242928 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.751086950 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.752563953 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.752582073 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.752589941 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.752602100 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.752609015 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.752635956 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.752645016 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.752655029 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.752686977 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.752705097 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.782507896 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.785104036 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.785125971 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.785150051 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.785218954 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.785243988 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.785262108 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.785289049 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.786974907 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.787014008 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.787050962 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.787069082 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.787085056 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.787334919 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.791193962 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.791218996 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.791248083 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.791286945 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.791301012 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.791321993 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.791342020 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.791615009 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.791637897 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.791666985 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.792987108 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.793008089 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.793054104 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.793059111 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.793103933 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.799747944 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.799767971 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.799773932 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.799784899 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.799791098 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.799793959 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.799873114 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.799900055 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.799963951 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.801639080 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.801646948 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.801660061 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.801681042 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.801706076 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.801723957 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.801737070 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.801762104 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.803055048 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.803071976 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.803077936 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.803107023 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.803129911 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.803148985 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.803222895 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.803272963 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.803297997 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.804714918 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.804733038 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.804800034 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.804827929 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.804881096 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.805143118 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.805160999 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.805192947 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.805210114 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.805228949 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.805258989 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.805272102 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.806035042 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.806044102 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.806066990 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.806101084 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.806107044 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.806113005 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.806148052 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.806170940 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.807109118 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.807157040 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.807188034 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.807193995 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.807229042 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.807252884 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.807941914 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.807956934 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.808001995 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.808007956 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.808038950 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.808058977 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.825370073 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.825458050 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.825485945 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.825647116 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.825673103 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.825920105 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.825973988 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.825980902 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.826014996 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.826054096 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.826102972 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.826107979 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.826143026 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.826674938 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.826725006 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.826725006 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.826733112 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.826761961 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.826765060 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.826771021 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.826797962 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.827416897 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.827464104 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.827560902 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.827593088 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.827609062 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.827615023 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.827630043 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.827644110 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.828418016 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.828463078 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.828475952 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.828481913 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.828509092 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.828511000 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.828526974 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.828531981 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.828540087 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.828557968 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.828596115 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.828598976 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.829220057 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.829358101 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.829435110 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.841790915 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.841792107 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.872381926 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.872409105 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.872545004 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.872575998 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.872617006 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.873331070 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.873347998 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.873390913 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.873399019 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.873426914 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.873440981 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.874701023 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.874716043 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.874773979 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.874782085 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.874814034 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.878077030 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.878104925 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.878163099 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.878176928 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.878202915 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.878217936 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.879656076 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.879678011 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.879723072 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.879728079 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.879772902 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.880642891 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.880673885 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.880706072 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.880708933 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.880731106 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.880753994 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.887274027 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.887293100 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.887386084 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.887408018 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.887453079 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.889080048 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.889100075 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.889153004 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.889164925 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.890234947 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.890254021 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.890281916 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.890292883 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.890307903 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.890333891 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.891266108 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.891282082 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.891321898 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.891340971 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.891355038 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.891558886 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.891601086 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.891629934 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.891649008 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.891659021 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.891663074 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.892204046 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.892338991 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.892364979 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.892398119 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.892424107 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.892441034 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.892507076 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.892524958 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.892559052 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.892565012 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.892589092 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.892592907 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.892605066 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.892745972 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.892770052 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.892796993 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.892802954 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.892807007 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.892822981 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.892829895 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.892884970 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.892894983 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.892916918 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.892930984 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.893533945 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.893553019 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.893583059 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.893598080 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.893614054 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.893637896 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.893716097 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.893731117 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.893784046 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.893790007 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.893817902 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.893829107 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.893862009 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.893873930 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.893878937 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.893908978 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.893929958 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.894778967 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.894795895 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.894844055 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.894856930 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.894881010 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.894897938 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.895206928 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.895222902 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.895279884 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.895286083 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.895318031 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.895329952 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.895370007 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.895395041 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.895427942 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.895433903 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.895478964 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.908278942 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.908301115 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.908375025 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.908382893 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.908421993 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.917685032 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.917746067 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.917771101 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.917794943 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.917964935 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.917980909 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.917980909 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.917989016 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.917999029 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.918009043 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.918052912 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.918056965 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.918152094 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.918195009 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.918200016 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.918220043 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.918251038 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.918252945 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.918261051 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.918292046 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.918988943 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919018984 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919027090 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919034004 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919059038 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919245005 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919286013 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919291973 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919302940 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919327974 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919332981 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919358015 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919688940 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919719934 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919728994 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919734001 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919759035 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919779062 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919814110 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919817924 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919830084 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919855118 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919862032 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919869900 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.919886112 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.919918060 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.922688961 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.922732115 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.922770977 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.922771931 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.922785997 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.922800064 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.922802925 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.922815084 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.922838926 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.922842979 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.923393965 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.923446894 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.923454046 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.923624039 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.923660994 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.923666954 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.923675060 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.923703909 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.923708916 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.923719883 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.924087048 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.924140930 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.924155951 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.924163103 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.924177885 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.924202919 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.924209118 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.924218893 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.924263954 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.952327013 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.959053040 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.959093094 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.959171057 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.959198952 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.959224939 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.959278107 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.959309101 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.959336042 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.959393978 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.959409952 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.959410906 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.959687948 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.959705114 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.959743977 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.959749937 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.959784985 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.960442066 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.960460901 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.960493088 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.960500956 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.960511923 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.960695982 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.960747004 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.960748911 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.960768938 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:28.960777044 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.960788012 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:28.961287022 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.961303949 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.961339951 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.961345911 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.961369991 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.961389065 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.964816093 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.964849949 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.964895964 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.964905024 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.964914083 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.964930058 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.964956045 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.964963913 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.964963913 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.965003014 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.965003967 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.965028048 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.965322971 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.965348005 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.965380907 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.965385914 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.965411901 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.965430975 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.965868950 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.965910912 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.965940952 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.965945959 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.965971947 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.965990067 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.966609001 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.966635942 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.966670990 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.966675043 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.966705084 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.966720104 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.966722965 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.967072964 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.967099905 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.967127085 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.967130899 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.967156887 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.967900038 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.967919111 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.967955112 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.967959881 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.967982054 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.968733072 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.968755960 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.968785048 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.968789101 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.968807936 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.968836069 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.974827051 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.974888086 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.974931002 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.974948883 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.974963903 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.975387096 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.975430965 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.975439072 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.975462914 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.975491047 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.975521088 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.976180077 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.976222038 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.976236105 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.976244926 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.976268053 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.976284981 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.976298094 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.977125883 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.977169991 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.977188110 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.977195978 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.977221012 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.978169918 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.978216887 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.978224039 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.978240967 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.978280067 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.978626966 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.978667021 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.978689909 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.978715897 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.978729010 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.978750944 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.978756905 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.978763103 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.978790045 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.978797913 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.978846073 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.978856087 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.979214907 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.979432106 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.979459047 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.979484081 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.979490995 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.979511976 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.979532003 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.979799986 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.979857922 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.979887009 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.979912996 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.979932070 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.979935884 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.979940891 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.979954958 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.979988098 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.980089903 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.980134010 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.980144978 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.980158091 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.980190992 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.980449915 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.980499983 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.980504036 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.980534077 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.980567932 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.982294083 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.982336044 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.982392073 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.982419968 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.982438087 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.983953953 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.983999968 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.984030008 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.984050035 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.984070063 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.984106064 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.986001015 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.986040115 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.986078024 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.986095905 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.986115932 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.986218929 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.986263037 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.986279011 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.986295938 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.986301899 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.986318111 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.987061024 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.987107992 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.987112045 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.987131119 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.987159967 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.987881899 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.987926006 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.987935066 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.987947941 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:28.987978935 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:28.988111973 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.988152981 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.988178968 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.988194942 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.988209963 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.988231897 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.988547087 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.988586903 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.988605976 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.988615036 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.988640070 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.988656998 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.988857985 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.988897085 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.988915920 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.988924026 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:28.988948107 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:28.988965034 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.000694990 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.010647058 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.010687113 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.010740995 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.010756969 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.010775089 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.010821104 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.010863066 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.010879040 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.010885954 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.010924101 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.010956049 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.010991096 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.011013985 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.011018038 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.011028051 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.011209011 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.011250973 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.025808096 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.031486988 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.046123981 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.046200037 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.046209097 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.046235085 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.046258926 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.046278000 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.046336889 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.046384096 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.046426058 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.046559095 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.046715975 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.051568985 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.051611900 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.051665068 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.051697016 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.051711082 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.052022934 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.052047014 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.052078009 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.052082062 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.052104950 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.052124023 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.052743912 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.052778006 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.052805901 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.052810907 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.052822113 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.052839994 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.052870035 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.052901030 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.052927971 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.052932978 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.052959919 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.052972078 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.054332972 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.054354906 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.054389954 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.054394007 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.054430008 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.054449081 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.054457903 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.054477930 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.054507971 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.054512024 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.054538012 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.054552078 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.054837942 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.054862022 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.054891109 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.054894924 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.054919958 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.054936886 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.055644035 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.055675030 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.055701017 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.055706024 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.055730104 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.055742025 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.062383890 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.062446117 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.062473059 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.062493086 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.062511921 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.062529087 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.062820911 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.062975883 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.063014984 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.063033104 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.063040018 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.063069105 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.063082933 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.063318968 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.063585043 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.063621044 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.063648939 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.063661098 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.063684940 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.063699007 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.063916922 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.063951969 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.063983917 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.063990116 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.064004898 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.064023972 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.064095020 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.064146996 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.064157009 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.064162970 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.064188957 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.064203978 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.064326048 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.064357996 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.064374924 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.064379930 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.064409971 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.064424038 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.064496994 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.064532042 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.064552069 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.064555883 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.064582109 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.064596891 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.065001011 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.065045118 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.065064907 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.065079927 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.065094948 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.065112114 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.065316916 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.065349102 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.065372944 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.065376997 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.065408945 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.065421104 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.066107988 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.066155910 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.066186905 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.066194057 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.066219091 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.066234112 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.066426039 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.066488028 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.066505909 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.066510916 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.066534042 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.066548109 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.066873074 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.066912889 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.066922903 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.066940069 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.066958904 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.066973925 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.067996979 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.068037987 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.068063021 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.068068027 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.068093061 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.068108082 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.069015980 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.069060087 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.069077015 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.069082022 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.069108963 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.069123983 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.069958925 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.069998980 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.070019007 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.070024014 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.070050955 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.070065022 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.070945024 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.070992947 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.071022034 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.071054935 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.071074009 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.071089029 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.071443081 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.071491003 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.071506977 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.071516037 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.071535110 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.071548939 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.072611094 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.072650909 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.072666883 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.072676897 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.072702885 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.072716951 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.072805882 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.072855949 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.072870970 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.072879076 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.073030949 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.073075056 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.081737995 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.082679033 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.085484028 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.086497068 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.088444948 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.091204882 CET	49753	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.091233969 CET	443	49753	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.104245901 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.104290962 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.104310989 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.104321957 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.104360104 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.109308004 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.112565994 CET	49751	443	192.168.2.4	104.17.249.203
Jan 10, 2025 17:21:29.112586021 CET	443	49751	104.17.249.203	192.168.2.4
Jan 10, 2025 17:21:29.114274979 CET	49755	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.114293098 CET	443	49755	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.115688086 CET	49747	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.115737915 CET	443	49747	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.116609097 CET	49749	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.116672993 CET	443	49749	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.146109104 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.146147013 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.146229029 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.146503925 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.146521091 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.148777962 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.148811102 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.149046898 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.151885033 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.151922941 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.151958942 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.151968002 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.152007103 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.152026892 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.152259111 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.152291059 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.152311087 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.152314901 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.152342081 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.152359962 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.152757883 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.152780056 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.152817965 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.152821064 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.152848959 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.152867079 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.153135061 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.153182030 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.153194904 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.153198957 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.153239965 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.153268099 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.153398991 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.154320002 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.154330969 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.155019045 CET	49746	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.155026913 CET	443	49746	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.156727076 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.156805992 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.156829119 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.156843901 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.156869888 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.156886101 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.157068968 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.157130957 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.157145977 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.157253981 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.157300949 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.157656908 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.157696962 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.157713890 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.157721996 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.157747984 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.157762051 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.157819033 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.157856941 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.157870054 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.157876015 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.157907009 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.158068895 CET	49761	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.158107996 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.158129930 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.158169031 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.158169031 CET	49761	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.158185959 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.158191919 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.158216953 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.158235073 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.158515930 CET	49761	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.158534050 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.159136057 CET	49754	443	192.168.2.4	198.179.10.61
Jan 10, 2025 17:21:29.159149885 CET	443	49754	198.179.10.61	192.168.2.4
Jan 10, 2025 17:21:29.162664890 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.162703991 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.162723064 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.162733078 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.162763119 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.162776947 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.163367987 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.163423061 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.163456917 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.163464069 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.163491011 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.163508892 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.163774967 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.163814068 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.163834095 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.163840055 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.163863897 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.163878918 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.170176983 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.170212030 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.170305014 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.170469046 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.170490980 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.176906109 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.176990986 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.177125931 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.177299023 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.177319050 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.191740990 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.191760063 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.191797018 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.191811085 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.191854954 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.244086981 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.244117022 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.244168043 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.244183064 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.244224072 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.244265079 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.244281054 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.244319916 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.244324923 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.244344950 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.244364023 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.244700909 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.244714975 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.244750977 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.244756937 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.244791985 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.245073080 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.245086908 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.245140076 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.245146036 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.245182037 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.245549917 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.245565891 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.245615959 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.245621920 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.245670080 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.246401072 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.246417046 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.246471882 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.246479034 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.246507883 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.247483015 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.247503042 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.247539997 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.247546911 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.247572899 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.247591019 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.279359102 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.279385090 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.279443979 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.279459000 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.279503107 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.286979914 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.287254095 CET	49756	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.287278891 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.287633896 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.287940025 CET	49756	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.288008928 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.288073063 CET	49756	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.331152916 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.331181049 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.331244946 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.331260920 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.331290007 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.331332922 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.331662893 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.331681967 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.331713915 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.331721067 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.331746101 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.331762075 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.332180023 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.332195997 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.332241058 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.332247972 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.332281113 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.332564116 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.332580090 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.332607985 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.332612991 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.332642078 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.332659006 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.333095074 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.333117962 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.333146095 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.333151102 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.333188057 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.333777905 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.333796024 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.333827019 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.333832979 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.333863974 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.335119009 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.335136890 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.335175991 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.335182905 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.335232019 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.367001057 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.367032051 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.367070913 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.367086887 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.367131948 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.419090986 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.419117928 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.419178963 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.419195890 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.419233084 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.419509888 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.419554949 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.419569016 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.419578075 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.419606924 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.419624090 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.420077085 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.420124054 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.420135021 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.420152903 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.420175076 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.420190096 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.420507908 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.420550108 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.420559883 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.420572042 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.420593977 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.420612097 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.420978069 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.421025038 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.421045065 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.421051979 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.421076059 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.421092987 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.421854973 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.421909094 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.421936035 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.421941996 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.421968937 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.421983957 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.423369884 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.423424959 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.423444986 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.423454046 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.423475981 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.423494101 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.426753998 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.479408979 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.479465008 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.479588985 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.479615927 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.479660034 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.486934900 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.486958981 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.487045050 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.487082005 CET	49756	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.487186909 CET	49756	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.488291025 CET	49756	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.488323927 CET	443	49756	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.491174936 CET	49764	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.491219997 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.491302013 CET	49764	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.491519928 CET	49764	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.491535902 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.493218899 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.493273973 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.493356943 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.493613958 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.493634939 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.524396896 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.524497032 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.524544001 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.524564028 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.524590969 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.524616957 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.524655104 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.524696112 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.525120974 CET	49750	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.525140047 CET	443	49750	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.530569077 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.530605078 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.530662060 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.530930996 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.530944109 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.531594038 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.531800032 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.531826973 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.532872915 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.532943010 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.533267975 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.533346891 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.533396959 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.579334974 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.587863922 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.587925911 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.634541988 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.670962095 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.671343088 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.671377897 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.672396898 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.672476053 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.673682928 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.673753023 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.674010038 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.674019098 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.694526911 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.694839001 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.694859982 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.697093010 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.697192907 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.697537899 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.697619915 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.697664976 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.702320099 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.702347040 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.702357054 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.702441931 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.702503920 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.702503920 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.703428984 CET	49757	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.703469038 CET	443	49757	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.709191084 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.709482908 CET	49761	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.709513903 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.709892988 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.710309982 CET	49761	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.710385084 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.710506916 CET	49761	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.718550920 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.718971968 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.719036102 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.720890045 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.720978975 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.721376896 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.721473932 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.721506119 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.725001097 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.725284100 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.725300074 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.727068901 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.727154016 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.727554083 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.734093904 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.734169006 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.734263897 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.734276056 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.739368916 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.746923923 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.746946096 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.751336098 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.763014078 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.763081074 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.778841972 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.791336060 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.806691885 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.814311028 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.814371109 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.814446926 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.841665030 CET	49763	443	192.168.2.4	104.16.40.28
Jan 10, 2025 17:21:29.841697931 CET	443	49763	104.16.40.28	192.168.2.4
Jan 10, 2025 17:21:29.868558884 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.868587017 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.868669987 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.868695021 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.868709087 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.868732929 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.868756056 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.879417896 CET	49760	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.879441023 CET	443	49760	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.897594929 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.897684097 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.897730112 CET	49761	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.899043083 CET	49761	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.899066925 CET	443	49761	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.901603937 CET	49768	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.901643038 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.901720047 CET	49768	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.901931047 CET	49768	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.901942968 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.905224085 CET	49769	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.905263901 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.905319929 CET	49769	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.905507088 CET	49769	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.905518055 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.987385988 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.987421989 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.987431049 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.987458944 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.987472057 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.987474918 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.987483978 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.987498999 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.987513065 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.987538099 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.989154100 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.989181995 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.989229918 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.989242077 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.989270926 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.989285946 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.989923000 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.989945889 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.989953995 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.989965916 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.989986897 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.989998102 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.990019083 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.990031958 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.990058899 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.991807938 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.991825104 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.991878033 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:29.991885900 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:29.991925001 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.027074099 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.027309895 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.027345896 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.028434992 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.028487921 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.028841019 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.028904915 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.028985977 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.028995991 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.033724070 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.033962965 CET	49764	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.033977985 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.034318924 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.034667969 CET	49764	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.034729004 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.034809113 CET	49764	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.067764044 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.068006039 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.068017006 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.069073915 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.069128036 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.069542885 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.069612026 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.069803953 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.069809914 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.071759939 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.075325966 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.076714993 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.076745987 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.076790094 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.076814890 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.076832056 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.076873064 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.077959061 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.077979088 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.078061104 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.078068972 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.078109980 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.078239918 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.078268051 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.078301907 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.078320980 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.078336000 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.078356028 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.079484940 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.079516888 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.079546928 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.079551935 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.079588890 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.079792023 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.079809904 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.079852104 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.079862118 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.079874992 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.079900026 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.081314087 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.081335068 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.081381083 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.081384897 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.081417084 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.083096027 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.083117008 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.083151102 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.083154917 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.083197117 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.110331059 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.110395908 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.110428095 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.110456944 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.110486984 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.110507011 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.119028091 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.163759947 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.163793087 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.163835049 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.163862944 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.163887024 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.163904905 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.164637089 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.164686918 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.164707899 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.164714098 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.164762020 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.165551901 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.165574074 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.165632010 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.165637970 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.165674925 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.166419029 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.166441917 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.166467905 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.166475058 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.166512012 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.167411089 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.167429924 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.167462111 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.167468071 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.167494059 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.167510986 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175542116 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175575972 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175611973 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175626040 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175647974 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175651073 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175668955 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175677061 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175695896 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175703049 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175735950 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175751925 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175775051 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175800085 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175803900 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175826073 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175834894 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175842047 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175846100 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175862074 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175889969 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175894022 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175914049 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175915956 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175931931 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175935984 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175957918 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.175962925 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.175996065 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.182802916 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.182826042 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.182867050 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.182871103 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.182894945 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.182914019 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.182918072 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.182950974 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.182955027 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.182996035 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.183031082 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.183305025 CET	49759	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.183326006 CET	443	49759	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.197135925 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.197155952 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.197211027 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.197221041 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.197259903 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.250220060 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.250236988 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.250307083 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.250328064 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.250365019 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.250849009 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.250864029 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.250912905 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.250920057 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.250955105 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.251266003 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.251280069 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.251323938 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.251331091 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.251359940 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.251364946 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.251375914 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.251386881 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.251414061 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.251420975 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.251451969 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.251457930 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.251483917 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.251517057 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.251923084 CET	49762	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.251935005 CET	443	49762	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.341918945 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.341945887 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.341954947 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.341989994 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.341995001 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.342016935 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.342026949 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.342039108 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.342063904 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.343365908 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.343388081 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.343458891 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.343466043 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.343595028 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.386288881 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.386306047 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.386368036 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.386400938 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.386415958 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.386466026 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.387393951 CET	49765	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.387411118 CET	443	49765	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.387881041 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.387933016 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.388062000 CET	49764	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.389053106 CET	49764	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.389071941 CET	443	49764	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.392410994 CET	49770	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.392462015 CET	443	49770	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.392533064 CET	49770	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.392770052 CET	49770	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.392788887 CET	443	49770	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.393901110 CET	49771	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.393948078 CET	443	49771	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.394061089 CET	49771	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.394273043 CET	49771	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.394288063 CET	443	49771	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.430844069 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.430907965 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.430937052 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.430953979 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.430994034 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.431055069 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.431098938 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.431113005 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.431119919 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.431137085 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.431159973 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.432935953 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.432979107 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.433003902 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.433015108 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.433052063 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.433063984 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.434094906 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.434140921 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.434175968 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.434181929 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.434214115 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.434226036 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.437973022 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.438281059 CET	49769	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.438296080 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.439482927 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.439827919 CET	49769	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.440010071 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.440043926 CET	49769	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.441065073 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.441335917 CET	49768	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.441365957 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.441732883 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.442066908 CET	49768	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.442127943 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.442173004 CET	49768	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.483344078 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.487330914 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.487788916 CET	49769	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.487822056 CET	49768	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.519392014 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.519419909 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.519500971 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.519521952 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.519553900 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.519568920 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.519973993 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.520021915 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.520050049 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.520056009 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.520081997 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.520096064 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.520104885 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.520344019 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.520386934 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.520400047 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.520406961 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.520430088 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.520911932 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.520961046 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.520982981 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.520987988 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.521013975 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.525300980 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.525338888 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.525367022 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.525373936 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.525410891 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.571784019 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.607878923 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.607911110 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.607948065 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.607964993 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.607984066 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.608005047 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.608011961 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.608017921 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.608032942 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.608061075 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609014034 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609059095 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609097958 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609107971 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609127998 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609134912 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609143019 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609160900 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609185934 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609199047 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609217882 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609225988 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609253883 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609280109 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609538078 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609566927 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609594107 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609601021 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609628916 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609642982 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609771967 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609810114 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609823942 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609829903 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609850883 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609869003 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609911919 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609939098 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609963894 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.609968901 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.609993935 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.610023975 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.610131025 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.610157967 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.610189915 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.610196114 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.610217094 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.610233068 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.615539074 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.615638971 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.615787029 CET	49769	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.616978884 CET	49769	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.616997957 CET	443	49769	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.628209114 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.628303051 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.628937006 CET	49768	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.629838943 CET	49768	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.629858017 CET	443	49768	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.636689901 CET	49773	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.636739969 CET	443	49773	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.636795044 CET	49773	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.637095928 CET	49773	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.637115002 CET	443	49773	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.652127981 CET	49774	443	192.168.2.4	198.179.10.51
Jan 10, 2025 17:21:30.652174950 CET	443	49774	198.179.10.51	192.168.2.4
Jan 10, 2025 17:21:30.652261019 CET	49774	443	192.168.2.4	198.179.10.51
Jan 10, 2025 17:21:30.652708054 CET	49774	443	192.168.2.4	198.179.10.51
Jan 10, 2025 17:21:30.652724981 CET	443	49774	198.179.10.51	192.168.2.4
Jan 10, 2025 17:21:30.696485043 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.696556091 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.696597099 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.696616888 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.696670055 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.697135925 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.697227955 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.697355986 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.697433949 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.697642088 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.697702885 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.697715998 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.697772980 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.697873116 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.697921991 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.697941065 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.697952032 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.697974920 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.697993994 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.698308945 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.698350906 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.698369980 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.698378086 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.698402882 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.698420048 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.698499918 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.698553085 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.698565960 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.698574066 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.698599100 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.698613882 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.699295044 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.699356079 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.699405909 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.699466944 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.701822042 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.701888084 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.701908112 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.701920033 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.701946020 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.701962948 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.784976006 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.785017967 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.785062075 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.785090923 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.785147905 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.785624027 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.785653114 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.785689116 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.785698891 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.785723925 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.785738945 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.786108971 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.786166906 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.786189079 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.786195993 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.786226034 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.786241055 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.786504030 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.786555052 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.786575079 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.786582947 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.786608934 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.786626101 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.786803007 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.786844015 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.786859989 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.786875010 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.786892891 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.786910057 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.787029982 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.787070990 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.787097931 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.787106991 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.787131071 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.787144899 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.787363052 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.787410021 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.787427902 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.787436008 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.787466049 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.787756920 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.787808895 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.787827015 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.787839890 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.787853003 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.787864923 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.787889004 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.788497925 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.873589039 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.873631001 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.873704910 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.873728991 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.873769999 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.874372005 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.874399900 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.874433041 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.874444008 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.874474049 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.874490023 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.874568939 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.874594927 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.874620914 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.874628067 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.874656916 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.874670982 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.874922991 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.874950886 CET	443	49766	198.179.10.12	192.168.2.4
Jan 10, 2025 17:21:30.874990940 CET	49766	443	192.168.2.4	198.179.10.12
Jan 10, 2025 17:21:30.874999046 CET	443	49766	198.179.10.12	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 17:21:23.118777990 CET	192.168.2.4	1.1.1.1	0x9a1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:23.118901968 CET	192.168.2.4	1.1.1.1	0x75c4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:25.063062906 CET	192.168.2.4	1.1.1.1	0xd316	Standard query (0)	infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:25.063215971 CET	192.168.2.4	1.1.1.1	0xd093	Standard query (0)	infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:25.689284086 CET	192.168.2.4	1.1.1.1	0x95b	Standard query (0)	infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:25.689599991 CET	192.168.2.4	1.1.1.1	0xf39f	Standard query (0)	infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:26.607821941 CET	192.168.2.4	1.1.1.1	0x3faa	Standard query (0)	www.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:26.608242989 CET	192.168.2.4	1.1.1.1	0x2cf1	Standard query (0)	www.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:27.979170084 CET	192.168.2.4	1.1.1.1	0xf26d	Standard query (0)	cdn.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:27.979310036 CET	192.168.2.4	1.1.1.1	0x82f1	Standard query (0)	cdn.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:27.980031013 CET	192.168.2.4	1.1.1.1	0x2ff0	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:27.980914116 CET	192.168.2.4	1.1.1.1	0xdce6	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:28.739032984 CET	192.168.2.4	1.1.1.1	0xc7b3	Standard query (0)	www.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:28.739164114 CET	192.168.2.4	1.1.1.1	0x7d30	Standard query (0)	www.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:29.168000937 CET	192.168.2.4	1.1.1.1	0x899d	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:29.168128014 CET	192.168.2.4	1.1.1.1	0xfae5	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:30.635857105 CET	192.168.2.4	1.1.1.1	0xb0e0	Standard query (0)	farmalytics.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:30.636004925 CET	192.168.2.4	1.1.1.1	0x74c7	Standard query (0)	farmalytics.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:30.964620113 CET	192.168.2.4	1.1.1.1	0x61c2	Standard query (0)	cdn.insight.sitefinity.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:30.964869976 CET	192.168.2.4	1.1.1.1	0x610d	Standard query (0)	cdn.insight.sitefinity.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:32.582329988 CET	192.168.2.4	1.1.1.1	0xdf6f	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.582496881 CET	192.168.2.4	1.1.1.1	0x5e3a	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.292114973 CET	192.168.2.4	1.1.1.1	0x9653	Standard query (0)	api.dec.sitefinity.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.292326927 CET	192.168.2.4	1.1.1.1	0x3e76	Standard query (0)	api.dec.sitefinity.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.304523945 CET	192.168.2.4	1.1.1.1	0x2bb7	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.305227041 CET	192.168.2.4	1.1.1.1	0xcec6	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.310188055 CET	192.168.2.4	1.1.1.1	0x1033	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.310353041 CET	192.168.2.4	1.1.1.1	0xa5ae	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.310775995 CET	192.168.2.4	1.1.1.1	0x6a25	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311084032 CET	192.168.2.4	1.1.1.1	0xe125	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.315896034 CET	192.168.2.4	1.1.1.1	0x28c1	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.316143990 CET	192.168.2.4	1.1.1.1	0x4333	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.316700935 CET	192.168.2.4	1.1.1.1	0x16d9	Standard query (0)	p.teads.tv	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.316864967 CET	192.168.2.4	1.1.1.1	0x2b24	Standard query (0)	p.teads.tv	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.317362070 CET	192.168.2.4	1.1.1.1	0x68d2	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317503929 CET	192.168.2.4	1.1.1.1	0x5852	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.759427071 CET	192.168.2.4	1.1.1.1	0x3303	Standard query (0)	farmalytics.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.759954929 CET	192.168.2.4	1.1.1.1	0x64f4	Standard query (0)	farmalytics.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.819861889 CET	192.168.2.4	1.1.1.1	0x748c	Standard query (0)	cdn.insight.sitefinity.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.820182085 CET	192.168.2.4	1.1.1.1	0x3189	Standard query (0)	cdn.insight.sitefinity.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:33.944890976 CET	192.168.2.4	1.1.1.1	0x7646	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.945025921 CET	192.168.2.4	1.1.1.1	0xdcab	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:34.138854027 CET	192.168.2.4	1.1.1.1	0xbda3	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.139028072 CET	192.168.2.4	1.1.1.1	0x9104	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 17:21:34.443937063 CET	192.168.2.4	1.1.1.1	0x1193	Standard query (0)	collector-44978.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.444334030 CET	192.168.2.4	1.1.1.1	0xafe1	Standard query (0)	collector-44978.us.tvsquared.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:34.455471992 CET	192.168.2.4	1.1.1.1	0x8d8c	Standard query (0)	cm.teads.tv	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.455661058 CET	192.168.2.4	1.1.1.1	0x695f	Standard query (0)	cm.teads.tv	65	IN (0x0001)	false
Jan 10, 2025 17:21:34.485660076 CET	192.168.2.4	1.1.1.1	0xb099	Standard query (0)	bob.dmpxs.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.486205101 CET	192.168.2.4	1.1.1.1	0xb011	Standard query (0)	bob.dmpxs.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:35.005769014 CET	192.168.2.4	1.1.1.1	0x76da	Standard query (0)	8339572.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.006076097 CET	192.168.2.4	1.1.1.1	0xd882	Standard query (0)	8339572.fls.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:35.006484985 CET	192.168.2.4	1.1.1.1	0x1a77	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.006614923 CET	192.168.2.4	1.1.1.1	0xf87e	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:35.419073105 CET	192.168.2.4	1.1.1.1	0x1f60	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.419487953 CET	192.168.2.4	1.1.1.1	0x5eaa	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:35.662275076 CET	192.168.2.4	1.1.1.1	0x22a3	Standard query (0)	fledge.teads.tv	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.662440062 CET	192.168.2.4	1.1.1.1	0xd688	Standard query (0)	fledge.teads.tv	65	IN (0x0001)	false
Jan 10, 2025 17:21:35.670214891 CET	192.168.2.4	1.1.1.1	0x3176	Standard query (0)	t.teads.tv	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.670382023 CET	192.168.2.4	1.1.1.1	0x280e	Standard query (0)	t.teads.tv	65	IN (0x0001)	false
Jan 10, 2025 17:21:35.804218054 CET	192.168.2.4	1.1.1.1	0x5d71	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.804435015 CET	192.168.2.4	1.1.1.1	0x8e33	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:36.061222076 CET	192.168.2.4	1.1.1.1	0xea25	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.061362982 CET	192.168.2.4	1.1.1.1	0x3e3c	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:36.153429985 CET	192.168.2.4	1.1.1.1	0xe1d5	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.153580904 CET	192.168.2.4	1.1.1.1	0x3016	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:36.232172966 CET	192.168.2.4	1.1.1.1	0x7c41	Standard query (0)	z.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.232326031 CET	192.168.2.4	1.1.1.1	0x71ca	Standard query (0)	z.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 17:21:36.613941908 CET	192.168.2.4	1.1.1.1	0xf2d2	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.614068031 CET	192.168.2.4	1.1.1.1	0x5fb9	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:36.622457981 CET	192.168.2.4	1.1.1.1	0xa8b	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.622745037 CET	192.168.2.4	1.1.1.1	0xec3e	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:36.829147100 CET	192.168.2.4	1.1.1.1	0x9130	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.829293013 CET	192.168.2.4	1.1.1.1	0xdcf8	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:36.832129002 CET	192.168.2.4	1.1.1.1	0x4bf0	Standard query (0)	p.teads.tv	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.832274914 CET	192.168.2.4	1.1.1.1	0x1378	Standard query (0)	p.teads.tv	65	IN (0x0001)	false
Jan 10, 2025 17:21:36.833909988 CET	192.168.2.4	1.1.1.1	0xb165	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.834160089 CET	192.168.2.4	1.1.1.1	0x79fd	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.581610918 CET	192.168.2.4	1.1.1.1	0xd9c7	Standard query (0)	cm.teads.tv	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.582144976 CET	192.168.2.4	1.1.1.1	0xb1ed	Standard query (0)	cm.teads.tv	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.605400085 CET	192.168.2.4	1.1.1.1	0x2fb9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.605547905 CET	192.168.2.4	1.1.1.1	0xe04	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.606164932 CET	192.168.2.4	1.1.1.1	0x7a81	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.606301069 CET	192.168.2.4	1.1.1.1	0xde91	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.610524893 CET	192.168.2.4	1.1.1.1	0x6c61	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.610764980 CET	192.168.2.4	1.1.1.1	0x77a7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.629241943 CET	192.168.2.4	1.1.1.1	0x20e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.629421949 CET	192.168.2.4	1.1.1.1	0xe07e	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.634697914 CET	192.168.2.4	1.1.1.1	0x728	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.635051966 CET	192.168.2.4	1.1.1.1	0x9623	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.645543098 CET	192.168.2.4	1.1.1.1	0x321e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.645706892 CET	192.168.2.4	1.1.1.1	0x14ee	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.767807961 CET	192.168.2.4	1.1.1.1	0x56c3	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.768152952 CET	192.168.2.4	1.1.1.1	0x77af	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.799149990 CET	192.168.2.4	1.1.1.1	0xf51	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.799547911 CET	192.168.2.4	1.1.1.1	0x2e2	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.803509951 CET	192.168.2.4	1.1.1.1	0x254f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.804029942 CET	192.168.2.4	1.1.1.1	0xccdb	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.873378992 CET	192.168.2.4	1.1.1.1	0xa41a	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.873605013 CET	192.168.2.4	1.1.1.1	0xdb2	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:37.887248039 CET	192.168.2.4	1.1.1.1	0x7805	Standard query (0)	api.dec.sitefinity.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.887429953 CET	192.168.2.4	1.1.1.1	0x7ab	Standard query (0)	api.dec.sitefinity.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:38.161967993 CET	192.168.2.4	1.1.1.1	0x9d85	Standard query (0)	collector-44978.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.162105083 CET	192.168.2.4	1.1.1.1	0xf184	Standard query (0)	collector-44978.us.tvsquared.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:38.170546055 CET	192.168.2.4	1.1.1.1	0xbea6	Standard query (0)	cm.teads.tv	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.170669079 CET	192.168.2.4	1.1.1.1	0x43a	Standard query (0)	cm.teads.tv	65	IN (0x0001)	false
Jan 10, 2025 17:21:38.178157091 CET	192.168.2.4	1.1.1.1	0xea6f	Standard query (0)	bob.dmpxs.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.178333998 CET	192.168.2.4	1.1.1.1	0x8f30	Standard query (0)	bob.dmpxs.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:38.508011103 CET	192.168.2.4	1.1.1.1	0x2c41	Standard query (0)	t.teads.tv	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.508364916 CET	192.168.2.4	1.1.1.1	0xa01c	Standard query (0)	t.teads.tv	65	IN (0x0001)	false
Jan 10, 2025 17:21:38.520226002 CET	192.168.2.4	1.1.1.1	0x963e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.520555019 CET	192.168.2.4	1.1.1.1	0xf4ff	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:38.535113096 CET	192.168.2.4	1.1.1.1	0x33dc	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.535295010 CET	192.168.2.4	1.1.1.1	0x2ad0	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:38.544521093 CET	192.168.2.4	1.1.1.1	0xa79b	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.544842958 CET	192.168.2.4	1.1.1.1	0xd6a8	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:38.738323927 CET	192.168.2.4	1.1.1.1	0xfeb7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.738766909 CET	192.168.2.4	1.1.1.1	0x4344	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:38.852667093 CET	192.168.2.4	1.1.1.1	0x9e2a	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.852819920 CET	192.168.2.4	1.1.1.1	0xf07d	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:39.203428030 CET	192.168.2.4	1.1.1.1	0xabbe	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:39.203800917 CET	192.168.2.4	1.1.1.1	0x18f3	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:39.549381971 CET	192.168.2.4	1.1.1.1	0x5fdd	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:39.549546003 CET	192.168.2.4	1.1.1.1	0x4856	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:40.619133949 CET	192.168.2.4	1.1.1.1	0xced5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.619308949 CET	192.168.2.4	1.1.1.1	0x144a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:40.646964073 CET	192.168.2.4	1.1.1.1	0x37c4	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.647090912 CET	192.168.2.4	1.1.1.1	0xec77	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:40.652184963 CET	192.168.2.4	1.1.1.1	0x768e	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.652327061 CET	192.168.2.4	1.1.1.1	0x16f2	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:40.663506031 CET	192.168.2.4	1.1.1.1	0xbff7	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.663652897 CET	192.168.2.4	1.1.1.1	0x6148	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:40.710211039 CET	192.168.2.4	1.1.1.1	0x4684	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.710362911 CET	192.168.2.4	1.1.1.1	0x262d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:21:40.962986946 CET	192.168.2.4	1.1.1.1	0xd7e1	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.963505983 CET	192.168.2.4	1.1.1.1	0xfe6b	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 17:21:41.197217941 CET	192.168.2.4	1.1.1.1	0x90b2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:41.197577953 CET	192.168.2.4	1.1.1.1	0xf06	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:43.696439981 CET	192.168.2.4	1.1.1.1	0x6ce7	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:43.696635008 CET	192.168.2.4	1.1.1.1	0x136	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 17:21:44.760018110 CET	192.168.2.4	1.1.1.1	0x6c07	Standard query (0)	oam.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:44.760484934 CET	192.168.2.4	1.1.1.1	0x1b0c	Standard query (0)	oam.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:45.608371973 CET	192.168.2.4	1.1.1.1	0x936f	Standard query (0)	cm.teads.tv	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:45.608771086 CET	192.168.2.4	1.1.1.1	0x538a	Standard query (0)	cm.teads.tv	65	IN (0x0001)	false
Jan 10, 2025 17:21:47.211512089 CET	192.168.2.4	1.1.1.1	0x5af1	Standard query (0)	oam.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:47.212151051 CET	192.168.2.4	1.1.1.1	0xb554	Standard query (0)	oam.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:51.210866928 CET	192.168.2.4	1.1.1.1	0x9c38	Standard query (0)	login.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:51.211152077 CET	192.168.2.4	1.1.1.1	0xcfc3	Standard query (0)	login.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:51.218750000 CET	192.168.2.4	1.1.1.1	0x8351	Standard query (0)	zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:51.218750000 CET	192.168.2.4	1.1.1.1	0x7005	Standard query (0)	zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:51.892752886 CET	192.168.2.4	1.1.1.1	0x2f8	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:51.892913103 CET	192.168.2.4	1.1.1.1	0x566f	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:51.901477098 CET	192.168.2.4	1.1.1.1	0xff3d	Standard query (0)	zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:51.901700974 CET	192.168.2.4	1.1.1.1	0x9cac	Standard query (0)	zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:52.472116947 CET	192.168.2.4	1.1.1.1	0xac24	Standard query (0)	login.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:52.472363949 CET	192.168.2.4	1.1.1.1	0x70d2	Standard query (0)	login.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:52.724287033 CET	192.168.2.4	1.1.1.1	0xa3e3	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:52.724589109 CET	192.168.2.4	1.1.1.1	0x246c	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:54.195044994 CET	192.168.2.4	1.1.1.1	0x16e4	Standard query (0)	cdn.aws.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:54.195189953 CET	192.168.2.4	1.1.1.1	0x4206	Standard query (0)	cdn.aws.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:55.543180943 CET	192.168.2.4	1.1.1.1	0x2240	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.543464899 CET	192.168.2.4	1.1.1.1	0x4a87	Standard query (0)	dc.services.visualstudio.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:55.777410984 CET	192.168.2.4	1.1.1.1	0x1d5a	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.777657986 CET	192.168.2.4	1.1.1.1	0x6664	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:56.305257082 CET	192.168.2.4	1.1.1.1	0x2e24	Standard query (0)	cdn.aws.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:56.305479050 CET	192.168.2.4	1.1.1.1	0x67ef	Standard query (0)	cdn.aws.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:56.485583067 CET	192.168.2.4	1.1.1.1	0xda86	Standard query (0)	cdn.infarmbureau.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:56.485985041 CET	192.168.2.4	1.1.1.1	0x74f9	Standard query (0)	cdn.infarmbureau.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:57.777654886 CET	192.168.2.4	1.1.1.1	0x2b93	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.778126955 CET	192.168.2.4	1.1.1.1	0x8393	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Jan 10, 2025 17:21:57.800246000 CET	192.168.2.4	1.1.1.1	0xeb0a	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.800246000 CET	192.168.2.4	1.1.1.1	0xed4f	Standard query (0)	dc.services.visualstudio.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 17:21:23.125667095 CET	1.1.1.1	192.168.2.4	0x75c4	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:23.125696898 CET	1.1.1.1	192.168.2.4	0x9a1	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:25.100011110 CET	1.1.1.1	192.168.2.4	0xd316	No error (0)	infarmbureau.com		198.179.10.65	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:25.724445105 CET	1.1.1.1	192.168.2.4	0x95b	No error (0)	infarmbureau.com		198.179.10.65	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:26.621412039 CET	1.1.1.1	192.168.2.4	0x3faa	No error (0)	www.infarmbureau.com		198.179.10.12	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:27.987654924 CET	1.1.1.1	192.168.2.4	0x2ff0	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:27.987654924 CET	1.1.1.1	192.168.2.4	0x2ff0	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:27.987654924 CET	1.1.1.1	192.168.2.4	0x2ff0	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:27.987654924 CET	1.1.1.1	192.168.2.4	0x2ff0	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:27.987654924 CET	1.1.1.1	192.168.2.4	0x2ff0	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:27.987911940 CET	1.1.1.1	192.168.2.4	0xdce6	No error (0)	unpkg.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:27.988472939 CET	1.1.1.1	192.168.2.4	0xf26d	No error (0)	cdn.infarmbureau.com		198.179.10.61	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:28.918807030 CET	1.1.1.1	192.168.2.4	0xc7b3	No error (0)	www.infarmbureau.com		198.179.10.12	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:29.175889969 CET	1.1.1.1	192.168.2.4	0x899d	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:29.175889969 CET	1.1.1.1	192.168.2.4	0x899d	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:29.176462889 CET	1.1.1.1	192.168.2.4	0xfae5	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:30.644614935 CET	1.1.1.1	192.168.2.4	0xb0e0	No error (0)	farmalytics.infarmbureau.com		198.179.10.51	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:31.000353098 CET	1.1.1.1	192.168.2.4	0x610d	No error (0)	cdn.insight.sitefinity.com	insight-cdn-endpoint-c8d8ftbsb0ghcpbp.a01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:31.000353098 CET	1.1.1.1	192.168.2.4	0x610d	No error (0)	insight-cdn-endpoint-c8d8ftbsb0ghcpbp.a01.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:31.004386902 CET	1.1.1.1	192.168.2.4	0x61c2	No error (0)	cdn.insight.sitefinity.com	insight-cdn-endpoint-c8d8ftbsb0ghcpbp.a01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:31.004386902 CET	1.1.1.1	192.168.2.4	0x61c2	No error (0)	insight-cdn-endpoint-c8d8ftbsb0ghcpbp.a01.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:31.004386902 CET	1.1.1.1	192.168.2.4	0x61c2	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:31.004386902 CET	1.1.1.1	192.168.2.4	0x61c2	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589070082 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589293003 CET	1.1.1.1	192.168.2.4	0x5e3a	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:32.589293003 CET	1.1.1.1	192.168.2.4	0x5e3a	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311677933 CET	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311984062 CET	1.1.1.1	192.168.2.4	0xcec6	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.311984062 CET	1.1.1.1	192.168.2.4	0xcec6	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:33.313342094 CET	1.1.1.1	192.168.2.4	0x9653	No error (0)	api.dec.sitefinity.com	api.insight.sitefinity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.313342094 CET	1.1.1.1	192.168.2.4	0x9653	No error (0)	api.insight.sitefinity.com		52.252.156.53	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317095995 CET	1.1.1.1	192.168.2.4	0x1033	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317095995 CET	1.1.1.1	192.168.2.4	0x1033	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317488909 CET	1.1.1.1	192.168.2.4	0x6a25	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317488909 CET	1.1.1.1	192.168.2.4	0x6a25	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317488909 CET	1.1.1.1	192.168.2.4	0x6a25	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317488909 CET	1.1.1.1	192.168.2.4	0x6a25	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317488909 CET	1.1.1.1	192.168.2.4	0x6a25	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317522049 CET	1.1.1.1	192.168.2.4	0xa5ae	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.317522049 CET	1.1.1.1	192.168.2.4	0xa5ae	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:33.317522049 CET	1.1.1.1	192.168.2.4	0xa5ae	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:33.318185091 CET	1.1.1.1	192.168.2.4	0xe125	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.321882010 CET	1.1.1.1	192.168.2.4	0xb4e7	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.321882010 CET	1.1.1.1	192.168.2.4	0xb4e7	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.321882010 CET	1.1.1.1	192.168.2.4	0xb4e7	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.323127985 CET	1.1.1.1	192.168.2.4	0x4333	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.323942900 CET	1.1.1.1	192.168.2.4	0x2b24	No error (0)	p.teads.tv	perf.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.323971987 CET	1.1.1.1	192.168.2.4	0x68d2	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.323971987 CET	1.1.1.1	192.168.2.4	0x68d2	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.323971987 CET	1.1.1.1	192.168.2.4	0x68d2	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.323971987 CET	1.1.1.1	192.168.2.4	0x68d2	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.324045897 CET	1.1.1.1	192.168.2.4	0x16d9	No error (0)	p.teads.tv	perf.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.324778080 CET	1.1.1.1	192.168.2.4	0x28c1	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.324913979 CET	1.1.1.1	192.168.2.4	0x5852	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.324913979 CET	1.1.1.1	192.168.2.4	0x5852	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.325083971 CET	1.1.1.1	192.168.2.4	0x3e76	No error (0)	api.dec.sitefinity.com	api.insight.sitefinity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.768338919 CET	1.1.1.1	192.168.2.4	0x3303	No error (0)	farmalytics.infarmbureau.com		198.179.10.51	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.827591896 CET	1.1.1.1	192.168.2.4	0x748c	No error (0)	cdn.insight.sitefinity.com	insight-cdn-endpoint-c8d8ftbsb0ghcpbp.a01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.827591896 CET	1.1.1.1	192.168.2.4	0x748c	No error (0)	insight-cdn-endpoint-c8d8ftbsb0ghcpbp.a01.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.827591896 CET	1.1.1.1	192.168.2.4	0x748c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.827591896 CET	1.1.1.1	192.168.2.4	0x748c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.827610016 CET	1.1.1.1	192.168.2.4	0x3189	No error (0)	cdn.insight.sitefinity.com	insight-cdn-endpoint-c8d8ftbsb0ghcpbp.a01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.827610016 CET	1.1.1.1	192.168.2.4	0x3189	No error (0)	insight-cdn-endpoint-c8d8ftbsb0ghcpbp.a01.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:33.951740980 CET	1.1.1.1	192.168.2.4	0x7646	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.145848989 CET	1.1.1.1	192.168.2.4	0x9104	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.145848989 CET	1.1.1.1	192.168.2.4	0x9104	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.145883083 CET	1.1.1.1	192.168.2.4	0xbda3	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.145883083 CET	1.1.1.1	192.168.2.4	0xbda3	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.145883083 CET	1.1.1.1	192.168.2.4	0xbda3	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.145883083 CET	1.1.1.1	192.168.2.4	0xbda3	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.201775074 CET	1.1.1.1	192.168.2.4	0xc2ea	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.201775074 CET	1.1.1.1	192.168.2.4	0xc2ea	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.201775074 CET	1.1.1.1	192.168.2.4	0xc2ea	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.462105036 CET	1.1.1.1	192.168.2.4	0x695f	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.462245941 CET	1.1.1.1	192.168.2.4	0x8d8c	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.465085983 CET	1.1.1.1	192.168.2.4	0xafe1	No error (0)	collector-44978.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.468939066 CET	1.1.1.1	192.168.2.4	0x1193	No error (0)	collector-44978.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.468939066 CET	1.1.1.1	192.168.2.4	0x1193	No error (0)	collectoru.us.tvsquared.com		3.131.211.191	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.468939066 CET	1.1.1.1	192.168.2.4	0x1193	No error (0)	collectoru.us.tvsquared.com		3.130.114.26	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.526220083 CET	1.1.1.1	192.168.2.4	0xb011	No error (0)	bob.dmpxs.com	d338mmiskgzqu4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.535799980 CET	1.1.1.1	192.168.2.4	0xb099	No error (0)	bob.dmpxs.com	d338mmiskgzqu4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:34.535799980 CET	1.1.1.1	192.168.2.4	0xb099	No error (0)	d338mmiskgzqu4.cloudfront.net		3.161.82.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.535799980 CET	1.1.1.1	192.168.2.4	0xb099	No error (0)	d338mmiskgzqu4.cloudfront.net		3.161.82.19	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.535799980 CET	1.1.1.1	192.168.2.4	0xb099	No error (0)	d338mmiskgzqu4.cloudfront.net		3.161.82.83	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:34.535799980 CET	1.1.1.1	192.168.2.4	0xb099	No error (0)	d338mmiskgzqu4.cloudfront.net		3.161.82.117	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.013207912 CET	1.1.1.1	192.168.2.4	0x1a77	No error (0)	td.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.016671896 CET	1.1.1.1	192.168.2.4	0xd882	No error (0)	8339572.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:35.038368940 CET	1.1.1.1	192.168.2.4	0x76da	No error (0)	8339572.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:35.038368940 CET	1.1.1.1	192.168.2.4	0x76da	No error (0)	dart.l.doubleclick.net		142.250.186.38	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.426268101 CET	1.1.1.1	192.168.2.4	0x1f60	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:35.426268101 CET	1.1.1.1	192.168.2.4	0x1f60	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.426268101 CET	1.1.1.1	192.168.2.4	0x1f60	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.426268101 CET	1.1.1.1	192.168.2.4	0x1f60	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.426268101 CET	1.1.1.1	192.168.2.4	0x1f60	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.427619934 CET	1.1.1.1	192.168.2.4	0x5eaa	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:35.671456099 CET	1.1.1.1	192.168.2.4	0xd688	No error (0)	fledge.teads.tv	fledge.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:35.673321009 CET	1.1.1.1	192.168.2.4	0x22a3	No error (0)	fledge.teads.tv	fledge.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:35.677686930 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:35.678072929 CET	1.1.1.1	192.168.2.4	0x280e	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:35.811271906 CET	1.1.1.1	192.168.2.4	0x5d71	No error (0)	script.hotjar.com		13.33.187.109	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.811271906 CET	1.1.1.1	192.168.2.4	0x5d71	No error (0)	script.hotjar.com		13.33.187.92	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.811271906 CET	1.1.1.1	192.168.2.4	0x5d71	No error (0)	script.hotjar.com		13.33.187.19	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:35.811271906 CET	1.1.1.1	192.168.2.4	0x5d71	No error (0)	script.hotjar.com		13.33.187.74	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.068885088 CET	1.1.1.1	192.168.2.4	0xea25	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.072388887 CET	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.072388887 CET	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:36.160820961 CET	1.1.1.1	192.168.2.4	0x3016	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:36.160831928 CET	1.1.1.1	192.168.2.4	0xe1d5	No error (0)	ad.doubleclick.net		142.250.184.198	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.239583015 CET	1.1.1.1	192.168.2.4	0x7c41	No error (0)	z.clarity.ms	clarity-ingest-eus2-f-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.239833117 CET	1.1.1.1	192.168.2.4	0x71ca	No error (0)	z.clarity.ms	clarity-ingest-eus2-f-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.620764971 CET	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.620764971 CET	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.620764971 CET	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.620764971 CET	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.630446911 CET	1.1.1.1	192.168.2.4	0xa8b	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.630446911 CET	1.1.1.1	192.168.2.4	0xa8b	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.630577087 CET	1.1.1.1	192.168.2.4	0xec3e	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.630577087 CET	1.1.1.1	192.168.2.4	0xec3e	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.837095976 CET	1.1.1.1	192.168.2.4	0x9130	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.837158918 CET	1.1.1.1	192.168.2.4	0xdcf8	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.840986967 CET	1.1.1.1	192.168.2.4	0x1378	No error (0)	p.teads.tv	perf.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.841279030 CET	1.1.1.1	192.168.2.4	0xb165	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.841279030 CET	1.1.1.1	192.168.2.4	0xb165	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.841279030 CET	1.1.1.1	192.168.2.4	0xb165	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.841279030 CET	1.1.1.1	192.168.2.4	0xb165	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.841279030 CET	1.1.1.1	192.168.2.4	0xb165	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:36.841468096 CET	1.1.1.1	192.168.2.4	0x4bf0	No error (0)	p.teads.tv	perf.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:36.842274904 CET	1.1.1.1	192.168.2.4	0x79fd	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.589621067 CET	1.1.1.1	192.168.2.4	0xb1ed	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.590334892 CET	1.1.1.1	192.168.2.4	0xd9c7	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.612726927 CET	1.1.1.1	192.168.2.4	0x2fb9	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.613344908 CET	1.1.1.1	192.168.2.4	0xe04	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.614732981 CET	1.1.1.1	192.168.2.4	0x7a81	No error (0)	static.doubleclick.net		216.58.206.38	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.618877888 CET	1.1.1.1	192.168.2.4	0x77a7	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.619081020 CET	1.1.1.1	192.168.2.4	0x6c61	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.637672901 CET	1.1.1.1	192.168.2.4	0x20e	No error (0)	ad.doubleclick.net		172.217.23.102	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.637840986 CET	1.1.1.1	192.168.2.4	0xe07e	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.643333912 CET	1.1.1.1	192.168.2.4	0x728	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.643333912 CET	1.1.1.1	192.168.2.4	0x728	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.225	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.643554926 CET	1.1.1.1	192.168.2.4	0x9623	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.654745102 CET	1.1.1.1	192.168.2.4	0x321e	No error (0)	ad.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.654882908 CET	1.1.1.1	192.168.2.4	0x14ee	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.776969910 CET	1.1.1.1	192.168.2.4	0x56c3	No error (0)	adservice.google.com		142.250.185.162	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.778139114 CET	1.1.1.1	192.168.2.4	0x77af	No error (0)	adservice.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.811830997 CET	1.1.1.1	192.168.2.4	0x2e2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.811830997 CET	1.1.1.1	192.168.2.4	0x2e2	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.811830997 CET	1.1.1.1	192.168.2.4	0x2e2	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.811856031 CET	1.1.1.1	192.168.2.4	0xf51	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.811856031 CET	1.1.1.1	192.168.2.4	0xf51	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.815335035 CET	1.1.1.1	192.168.2.4	0xccdb	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.815432072 CET	1.1.1.1	192.168.2.4	0x254f	No error (0)	googleads.g.doubleclick.net		216.58.212.130	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.880160093 CET	1.1.1.1	192.168.2.4	0xa41a	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.880160093 CET	1.1.1.1	192.168.2.4	0xa41a	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.880531073 CET	1.1.1.1	192.168.2.4	0xdb2	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.880531073 CET	1.1.1.1	192.168.2.4	0xdb2	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.880531073 CET	1.1.1.1	192.168.2.4	0xdb2	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:37.920607090 CET	1.1.1.1	192.168.2.4	0x7805	No error (0)	api.dec.sitefinity.com	api.insight.sitefinity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:37.920607090 CET	1.1.1.1	192.168.2.4	0x7805	No error (0)	api.insight.sitefinity.com		52.252.156.53	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:37.934628010 CET	1.1.1.1	192.168.2.4	0x7ab	No error (0)	api.dec.sitefinity.com	api.insight.sitefinity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.178036928 CET	1.1.1.1	192.168.2.4	0x43a	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.178179979 CET	1.1.1.1	192.168.2.4	0xbea6	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.180728912 CET	1.1.1.1	192.168.2.4	0xf184	No error (0)	collector-44978.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.184468031 CET	1.1.1.1	192.168.2.4	0x9d85	No error (0)	collector-44978.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.184468031 CET	1.1.1.1	192.168.2.4	0x9d85	No error (0)	collectoru.us.tvsquared.com		3.130.114.26	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.184468031 CET	1.1.1.1	192.168.2.4	0x9d85	No error (0)	collectoru.us.tvsquared.com		3.131.211.191	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.208023071 CET	1.1.1.1	192.168.2.4	0xea6f	No error (0)	bob.dmpxs.com	d338mmiskgzqu4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.208023071 CET	1.1.1.1	192.168.2.4	0xea6f	No error (0)	d338mmiskgzqu4.cloudfront.net		3.161.82.19	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.208023071 CET	1.1.1.1	192.168.2.4	0xea6f	No error (0)	d338mmiskgzqu4.cloudfront.net		3.161.82.117	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.208023071 CET	1.1.1.1	192.168.2.4	0xea6f	No error (0)	d338mmiskgzqu4.cloudfront.net		3.161.82.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.208023071 CET	1.1.1.1	192.168.2.4	0xea6f	No error (0)	d338mmiskgzqu4.cloudfront.net		3.161.82.83	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.223166943 CET	1.1.1.1	192.168.2.4	0x8f30	No error (0)	bob.dmpxs.com	d338mmiskgzqu4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.515384912 CET	1.1.1.1	192.168.2.4	0xa01c	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.515809059 CET	1.1.1.1	192.168.2.4	0x2c41	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.527369022 CET	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:38.527448893 CET	1.1.1.1	192.168.2.4	0x963e	No error (0)	ad.doubleclick.net		172.217.23.102	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.543298006 CET	1.1.1.1	192.168.2.4	0x33dc	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.543298006 CET	1.1.1.1	192.168.2.4	0x33dc	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.543884039 CET	1.1.1.1	192.168.2.4	0x2ad0	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.543884039 CET	1.1.1.1	192.168.2.4	0x2ad0	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.552721024 CET	1.1.1.1	192.168.2.4	0xa79b	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.745255947 CET	1.1.1.1	192.168.2.4	0xfeb7	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:38.745477915 CET	1.1.1.1	192.168.2.4	0x4344	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:38.862796068 CET	1.1.1.1	192.168.2.4	0x9e2a	No error (0)	play.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:39.210726023 CET	1.1.1.1	192.168.2.4	0x18f3	No error (0)	www.linkedin.com	afd-cf.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:39.210726023 CET	1.1.1.1	192.168.2.4	0x18f3	No error (0)	afd-cf.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:39.211031914 CET	1.1.1.1	192.168.2.4	0xabbe	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:39.211031914 CET	1.1.1.1	192.168.2.4	0xabbe	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:39.556329012 CET	1.1.1.1	192.168.2.4	0x5fdd	No error (0)	static.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.626094103 CET	1.1.1.1	192.168.2.4	0xced5	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.626110077 CET	1.1.1.1	192.168.2.4	0x144a	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:40.653845072 CET	1.1.1.1	192.168.2.4	0x37c4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:40.653845072 CET	1.1.1.1	192.168.2.4	0x37c4	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.654298067 CET	1.1.1.1	192.168.2.4	0xec77	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:40.654298067 CET	1.1.1.1	192.168.2.4	0xec77	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:40.654298067 CET	1.1.1.1	192.168.2.4	0xec77	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:40.659419060 CET	1.1.1.1	192.168.2.4	0x768e	No error (0)	adservice.google.com		216.58.212.130	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.659806967 CET	1.1.1.1	192.168.2.4	0x16f2	No error (0)	adservice.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:21:40.669965982 CET	1.1.1.1	192.168.2.4	0xbff7	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:40.669965982 CET	1.1.1.1	192.168.2.4	0xbff7	No error (0)	photos-ugc.l.googleusercontent.com		142.250.74.193	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.670697927 CET	1.1.1.1	192.168.2.4	0x6148	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:40.717005014 CET	1.1.1.1	192.168.2.4	0x262d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 17:21:40.717827082 CET	1.1.1.1	192.168.2.4	0x4684	No error (0)	googleads.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:40.969850063 CET	1.1.1.1	192.168.2.4	0xd7e1	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:40.969850063 CET	1.1.1.1	192.168.2.4	0xd7e1	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:40.970963001 CET	1.1.1.1	192.168.2.4	0xfe6b	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:40.970963001 CET	1.1.1.1	192.168.2.4	0xfe6b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:41.203984976 CET	1.1.1.1	192.168.2.4	0x90b2	No error (0)	play.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:43.703634977 CET	1.1.1.1	192.168.2.4	0x6ce7	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:43.703634977 CET	1.1.1.1	192.168.2.4	0x6ce7	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:43.703708887 CET	1.1.1.1	192.168.2.4	0x136	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:43.703708887 CET	1.1.1.1	192.168.2.4	0x136	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:44.769041061 CET	1.1.1.1	192.168.2.4	0x6c07	No error (0)	oam.infarmbureau.com		198.179.10.24	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:45.615494013 CET	1.1.1.1	192.168.2.4	0x538a	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:45.617448092 CET	1.1.1.1	192.168.2.4	0x936f	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:47.221097946 CET	1.1.1.1	192.168.2.4	0x5af1	No error (0)	oam.infarmbureau.com		198.179.10.24	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:51.231007099 CET	1.1.1.1	192.168.2.4	0x7005	No error (0)	zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.231007099 CET	1.1.1.1	192.168.2.4	0x7005	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.232280970 CET	1.1.1.1	192.168.2.4	0x8351	No error (0)	zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.232280970 CET	1.1.1.1	192.168.2.4	0x8351	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.235224962 CET	1.1.1.1	192.168.2.4	0xcfc3	No error (0)	login.infarmbureau.com	login-cwf8cnczehe2hhbx.a01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.235224962 CET	1.1.1.1	192.168.2.4	0xcfc3	No error (0)	login-cwf8cnczehe2hhbx.a01.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.263823986 CET	1.1.1.1	192.168.2.4	0x9c38	No error (0)	login.infarmbureau.com	login-cwf8cnczehe2hhbx.a01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.263823986 CET	1.1.1.1	192.168.2.4	0x9c38	No error (0)	login-cwf8cnczehe2hhbx.a01.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.263823986 CET	1.1.1.1	192.168.2.4	0x9c38	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.263823986 CET	1.1.1.1	192.168.2.4	0x9c38	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:51.899842024 CET	1.1.1.1	192.168.2.4	0x566f	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.899842024 CET	1.1.1.1	192.168.2.4	0x566f	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.903564930 CET	1.1.1.1	192.168.2.4	0x2f8	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.903564930 CET	1.1.1.1	192.168.2.4	0x2f8	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.912627935 CET	1.1.1.1	192.168.2.4	0x9cac	No error (0)	zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.912627935 CET	1.1.1.1	192.168.2.4	0x9cac	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.913479090 CET	1.1.1.1	192.168.2.4	0xff3d	No error (0)	zn40n45auaibhuy9m-infarmbureau.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:51.913479090 CET	1.1.1.1	192.168.2.4	0xff3d	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:52.509314060 CET	1.1.1.1	192.168.2.4	0xac24	No error (0)	login.infarmbureau.com	login-cwf8cnczehe2hhbx.a01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:52.509314060 CET	1.1.1.1	192.168.2.4	0xac24	No error (0)	login-cwf8cnczehe2hhbx.a01.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:52.509314060 CET	1.1.1.1	192.168.2.4	0xac24	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:52.509314060 CET	1.1.1.1	192.168.2.4	0xac24	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:52.516227007 CET	1.1.1.1	192.168.2.4	0x70d2	No error (0)	login.infarmbureau.com	login-cwf8cnczehe2hhbx.a01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:52.516227007 CET	1.1.1.1	192.168.2.4	0x70d2	No error (0)	login-cwf8cnczehe2hhbx.a01.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:52.730998993 CET	1.1.1.1	192.168.2.4	0xa3e3	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:52.730998993 CET	1.1.1.1	192.168.2.4	0xa3e3	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:52.731709003 CET	1.1.1.1	192.168.2.4	0x246c	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:52.731709003 CET	1.1.1.1	192.168.2.4	0x246c	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:54.209553003 CET	1.1.1.1	192.168.2.4	0x25d0	No error (0)	aijscdn1-g4ccc2ajgnahcpct.b02.azurefd.net	shed.dual-low.s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:54.209553003 CET	1.1.1.1	192.168.2.4	0x25d0	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:54.209553003 CET	1.1.1.1	192.168.2.4	0x25d0	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:54.209920883 CET	1.1.1.1	192.168.2.4	0x2cab	No error (0)	aijscdn1-g4ccc2ajgnahcpct.b02.azurefd.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:54.215128899 CET	1.1.1.1	192.168.2.4	0x16e4	No error (0)	cdn.aws.infarmbureau.com		18.172.112.59	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:54.215128899 CET	1.1.1.1	192.168.2.4	0x16e4	No error (0)	cdn.aws.infarmbureau.com		18.172.112.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:54.215128899 CET	1.1.1.1	192.168.2.4	0x16e4	No error (0)	cdn.aws.infarmbureau.com		18.172.112.6	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:54.215128899 CET	1.1.1.1	192.168.2.4	0x16e4	No error (0)	cdn.aws.infarmbureau.com		18.172.112.109	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550896883 CET	1.1.1.1	192.168.2.4	0x2240	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550896883 CET	1.1.1.1	192.168.2.4	0x2240	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550896883 CET	1.1.1.1	192.168.2.4	0x2240	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550896883 CET	1.1.1.1	192.168.2.4	0x2240	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550896883 CET	1.1.1.1	192.168.2.4	0x2240	No error (0)	northeurope-global.in.applicationinsights.azure.com	gig-ai-prod-northeurope-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550961971 CET	1.1.1.1	192.168.2.4	0x4a87	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550961971 CET	1.1.1.1	192.168.2.4	0x4a87	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550961971 CET	1.1.1.1	192.168.2.4	0x4a87	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550961971 CET	1.1.1.1	192.168.2.4	0x4a87	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.550961971 CET	1.1.1.1	192.168.2.4	0x4a87	No error (0)	westeurope-global.in.applicationinsights.azure.com	gig-ai-prod-westeurope-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:55.785315990 CET	1.1.1.1	192.168.2.4	0x1d5a	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:56.310918093 CET	1.1.1.1	192.168.2.4	0xf7ac	No error (0)	aijscdn1-g4ccc2ajgnahcpct.b02.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:56.310918093 CET	1.1.1.1	192.168.2.4	0xf7ac	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:56.310918093 CET	1.1.1.1	192.168.2.4	0xf7ac	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:56.310918093 CET	1.1.1.1	192.168.2.4	0xf7ac	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:56.316545010 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	cdn.aws.infarmbureau.com		18.172.112.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:56.316545010 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	cdn.aws.infarmbureau.com		18.172.112.59	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:56.316545010 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	cdn.aws.infarmbureau.com		18.172.112.109	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:56.316545010 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	cdn.aws.infarmbureau.com		18.172.112.6	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:56.326184988 CET	1.1.1.1	192.168.2.4	0xc4d9	No error (0)	aijscdn1-g4ccc2ajgnahcpct.b02.azurefd.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:56.494951010 CET	1.1.1.1	192.168.2.4	0xda86	No error (0)	cdn.infarmbureau.com		198.179.10.61	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.784846067 CET	1.1.1.1	192.168.2.4	0x2b93	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.784846067 CET	1.1.1.1	192.168.2.4	0x2b93	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.784846067 CET	1.1.1.1	192.168.2.4	0x2b93	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.784846067 CET	1.1.1.1	192.168.2.4	0x2b93	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.784846067 CET	1.1.1.1	192.168.2.4	0x2b93	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.784846067 CET	1.1.1.1	192.168.2.4	0x2b93	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.784846067 CET	1.1.1.1	192.168.2.4	0x2b93	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.784846067 CET	1.1.1.1	192.168.2.4	0x2b93	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:21:57.807775021 CET	1.1.1.1	192.168.2.4	0xeb0a	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.807775021 CET	1.1.1.1	192.168.2.4	0xeb0a	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.807775021 CET	1.1.1.1	192.168.2.4	0xeb0a	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.807775021 CET	1.1.1.1	192.168.2.4	0xeb0a	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.807775021 CET	1.1.1.1	192.168.2.4	0xeb0a	No error (0)	westeurope-global.in.applicationinsights.azure.com	gig-ai-prod-westeurope-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.808470011 CET	1.1.1.1	192.168.2.4	0xed4f	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.808470011 CET	1.1.1.1	192.168.2.4	0xed4f	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.808470011 CET	1.1.1.1	192.168.2.4	0xed4f	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.808470011 CET	1.1.1.1	192.168.2.4	0xed4f	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:21:57.808470011 CET	1.1.1.1	192.168.2.4	0xed4f	No error (0)	westeurope-global.in.applicationinsights.azure.com	gig-ai-prod-westeurope-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	198.179.10.65	80	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 17:21:25.106132030 CET	431	OUT	GET / HTTP/1.1 Host: infarmbureau.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 17:21:25.687058926 CET	129	IN	HTTP/1.0 302 Moved Temporarily Location: https://infarmbureau.com/ Server: BigIP Connection: Keep-Alive Content-Length: 0
Jan 10, 2025 17:22:10.695943117 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	198.179.10.65	80	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 17:22:10.118146896 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	198.179.10.65	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:26 UTC	659	OUT	GET / HTTP/1.1 Host: infarmbureau.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:26 UTC	771	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://www.infarmbureau.com/ Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Server-Timing: dtSInfo;desc="0", dtRpid;desc="1472922124" Set-Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.infarmbureau.com Date: Fri, 10 Jan 2025 16:21:13 GMT Connection: close Content-Length: 152
2025-01-10 16:21:26 UTC	152	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 66 61 72 6d 62 75 72 65 61 75 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://www.infarmbureau.com/">here</a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:27 UTC	788	OUT	GET / HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0
2025-01-10 16:21:27 UTC	1114	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; Path=/; Domain=.infarmbureau.com Date: Fri, 10 Jan 2025 16:21:15 GMT Connection: close Content-Length: 123476 Set-Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; Path=/; Secure; HTTPOnly Set-Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; path=/; domain=.infarmbureau.com; HTTPonly; Secure
2025-01-10 16:21:27 UTC	15270	IN	Data Raw: 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 20 3c 74 69 74 6c 65 3e 0d 0a 09 49 6e 64 69 61 6e 61 20 46 61 72 6d 20 42 75 72 65 61 75 20 49 6e 73 75 72 61 6e 63 65 0d 0a 3c 2f 74 69 74 6c 65 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 Data Ascii: <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Indiana Farm Bureau Insurance</title> <script type
2025-01-10 16:21:27 UTC	1114	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 64 63 2d 6d 65 6e 75 2d 73 75 72 66 61 63 65 2d 2d 61 6e 63 68 6f 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 64 63 2d 6d 65 6e 75 20 6d 64 63 2d 6d 65 6e 75 2d 73 75 72 66 61 63 65 22 20 69 64 3d 22 6d 65 6e 75 2d 64 72 6f 70 64 6f 77 6e 2d 43 6c 61 69 6d 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6d 64 63 2d 6c 69 73 74 22 20 72 6f 6c 65 3d 22 6c 69 73 74 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 61 72 69 61 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 76 65 72 74 69 63 61 Data Ascii: > </div> <div class="mdc-menu-surface--anchor"> <div class="mdc-menu mdc-menu-surface" id="menu-dropdown-Claims"> <ul class="mdc-list" role="list" aria-hidden="true" aria-orientation="vertica
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 69 66 65 20 43 6c 61 69 6d 0d 0a 20 20 20 20 3c 2f 61 3e 0d 0a 3c 2f 6c 69 3e 0d 0a 3c 6c 69 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 64 63 2d 6c 69 73 74 2d 69 74 65 6d 20 66 2d 77 2d 31 30 30 20 22 20 68 72 65 66 3d 22 2f 63 6c 61 69 6d 73 2f 72 65 6e 74 65 72 73 2d 63 6c 61 69 6d 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 2d 6d 2d 72 2d 31 30 70 78 20 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 68 65 61 64 65 72 2f 6d 65 6e 75 2d 69 63 6f 6e 73 2f 72 65 6e 74 65 72 73 2d 69 63 6f 6e 2e 73 76 67 22 20 61 6c 74 3d 22 52 65 6e 74 65 72 73 20 43 6c 61 69 Data Ascii: ife Claim </a></li><li role="menuitem"> <a class="mdc-list-item f-w-100 " href="/claims/renters-claim" target="_self"> <span class="f-m-r-10px icon-placeholder"><img src="/images/header/menu-icons/renters-icon.svg" alt="Renters Clai
2025-01-10 16:21:28 UTC	15507	IN	Data Raw: 65 64 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 64 63 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 74 65 78 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 2d 6d 2d 72 2d 31 30 70 78 20 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 68 65 61 64 65 72 2f 6d 65 6e 75 2d 69 63 6f 6e 73 2f 62 75 73 69 6e 65 73 73 2d 69 63 6f 6e 2e 73 76 67 22 20 61 6c 74 3d 22 42 75 73 69 6e 65 73 73 20 49 6e 73 75 72 61 6e 63 65 22 3e 20 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ed="true"> <span class="mdc-list-item__text"> <span class="f-m-r-10px icon-placeholder"><img src="/images/header/menu-icons/business-icon.svg" alt="Business Insurance"> </span>
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 65 73 2f 68 6f 6d 65 70 61 67 65 2d 68 65 72 6f 2d 69 6d 61 67 65 73 2f 68 65 72 6f 2d 62 61 6e 6e 65 72 2f 69 6e 64 69 61 6e 61 2d 66 61 72 6d 2d 62 75 72 65 61 75 2d 62 61 63 6b 67 72 6f 75 6e 64 5f 31 32 35 32 30 37 33 34 33 2d 30 38 35 32 2d 34 64 63 35 2d 62 65 64 63 2d 34 61 34 37 37 30 35 38 35 36 65 61 2e 70 6e 67 3f 73 66 76 72 73 6e 3d 36 38 33 61 33 33 62 61 5f 31 22 2c 22 54 69 74 6c 65 22 3a 22 69 6e 64 69 61 6e 61 2d 66 61 72 6d 2d 62 75 72 65 61 75 2d 62 61 63 6b 67 72 6f 75 6e 64 5f 31 22 2c 22 41 6c 74 65 72 6e 61 74 69 76 65 54 65 78 74 22 3a 22 49 6e 64 69 61 6e 61 20 53 6b 79 6c 69 6e 65 20 77 69 74 68 20 67 72 65 65 6e 20 66 69 65 6c 64 20 69 6e 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 22 2c 22 49 64 22 3a 22 62 37 33 66 35 38 35 Data Ascii: es/homepage-hero-images/hero-banner/indiana-farm-bureau-background_125207343-0852-4dc5-bedc-4a47705856ea.png?sfvrsn=683a33ba_1","Title":"indiana-farm-bureau-background_1","AlternativeText":"Indiana Skyline with green field in the background","Id":"b73f585
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 64 61 74 61 2d 69 6e 3d 22 74 68 69 73 2e 61 70 41 63 69 64 73 22 20 76 61 6c 75 65 3d 22 6e 75 6c 6c 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 43 61 6d 70 61 69 67 6e 43 6f 64 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 53 75 62 50 72 6f 64 75 63 65 72 41 67 65 6e 74 49 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 66 6f 72 6d 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e Data Ascii: <input type="hidden" data-in="this.apAcids" value="null" /> <input type="hidden" id="CampaignCode" /> <input type="hidden" id="SubProducerAgentId" /> </div> </div></form><style> @media only screen an
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 6c 69 64 65 2d 2d 69 6e 66 62 2d 63 61 72 6f 75 73 65 6c 20 61 64 2d 66 65 61 74 75 72 65 2d 63 61 72 6f 75 73 65 6c 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 6c 69 64 65 5f 5f 74 72 61 63 6b 22 20 64 61 74 61 2d 67 6c 69 64 65 2d 65 6c 3d 22 74 72 61 63 6b 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 67 6c 69 64 65 5f 5f 73 6c 69 64 65 73 22 20 72 6f 6c 65 3d 22 6c 69 73 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 72 6f 6c 65 3d 22 6c 69 73 74 69 74 65 6d 22 20 63 6c 61 73 73 3d 22 67 6c 69 64 65 5f 5f 73 6c 69 64 65 20 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: lide--infb-carousel ad-feature-carousel"> <div class="glide__track" data-glide-el="track"> <ul class="glide__slides" role="list"> <li role="listitem" class="glide__slide "> <div >
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6c 6f 67 2d 63 61 72 64 5f 5f 70 72 69 6d 61 72 79 2d 61 63 74 69 6f 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 64 63 2d 63 61 72 64 5f 5f 6d 65 64 69 61 20 6d 64 63 2d 63 61 72 64 5f 5f 6d 65 64 69 61 2d 2d 31 36 2d 39 20 62 6c 6f 67 2d 63 61 72 64 5f 5f 6d 65 64 69 61 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a> </div> <div class="blog-card__primary-action" tabindex="0"> <div class="mdc-card__media mdc-card__media--16-9 blog-card__media">
2025-01-10 16:21:28 UTC	9665	IN	Data Raw: 75 63 74 73 20 75 6e 64 65 72 77 72 69 74 74 65 6e 20 62 79 20 55 6e 69 74 65 64 20 46 61 72 6d 20 46 61 6d 69 6c 79 20 4d 75 74 75 61 6c 20 49 6e 73 75 72 61 6e 63 65 20 43 6f 6d 70 61 6e 79 20 61 6e 64 20 6c 69 66 65 20 69 6e 73 75 72 61 6e 63 65 20 70 72 6f 64 75 63 74 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 55 6e 69 74 65 64 20 46 61 72 6d 20 46 61 6d 69 6c 79 20 4c 69 66 65 20 49 6e 73 75 72 61 6e 63 65 20 43 6f 6d 70 61 6e 79 20 69 6e 20 49 6e 64 69 61 6e 61 2e 26 6e 62 73 70 3b 20 50 72 6f 64 75 63 74 20 61 76 61 69 6c 61 62 69 6c 69 74 79 20 69 73 20 6c 69 6d 69 74 65 64 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 75 6e 64 65 72 77 72 69 74 69 6e 67 20 67 75 69 64 65 6c 69 6e 65 73 2c 20 72 65 76 69 65 77 2c 20 61 6e 64 20 61 70 70 72 6f 76 Data Ascii: ucts underwritten by United Farm Family Mutual Insurance Company and life insurance products provided by United Farm Family Life Insurance Company in Indiana.  Product availability is limited and subject to underwriting guidelines, review, and approv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49751	104.17.249.203	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:28 UTC	553	OUT	GET /material-components-web@3.2.0/dist/material-components-web.min.css HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:28 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:28 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"41743-SPuQg1rUFFBrHqC27sAtCBZZJe8" via: 1.1 fly.io fly-request-id: 01HRWB6PEJVH4GTS0CE184K3CD-lga CF-Cache-Status: HIT Age: 26177823 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8ffe0015781f4337-EWR
2025-01-10 16:21:28 UTC	805	IN	Data Raw: 37 64 36 63 0d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0a 20 2a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 74 65 72 69 61 6c 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 61 74 65 72 69 61 6c 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 77 65 62 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 Data Ascii: 7d6c/** * @license * Copyright Google LLC All Rights Reserved. * * Use of this source code is governed by an MIT-style license that can be * found in the LICENSE file at https://github.com/material-components/material-components-web/blob/master/LIC
2025-01-10 16:21:28 UTC	1369	IN	Data Raw: 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 37 29 3b 63 75 72 73 6f 72 3a 64 65 66 Data Ascii: ne;overflow:hidden;vertical-align:middle;border-radius:4px}.mdc-button::-moz-focus-inner{padding:0;border:0}.mdc-button:active{outline:none}.mdc-button:hover{cursor:pointer}.mdc-button:disabled{background-color:transparent;color:rgba(0,0,0,.37);cursor:def
2025-01-10 16:21:28 UTC	1369	IN	Data Raw: 2e 6d 64 63 2d 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 5b 64 69 72 3d 72 74 6c 5d 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 34 70 78 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 2d 2d 72 61 69 73 65 64 20 2e 6d 64 63 2d 62 75 74 74 6f 6e 5f 5f 6c 61 62 65 6c 2b 2e 6d 64 63 2d 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 2c 2e 6d 64 63 2d 62 75 74 74 6f 6e 2d 2d 75 6e 65 6c 65 76 61 74 65 64 20 2e 6d 64 63 2d 62 75 74 74 6f 6e 5f 5f 6c 61 62 65 6c 2b 2e 6d 64 63 2d 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 2c 2e 6d 64 63 2d 62 75 74 74 6f 6e 2d 2d 6f 75 74 6c 69 6e 65 64 20 2e 6d 64 63 2d 62 75 74 74 6f 6e 5f 5f 6c 61 62 65 6c 2b 2e 6d 64 63 2d 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 3b 6d Data Ascii: .mdc-button__icon[dir=rtl]{margin-left:8px;margin-right:-4px}.mdc-button--raised .mdc-button__label+.mdc-button__icon,.mdc-button--unelevated .mdc-button__label+.mdc-button__icon,.mdc-button--outlined .mdc-button__label+.mdc-button__icon{margin-left:8px;m
2025-01-10 16:21:28 UTC	1369	IN	Data Raw: 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 34 29 2c 30 70 78 20 31 70 78 20 35 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 78 2d 73 68 61 64 6f 77 20 32 38 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 20 30 2c 20 30 2e 32 2c 20 31 29 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 2d 2d 72 61 69 73 65 64 3a 68 6f 76 65 72 2c 2e 6d 64 63 2d 62 75 74 74 6f 6e 2d 2d 72 61 69 73 65 64 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 32 70 78 20 34 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 2c 30 70 78 20 34 70 78 20 35 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 34 29 2c 30 70 78 20 31 70 78 20 31 30 70 Data Ascii: rgba(0, 0, 0, 0.14),0px 1px 5px 0px rgba(0,0,0,.12);transition:box-shadow 280ms cubic-bezier(0.4, 0, 0.2, 1)}.mdc-button--raised:hover,.mdc-button--raised:focus{box-shadow:0px 2px 4px -1px rgba(0, 0, 0, 0.2),0px 4px 5px 0px rgba(0, 0, 0, 0.14),0px 1px 10p
2025-01-10 16:21:28 UTC	1369	IN	Data Raw: 65 2c 20 31 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 72 61 64 69 75 73 2d 69 6e 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 73 74 61 72 74 2c 20 30 29 29 20 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 Data Ascii: e, 1))}}@keyframes mdc-ripple-fg-radius-in{from{-webkit-animation-timing-function:cubic-bezier(0.4, 0, 0.2, 1);animation-timing-function:cubic-bezier(0.4, 0, 0.2, 1);-webkit-transform:translate(var(--mdc-ripple-fg-translate-start, 0)) scale(1);transform:t
2025-01-10 16:21:28 UTC	1369	IN	Data Raw: 72 64 65 72 3a 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 73 75 72 66 61 63 65 2d 74 65 73 74 2d 65 64 67 65 2d 76 61 72 29 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 7b 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 69 7a 65 3a 20 30 3b 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 6c 65 66 74 3a 20 30 3b 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 74 6f 70 3a 20 30 3b 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 63 61 6c 65 3a 20 31 3b 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 65 6e 64 3a 20 30 3b 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 73 74 61 72 74 3a 20 30 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 Data Ascii: rder:var(--mdc-ripple-surface-test-edge-var)}.mdc-button{--mdc-ripple-fg-size: 0;--mdc-ripple-left: 0;--mdc-ripple-top: 0;--mdc-ripple-fg-scale: 1;--mdc-ripple-fg-translate-end: 0;--mdc-ripple-fg-translate-start: 0;-webkit-tap-highlight-color:rgba(0,0,0,0
2025-01-10 16:21:28 UTC	1369	IN	Data Raw: 69 70 70 6c 65 2d 66 67 2d 73 63 61 6c 65 2c 20 31 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 65 6e 64 2c 20 30 29 29 20 73 63 61 6c 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 63 61 6c 65 2c 20 31 29 29 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 2e 6d 64 63 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 74 6f 70 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 30 30 25 29 3b 6c 65 66 74 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 30 30 25 29 3b 77 69 64 74 68 3a 32 30 30 25 3b 68 65 69 67 68 74 3a 32 30 30 25 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 2e 6d 64 63 2d 72 69 70 70 6c 65 2d 75 70 67 72 61 64 65 64 3a 3a 61 Data Ascii: ipple-fg-scale, 1));transform:translate(var(--mdc-ripple-fg-translate-end, 0)) scale(var(--mdc-ripple-fg-scale, 1))}.mdc-button::before,.mdc-button::after{top:calc(50% - 100%);left:calc(50% - 100%);width:200%;height:200%}.mdc-button.mdc-ripple-upgraded::a
2025-01-10 16:21:28 UTC	1369	IN	Data Raw: 2e 30 38 7d 2e 6d 64 63 2d 62 75 74 74 6f 6e 2d 2d 72 61 69 73 65 64 3a 6e 6f 74 28 2e 6d 64 63 2d 72 69 70 70 6c 65 2d 75 70 67 72 61 64 65 64 29 3a 66 6f 63 75 73 3a 3a 62 65 66 6f 72 65 2c 2e 6d 64 63 2d 62 75 74 74 6f 6e 2d 2d 72 61 69 73 65 64 2e 6d 64 63 2d 72 69 70 70 6c 65 2d 75 70 67 72 61 64 65 64 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 66 6f 63 75 73 65 64 3a 3a 62 65 66 6f 72 65 2c 2e 6d 64 63 2d 62 75 74 74 6f 6e 2d 2d 75 6e 65 6c 65 76 61 74 65 64 3a 6e 6f 74 28 2e 6d 64 63 2d 72 69 70 70 6c 65 2d 75 70 67 72 61 64 65 64 29 3a 66 6f 63 75 73 3a 3a 62 65 66 6f 72 65 2c 2e 6d 64 63 2d 62 75 74 74 6f 6e 2d 2d 75 6e 65 6c 65 76 61 74 65 64 2e 6d 64 63 2d 72 69 70 70 6c 65 2d 75 70 67 72 61 64 65 64 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 66 6f 63 Data Ascii: .08}.mdc-button--raised:not(.mdc-ripple-upgraded):focus::before,.mdc-button--raised.mdc-ripple-upgraded--background-focused::before,.mdc-button--unelevated:not(.mdc-ripple-upgraded):focus::before,.mdc-button--unelevated.mdc-ripple-upgraded--background-foc
2025-01-10 16:21:28 UTC	1369	IN	Data Raw: 64 63 2d 63 61 72 64 5f 5f 6d 65 64 69 61 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 69 6e 68 65 72 69 74 7d 2e 6d 64 63 2d 63 61 72 64 5f 5f 6d 65 64 69 61 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 69 6e 68 65 72 69 74 7d 2e 6d 64 63 2d 63 61 72 64 5f 5f 6d 65 64 69 61 2d 2d 73 71 75 61 72 65 3a 3a 62 65 66 6f 72 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 30 25 7d 2e 6d 64 63 2d 63 61 72 64 5f 5f 6d 65 64 69 61 2d 2d 31 Data Ascii: dc-card__media:first-child{border-top-left-radius:inherit;border-top-right-radius:inherit}.mdc-card__media:last-child{border-bottom-left-radius:inherit;border-bottom-right-radius:inherit}.mdc-card__media--square::before{margin-top:100%}.mdc-card__media--1
2025-01-10 16:21:28 UTC	1369	IN	Data Raw: 63 2d 63 61 72 64 5f 5f 61 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 6d 64 63 2d 63 61 72 64 5f 5f 61 63 74 69 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d Data Ascii: c-card__action{display:inline-flex;flex-direction:row;align-items:center;box-sizing:border-box;justify-content:center;cursor:pointer;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.mdc-card__action:focus{outline:none}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:28 UTC	998	OUT	GET /ResourcePackages/IFBIRedesign/assets/dist/main.css?v=638659012120000000 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
2025-01-10 16:21:28 UTC	584	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Length: 370688 Content-Type: text/css Last-Modified: Wed, 30 Oct 2024 20:06:52 GMT Accept-Ranges: bytes ETag: "0569e4272bdb1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:15 GMT Connection: close
2025-01-10 16:21:28 UTC	15726	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 2a 20 45 6d 62 65 64 64 65 64 20 6c 6f 63 61 6c 6c 79 20 66 6f 72 20 64 65 6d 6f 20 70 75 72 70 6f 73 65 20 6f 6e 6c 79 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 44 49 4e 20 72 65 67 75 6c 61 72 22 3b 0a 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 66 61 6c 6c 62 61 63 6b 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 46 6f 6e 74 73 2f 44 49 4e 2d 66 61 6d Data Ascii: /**************************************************** Embedded locally for demo purpose only****************************************************/@font-face { font-family: "DIN regular"; font-display: fallback; src: url("../Fonts/DIN-fam
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 78 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 2e 75 6e 65 78 70 65 63 74 65 64 2d 73 65 63 74 69 6f 6e 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 37 31 70 78 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 75 6e 65 78 70 65 63 74 65 64 2d 73 65 63 74 69 6f 6e 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 32 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 62 6c 6f 63 6b 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b Data Ascii: x auto;}.block-image { position: relative;}.unexpected-section-block-image { max-height: 271px; overflow: hidden;}.unexpected-section { margin-bottom: -24px !important;}.block-content { position: absolute; margin: auto;
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 74 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6d 6f 62 69 6c 65 2d 68 65 72 6f 2d 77 69 64 67 65 74 73 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 7d 0a 20 20 20 20 23 68 65 72 6f 2d 72 69 67 68 74 2d 62 6c 6f 63 6b 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 20 20 20 20 7d 20 20 0a 20 20 20 20 2e 68 65 72 6f 2d 69 6d 61 67 65 20 69 6d 67 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a Data Ascii: t; align-items: flex-start; display: flex-start; justify-content: flex-start; } .mobile-hero-widgets { display: block; } #hero-right-block { display:none; } .hero-image img { width:
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 22 2f 52 65 73 6f 75 72 63 65 50 61 63 6b 61 67 65 73 2f 42 6f 6f 74 73 74 72 61 70 2f 61 73 73 65 74 73 2f 64 69 73 74 2f 66 6f 6e 74 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 20 75 72 6c 28 22 2f 52 65 73 6f 75 72 63 65 50 61 63 6b 61 67 65 73 2f 42 6f 6f 74 73 74 72 61 70 2f 61 73 73 65 74 73 2f 64 69 73 74 2f 66 6f 6e 74 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 73 76 67 23 67 6c 79 70 68 69 63 6f Data Ascii: lings-regular.woff") format("woff"), url("/ResourcePackages/Bootstrap/assets/dist/fonts/bootstrap/glyphicons-halflings-regular.ttf") format("truetype"), url("/ResourcePackages/Bootstrap/assets/dist/fonts/bootstrap/glyphicons-halflings-regular.svg#glyphico
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 65 36 65 36 7d 2e 66 6c 61 74 70 69 63 6b 72 2d 77 65 65 6b 77 72 61 70 70 65 72 20 2e 66 6c 61 74 70 69 63 6b 72 2d 77 65 65 6b 64 61 79 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 7d 2e 66 6c 61 74 70 69 63 6b 72 2d 77 65 65 6b 77 72 61 70 70 65 72 20 73 70 61 6e 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 2c 2e 66 6c 61 74 70 69 63 6b 72 2d 77 65 65 6b 77 72 61 70 70 65 72 20 73 70 61 6e 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 3a 68 6f 76 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 35 37 2c 35 37 2c 35 37 2c 30 2e 33 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 Data Ascii: e6e6}.flatpickr-weekwrapper .flatpickr-weekday{float:none;width:100%;line-height:28px}.flatpickr-weekwrapper span.flatpickr-day,.flatpickr-weekwrapper span.flatpickr-day:hover{display:block;width:100%;max-width:none;color:rgba(57,57,57,0.3);background:tra
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 72 65 76 4d 6f 6e 74 68 44 61 79 2c 0a 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 2e 73 74 61 72 74 52 61 6e 67 65 2e 70 72 65 76 4d 6f 6e 74 68 44 61 79 2c 0a 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 2e 65 6e 64 52 61 6e 67 65 2e 70 72 65 76 4d 6f 6e 74 68 44 61 79 2c 0a 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 2e 73 65 6c 65 63 74 65 64 2e 6e 65 78 74 4d 6f 6e 74 68 44 61 79 2c 0a 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 2e 73 74 61 72 74 52 61 6e 67 65 2e 6e 65 78 74 4d 6f 6e 74 68 44 61 79 2c 0a 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 2e 65 6e 64 52 61 6e 67 65 2e 6e 65 78 74 4d 6f 6e 74 68 44 61 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 35 33 35 30 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f Data Ascii: revMonthDay,.flatpickr-day.startRange.prevMonthDay,.flatpickr-day.endRange.prevMonthDay,.flatpickr-day.selected.nextMonthDay,.flatpickr-day.startRange.nextMonthDay,.flatpickr-day.endRange.nextMonthDay { background: #ef5350; -webkit-box-shadow: no
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 70 68 6f 6e 65 2c 20 31 36 70 78 29 29 7d 40 73 75 70 70 6f 72 74 73 20 28 64 69 73 70 6c 61 79 3a 20 67 72 69 64 29 7b 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 32 2c 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 32 2d 70 68 6f 6e 65 7b 77 69 64 74 68 3a 61 75 74 6f 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 65 6e 64 3a 73 70 61 6e 20 32 7d 7d 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 33 2c 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 33 2d 70 68 6f 6e 65 7b 77 69 64 74 68 3a 63 61 6c 63 28 37 35 25 20 2d 20 31 36 70 78 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 37 35 25 20 2d 20 76 61 72 28 Data Ascii: phone, 16px))}@supports (display: grid){.mdc-layout-grid__cell--span-2,.mdc-layout-grid__cell--span-2-phone{width:auto;grid-column-end:span 2}}.mdc-layout-grid__cell--span-3,.mdc-layout-grid__cell--span-3-phone{width:calc(75% - 16px);width:calc(75% - var(
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 31 2c 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 31 2d 70 68 6f 6e 65 7b 77 69 64 74 68 3a 63 61 6c 63 28 32 35 25 20 2d 20 31 36 70 78 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 32 35 25 20 2d 20 76 61 72 28 2d 2d 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 2d 67 75 74 74 65 72 2d 70 68 6f 6e 65 2c 20 31 36 70 78 29 29 7d 40 73 75 70 70 6f 72 74 73 20 28 64 69 73 70 6c 61 79 3a 20 67 72 69 64 29 7b 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 31 2c 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 31 2d 70 68 6f 6e 65 7b 77 69 64 74 68 3a 61 75 74 6f 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 65 6e 64 3a Data Ascii: _cell--span-1,.mdc-layout-grid__cell--span-1-phone{width:calc(25% - 16px);width:calc(25% - var(--mdc-layout-grid-gutter-phone, 16px))}@supports (display: grid){.mdc-layout-grid__cell--span-1,.mdc-layout-grid__cell--span-1-phone{width:auto;grid-column-end:
2025-01-10 16:21:28 UTC	658	IN	Data Raw: 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 39 2d 74 61 62 6c 65 74 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 31 36 70 78 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 76 61 72 28 2d 2d 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 2d 67 75 74 74 65 72 2d 74 61 62 6c 65 74 2c 20 31 36 70 78 29 29 7d 40 73 75 70 70 6f 72 74 73 20 28 64 69 73 70 6c 61 79 3a 20 67 72 69 64 29 7b 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 39 2c 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 39 2d 74 61 62 6c 65 74 7b 77 69 64 74 68 3a 61 75 74 6f 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 65 6e 64 3a 73 70 61 6e 20 38 7d 7d 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f Data Ascii: _cell--span-9-tablet{width:calc(100% - 16px);width:calc(100% - var(--mdc-layout-grid-gutter-tablet, 16px))}@supports (display: grid){.mdc-layout-grid__cell--span-9,.mdc-layout-grid__cell--span-9-tablet{width:auto;grid-column-end:span 8}}.mdc-layout-grid__
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 69 64 2d 67 75 74 74 65 72 2d 74 61 62 6c 65 74 2c 20 31 36 70 78 29 29 7d 40 73 75 70 70 6f 72 74 73 20 28 64 69 73 70 6c 61 79 3a 20 67 72 69 64 29 7b 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 31 31 2c 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 31 31 2d 74 61 62 6c 65 74 7b 77 69 64 74 68 3a 61 75 74 6f 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 65 6e 64 3a 73 70 61 6e 20 38 7d 7d 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 31 32 2c 2e 6d 64 63 2d 6c 61 79 6f 75 74 2d 67 72 69 64 5f 5f 63 65 6c 6c 2d 2d 73 70 61 6e 2d 31 32 2d 74 61 62 6c 65 74 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 31 36 70 78 29 3b 77 69 64 Data Ascii: id-gutter-tablet, 16px))}@supports (display: grid){.mdc-layout-grid__cell--span-11,.mdc-layout-grid__cell--span-11-tablet{width:auto;grid-column-end:span 8}}.mdc-layout-grid__cell--span-12,.mdc-layout-grid__cell--span-12-tablet{width:calc(100% - 16px);wid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:28 UTC	956	OUT	GET /ruxitagentjs_ICANVfqru_10303241106123517.js HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
2025-01-10 16:21:28 UTC	557	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000, immutable Content-Type: text/javascript; charset=utf-8 Expires: Sat, 10 Jan 2026 16:21:16 GMT Last-Modified: Wed, 03 Mar 2010 07:01:40 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Date: Fri, 10 Jan 2025 16:21:15 GMT Connection: close Content-Length: 197863
2025-01-10 16:21:28 UTC	15827	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 54 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 63 6c 75 64 65 73 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ */(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ta=document.cookie.includes("__dTCookie");document.co
2025-01-10 16:21:28 UTC	557	IN	Data Raw: 6f 6e 20 42 61 28 29 7b 72 65 74 75 72 6e 20 79 65 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 29 7b 74 3d 6b 62 3b 57 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 28 41 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 74 28 29 2b 54 61 28 29 29 7d 29 3b 69 66 28 21 41 63 7c 7c 69 73 4e 61 4e 28 41 63 28 29 29 7c 7c 30 3e 3d 41 63 28 29 7c 7c 21 69 73 46 69 6e 69 74 65 28 41 63 28 29 29 29 41 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 61 28 29 7b 46 65 26 26 0a 28 57 61 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 3d 71 65 2c 57 61 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 3d 62 67 2c 46 65 3d 21 31 29 7d 66 75 6e Data Ascii: on Ba(){return ye}function ya(){t=kb;Wa.performance&&(Ac=function(){return Math.round(t()+Ta())});if(!Ac\|\|isNaN(Ac())\|\|0>=Ac()\|\|!isFinite(Ac()))Ac=function(){return(new Date).getTime()}}function Fa(){Fe&&(Wa.clearTimeout=qe,Wa.clearInterval=bg,Fe=!1)}fun
2025-01-10 16:21:28 UTC	15799	IN	Data Raw: 31 3b 66 6f 72 28 76 61 72 20 67 3d 30 2c 71 3d 4b 64 3b 67 3c 71 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 52 62 28 71 5b 67 5d 2c 30 29 3b 4b 64 3d 5b 5d 3b 56 28 22 63 6f 6f 4f 22 2c 21 30 29 3b 67 3d 30 3b 66 6f 72 28 71 3d 57 64 3b 67 3c 71 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 28 30 2c 71 5b 67 5d 29 28 29 3b 57 64 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 69 63 28 29 7b 69 66 28 21 42 28 22 63 6f 6f 22 29 7c 7c 0a 21 51 62 28 29 29 72 65 74 75 72 6e 21 31 3b 56 28 22 63 6f 6f 4f 22 2c 21 31 29 3b 63 63 28 55 63 28 29 29 3b 63 63 28 74 66 28 29 29 3b 63 63 28 4a 68 28 29 29 3b 63 63 28 22 64 74 41 64 6b 22 29 3b 63 63 28 61 64 28 29 29 3b 63 63 28 68 64 28 29 29 3b 74 72 79 7b 65 63 28 5a 63 28 29 29 2c 65 63 28 68 Data Ascii: 1;for(var g=0,q=Kd;g<q.length;g++)Rb(q[g],0);Kd=[];V("cooO",!0);g=0;for(q=Wd;g<q.length;g++)(0,q[g])();Wd.length=0;return!0}function ic(){if(!B("coo")\|\|!Qb())return!1;V("cooO",!1);cc(Uc());cc(tf());cc(Jh());cc("dtAdk");cc(ad());cc(hd());try{ec(Zc()),ec(h
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 61 6c 53 74 6f 72 61 67 65 7d 63 61 74 63 68 28 4b 68 29 7b 7d 79 65 3d 5b 5d 3b 79 61 28 29 3b 4c 66 3d 41 63 28 29 3b 65 65 3d 5b 5d 3b 70 65 3d 7b 7d 3b 46 65 7c 7c 28 57 61 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 3d 75 61 28 71 65 29 2c 57 61 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 3d 75 61 28 62 67 29 2c 46 65 3d 21 30 29 3b 76 61 72 20 77 66 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 68 67 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 65 3d 30 21 3d 3d 0a 77 66 26 26 30 21 3d 3d 68 67 26 26 77 66 21 3d 3d 68 67 3b 69 66 28 74 64 28 29 29 7b 76 61 72 20 69 67 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 3b 69 66 28 69 67 29 7b 6e 62 3d 30 3b 66 6f 72 28 Data Ascii: alStorage}catch(Kh){}ye=[];ya();Lf=Ac();ee=[];pe={};Fe\|\|(Wa.clearTimeout=ua(qe),Wa.clearInterval=ua(bg),Fe=!0);var wf=Math.random(),hg=Math.random();te=0!==wf&&0!==hg&&wf!==hg;if(td()){var ig=performance.getEntriesByType("navigation")[0];if(ig){nb=0;for(
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 20 62 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 48 63 28 61 29 7b 72 65 74 75 72 6e 20 59 64 2e 61 63 74 69 6f 6e 73 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 29 7b 76 61 72 20 61 3d 24 65 28 29 3b 69 66 28 61 3d 3d 3d 53 28 29 7c 7c 21 5a 61 28 61 29 7c 7c 21 61 2e 67 49 54 41 49 44 29 72 65 74 75 72 6e 20 70 68 3d 46 63 2c 70 68 28 29 3b 61 3d 61 2e 67 49 54 41 49 44 28 29 3b 47 67 3d 61 2b 31 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 46 63 28 29 7b 72 65 74 75 72 6e 20 47 67 2b 2b 7d 66 75 6e 63 74 69 6f 6e 20 4a 63 28 29 7b 72 65 74 75 72 6e 20 70 68 28 29 7d 66 75 6e 63 74 69 6f 6e 20 49 63 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 48 63 28 61 29 29 26 26 61 2e 66 62 3f 61 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 Data Ascii: b}return null}function Hc(a){return Yd.actions[a]}function fe(){var a=$e();if(a===S()\|\|!Za(a)\|\|!a.gITAID)return ph=Fc,ph();a=a.gITAID();Gg=a+1;return a}function Fc(){return Gg++}function Jc(){return ph()}function Ic(a){return(a=Hc(a))&&a.fb?a:null}functi
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 73 68 28 22 65 6e 22 29 3b 22 73 72 52 73 22 3d 3d 3d 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 62 2e 70 75 73 68 28 22 6d 73 6c 22 29 3b 62 2e 70 75 73 68 28 22 65 6e 64 22 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 2c 62 29 7b 7a 28 61 2c 62 29 3b 76 61 72 20 66 3d 6b 61 28 62 29 3b 61 3d 4b 63 28 22 72 65 70 6f 72 74 55 72 6c 22 29 3b 28 66 3d 42 61 28 51 61 28 66 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 62 5b 6b 5d 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6b 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 62 5b 6b 5d 29 7d 29 2e 6a 6f 69 6e 28 22 26 22 29 29 26 26 28 61 2b 3d 22 3f 22 2b 66 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6f 62 Data Ascii: sh("en");"srRs"===a.contentType&&b.push("msl");b.push("end");return b}function La(a,b){z(a,b);var f=ka(b);a=Kc("reportUrl");(f=Ba(Qa(f,function(k){return!!b[k]}),function(k){return"".concat(k,"=").concat(b[k])}).join("&"))&&(a+="?"+f);return a}function ob
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 29 3a 41 69 2e 73 72 63 2e 69 6e 63 6c 75 64 65 73 28 22 5f 63 6f 6d 70 6c 65 74 65 22 29 3f 22 4a 61 76 61 53 63 72 69 70 74 54 61 67 20 22 2e 63 6f 6e 63 61 74 28 4f 66 28 29 2c 22 20 69 6e 6a 65 63 74 65 64 22 29 3a 41 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 3f 22 43 6f 64 65 53 6e 69 70 70 65 74 44 65 66 65 72 72 65 64 20 22 2e 63 6f 6e 63 61 74 28 4f 66 28 29 2c 22 20 69 6e 6a 65 63 74 65 64 22 29 3a 22 43 6f 64 65 53 6e 69 70 70 65 74 53 79 6e 63 20 22 2e 63 6f 6e 63 61 74 28 4f 66 28 29 2c 22 20 69 6e 6a 65 63 74 65 64 22 29 3a 41 69 2e 64 61 74 61 73 65 74 2e 64 74 63 6f 6e 66 69 67 3f 22 49 6e 6c 69 6e 65 43 6f 64 65 20 22 2e 63 6f 6e 63 61 74 28 4f 66 28 29 2c 0a 22 20 69 6e 6a 65 63 74 65 64 22 29 3a 22 43 6f 75 6c Data Ascii: ):Ai.src.includes("_complete")?"JavaScriptTag ".concat(Of()," injected"):Ai.getAttribute("defer")?"CodeSnippetDeferred ".concat(Of()," injected"):"CodeSnippetSync ".concat(Of()," injected"):Ai.dataset.dtconfig?"InlineCode ".concat(Of()," injected"):"Coul
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 3d 6f 63 28 29 2c 66 3d 5b 5d 2c 6b 3d 30 3b 6b 3c 61 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 61 5b 6b 5d 3b 22 63 68 69 6c 64 4c 69 73 74 22 3d 3d 3d 70 2e 74 79 70 65 26 26 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 70 2e 61 64 64 65 64 4e 6f 64 65 73 29 7d 69 66 28 66 2e 6c 65 6e 67 74 68 29 66 6f 72 28 61 3d 7b 74 69 6d 65 3a 62 2c 6e 6f 64 65 73 3a 66 7d 2c 62 3d 30 2c 66 3d 69 6a 3b 62 3c 66 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 6b 3d 66 5b 62 5d 2c 70 3d 48 69 5b 6b 5d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 0a 74 79 70 65 6f 66 20 70 26 26 70 28 6b 2c 61 29 2c 75 67 5b 6b 5d 2e 70 75 73 68 28 61 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 6c 28 61 2c 62 2c 66 2c 6b 2c 70 2c 78 29 7b 76 6f 69 64 20 30 3d 3d 3d 78 26 26 28 78 3d Data Ascii: =oc(),f=[],k=0;k<a.length;k++){var p=a[k];"childList"===p.type&&f.push.apply(f,p.addedNodes)}if(f.length)for(a={time:b,nodes:f},b=0,f=ij;b<f.length;b++)k=f[b],p=Hi[k],"function"===typeof p&&p(k,a),ug[k].push(a)}))}function zl(a,b,f,k,p,x){void 0===x&&(x=
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 64 72 61 74 65 64 3a 64 65 2e 68 79 64 72 61 74 65 64 2c 69 64 3a 64 65 2e 69 64 7d 29 3b 6f 65 3d 21 31 3b 53 28 29 21 3d 3d 6c 69 26 26 28 6f 65 3d 6c 69 2e 69 52 4f 28 5a 6b 2e 42 61 29 29 3b 21 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 5a 6b 2e 42 61 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 5a 6b 2e 42 61 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7c 7c 0a 6f 65 3f 72 68 3d 5a 6b 3a 4c 28 58 6b 29 7d 65 6c 73 65 20 4c 28 22 2d 22 29 7d 7d 7d 74 72 79 7b 50 63 28 31 29 3b 24 61 3d 58 3d 7b 69 64 3a 2b 2b 7a 61 2c 6e 61 6d 65 3a 4d 65 28 51 62 28 29 29 2c 74 69 6d 65 73 74 61 6d 70 3a 62 66 2c 6b 69 6e 64 3a 30 2c 74 72 69 67 67 65 72 3a 47 62 2c 68 79 64 72 61 74 65 64 3a 21 31 7d Data Ascii: drated:de.hydrated,id:de.id});oe=!1;S()!==li&&(oe=li.iRO(Zk.Ba));!document.referrer\|\|Zk.Ba===document.referrer\|\|Zk.Ba===document.location.href\|\|oe?rh=Zk:L(Xk)}else L("-")}}}try{Pc(1);$a=X={id:++za,name:Me(Qb()),timestamp:bf,kind:0,trigger:Gb,hydrated:!1}
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 4f 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 76 6f 69 64 20 30 3d 3d 3d 66 26 26 28 66 3d 21 31 29 3b 28 33 21 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 7c 7c 0a 66 29 26 26 62 26 26 62 2e 6e 61 6d 65 26 26 28 62 2e 64 65 70 74 68 3d 74 68 69 73 2e 64 65 70 74 68 2b 31 2c 74 68 69 73 2e 73 75 62 41 63 74 69 6f 6e 73 2e 70 75 73 68 28 62 29 2c 62 2e 53 63 28 29 26 26 28 74 68 69 73 2e 5a 62 2b 2b 2c 74 68 69 73 2e 79 65 28 31 29 29 2c 62 2e 70 61 72 65 6e 74 3d 74 68 69 73 2c 62 2e 4e 61 7c 7c 74 68 69 73 2e 4d 62 28 29 2c 62 2e 69 62 2b 3d 74 68 69 73 2e 69 62 2c 62 2e 6e 63 3d 74 68 69 73 2e 6e 63 2b 20 2b 62 2e 4e 61 29 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 43 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 33 3d 3d 3d 74 68 69 73 2e Data Ascii: Od=function(b,f){void 0===f&&(f=!1);(3!==this.status\|\|f)&&b&&b.name&&(b.depth=this.depth+1,this.subActions.push(b),b.Sc()&&(this.Zb++,this.ye(1)),b.parent=this,b.Na\|\|this.Mb(),b.ib+=this.ib,b.nc=this.nc+ +b.Na)};a.prototype.Ce=function(){return 3===this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49750	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:28 UTC	983	OUT	GET /ResourcePackages/IFBIRedesign/assets/dist/main.js?v=638659012120000000 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
2025-01-10 16:21:28 UTC	598	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Length: 849067 Content-Type: application/javascript Last-Modified: Wed, 30 Oct 2024 20:06:52 GMT Accept-Ranges: bytes ETag: "0569e4272bdb1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:15 GMT Connection: close
2025-01-10 16:21:28 UTC	15712	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 39 35 39 3a 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 7b 57 3a 28 29 3d 3e 53 74 61 72 74 51 75 6f 74 65 43 6f 6e 74 72 6f 6c 6c 65 72 7d 29 3b 76 61 72 20 5f Data Ascii: /! For license information please see main.js.LICENSE.txt /(()=>{var __webpack_modules__={959:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";__webpack_require__.d(__webpack_exports__,{W:()=>StartQuoteController});var _
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 65 29 7d 2c 67 65 74 57 69 6e 64 6f 77 50 61 67 65 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 78 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 79 3a 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 7d 7d 2c 69 73 53 75 72 66 61 63 65 41 63 74 69 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e 77 29 28 65 2e 72 6f 6f 74 5f 2c 22 3a 61 63 74 69 76 65 22 29 7d 2c 69 73 53 75 72 66 61 63 65 44 69 73 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 2e 64 69 73 61 62 6c Data Ascii: :function(e){return window.removeEventListener("resize",e)},getWindowPageOffset:function(){return{x:window.pageXOffset,y:window.pageYOffset}},isSurfaceActive:function(){return(0,a.w)(e.root_,":active")},isSurfaceDisabled:function(){return Boolean(e.disabl
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 2e 5f 72 65 73 75 6c 74 29 29 29 3a 4c 28 74 68 69 73 2e 70 72 6f 6d 69 73 65 2c 6e 65 77 20 45 72 72 6f 72 28 22 41 72 72 61 79 20 4d 65 74 68 6f 64 73 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 61 6e 20 41 72 72 61 79 22 29 29 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 6e 75 6d 65 72 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 68 69 73 2e 5f 73 74 61 74 65 3d 3d 3d 53 26 26 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 74 68 69 73 2e 5f 65 61 63 68 45 6e 74 72 79 28 65 5b 74 5d 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 61 63 68 45 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 73 74 61 6e 63 65 43 6f 6e 73 74 72 Data Ascii: ._result))):L(this.promise,new Error("Array Methods must be provided an Array"))}return e.prototype._enumerate=function(e){for(var t=0;this._state===S&&t<e.length;t++)this._eachEntry(e[t],t)},e.prototype._eachEntry=function(e,t){var n=this._instanceConstr
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 7d 74 2e 45 76 65 6e 74 3d 69 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 64 65 66 61 75 6c 74 2e 43 75 73 74 6f 6d 45 76 65 6e 74 3f 74 2e 45 76 65 6e 74 3d 69 3d 6f 2e 64 65 66 61 75 6c 74 2e 43 75 73 74 6f 6d 45 76 65 6e 74 3a 73 2e 64 65 66 61 75 6c 74 26 26 28 74 2e 45 76 65 6e 74 3d 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 Data Ascii: ?e:{default:e}}function d(e){return e instanceof Element}t.Event=i,"function"==typeof o.default.CustomEvent?t.Event=i=o.default.CustomEvent:s.default&&(t.Event=i=function(e,t){t=t\|\|{bubbles:!1,cancelable:!1,composed:!0,detail:void 0};var n=document.create
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 29 7d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 76 2c 72 29 26 26 74 68 69 73 2e 73 65 74 56 61 6c 75 65 28 74 68 69 73 2c 6f 2c 72 2c 76 5b 72 5d 5b 32 5d 2c 76 5b 72 5d 5b 31 5d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 56 61 6c 75 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 26 26 28 65 5b 69 5d 3d 22 61 6d 70 6d 22 3d 3d 3d 69 3f 74 3a 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 5d 2f 67 2c 22 30 22 29 2c 65 5b 22 72 61 77 22 2b 69 5d 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2f 67 2c 22 5f 22 29 29 2c 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6f 3d 65 5b 69 5d 3b 28 22 64 61 79 22 3d 3d 3d 69 Data Ascii: )}Object.prototype.hasOwnProperty.call(v,r)&&this.setValue(this,o,r,v[r][2],v[r][1])}}},{key:"setValue",value:function(e,t,n,i,r){if(void 0!==t&&(e[i]="ampm"===i?t:t.replace(/[^0-9]/g,"0"),e["raw"+i]=t.replace(/\s/g,"_")),void 0!==r){var o=e[i];("day"===i
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 69 78 50 6f 69 6e 74 3f 22 2c 22 3a 22 2e 22 5d 3d 65 2e 72 61 64 69 78 50 6f 69 6e 74 29 2c 6f 7d 2c 5f 6d 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 28 22 2b 65 2e 67 72 6f 75 70 53 65 70 61 72 61 74 6f 72 2b 22 39 39 39 29 7b 2b 7c 31 7d 22 7d 2c 64 69 67 69 74 73 3a 22 2a 22 2c 64 69 67 69 74 73 4f 70 74 69 6f 6e 61 6c 3a 21 30 2c 65 6e 66 6f 72 63 65 44 69 67 69 74 73 4f 6e 42 6c 75 72 3a 21 31 2c 72 61 64 69 78 50 6f 69 6e 74 3a 22 2e 22 2c 70 6f 73 69 74 69 6f 6e 43 61 72 65 74 4f 6e 43 6c 69 63 6b 3a 22 72 61 64 69 78 46 6f 63 75 73 22 2c 5f 72 61 64 69 78 44 61 6e 63 65 3a 21 30 2c 67 72 6f 75 70 53 65 70 61 72 61 74 6f 72 3a 22 22 2c 61 6c 6c 6f 77 4d 69 6e 75 73 3a 21 30 2c 6e 65 67 61 74 69 6f 6e 53 79 6d 62 6f 6c 3a Data Ascii: ixPoint?",":"."]=e.radixPoint),o},_mask:function(e){return"("+e.groupSeparator+"999){+\|1}"},digits:"*",digitsOptional:!0,enforceDigitsOnBlur:!1,radixPoint:".",positionCaretOnClick:"radixFocus",_radixDance:!0,groupSeparator:"",allowMinus:!0,negationSymbol:
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 74 6d 61 73 6b 2e 72 65 6d 6f 76 65 28 29 29 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 3d 6e 65 77 20 5f 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 30 29 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 6f 70 74 73 3d 73 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 6e 6f 4d 61 73 6b 73 43 61 63 68 65 3d 74 2e 6e 6f 4d 61 73 6b 73 43 61 63 68 65 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 75 73 65 72 4f 70 74 69 6f 6e 73 3d 72 2e 64 65 66 61 75 6c 74 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 2e 75 73 65 72 4f 70 74 69 6f 6e 73 29 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 65 6c 3d 65 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 24 65 6c 3d 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 65 29 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 6d 61 73 6b 73 65 74 3d 75 2c 72 2e 64 65 66 61 75 6c 74 2e Data Ascii: tmask.remove()),e.inputmask=new _(void 0,void 0,!0),e.inputmask.opts=s,e.inputmask.noMasksCache=t.noMasksCache,e.inputmask.userOptions=r.default.extend(!0,{},t.userOptions),e.inputmask.el=e,e.inputmask.$el=(0,r.default)(e),e.inputmask.maskset=u,r.default.
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 74 26 26 28 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 22 29 2c 65 3d 72 28 65 2c 61 29 2c 75 3d 63 3f 22 72 65 67 65 78 5f 22 2b 61 2e 72 65 67 65 78 3a 61 2e 6e 75 6d 65 72 69 63 49 6e 70 75 74 3f 65 2e 73 70 6c 69 74 28 22 22 29 2e 72 65 76 65 72 73 65 28 29 2e 6a 6f 69 6e 28 22 22 29 3a 65 2c 6e 75 6c 6c 21 3d 3d 61 2e 6b 65 65 70 53 74 61 74 69 63 26 26 28 75 3d 22 6b 73 5f 22 2b 61 2e 6b 65 65 70 53 74 61 74 69 63 2b 75 29 2c 76 6f 69 64 20 30 3d 3d 3d 6f 2e 64 65 66 61 75 6c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 73 6b 73 43 61 63 68 65 5b 75 5d 7c 7c 21 30 3d 3d 3d 74 3f 28 73 3d 7b 6d 61 73 6b 3a 65 2c 6d 61 73 6b 54 6f 6b 65 6e 3a 6f 2e 64 65 66 61 75 6c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6e 61 6c 79 73 65 4d 61 73 6b 28 65 2c 63 2c 61 Data Ascii: t&&(a.placeholder=""),e=r(e,a),u=c?"regex_"+a.regex:a.numericInput?e.split("").reverse().join(""):e,null!==a.keepStatic&&(u="ks_"+a.keepStatic+u),void 0===o.default.prototype.masksCache[u]\|\|!0===t?(s={mask:e,maskToken:o.default.prototype.analyseMask(e,c,a
2025-01-10 16:21:28 UTC	672	IN	Data Raw: 26 26 75 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 69 74 79 2d 72 3e 30 26 26 22 6d 61 73 74 65 72 22 3d 3d 3d 75 2e 6d 61 74 63 68 2e 6e 65 77 42 6c 6f 63 6b 4d 61 72 6b 65 72 26 26 28 21 66 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 69 74 79 7c 7c 66 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 69 74 79 2d 72 3c 31 7c 7c 21 66 2e 6d 61 74 63 68 2e 6e 65 77 42 6c 6f 63 6b 4d 61 72 6b 65 72 29 7c 7c 75 26 26 21 6e 2e 67 72 65 65 64 79 26 26 75 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 51 75 61 6e 74 69 66 69 65 72 26 26 21 66 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 51 75 61 6e 74 69 66 69 65 72 29 26 26 28 73 3d 70 2c 75 3d 66 29 7d 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 6d Data Ascii: &&u.match.optionality-r>0&&"master"===u.match.newBlockMarker&&(!f.match.optionality\|\|f.match.optionality-r<1\|\|!f.match.newBlockMarker)\|\|u&&!n.greedy&&u.match.optionalQuantifier&&!f.match.optionalQuantifier)&&(s=p,u=f)}return u}function l(e,t){var n=this.m
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 6d 61 74 63 68 2e 73 74 61 74 69 63 7c 7c 21 30 3d 3d 3d 74 2e 6d 61 74 63 68 2e 73 74 61 74 69 63 29 26 26 2d 31 21 3d 3d 69 28 74 2e 6d 61 74 63 68 2e 66 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5b 5c 5d 2f 5d 2f 67 2c 22 22 29 29 2e 69 6e 64 65 78 4f 66 28 69 28 65 2e 6d 61 74 63 68 2e 66 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5b 5c 5d 2f 5d 2f 67 2c 22 22 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 61 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 64 65 70 65 6e 64 65 6e 63 79 4c 69 62 2c 75 3d 74 68 69 73 2e 6d 61 73 6b 73 65 74 2c 6c 3d 74 68 69 73 2e 6f 70 74 73 2c 66 3d 74 68 69 73 2e 65 6c 2c 70 3d 75 2e 6d 61 73 6b 54 6f 6b 65 6e 2c 68 3d 74 3f 6e 3a Data Ascii: match.static\|\|!0===t.match.static)&&-1!==i(t.match.fn.toString().replace(/[[\]/]/g,"")).indexOf(i(e.match.fn.toString().replace(/[[\]/]/g,"")))}function f(e,t,n){var i,o,a=this,s=this.dependencyLib,u=this.maskset,l=this.opts,f=this.el,p=u.maskToken,h=t?n:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	198.179.10.61	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:28 UTC	796	OUT	GET /farmhand/V1/consumer/theme.css HTTP/1.1 Host: cdn.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
2025-01-10 16:21:28 UTC	1168	IN	HTTP/1.1 200 OK Content-Length: 353644 Content-Type: text/css Last-Modified: Tue, 13 Mar 2018 20:05:33 GMT Accept-Ranges: bytes ETag: "467636a56bbd31:0" Access-Control-Allow-Origin: * X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1911898643" Set-Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; Path=/; Domain=.infarmbureau.com Date: Fri, 10 Jan 2025 16:20:50 GMT Connection: close Set-Cookie: TS017720c6=01d1157481619bae605a83952fa5fb9c32bfdff605ef60ead141d5e07b90ffdd5d3dd782633aa1ce9fff88aefeb2b57b1ef6fbdc53; Path=/; Secure; HTTPOnly Set-Cookie: TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; path=/; domain=.infarmbureau.com; HTTPonly; Secure
2025-01-10 16:21:28 UTC	15216	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 61 73 74 2e 66 6f 6e 74 73 2e 6e 65 74 2f 74 2f 31 2e 63 73 73 3f 61 70 69 54 79 70 65 3d 63 73 73 26 70 72 6f 6a 65 63 74 69 64 3d 31 62 31 62 36 30 63 31 2d 63 35 36 61 2d 34 35 63 36 2d 61 39 62 35 2d 30 33 61 63 33 63 33 30 36 65 61 33 29 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 44 49 4e 20 72 65 67 75 6c 61 72 22 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 33 65 30 62 32 63 64 37 2d 39 36 35 37 2d 34 33 38 62 2d 62 34 61 66 2d 65 30 34 31 32 32 65 38 66 31 66 37 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6f 74 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 Data Ascii: @charset "UTF-8";@import url(//fast.fonts.net/t/1.css?apiType=css&projectid=1b1b60c1-c56a-45c6-a9b5-03ac3c306ea3);@font-face{font-family:"DIN regular";src:url(../fonts/3e0b2cd7-9657-438b-b4af-e04122e8f1f7.eot?#iefix) format("eot")}@font-face{font-family:"
2025-01-10 16:21:28 UTC	321	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a1 22 7d 2e 66 61 2d 6d 61 69 6c 2d 72 65 70 6c 79 2d 61 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 70 6c 79 2d 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a2 22 7d 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a3 22 7d 2e 66 61 2d 6c 6f 63 61 74 69 6f 6e 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a4 22 7d 2e 66 61 2d 63 72 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a5 22 7d 2e 66 61 2d 63 6f 64 65 2d 66 6f 72 6b 3a 62 65 66 6f Data Ascii: e{content:""}.fa-mail-reply-all:before,.fa-reply-all:before{content:""}.fa-star-half-empty:before,.fa-star-half-full:before,.fa-star-half-o:before{content:""}.fa-location-arrow:before{content:""}.fa-crop:before{content:""}.fa-code-fork:befo
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 3a 22 ef 84 a7 22 7d 2e 66 61 2d 71 75 65 73 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a8 22 7d 2e 66 61 2d 69 6e 66 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a9 22 7d 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 aa 22 7d 2e 66 61 2d 73 75 70 65 72 73 63 72 69 70 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 ab 22 7d 2e 66 61 2d 73 75 62 73 63 72 69 70 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 ac 22 7d 2e 66 61 2d 65 72 61 73 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 ad 22 7d 2e 66 61 2d 70 75 7a 7a 6c 65 2d 70 69 65 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 ae 22 7d 2e 66 61 2d 6d Data Ascii: :""}.fa-question:before{content:""}.fa-info:before{content:""}.fa-exclamation:before{content:""}.fa-superscript:before{content:""}.fa-subscript:before{content:""}.fa-eraser:before{content:""}.fa-puzzle-piece:before{content:""}.fa-m
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 6f 69 64 2d 73 61 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 73 65 6e 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 73 65 74 74 69 6e 67 73 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 73 68 61 72 65 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 73 68 61 72 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 73 74 61 72 2d 68 61 6c 66 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 73 74 61 72 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 73 74 61 72 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 73 74 Data Ascii: oid-sad:before,.ion-android-search:before,.ion-android-send:before,.ion-android-settings:before,.ion-android-share-alt:before,.ion-android-share:before,.ion-android-star-half:before,.ion-android-star-outline:before,.ion-android-star:before,.ion-android-st
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 2e 69 6f 6e 2d 61 6c 65 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 81 22 7d 2e 69 6f 6e 2d 61 6c 65 72 74 2d 63 69 72 63 6c 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 80 22 7d 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 61 64 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8b 87 22 7d 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 61 64 64 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8d 99 22 7d 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 61 6c 61 72 6d 2d 63 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8d 9a 22 7d 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 61 6c 65 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8d 9b 22 7d 2e 69 6f 6e 2d 61 6e 64 72 6f 69 64 2d 61 Data Ascii: .ion-alert:before{content:""}.ion-alert-circled:before{content:""}.ion-android-add:before{content:""}.ion-android-add-circle:before{content:""}.ion-android-alarm-clock:before{content:""}.ion-android-alert:before{content:""}.ion-android-a
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 69 6f 6e 2d 69 6f 73 2d 6c 6f 6f 70 2d 73 74 72 6f 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 99 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 9c 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 6d 65 64 69 63 61 6c 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 9b 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 6d 65 64 6b 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 9e 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 6d 65 64 6b 69 74 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 9d 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 6d 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 a1 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 6d 69 63 2d 6f Data Ascii: ion-ios-loop-strong:before{content:""}.ion-ios-medical:before{content:""}.ion-ios-medical-outline:before{content:""}.ion-ios-medkit:before{content:""}.ion-ios-medkit-outline:before{content:""}.ion-ios-mic:before{content:""}.ion-ios-mic-o
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 6e 74 2d 70 61 74 68 28 22 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 27 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 27 66 6f 6e 74 2d 70 61 74 68 28 22 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 74 74 66 22 29 27 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 75 72 6c 28 27 66 6f 6e 74 2d 70 61 74 68 28 22 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 73 76 67 23 67 6c 79 70 68 69 63 6f 6e 73 5f 68 61 6c 66 6c 69 6e 67 73 72 65 67 75 6c 61 72 22 29 27 29 20 66 6f 72 6d 61 74 28 22 73 76 67 22 29 Data Ascii: nt-path("../fonts/glyphicons-halflings-regular.woff")') format("woff"),url('font-path("../fonts/glyphicons-halflings-regular.ttf")') format("truetype"),url('font-path("../fonts/glyphicons-halflings-regular.svg#glyphicons_halflingsregular")') format("svg")
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 69 6e 61 6c 2d 74 69 74 6c 65 5d 2c 61 62 62 72 5b 74 69 74 6c 65 5d 7b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 20 23 64 39 64 39 64 36 7d 2e 69 6e 69 74 69 61 6c 69 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 70 61 64 64 69 6e 67 3a 31 31 70 78 20 32 32 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 32 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 35 70 78 20 73 6f 6c 69 64 20 23 65 63 65 63 65 63 7d 62 6c 6f 63 6b 71 75 6f 74 65 20 6f 6c 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 6c 6f 63 6b 71 75 6f 74 65 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 6c 6f 63 6b 71 75 6f 74 65 20 75 6c 3a 6c 61 73 74 2d 63 68 Data Ascii: inal-title],abbr[title]{cursor:help;border-bottom:1px dotted #d9d9d6}.initialism{font-size:90%}blockquote{padding:11px 22px;margin:0 0 22px;font-size:20px;border-left:5px solid #ececec}blockquote ol:last-child,blockquote p:last-child,blockquote ul:last-ch
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 3b 63 6f 6c 6f 72 3a 23 37 35 37 38 37 62 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 37 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 37 35 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 Data Ascii: line-height:1.42857;color:#75787b;background-color:#fff;background-image:none;border:1px solid #ccc;border-radius:0;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,.075);box-shadow:inset 0 1px 1px rgba(0,0,0,.075);-webkit-transition:border-color ease-in-out
2025-01-10 16:21:28 UTC	847	IN	Data Raw: 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 61 39 31 31 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 36 37 62 31 34 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 20 2e 62 61 64 67 65 7b 63 6f 6c 6f 72 3a 23 31 61 39 31 31 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 74 6e 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 65 61 30 63 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 61 39 35 63 36 7d 2e 62 74 6e 2d 69 6e 66 6f 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 34 38 37 62 33 3b 62 6f Data Ascii: n-success:hover{background-color:#1a9117;border-color:#167b14}.btn-success .badge{color:#1a9117;background-color:#fff}.btn-info{color:#fff;background-color:#4ea0cc;border-color:#3a95c6}.btn-info.focus,.btn-info:focus{color:#fff;background-color:#3487b3;bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	198.179.10.61	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:28 UTC	803	OUT	GET /farmhand/V2/latest/farmhand-utils.css HTTP/1.1 Host: cdn.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
2025-01-10 16:21:28 UTC	1200	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Type: text/css Last-Modified: Fri, 17 Jul 2020 23:06:46 GMT Accept-Ranges: bytes ETag: "08773f18e5cd61:0" Access-Control-Allow-Origin: * X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="0", dtRpid;desc="-825248718" Set-Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; Path=/; Domain=.infarmbureau.com Date: Fri, 10 Jan 2025 16:20:50 GMT Connection: close Content-Length: 148849 Set-Cookie: TS017720c6=01d11574813593e3e5098722c27fc70f23ba41e2d33cdf3e6552f68f969fca81332514f8c0f3aac02e29be15dacb2a253d9d30314f; Path=/; Secure; HTTPOnly Set-Cookie: TS013a8a7c=01d115748142dd78b5496898ba993847929317a59b3cdf3e6552f68f969fca81332514f8c05929eb1619192fcb70cddf65b327a8b4ebe11089807ca3d5b61ec0781b2a5799; path=/; domain=.infarmbureau.com; HTTPonly; Secure
2025-01-10 16:21:28 UTC	15184	IN	Data Raw: ef bb bf 2e 66 2d 7a 2d 30 7b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 66 2d 7a 2d 31 30 30 7b 7a 2d 69 6e 64 65 78 3a 31 30 30 7d 2e 66 2d 7a 2d 32 30 30 7b 7a 2d 69 6e 64 65 78 3a 32 30 30 7d 2e 66 2d 7a 2d 33 30 30 7b 7a 2d 69 6e 64 65 78 3a 33 30 30 7d 2e 66 2d 7a 2d 34 30 30 7b 7a 2d 69 6e 64 65 78 3a 34 30 30 7d 2e 66 2d 7a 2d 35 30 30 7b 7a 2d 69 6e 64 65 78 3a 35 30 30 7d 2e 66 2d 7a 2d 36 30 30 7b 7a 2d 69 6e 64 65 78 3a 36 30 30 7d 2e 66 2d 7a 2d 37 30 30 7b 7a 2d 69 6e 64 65 78 3a 37 30 30 7d 2e 66 2d 7a 2d 38 30 30 7b 7a 2d 69 6e 64 65 78 3a 38 30 30 7d 2e 66 2d 7a 2d 39 30 30 7b 7a 2d 69 6e 64 65 78 3a 39 30 30 7d 2e 66 2d 7a 2d 31 30 30 30 7b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 7d 2e 66 2d 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 7b 64 69 73 70 6c 61 79 Data Ascii: .f-z-0{z-index:0}.f-z-100{z-index:100}.f-z-200{z-index:200}.f-z-300{z-index:300}.f-z-400{z-index:400}.f-z-500{z-index:500}.f-z-600{z-index:600}.f-z-700{z-index:700}.f-z-800{z-index:800}.f-z-900{z-index:900}.f-z-1000{z-index:1000}.f-display-none{display
2025-01-10 16:21:28 UTC	1200	IN	Data Raw: 69 6e 2d 74 6f 70 3a 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 70 2d 33 30 70 78 7b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 70 2d 6c 2d 33 30 70 78 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 70 2d 72 2d 33 30 70 78 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 70 2d 62 2d 33 30 70 78 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 70 2d 74 2d 33 30 70 78 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 6d 2d 2d 33 31 70 78 7b 6d 61 72 67 69 6e 3a 2d 33 31 70 78 20 21 69 6d 70 6f 72 74 61 Data Ascii: in-top:30px !important}.f-p-30px{padding:30px !important}.f-p-l-30px{padding-left:30px !important}.f-p-r-30px{padding-right:30px !important}.f-p-b-30px{padding-bottom:30px !important}.f-p-t-30px{padding-top:30px !important}.f-m--31px{margin:-31px !importa
2025-01-10 16:21:28 UTC	15505	IN	Data Raw: 6f 72 74 61 6e 74 7d 2e 66 2d 6d 2d 74 2d 2d 32 37 70 78 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 37 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 6d 2d 2d 32 36 70 78 7b 6d 61 72 67 69 6e 3a 2d 32 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 6d 2d 6c 2d 2d 32 36 70 78 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 6d 2d 72 2d 2d 32 36 70 78 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 32 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 6d 2d 62 2d 2d 32 36 70 78 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 32 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 6d 2d 74 2d 2d 32 36 70 78 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 Data Ascii: ortant}.f-m-t--27px{margin-top:-27px !important}.f-m--26px{margin:-26px !important}.f-m-l--26px{margin-left:-26px !important}.f-m-r--26px{margin-right:-26px !important}.f-m-b--26px{margin-bottom:-26px !important}.f-m-t--26px{margin-top:-26px !important}.f
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 66 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 66 2d 73 6d 7b 6d 61 78 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 68 65 69 67 68 74 3a 32 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 66 2d 62 75 74 74 6f 6e 2e 66 2d 73 6d 20 69 2c 2e 66 2d 62 75 74 74 6f 6e 2d 69 6e 76 65 72 73 65 2e 66 2d 73 6d 20 69 2c 2e 66 2d 62 75 74 74 6f 6e 2d 62 72 61 6e 64 2e 66 2d 73 6d 20 69 2c 2e 66 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 66 2d 73 6d 20 69 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 66 2d 62 75 74 74 6f 6e 2e 66 2d 73 6d 20 69 3a 62 65 66 6f 72 65 2c 2e 66 2d 62 75 74 74 6f 6e 2d 69 6e 76 65 72 73 65 2e 66 2d 73 6d 20 69 3a 62 65 66 6f 72 65 2c 2e 66 2d 62 75 74 74 6f 6e 2d 62 72 61 6e 64 2e 66 2d 73 6d 20 69 3a 62 65 66 6f 72 65 Data Ascii: f-button-primary.f-sm{max-height:22px;height:22px;font-size:12px}.f-button.f-sm i,.f-button-inverse.f-sm i,.f-button-brand.f-sm i,.f-button-primary.f-sm i{font-size:14px}.f-button.f-sm i:before,.f-button-inverse.f-sm i:before,.f-button-brand.f-sm i:before
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 41 79 4d 54 49 75 4d 6a 59 73 4e 44 59 75 4e 7a 6b 34 49 45 4d 79 4d 54 49 75 4d 6a 6b 31 4c 44 51 32 4c 6a 59 78 4e 53 41 79 4d 54 49 75 4d 7a 63 35 4c 44 51 32 4c 6a 51 35 4e 43 41 79 4d 54 49 75 4e 54 51 30 4c 44 51 32 4c 6a 51 7a 4e 53 42 44 4d 6a 45 79 4c 6a 63 34 4d 53 77 30 4e 69 34 79 4f 44 59 67 4d 6a 45 79 4c 6a 6b 30 4f 43 77 30 4e 69 34 78 4f 54 55 67 4d 6a 45 7a 4c 6a 4d 34 4e 79 77 30 4e 53 34 35 4e 54 63 67 54 44 49 78 4d 69 34 7a 4d 44 45 73 4e 44 45 75 4f 44 4d 34 49 45 77 79 4d 44 45 75 4f 54 4d 33 4c 44 51 78 4c 6a 67 7a 4f 43 42 4d 4d 54 6b 35 4c 6a 49 32 4f 53 77 30 4e 53 34 35 4e 54 63 67 54 44 45 35 4f 53 34 31 4e 44 49 73 4e 44 59 75 4d 54 41 30 49 45 77 78 4f 54 6b 75 4f 54 45 79 4c 44 51 32 4c 6a 4d 30 4e 43 42 4d 4d 54 6b 35 4c Data Ascii: AyMTIuMjYsNDYuNzk4IEMyMTIuMjk1LDQ2LjYxNSAyMTIuMzc5LDQ2LjQ5NCAyMTIuNTQ0LDQ2LjQzNSBDMjEyLjc4MSw0Ni4yODYgMjEyLjk0OCw0Ni4xOTUgMjEzLjM4Nyw0NS45NTcgTDIxMi4zMDEsNDEuODM4IEwyMDEuOTM3LDQxLjgzOCBMMTk5LjI2OSw0NS45NTcgTDE5OS41NDIsNDYuMTA0IEwxOTkuOTEyLDQ2LjM0NCBMMTk5L
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 34 77 4d 44 51 67 4d 7a 67 31 4c 6a 6b 7a 4d 53 77 30 4e 79 34 77 4d 44 51 67 4d 7a 67 31 4c 6a 67 32 4f 43 77 30 4e 79 34 77 4d 44 51 67 51 7a 4d 34 4e 53 34 32 4d 79 77 30 4e 79 34 77 4d 44 51 67 4d 7a 67 31 4c 6a 51 35 4d 79 77 30 4e 69 34 35 4d 54 55 67 4d 7a 67 31 4c 6a 55 79 4d 79 77 30 4e 69 34 33 4e 6a 59 67 51 7a 4d 34 4e 53 34 31 4e 7a 59 73 4e 44 59 75 4e 44 6b 79 49 44 4d 34 4e 53 34 34 4e 54 49 73 4e 44 59 75 4d 7a 45 31 49 44 4d 34 4e 69 34 32 4d 7a 6b 73 4e 44 55 75 4f 54 67 30 49 45 4d 7a 4f 44 59 75 4e 7a 45 73 4e 44 55 75 4f 54 49 67 4d 7a 67 32 4c 6a 63 7a 4e 69 77 30 4e 53 34 35 4e 54 59 67 4d 7a 67 32 4c 6a 67 7a 4f 53 77 30 4e 53 34 34 4f 54 4d 67 54 44 4d 35 4d 43 34 7a 4e 69 77 79 4e 79 34 35 4e 6a 45 67 57 69 49 67 61 57 51 39 49 Data Ascii: 4wMDQgMzg1LjkzMSw0Ny4wMDQgMzg1Ljg2OCw0Ny4wMDQgQzM4NS42Myw0Ny4wMDQgMzg1LjQ5Myw0Ni45MTUgMzg1LjUyMyw0Ni43NjYgQzM4NS41NzYsNDYuNDkyIDM4NS44NTIsNDYuMzE1IDM4Ni42MzksNDUuOTg0IEMzODYuNzEsNDUuOTIgMzg2LjczNiw0NS45NTYgMzg2LjgzOSw0NS44OTMgTDM5MC4zNiwyNy45NjEgWiIgaWQ9I
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 4d 79 4e 79 34 7a 4e 7a 4d 73 4d 6a 41 75 4e 54 55 33 49 44 49 32 4c 6a 67 78 4d 69 77 79 4d 43 34 31 4e 54 63 67 4d 6a 59 75 4d 7a 41 78 4c 44 49 77 4c 6a 55 34 4e 43 42 44 4d 6a 59 75 4d 44 4d 33 4c 44 49 77 4c 6a 55 34 4e 43 41 79 4e 53 34 34 4e 6a 45 73 4d 6a 41 75 4e 54 67 30 49 44 49 31 4c 6a 63 33 4d 69 77 79 4d 43 34 31 4f 44 51 67 51 7a 49 31 4c 6a 4d 34 4f 43 77 79 4d 43 34 31 4f 44 51 67 4d 6a 55 75 4d 54 6b 32 4c 44 49 77 4c 6a 51 35 4e 69 41 79 4e 53 34 79 4d 7a 45 73 4d 6a 41 75 4d 7a 45 34 49 45 4d 79 4e 53 34 79 4e 7a 4d 73 4d 6a 41 75 4d 54 45 67 4d 6a 55 75 4d 7a 49 78 4c 44 49 77 4c 6a 41 79 4d 69 41 79 4e 53 34 33 4e 44 51 73 4d 54 6b 75 4e 6a 59 33 49 45 77 78 4e 79 34 77 4e 7a 63 73 4e 43 34 78 4e 7a 67 67 54 44 45 30 4c 6a 41 32 4d Data Ascii: MyNy4zNzMsMjAuNTU3IDI2LjgxMiwyMC41NTcgMjYuMzAxLDIwLjU4NCBDMjYuMDM3LDIwLjU4NCAyNS44NjEsMjAuNTg0IDI1Ljc3MiwyMC41ODQgQzI1LjM4OCwyMC41ODQgMjUuMTk2LDIwLjQ5NiAyNS4yMzEsMjAuMzE4IEMyNS4yNzMsMjAuMTEgMjUuMzIxLDIwLjAyMiAyNS43NDQsMTkuNjY3IEwxNy4wNzcsNC4xNzggTDE0LjA2M
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 4c 54 4d 75 4d 7a 55 73 4d 54 6b 75 4d 54 6b 74 4d 79 34 34 4e 79 34 7a 4c 54 45 75 4f 44 63 75 4d 6a 6b 74 4d 69 34 33 4e 79 30 75 4d 6a 55 74 4d 79 34 32 4e 79 30 75 4f 44 45 74 4d 53 34 30 4f 43 30 79 4c 6a 59 30 4c 54 49 75 4d 7a 49 74 4e 53 34 78 4e 53 30 79 4c 6a 4d 79 4c 54 49 75 4d 54 6b 73 4d 43 30 7a 4c 6a 49 78 4c 6a 49 32 4c 54 67 75 4e 44 59 73 4d 69 34 77 4e 69 30 75 4d 7a 45 73 4d 53 34 32 4d 53 30 75 4e 6a 6b 73 4d 69 34 78 4f 53 30 78 4c 6a 4d 7a 4c 44 49 75 4d 54 6b 74 4c 6a 4d 79 4c 44 41 74 4c 6a 51 34 4c 53 34 78 4f 53 30 75 4e 54 55 74 4c 6a 67 30 51 54 4d 33 4c 6a 63 33 4c 44 4d 33 4c 6a 63 33 4c 44 41 73 4d 43 77 77 4c 44 49 34 4d 69 77 32 4f 53 34 7a 4f 57 45 79 4c 44 49 73 4d 43 77 77 4c 44 45 74 4c 6a 45 32 4c 53 34 34 4e 47 4d Data Ascii: LTMuMzUsMTkuMTktMy44Ny4zLTEuODcuMjktMi43Ny0uMjUtMy42Ny0uODEtMS40OC0yLjY0LTIuMzItNS4xNS0yLjMyLTIuMTksMC0zLjIxLjI2LTguNDYsMi4wNi0uMzEsMS42MS0uNjksMi4xOS0xLjMzLDIuMTktLjMyLDAtLjQ4LS4xOS0uNTUtLjg0QTM3Ljc3LDM3Ljc3LDAsMCwwLDI4Miw2OS4zOWEyLDIsMCwwLDEtLjE2LS44NGM
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 61 63 69 74 79 2d 38 7b 6f 70 61 63 69 74 79 3a 30 2e 38 7d 2e 66 2d 6f 70 61 63 69 74 79 2d 39 7b 6f 70 61 63 69 74 79 3a 30 2e 39 7d 2e 66 2d 62 6f 78 2d 73 68 61 64 6f 77 2d 31 2c 2e 66 2d 63 6c 69 63 6b 61 62 6c 65 2d 7a 6f 6f 6d 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 35 2c 36 2c 32 39 2c 30 2e 31 32 29 2c 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 35 2c 36 2c 32 39 2c 30 2e 32 34 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 2d 62 6f 78 2d 73 68 61 64 6f 77 2d 32 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 36 70 78 20 72 67 62 61 28 35 2c 36 2c 32 39 2c 30 2e 31 36 29 2c 30 20 33 70 78 20 36 70 78 20 72 67 62 61 28 35 2c 36 2c 32 39 2c 30 2e 32 33 29 20 21 69 6d 70 6f 72 74 61 6e Data Ascii: acity-8{opacity:0.8}.f-opacity-9{opacity:0.9}.f-box-shadow-1,.f-clickable-zoom:hover{box-shadow:0 1px 3px rgba(5,6,29,0.12),0 1px 2px rgba(5,6,29,0.24) !important}.f-box-shadow-2{box-shadow:0 3px 6px rgba(5,6,29,0.16),0 3px 6px rgba(5,6,29,0.23) !importan
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 6f 7a 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d Data Ascii: bkit-box;display:-webkit-flex;display:-moz-flex;display:-ms-flexbox;display:flex;-webkit-box-direction:normal;-webkit-box-orient:vertical;-webkit-flex-direction:column;-moz-flex-direction:column;-ms-flex-direction:column;flex-direction:column;-webkit-box-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:28 UTC	1138	OUT	GET /ScriptResource.axd?d=Uf8BQcxRshYGUr_fjsqPCBSdjzXOm_t5et9A1wGjARLGg2L5Ezgga_iZnwtZ8RB6l6Q1M8i7GmOf-IlJG5cMmNfEEPOhyQY7YWTF770_Yo6T82I7fR9JwEfzW2mekqS_OLcTtrBVyYpFm6pC69AFXN_RS7_tPK1Rhv2mGyj6T3XiJSqAuOgFuDXVDD7x_G0j0&t=7ed91ff1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
2025-01-10 16:21:28 UTC	648	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript; charset=utf-8 Expires: Mon, 05 Jan 2026 07:35:09 GMT Last-Modified: Sun, 05 Jan 2025 12:35:08 GMT ETag: "1736080509:dtagent10303241106123517POHb" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:15 GMT Connection: close Content-Length: 255004
2025-01-10 16:21:28 UTC	15633	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-ex
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 3f 5c 28 5c 73 2a 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 5c 25 5c 73 2a 2c 5c 73 2a 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 5c 25 5c 73 2a 2c 5c 73 2a 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 5c 25 5c 73 2a 28 3f 3a 2c 5c 73 2a 28 5c 64 3f 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 5c 73 2a 29 3f 5c 29 2f 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 32 2e 35 35 2a 74 5b 31 5d 2c 32 2e 35 35 2a 74 5b 32 5d 2c 32 2e 35 35 2a 74 5b 33 5d 2c 74 5b 34 5d 5d 7d 7d 2c 7b 72 65 3a 2f 23 28 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 28 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 28 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 28 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 3f 2f 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 70 Data Ascii: ?$\s(\d+(?:\.\d+)?)\%\s,\s(\d+(?:\.\d+)?)\%\s,\s(\d+(?:\.\d+)?)\%\s(?:,\s(\d?(?:\.\d+)?)\s)?$/,parse:function(t){return[2.55t[1],2.55t[2],2.55*t[3],t[4]]}},{re:/#([a-f0-9]{2})([a-f0-9]{2})([a-f0-9]{2})([a-f0-9]{2})?/,parse:function(t){return[p
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 63 68 28 59 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 56 2e 65 61 73 69 6e 67 5b 22 65 61 73 65 49 6e 22 2b 74 5d 3d 65 2c 56 2e 65 61 73 69 6e 67 5b 22 65 61 73 65 4f 75 74 22 2b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 31 2d 65 28 31 2d 74 29 7d 2c 56 2e 65 61 73 69 6e 67 5b 22 65 61 73 65 49 6e 4f 75 74 22 2b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 2e 35 3f 65 28 32 2a 74 29 2f 32 3a 31 2d 65 28 2d 32 2a 74 2b 32 29 2f 32 7d 7d 29 3b 79 3d 56 2e 65 66 66 65 63 74 73 2c 56 2e 65 66 66 65 63 74 73 2e 64 65 66 69 6e 65 28 22 62 6c 69 6e 64 22 2c 22 68 69 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 7b 75 70 3a 5b 22 62 6f 74 74 6f 6d 22 2c 22 74 6f 70 22 5d 2c 76 65 72 Data Ascii: ch(Y,function(t,e){V.easing["easeIn"+t]=e,V.easing["easeOut"+t]=function(t){return 1-e(1-t)},V.easing["easeInOut"+t]=function(t){return t<.5?e(2t)/2:1-e(-2t+2)/2}});y=V.effects,V.effects.define("blind","hide",function(t,e){var i={up:["bottom","top"],ver
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 69 62 6c 69 6e 67 73 28 22 3a 76 69 73 69 62 6c 65 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 56 28 74 68 69 73 29 2c 65 3d 74 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 3b 22 61 62 73 6f 6c 75 74 65 22 21 3d 3d 65 26 26 22 66 69 78 65 64 22 21 3d 3d 65 26 26 28 69 2d 3d 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 29 7d 29 2c 74 68 69 73 2e 68 65 61 64 65 72 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2d 3d 56 28 74 68 69 73 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 7d 29 2c 74 68 69 73 2e 68 65 61 64 65 72 73 2e 6e 65 78 74 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 74 68 69 73 29 2e 68 65 69 67 68 74 28 4d 61 74 68 2e 6d 61 78 28 Data Ascii: his.element.siblings(":visible").each(function(){var t=V(this),e=t.css("position");"absolute"!==e&&"fixed"!==e&&(i-=t.outerHeight(!0))}),this.headers.each(function(){i-=V(this).outerHeight(!0)}),this.headers.next().each(function(){V(this).height(Math.max(
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 2e 70 72 65 76 69 6f 75 73 3d 73 2c 74 68 69 73 2e 5f 64 65 6c 61 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 76 69 6f 75 73 3d 73 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 3d 69 7d 29 29 2c 21 31 21 3d 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 73 65 6c 65 63 74 22 2c 74 2c 7b 69 74 65 6d 3a 69 7d 29 26 26 74 68 69 73 2e 5f 76 61 6c 75 65 28 69 2e 76 61 6c 75 65 29 2c 74 68 69 73 2e 74 65 72 6d 3d 74 68 69 73 2e 5f 76 61 6c 75 65 28 29 2c 74 68 69 73 2e 63 6c 6f 73 65 28 74 29 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 3d 69 7d 7d 29 2c 74 68 69 73 2e 6c 69 76 65 52 65 67 69 6f 6e 3d 56 28 22 3c 64 69 76 3e 22 2c 7b 72 6f 6c 65 3a 22 73 74 61 74 75 73 22 2c 22 61 72 69 61 2d 6c 69 76 65 22 3a 22 61 73 73 65 Data Ascii: .previous=s,this._delay(function(){this.previous=s,this.selectedItem=i})),!1!==this._trigger("select",t,{item:i})&&this._value(i.value),this.term=this._value(),this.close(t),this.selectedItem=i}}),this.liveRegion=V("<div>",{role:"status","aria-live":"asse
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 73 2e 69 63 6f 6e 50 6f 73 69 74 69 6f 6e 29 2c 74 68 69 73 2e 5f 61 74 74 61 63 68 49 63 6f 6e 53 70 61 63 65 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 50 6f 73 69 74 69 6f 6e 29 29 29 29 2c 74 68 69 73 2e 5f 73 75 70 65 72 28 74 2c 65 29 2c 22 64 69 73 61 62 6c 65 64 22 3d 3d 3d 74 26 26 28 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 2c 65 29 2c 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 64 69 73 61 62 6c 65 64 3d 65 29 26 26 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 22 62 6c 75 72 22 29 29 7d 2c 72 65 66 72 65 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 73 28 22 69 6e 70 75 Data Ascii: s.iconPosition),this._attachIconSpace(this.options.iconPosition)))),this._super(t,e),"disabled"===t&&(this._toggleClass(null,"ui-state-disabled",e),(this.element[0].disabled=e)&&this.element.trigger("blur"))},refresh:function(){var t=this.element.is("inpu
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 29 2c 73 3d 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 63 68 65 63 6b 4f 66 66 73 65 74 28 6e 2c 73 2c 65 29 2c 6e 2e 64 70 44 69 76 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 69 6e 44 69 61 6c 6f 67 26 26 56 2e 62 6c 6f 63 6b 55 49 3f 22 73 74 61 74 69 63 22 3a 65 3f 22 66 69 78 65 64 22 3a 22 61 62 73 6f 6c 75 74 65 22 2c 64 69 73 70 6c 61 79 3a 22 6e 6f 6e 65 22 2c 6c 65 66 74 3a 73 2e 6c 65 66 74 2b 22 70 78 22 2c 74 6f 70 3a 73 2e 74 6f 70 2b 22 70 78 22 7d 29 2c 6e 2e 69 6e 6c 69 6e 65 7c 7c 28 69 3d 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 6e 2c 22 73 68 6f 77 41 6e 69 6d 22 29 2c 73 3d 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 6e 2c 22 64 75 72 61 74 69 6f 6e 22 29 2c 6e 2e 64 70 Data Ascii: ),s=V.datepicker._checkOffset(n,s,e),n.dpDiv.css({position:V.datepicker._inDialog&&V.blockUI?"static":e?"fixed":"absolute",display:"none",left:s.left+"px",top:s.top+"px"}),n.inline\|\|(i=V.datepicker._get(n,"showAnim"),s=V.datepicker._get(n,"duration"),n.dp
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 2b 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 77 65 65 6b 48 65 61 64 65 72 22 29 2b 22 3c 2f 74 68 3e 22 3a 22 22 2c 67 3d 30 3b 67 3c 37 3b 67 2b 2b 29 78 2b 3d 22 3c 74 68 20 73 63 6f 70 65 3d 27 63 6f 6c 27 22 2b 28 35 3c 3d 28 67 2b 6e 2b 36 29 25 37 3f 22 20 63 6c 61 73 73 3d 27 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 77 65 65 6b 2d 65 6e 64 27 22 3a 22 22 29 2b 22 3e 3c 73 70 61 6e 20 74 69 74 6c 65 3d 27 22 2b 61 5b 6b 3d 28 67 2b 6e 29 25 37 5d 2b 22 27 3e 22 2b 72 5b 6b 5d 2b 22 3c 2f 73 70 61 6e 3e 3c 2f 74 68 3e 22 3b 66 6f 72 28 77 2b 3d 78 2b 22 3c 2f 74 72 3e 3c 2f 74 68 65 61 64 3e 3c 74 62 6f 64 79 3e 22 2c 44 3d 74 68 69 73 2e 5f 67 65 74 44 61 79 73 49 6e 4d 6f 6e 74 68 28 55 2c 4b 29 2c 55 3d 3d 3d 74 2e 73 65 6c 65 63 74 65 64 59 65 61 Data Ascii: +this._get(t,"weekHeader")+"</th>":"",g=0;g<7;g++)x+="<th scope='col'"+(5<=(g+n+6)%7?" class='ui-datepicker-week-end'":"")+"><span title='"+a[k=(g+n)%7]+"'>"+r[k]+"</span></th>";for(w+=x+"</tr></thead><tbody>",D=this._getDaysInMonth(U,K),U===t.selectedYea
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 64 65 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 29 3b 72 65 74 75 72 6e 7b 74 6f 70 3a 74 2e 74 6f 70 2d 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 68 65 6c 70 65 72 2e 63 73 73 28 22 74 6f 70 22 29 2c 31 30 29 7c 7c 30 29 2b 28 65 3f 30 3a 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 29 2c 6c 65 66 74 3a 74 2e 6c 65 66 74 2d 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 68 65 6c 70 65 72 2e 63 73 73 28 22 6c 65 66 74 22 29 2c 31 30 29 7c 7c 30 29 2b 28 65 3f 30 3a 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 29 7d 7d 2c 5f 63 61 63 68 65 4d 61 72 67 69 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6d 61 72 67 69 6e 73 3d 7b 6c 65 66 74 Data Ascii: de(this.scrollParent[0]);return{top:t.top-(parseInt(this.helper.css("top"),10)\|\|0)+(e?0:this.scrollParent.scrollTop()),left:t.left-(parseInt(this.helper.css("left"),10)\|\|0)+(e?0:this.scrollParent.scrollLeft())}},_cacheMargins:function(){this.margins={left
2025-01-10 16:21:28 UTC	16384	IN	Data Raw: 65 73 69 7a 61 62 6c 65 2d 61 75 74 6f 68 69 64 65 22 29 29 7d 2c 5f 72 65 6d 6f 76 65 48 61 6e 64 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 61 64 64 65 64 48 61 6e 64 6c 65 73 2e 72 65 6d 6f 76 65 28 29 7d 2c 5f 6d 6f 75 73 65 43 61 70 74 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 73 3d 21 31 3b 66 6f 72 28 65 20 69 6e 20 74 68 69 73 2e 68 61 6e 64 6c 65 73 29 28 69 3d 56 28 74 68 69 73 2e 68 61 6e 64 6c 65 73 5b 65 5d 29 5b 30 5d 29 21 3d 3d 74 2e 74 61 72 67 65 74 26 26 21 56 2e 63 6f 6e 74 61 69 6e 73 28 69 2c 74 2e 74 61 72 67 65 74 29 7c 7c 28 73 3d 21 30 29 3b 72 65 74 75 72 6e 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 73 7d 2c 5f 6d 6f 75 73 65 53 74 61 72 74 3a 66 75 Data Ascii: esizable-autohide"))},_removeHandles:function(){this._addedHandles.remove()},_mouseCapture:function(t){var e,i,s=!1;for(e in this.handles)(i=V(this.handles[e])[0])!==t.target&&!V.contains(i,t.target)\|\|(s=!0);return!this.options.disabled&&s},_mouseStart:fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:28 UTC	1188	OUT	GET /WebResource.axd?d=HtQyXelCu6mzSPcVcvK_BigCsvhj3k9AyASkTLjzpE6ZzTM8CyelTzobRwbtiayklPS3tRPWiC2Mfac5xrEjhEkbRYdW8mst-e31IIzbJxiFQCEg4TekxOM93tmByJ7y_Rw0R7xpeLjRkl3Xg4lIGeW0fLIRRijq3NA77zscXCl-lF_3Z_vEfc6gdWAsAUV7mwkYARkkqqmWE_yj2UzHtJHrfYoIYOPAjdO9iVqiUSI1&t=638343388180000000 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
2025-01-10 16:21:28 UTC	631	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Mon, 05 Jan 2026 07:35:09 GMT Last-Modified: Tue, 31 Oct 2023 16:46:57 GMT ETag: "1698770818:dtagent10303241106123517POHb" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:15 GMT Connection: close Content-Length: 6955
2025-01-10 16:21:28 UTC	6955	IN	Data Raw: ef bb bf 49 6e 73 69 67 68 74 49 6e 69 74 53 63 72 69 70 74 20 3d 20 7b 20 5f 73 65 74 74 69 6e 67 73 3a 20 6e 75 6c 6c 2c 20 5f 63 6c 69 65 6e 74 3a 20 6e 75 6c 6c 2c 20 5f 63 72 65 61 74 65 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 20 49 6e 73 69 67 68 74 49 6e 69 74 53 63 72 69 70 74 2e 5f 63 6c 69 65 6e 74 20 3d 20 6e 65 77 20 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 43 6c 69 65 6e 74 28 7b 20 61 70 69 4b 65 79 3a 20 49 6e 73 69 67 68 74 49 6e 69 74 53 63 72 69 70 74 2e 5f 73 65 74 74 69 6e 67 73 2e 61 70 69 4b 65 79 2c 20 73 6f 75 72 63 65 3a 20 49 6e 73 69 67 68 74 49 6e 69 74 53 63 72 69 70 74 2e 5f 73 65 74 74 69 6e 67 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 4e 61 6d 65 2c 20 61 70 69 53 65 72 76 65 72 55 72 6c 3a 20 49 6e 73 Data Ascii: InsightInitScript = { _settings: null, _client: null, _createClient: function (t) { InsightInitScript._client = new sfDataIntell.Client({ apiKey: InsightInitScript._settings.apiKey, source: InsightInitScript._settings.applicationName, apiServerUrl: Ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:28 UTC	1047	OUT	GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.min.js?package=IFBIRedesign&v=MTUuMC44MjAwLjA%3d HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_rcs-3Acss_0; TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125
2025-01-10 16:21:28 UTC	600	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=0 Content-Type: application/javascript Expires: Sun, 12 Jan 2025 07:35:09 GMT Last-Modified: Tue, 31 Oct 2023 16:47:00 GMT Vary: * X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:15 GMT Connection: close Content-Length: 2953
2025-01-10 16:21:28 UTC	2953	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 6c 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 73 65 61 72 63 68 54 65 78 74 42 6f 78 49 64 22 5d 27 29 2c 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 73 3d 6c 28 65 5b 74 5d 29 3b 6e 28 7b 72 65 73 75 6c 74 73 55 72 6c 3a 73 2e 73 69 62 6c 69 6e 67 73 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 72 65 73 75 6c 74 73 55 72 6c 22 5d 27 29 2e 66 69 72 73 74 28 29 2e 76 61 6c 28 29 2c 69 6e 64 65 78 43 61 74 61 6c 6f 67 75 65 3a 73 2e 73 69 62 6c 69 6e 67 73 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 69 6e 64 65 78 43 61 74 61 6c 6f 67 75 65 22 5d 27 29 2e 66 69 72 73 74 28 29 2e 76 61 6c 28 29 2c 64 69 Data Ascii: !function(l){function e(){for(var e=l('[data-sf-role="searchTextBoxId"]'),t=0;t<e.length;t++){var s=l(e[t]);n({resultsUrl:s.siblings('[data-sf-role="resultsUrl"]').first().val(),indexCatalogue:s.siblings('[data-sf-role="indexCatalogue"]').first().val(),di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:29 UTC	1186	OUT	GET /images/header/menu-icons/car-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d115748142dd78b5496898ba993847929317a59b3cdf3e6552f68f969fca81332514f8c05929eb1619192fcb70cddf65b327a8b4ebe11089807ca3d5b61ec0781b2a5799
2025-01-10 16:21:29 UTC	662	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:29 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=car-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:16 GMT Connection: close Content-Length: 2270
2025-01-10 16:21:29 UTC	2270	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 33 2e 38 30 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 38 36 37 20 31 33 2e 38 30 31 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="16.867" height="13.801" viewBox="0 0 16.867 13.801"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49757	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:29 UTC	1183	OUT	GET /WebResource.axd?d=HtQyXelCu6mzSPcVcvK_BigCsvhj3k9AyASkTLjzpE6ZzTM8CyelTzobRwbtiayklPS3tRPWiC2Mfac5xrEjhEkbRYdW8mst-e31IIzbJxiFQCEg4TekxOM93tmByJ7y_Rw0R7xpeLjRkl3Xg4lIGeW0fLIRRijq3NA77zscXCl-lF_3Z_vEfc6gdWAsAUV7mwkYARkkqqmWE_yj2UzHtJHrfYoIYOPAjdO9iVqiUSI1&t=638343388180000000 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d115748142dd78b5496898ba993847929317a59b3cdf3e6552f68f969fca81332514f8c05929eb1619192fcb70cddf65b327a8b4ebe11089807ca3d5b61ec0781b2a5799
2025-01-10 16:21:29 UTC	631	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Mon, 05 Jan 2026 07:35:09 GMT Last-Modified: Tue, 31 Oct 2023 16:46:57 GMT ETag: "1698770818:dtagent10303241106123517POHb" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:16 GMT Connection: close Content-Length: 6955
2025-01-10 16:21:29 UTC	6955	IN	Data Raw: ef bb bf 49 6e 73 69 67 68 74 49 6e 69 74 53 63 72 69 70 74 20 3d 20 7b 20 5f 73 65 74 74 69 6e 67 73 3a 20 6e 75 6c 6c 2c 20 5f 63 6c 69 65 6e 74 3a 20 6e 75 6c 6c 2c 20 5f 63 72 65 61 74 65 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 20 49 6e 73 69 67 68 74 49 6e 69 74 53 63 72 69 70 74 2e 5f 63 6c 69 65 6e 74 20 3d 20 6e 65 77 20 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 43 6c 69 65 6e 74 28 7b 20 61 70 69 4b 65 79 3a 20 49 6e 73 69 67 68 74 49 6e 69 74 53 63 72 69 70 74 2e 5f 73 65 74 74 69 6e 67 73 2e 61 70 69 4b 65 79 2c 20 73 6f 75 72 63 65 3a 20 49 6e 73 69 67 68 74 49 6e 69 74 53 63 72 69 70 74 2e 5f 73 65 74 74 69 6e 67 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 4e 61 6d 65 2c 20 61 70 69 53 65 72 76 65 72 55 72 6c 3a 20 49 6e 73 Data Ascii: InsightInitScript = { _settings: null, _client: null, _createClient: function (t) { InsightInitScript._client = new sfDataIntell.Client({ apiKey: InsightInitScript._settings.apiKey, source: InsightInitScript._settings.applicationName, apiServerUrl: Ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	104.16.40.28	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:29 UTC	558	OUT	GET /t/1.css?apiType=css&projectid=1b1b60c1-c56a-45c6-a9b5-03ac3c306ea3 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:29 UTC	872	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:29 GMT Content-Type: text/css; charset=utf-8 Content-Length: 0 Connection: close x-amz-id-2: zi/mWoAenR9Wrr2vGya49Nr0QvIIOXvNZ5oNlYF+qglI6PR9ThbvFnL9KOW5nOdkFdAjKbfviWtLQW4qeXsOOXfilx6/bElR x-amz-request-id: MK78YS1KHTBQ2SPP Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=1 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 14068287 Expires: Fri, 10 Jan 2025 16:21:30 GMT Accept-Ranges: bytes Set-Cookie: __cf_bm=ccKEXV9yiNAlfz2FgncaBMcr5LS8i_G1IzM3FGyuVqM-1736526089-1.0.1.1-9FCv7I6MB9ZM3wryGh.BBUbTG.78rSEagp3OvjxTnZazV_.v_rbmxVyIkKMlfp.aC1O7nB_GByrbaGU5aOuQiQ; path=/; expires=Fri, 10-Jan-25 16:51:29 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8ffe001ced1c7c84-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49760	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:29 UTC	1203	OUT	GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Search/Mvc/Scripts/SearchBox/Search-box.min.js?package=IFBIRedesign&v=MTUuMC44MjAwLjA%3d HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:29 UTC	600	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=0 Content-Type: application/javascript Expires: Sun, 12 Jan 2025 07:35:09 GMT Last-Modified: Tue, 31 Oct 2023 16:47:00 GMT Vary: * X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:16 GMT Connection: close Content-Length: 2953
2025-01-10 16:21:29 UTC	2953	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 6c 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 73 65 61 72 63 68 54 65 78 74 42 6f 78 49 64 22 5d 27 29 2c 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 73 3d 6c 28 65 5b 74 5d 29 3b 6e 28 7b 72 65 73 75 6c 74 73 55 72 6c 3a 73 2e 73 69 62 6c 69 6e 67 73 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 72 65 73 75 6c 74 73 55 72 6c 22 5d 27 29 2e 66 69 72 73 74 28 29 2e 76 61 6c 28 29 2c 69 6e 64 65 78 43 61 74 61 6c 6f 67 75 65 3a 73 2e 73 69 62 6c 69 6e 67 73 28 27 5b 64 61 74 61 2d 73 66 2d 72 6f 6c 65 3d 22 69 6e 64 65 78 43 61 74 61 6c 6f 67 75 65 22 5d 27 29 2e 66 69 72 73 74 28 29 2e 76 61 6c 28 29 2c 64 69 Data Ascii: !function(l){function e(){for(var e=l('[data-sf-role="searchTextBoxId"]'),t=0;t<e.length;t++){var s=l(e[t]);n({resultsUrl:s.siblings('[data-sf-role="resultsUrl"]').first().val(),indexCatalogue:s.siblings('[data-sf-role="indexCatalogue"]').first().val(),di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49761	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:29 UTC	1343	OUT	GET /images/header/menu-icons/home.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:29 UTC	658	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:29 GMT Last-Modified: Fri, 18 Oct 2019 03:07:11 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=home.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:16 GMT Connection: close Content-Length: 1287
2025-01-10 16:21:29 UTC	1287	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 37 2e 31 32 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 37 2e 31 32 33 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="17.123" viewBox="0 0 17.867 17.123"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49759	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:29 UTC	1112	OUT	GET /ruxitagentjs_ICANVfqru_10303241106123517.js HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:29 UTC	557	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000, immutable Content-Type: text/javascript; charset=utf-8 Expires: Sat, 10 Jan 2026 16:21:17 GMT Last-Modified: Wed, 03 Mar 2010 07:01:40 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Date: Fri, 10 Jan 2025 16:21:16 GMT Connection: close Content-Length: 197863
2025-01-10 16:21:29 UTC	15799	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 54 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 63 6c 75 64 65 73 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ */(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ta=document.cookie.includes("__dTCookie");document.co
2025-01-10 16:21:29 UTC	16384	IN	Data Raw: 68 28 43 29 7b 72 65 74 75 72 6e 20 67 28 71 5b 30 5d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 29 7b 72 65 74 75 72 6e 20 79 65 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 29 7b 74 3d 6b 62 3b 57 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 28 41 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 74 28 29 2b 54 61 28 29 29 7d 29 3b 69 66 28 21 41 63 7c 7c 69 73 4e 61 4e 28 41 63 28 29 29 7c 7c 30 3e 3d 41 63 28 29 7c 7c 21 69 73 46 69 6e 69 74 65 28 41 63 28 29 29 29 41 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 61 28 29 7b 46 65 26 26 0a 28 57 61 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 3d 71 65 2c 57 61 Data Ascii: h(C){return g(q[0])}}}function Ba(){return ye}function ya(){t=kb;Wa.performance&&(Ac=function(){return Math.round(t()+Ta())});if(!Ac\|\|isNaN(Ac())\|\|0>=Ac()\|\|!isFinite(Ac()))Ac=function(){return(new Date).getTime()}}function Fa(){Fe&&(Wa.clearTimeout=qe,Wa
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 61 6c 53 74 6f 72 61 67 65 7d 63 61 74 63 68 28 4b 68 29 7b 7d 79 65 3d 5b 5d 3b 79 61 28 29 3b 4c 66 3d 41 63 28 29 3b 65 65 3d 5b 5d 3b 70 65 3d 7b 7d 3b 46 65 7c 7c 28 57 61 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 3d 75 61 28 71 65 29 2c 57 61 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 3d 75 61 28 62 67 29 2c 46 65 3d 21 30 29 3b 76 61 72 20 77 66 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 68 67 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 65 3d 30 21 3d 3d 0a 77 66 26 26 30 21 3d 3d 68 67 26 26 77 66 21 3d 3d 68 67 3b 69 66 28 74 64 28 29 29 7b 76 61 72 20 69 67 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 3b 69 66 28 69 67 29 7b 6e 62 3d 30 3b 66 6f 72 28 Data Ascii: alStorage}catch(Kh){}ye=[];ya();Lf=Ac();ee=[];pe={};Fe\|\|(Wa.clearTimeout=ua(qe),Wa.clearInterval=ua(bg),Fe=!0);var wf=Math.random(),hg=Math.random();te=0!==wf&&0!==hg&&wf!==hg;if(td()){var ig=performance.getEntriesByType("navigation")[0];if(ig){nb=0;for(
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 20 62 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 48 63 28 61 29 7b 72 65 74 75 72 6e 20 59 64 2e 61 63 74 69 6f 6e 73 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 29 7b 76 61 72 20 61 3d 24 65 28 29 3b 69 66 28 61 3d 3d 3d 53 28 29 7c 7c 21 5a 61 28 61 29 7c 7c 21 61 2e 67 49 54 41 49 44 29 72 65 74 75 72 6e 20 70 68 3d 46 63 2c 70 68 28 29 3b 61 3d 61 2e 67 49 54 41 49 44 28 29 3b 47 67 3d 61 2b 31 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 46 63 28 29 7b 72 65 74 75 72 6e 20 47 67 2b 2b 7d 66 75 6e 63 74 69 6f 6e 20 4a 63 28 29 7b 72 65 74 75 72 6e 20 70 68 28 29 7d 66 75 6e 63 74 69 6f 6e 20 49 63 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 48 63 28 61 29 29 26 26 61 2e 66 62 3f 61 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 Data Ascii: b}return null}function Hc(a){return Yd.actions[a]}function fe(){var a=$e();if(a===S()\|\|!Za(a)\|\|!a.gITAID)return ph=Fc,ph();a=a.gITAID();Gg=a+1;return a}function Fc(){return Gg++}function Jc(){return ph()}function Ic(a){return(a=Hc(a))&&a.fb?a:null}functi
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 73 68 28 22 65 6e 22 29 3b 22 73 72 52 73 22 3d 3d 3d 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 62 2e 70 75 73 68 28 22 6d 73 6c 22 29 3b 62 2e 70 75 73 68 28 22 65 6e 64 22 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 2c 62 29 7b 7a 28 61 2c 62 29 3b 76 61 72 20 66 3d 6b 61 28 62 29 3b 61 3d 4b 63 28 22 72 65 70 6f 72 74 55 72 6c 22 29 3b 28 66 3d 42 61 28 51 61 28 66 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 62 5b 6b 5d 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6b 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 62 5b 6b 5d 29 7d 29 2e 6a 6f 69 6e 28 22 26 22 29 29 26 26 28 61 2b 3d 22 3f 22 2b 66 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6f 62 Data Ascii: sh("en");"srRs"===a.contentType&&b.push("msl");b.push("end");return b}function La(a,b){z(a,b);var f=ka(b);a=Kc("reportUrl");(f=Ba(Qa(f,function(k){return!!b[k]}),function(k){return"".concat(k,"=").concat(b[k])}).join("&"))&&(a+="?"+f);return a}function ob
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 29 3a 41 69 2e 73 72 63 2e 69 6e 63 6c 75 64 65 73 28 22 5f 63 6f 6d 70 6c 65 74 65 22 29 3f 22 4a 61 76 61 53 63 72 69 70 74 54 61 67 20 22 2e 63 6f 6e 63 61 74 28 4f 66 28 29 2c 22 20 69 6e 6a 65 63 74 65 64 22 29 3a 41 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 3f 22 43 6f 64 65 53 6e 69 70 70 65 74 44 65 66 65 72 72 65 64 20 22 2e 63 6f 6e 63 61 74 28 4f 66 28 29 2c 22 20 69 6e 6a 65 63 74 65 64 22 29 3a 22 43 6f 64 65 53 6e 69 70 70 65 74 53 79 6e 63 20 22 2e 63 6f 6e 63 61 74 28 4f 66 28 29 2c 22 20 69 6e 6a 65 63 74 65 64 22 29 3a 41 69 2e 64 61 74 61 73 65 74 2e 64 74 63 6f 6e 66 69 67 3f 22 49 6e 6c 69 6e 65 43 6f 64 65 20 22 2e 63 6f 6e 63 61 74 28 4f 66 28 29 2c 0a 22 20 69 6e 6a 65 63 74 65 64 22 29 3a 22 43 6f 75 6c Data Ascii: ):Ai.src.includes("_complete")?"JavaScriptTag ".concat(Of()," injected"):Ai.getAttribute("defer")?"CodeSnippetDeferred ".concat(Of()," injected"):"CodeSnippetSync ".concat(Of()," injected"):Ai.dataset.dtconfig?"InlineCode ".concat(Of()," injected"):"Coul
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 3d 6f 63 28 29 2c 66 3d 5b 5d 2c 6b 3d 30 3b 6b 3c 61 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 61 5b 6b 5d 3b 22 63 68 69 6c 64 4c 69 73 74 22 3d 3d 3d 70 2e 74 79 70 65 26 26 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 70 2e 61 64 64 65 64 4e 6f 64 65 73 29 7d 69 66 28 66 2e 6c 65 6e 67 74 68 29 66 6f 72 28 61 3d 7b 74 69 6d 65 3a 62 2c 6e 6f 64 65 73 3a 66 7d 2c 62 3d 30 2c 66 3d 69 6a 3b 62 3c 66 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 6b 3d 66 5b 62 5d 2c 70 3d 48 69 5b 6b 5d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 0a 74 79 70 65 6f 66 20 70 26 26 70 28 6b 2c 61 29 2c 75 67 5b 6b 5d 2e 70 75 73 68 28 61 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 6c 28 61 2c 62 2c 66 2c 6b 2c 70 2c 78 29 7b 76 6f 69 64 20 30 3d 3d 3d 78 26 26 28 78 3d Data Ascii: =oc(),f=[],k=0;k<a.length;k++){var p=a[k];"childList"===p.type&&f.push.apply(f,p.addedNodes)}if(f.length)for(a={time:b,nodes:f},b=0,f=ij;b<f.length;b++)k=f[b],p=Hi[k],"function"===typeof p&&p(k,a),ug[k].push(a)}))}function zl(a,b,f,k,p,x){void 0===x&&(x=
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 64 72 61 74 65 64 3a 64 65 2e 68 79 64 72 61 74 65 64 2c 69 64 3a 64 65 2e 69 64 7d 29 3b 6f 65 3d 21 31 3b 53 28 29 21 3d 3d 6c 69 26 26 28 6f 65 3d 6c 69 2e 69 52 4f 28 5a 6b 2e 42 61 29 29 3b 21 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 5a 6b 2e 42 61 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 5a 6b 2e 42 61 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7c 7c 0a 6f 65 3f 72 68 3d 5a 6b 3a 4c 28 58 6b 29 7d 65 6c 73 65 20 4c 28 22 2d 22 29 7d 7d 7d 74 72 79 7b 50 63 28 31 29 3b 24 61 3d 58 3d 7b 69 64 3a 2b 2b 7a 61 2c 6e 61 6d 65 3a 4d 65 28 51 62 28 29 29 2c 74 69 6d 65 73 74 61 6d 70 3a 62 66 2c 6b 69 6e 64 3a 30 2c 74 72 69 67 67 65 72 3a 47 62 2c 68 79 64 72 61 74 65 64 3a 21 31 7d Data Ascii: drated:de.hydrated,id:de.id});oe=!1;S()!==li&&(oe=li.iRO(Zk.Ba));!document.referrer\|\|Zk.Ba===document.referrer\|\|Zk.Ba===document.location.href\|\|oe?rh=Zk:L(Xk)}else L("-")}}}try{Pc(1);$a=X={id:++za,name:Me(Qb()),timestamp:bf,kind:0,trigger:Gb,hydrated:!1}
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 4f 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 76 6f 69 64 20 30 3d 3d 3d 66 26 26 28 66 3d 21 31 29 3b 28 33 21 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 7c 7c 0a 66 29 26 26 62 26 26 62 2e 6e 61 6d 65 26 26 28 62 2e 64 65 70 74 68 3d 74 68 69 73 2e 64 65 70 74 68 2b 31 2c 74 68 69 73 2e 73 75 62 41 63 74 69 6f 6e 73 2e 70 75 73 68 28 62 29 2c 62 2e 53 63 28 29 26 26 28 74 68 69 73 2e 5a 62 2b 2b 2c 74 68 69 73 2e 79 65 28 31 29 29 2c 62 2e 70 61 72 65 6e 74 3d 74 68 69 73 2c 62 2e 4e 61 7c 7c 74 68 69 73 2e 4d 62 28 29 2c 62 2e 69 62 2b 3d 74 68 69 73 2e 69 62 2c 62 2e 6e 63 3d 74 68 69 73 2e 6e 63 2b 20 2b 62 2e 4e 61 29 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 43 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 33 3d 3d 3d 74 68 69 73 2e Data Ascii: Od=function(b,f){void 0===f&&(f=!1);(3!==this.status\|\|f)&&b&&b.name&&(b.depth=this.depth+1,this.subActions.push(b),b.Sc()&&(this.Zb++,this.ye(1)),b.parent=this,b.Na\|\|this.Mb(),b.ib+=this.ib,b.nc=this.nc+ +b.Na)};a.prototype.Ce=function(){return 3===this.
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 7b 69 66 28 21 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 62 26 26 6e 75 6c 6c 21 3d 3d 62 26 26 22 67 72 6f 75 70 22 69 6e 20 62 26 26 22 6e 61 6d 65 22 69 6e 20 62 26 26 0a 58 62 28 62 2e 6e 61 6d 65 2c 22 73 74 72 69 6e 67 22 29 29 7c 7c 62 2e 67 72 6f 75 70 26 26 21 58 62 28 62 2e 67 72 6f 75 70 2c 22 73 74 72 69 6e 67 22 29 29 72 65 74 75 72 6e 20 62 63 28 29 2c 2d 31 3b 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 79 63 28 29 3b 44 63 28 22 73 70 22 29 3b 72 65 74 75 72 6e 20 57 65 28 62 2c 33 29 7d 3b 72 65 74 75 72 6e 20 61 7d 28 29 2c 4b 6b 3d 5b 5d 2c 4c 6b 2c 68 6a 2c 74 67 3d 21 31 2c 50 6a 3d 21 21 45 62 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 64 69 3d 45 62 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 Data Ascii: {if(!("object"===typeof b&&null!==b&&"group"in b&&"name"in b&&Xb(b.name,"string"))\|\|b.group&&!Xb(b.group,"string"))return bc(),-1;1<arguments.length&&yc();Dc("sp");return We(b,3)};return a}(),Kk=[],Lk,hj,tg=!1,Pj=!!Eb.MutationObserver,di=Eb.MutationObser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:29 UTC	1294	OUT	GET /ScriptResource.axd?d=Uf8BQcxRshYGUr_fjsqPCBSdjzXOm_t5et9A1wGjARLGg2L5Ezgga_iZnwtZ8RB6l6Q1M8i7GmOf-IlJG5cMmNfEEPOhyQY7YWTF770_Yo6T82I7fR9JwEfzW2mekqS_OLcTtrBVyYpFm6pC69AFXN_RS7_tPK1Rhv2mGyj6T3XiJSqAuOgFuDXVDD7x_G0j0&t=7ed91ff1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:29 UTC	674	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript; charset=utf-8 Expires: Mon, 05 Jan 2026 07:35:09 GMT Last-Modified: Sun, 05 Jan 2025 12:35:08 GMT ETag: "1736080509:dtagent10303241106123517POHb" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="0", dtRpid;desc="-996692308" Date: Fri, 10 Jan 2025 16:21:16 GMT Connection: close Content-Length: 255004
2025-01-10 16:21:29 UTC	15607	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-ex
2025-01-10 16:21:29 UTC	16384	IN	Data Raw: 5b 32 5d 2c 74 5b 33 5d 2c 74 5b 34 5d 5d 7d 7d 2c 7b 72 65 3a 2f 72 67 62 61 3f 5c 28 5c 73 2a 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 5c 25 5c 73 2a 2c 5c 73 2a 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 5c 25 5c 73 2a 2c 5c 73 2a 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 5c 25 5c 73 2a 28 3f 3a 2c 5c 73 2a 28 5c 64 3f 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 5c 73 2a 29 3f 5c 29 2f 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 32 2e 35 35 2a 74 5b 31 5d 2c 32 2e 35 35 2a 74 5b 32 5d 2c 32 2e 35 35 2a 74 5b 33 5d 2c 74 5b 34 5d 5d 7d 7d 2c 7b 72 65 3a 2f 23 28 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 28 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 28 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 28 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 3f 2f 2c Data Ascii: [2],t[3],t[4]]}},{re:/rgba?$\s(\d+(?:\.\d+)?)\%\s,\s(\d+(?:\.\d+)?)\%\s,\s(\d+(?:\.\d+)?)\%\s(?:,\s(\d?(?:\.\d+)?)\s)?$/,parse:function(t){return[2.55t[1],2.55t[2],2.55*t[3],t[4]]}},{re:/#([a-f0-9]{2})([a-f0-9]{2})([a-f0-9]{2})([a-f0-9]{2})?/,
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 6f 77 28 28 33 2a 65 2d 32 29 2f 32 32 2d 74 2c 32 29 7d 7d 29 2c 56 2e 65 61 63 68 28 59 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 56 2e 65 61 73 69 6e 67 5b 22 65 61 73 65 49 6e 22 2b 74 5d 3d 65 2c 56 2e 65 61 73 69 6e 67 5b 22 65 61 73 65 4f 75 74 22 2b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 31 2d 65 28 31 2d 74 29 7d 2c 56 2e 65 61 73 69 6e 67 5b 22 65 61 73 65 49 6e 4f 75 74 22 2b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 2e 35 3f 65 28 32 2a 74 29 2f 32 3a 31 2d 65 28 2d 32 2a 74 2b 32 29 2f 32 7d 7d 29 3b 79 3d 56 2e 65 66 66 65 63 74 73 2c 56 2e 65 66 66 65 63 74 73 2e 64 65 66 69 6e 65 28 22 62 6c 69 6e 64 22 2c 22 68 69 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 Data Ascii: ow((3e-2)/22-t,2)}}),V.each(Y,function(t,e){V.easing["easeIn"+t]=e,V.easing["easeOut"+t]=function(t){return 1-e(1-t)},V.easing["easeInOut"+t]=function(t){return t<.5?e(2t)/2:1-e(-2*t+2)/2}});y=V.effects,V.effects.define("blind","hide",function(t,e){var
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 22 66 69 6c 6c 22 3d 3d 3d 65 3f 28 69 3d 73 2e 68 65 69 67 68 74 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 69 62 6c 69 6e 67 73 28 22 3a 76 69 73 69 62 6c 65 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 56 28 74 68 69 73 29 2c 65 3d 74 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 3b 22 61 62 73 6f 6c 75 74 65 22 21 3d 3d 65 26 26 22 66 69 78 65 64 22 21 3d 3d 65 26 26 28 69 2d 3d 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 29 7d 29 2c 74 68 69 73 2e 68 65 61 64 65 72 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2d 3d 56 28 74 68 69 73 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 7d 29 2c 74 68 69 73 2e 68 65 61 64 65 72 73 2e 6e 65 78 74 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: "fill"===e?(i=s.height(),this.element.siblings(":visible").each(function(){var t=V(this),e=t.css("position");"absolute"!==e&&"fixed"!==e&&(i-=t.outerHeight(!0))}),this.headers.each(function(){i-=V(this).outerHeight(!0)}),this.headers.next().each(function(
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 3d 73 2c 74 68 69 73 2e 5f 64 65 6c 61 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 76 69 6f 75 73 3d 73 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 3d 69 7d 29 29 2c 21 31 21 3d 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 73 65 6c 65 63 74 22 2c 74 2c 7b 69 74 65 6d 3a 69 7d 29 26 26 74 68 69 73 2e 5f 76 61 6c 75 65 28 69 2e 76 61 6c 75 65 29 2c 74 68 69 73 2e 74 65 72 6d 3d 74 68 69 73 2e 5f 76 61 6c 75 65 28 29 2c 74 68 69 73 2e 63 6c 6f 73 65 28 74 29 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 3d 69 7d 7d 29 2c 74 68 69 73 2e 6c 69 76 65 52 65 67 69 6f 6e 3d 56 28 22 3c 64 69 76 3e 22 2c 7b 72 6f 6c 65 3a Data Ascii: ment.trigger("focus"),this.previous=s,this._delay(function(){this.previous=s,this.selectedItem=i})),!1!==this._trigger("select",t,{item:i})&&this._value(i.value),this.term=this._value(),this.close(t),this.selectedItem=i}}),this.liveRegion=V("<div>",{role:
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 69 73 2e 5f 61 74 74 61 63 68 49 63 6f 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 50 6f 73 69 74 69 6f 6e 29 2c 74 68 69 73 2e 5f 61 74 74 61 63 68 49 63 6f 6e 53 70 61 63 65 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 50 6f 73 69 74 69 6f 6e 29 29 29 29 2c 74 68 69 73 2e 5f 73 75 70 65 72 28 74 2c 65 29 2c 22 64 69 73 61 62 6c 65 64 22 3d 3d 3d 74 26 26 28 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 2c 65 29 2c 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 64 69 73 61 62 6c 65 64 3d 65 29 26 26 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 22 62 6c 75 72 22 29 29 7d 2c 72 65 66 72 65 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 Data Ascii: is._attachIcon(this.options.iconPosition),this._attachIconSpace(this.options.iconPosition)))),this._super(t,e),"disabled"===t&&(this._toggleClass(null,"ui-state-disabled",e),(this.element[0].disabled=e)&&this.element.trigger("blur"))},refresh:function(){v
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 70 69 63 6b 65 72 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 6e 29 2c 73 3d 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 63 68 65 63 6b 4f 66 66 73 65 74 28 6e 2c 73 2c 65 29 2c 6e 2e 64 70 44 69 76 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 69 6e 44 69 61 6c 6f 67 26 26 56 2e 62 6c 6f 63 6b 55 49 3f 22 73 74 61 74 69 63 22 3a 65 3f 22 66 69 78 65 64 22 3a 22 61 62 73 6f 6c 75 74 65 22 2c 64 69 73 70 6c 61 79 3a 22 6e 6f 6e 65 22 2c 6c 65 66 74 3a 73 2e 6c 65 66 74 2b 22 70 78 22 2c 74 6f 70 3a 73 2e 74 6f 70 2b 22 70 78 22 7d 29 2c 6e 2e 69 6e 6c 69 6e 65 7c 7c 28 69 3d 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 6e 2c 22 73 68 6f 77 41 6e 69 6d 22 29 2c 73 3d 56 2e 64 61 74 65 70 69 63 6b Data Ascii: picker._updateDatepicker(n),s=V.datepicker._checkOffset(n,s,e),n.dpDiv.css({position:V.datepicker._inDialog&&V.blockUI?"static":e?"fixed":"absolute",display:"none",left:s.left+"px",top:s.top+"px"}),n.inline\|\|(i=V.datepicker._get(n,"showAnim"),s=V.datepick
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 27 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 77 65 65 6b 2d 63 6f 6c 27 3e 22 2b 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 77 65 65 6b 48 65 61 64 65 72 22 29 2b 22 3c 2f 74 68 3e 22 3a 22 22 2c 67 3d 30 3b 67 3c 37 3b 67 2b 2b 29 78 2b 3d 22 3c 74 68 20 73 63 6f 70 65 3d 27 63 6f 6c 27 22 2b 28 35 3c 3d 28 67 2b 6e 2b 36 29 25 37 3f 22 20 63 6c 61 73 73 3d 27 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 77 65 65 6b 2d 65 6e 64 27 22 3a 22 22 29 2b 22 3e 3c 73 70 61 6e 20 74 69 74 6c 65 3d 27 22 2b 61 5b 6b 3d 28 67 2b 6e 29 25 37 5d 2b 22 27 3e 22 2b 72 5b 6b 5d 2b 22 3c 2f 73 70 61 6e 3e 3c 2f 74 68 3e 22 3b 66 6f 72 28 77 2b 3d 78 2b 22 3c 2f 74 72 3e 3c 2f 74 68 65 61 64 3e 3c 74 62 6f 64 79 3e 22 2c 44 3d 74 68 69 73 2e 5f 67 65 74 44 61 79 73 49 6e 4d 6f Data Ascii: 'ui-datepicker-week-col'>"+this._get(t,"weekHeader")+"</th>":"",g=0;g<7;g++)x+="<th scope='col'"+(5<=(g+n+6)%7?" class='ui-datepicker-week-end'":"")+"><span title='"+a[k=(g+n)%7]+"'>"+r[k]+"</span></th>";for(w+=x+"</tr></thead><tbody>",D=this._getDaysInMo
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 6f 73 69 74 69 6f 6e 28 29 2c 65 3d 74 68 69 73 2e 5f 69 73 52 6f 6f 74 4e 6f 64 65 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 29 3b 72 65 74 75 72 6e 7b 74 6f 70 3a 74 2e 74 6f 70 2d 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 68 65 6c 70 65 72 2e 63 73 73 28 22 74 6f 70 22 29 2c 31 30 29 7c 7c 30 29 2b 28 65 3f 30 3a 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 29 2c 6c 65 66 74 3a 74 2e 6c 65 66 74 2d 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 68 65 6c 70 65 72 2e 63 73 73 28 22 6c 65 66 74 22 29 2c 31 30 29 7c 7c 30 29 2b 28 65 3f 30 3a 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 29 7d 7d 2c 5f 63 61 63 68 65 4d 61 72 67 69 6e 73 3a 66 75 6e Data Ascii: osition(),e=this._isRootNode(this.scrollParent[0]);return{top:t.top-(parseInt(this.helper.css("top"),10)\|\|0)+(e?0:this.scrollParent.scrollTop()),left:t.left-(parseInt(this.helper.css("left"),10)\|\|0)+(e?0:this.scrollParent.scrollLeft())}},_cacheMargins:fun
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 69 64 65 28 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 61 75 74 6f 68 69 64 65 22 29 29 7d 2c 5f 72 65 6d 6f 76 65 48 61 6e 64 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 61 64 64 65 64 48 61 6e 64 6c 65 73 2e 72 65 6d 6f 76 65 28 29 7d 2c 5f 6d 6f 75 73 65 43 61 70 74 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 73 3d 21 31 3b 66 6f 72 28 65 20 69 6e 20 74 68 69 73 2e 68 61 6e 64 6c 65 73 29 28 69 3d 56 28 74 68 69 73 2e 68 61 6e 64 6c 65 73 5b 65 5d 29 5b 30 5d 29 21 3d 3d 74 2e 74 61 72 67 65 74 26 26 21 56 2e 63 6f 6e 74 61 69 6e 73 28 69 2c 74 2e 74 61 72 67 65 74 29 7c 7c 28 73 3d 21 30 29 3b 72 65 74 75 72 6e 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 Data Ascii: ide(),this._addClass("ui-resizable-autohide"))},_removeHandles:function(){this._addedHandles.remove()},_mouseCapture:function(t){var e,i,s=!1;for(e in this.handles)(i=V(this.handles[e])[0])!==t.target&&!V.contains(i,t.target)\|\|(s=!0);return!this.options.d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49765	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:30 UTC	1106	OUT	GET /images/header/menu-icons/car-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:30 UTC	662	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:30 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=car-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:17 GMT Connection: close Content-Length: 2270
2025-01-10 16:21:30 UTC	2270	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 33 2e 38 30 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 38 36 37 20 31 33 2e 38 30 31 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="16.867" height="13.801" viewBox="0 0 16.867 13.801"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:30 UTC	1348	OUT	GET /images/header/menu-icons/life-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:30 UTC	663	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:30 GMT Last-Modified: Fri, 18 Oct 2019 03:07:11 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=life-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:17 GMT Connection: close Content-Length: 1327
2025-01-10 16:21:30 UTC	1327	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 35 2e 36 33 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 35 2e 36 33 34 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="15.634" viewBox="0 0 17.867 15.634"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49766	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:30 UTC	1139	OUT	GET /ResourcePackages/IFBIRedesign/assets/dist/main.js?v=638659012120000000 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:30 UTC	598	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Length: 849067 Content-Type: application/javascript Last-Modified: Wed, 30 Oct 2024 20:06:52 GMT Accept-Ranges: bytes ETag: "0569e4272bdb1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:17 GMT Connection: close
2025-01-10 16:21:30 UTC	15712	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 39 35 39 3a 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 7b 57 3a 28 29 3d 3e 53 74 61 72 74 51 75 6f 74 65 43 6f 6e 74 72 6f 6c 6c 65 72 7d 29 3b 76 61 72 20 5f Data Ascii: /! For license information please see main.js.LICENSE.txt /(()=>{var __webpack_modules__={959:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";__webpack_require__.d(__webpack_exports__,{W:()=>StartQuoteController});var _
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 65 29 7d 2c 67 65 74 57 69 6e 64 6f 77 50 61 67 65 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 78 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 79 3a 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 7d 7d 2c 69 73 53 75 72 66 61 63 65 41 63 74 69 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e 77 29 28 65 2e 72 6f 6f 74 5f 2c 22 3a 61 63 74 69 76 65 22 29 7d 2c 69 73 53 75 72 66 61 63 65 44 69 73 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 2e 64 69 73 61 62 6c Data Ascii: :function(e){return window.removeEventListener("resize",e)},getWindowPageOffset:function(){return{x:window.pageXOffset,y:window.pageYOffset}},isSurfaceActive:function(){return(0,a.w)(e.root_,":active")},isSurfaceDisabled:function(){return Boolean(e.disabl
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 2e 5f 72 65 73 75 6c 74 29 29 29 3a 4c 28 74 68 69 73 2e 70 72 6f 6d 69 73 65 2c 6e 65 77 20 45 72 72 6f 72 28 22 41 72 72 61 79 20 4d 65 74 68 6f 64 73 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 61 6e 20 41 72 72 61 79 22 29 29 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 6e 75 6d 65 72 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 68 69 73 2e 5f 73 74 61 74 65 3d 3d 3d 53 26 26 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 74 68 69 73 2e 5f 65 61 63 68 45 6e 74 72 79 28 65 5b 74 5d 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 61 63 68 45 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 73 74 61 6e 63 65 43 6f 6e 73 74 72 Data Ascii: ._result))):L(this.promise,new Error("Array Methods must be provided an Array"))}return e.prototype._enumerate=function(e){for(var t=0;this._state===S&&t<e.length;t++)this._eachEntry(e[t],t)},e.prototype._eachEntry=function(e,t){var n=this._instanceConstr
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 7d 74 2e 45 76 65 6e 74 3d 69 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 64 65 66 61 75 6c 74 2e 43 75 73 74 6f 6d 45 76 65 6e 74 3f 74 2e 45 76 65 6e 74 3d 69 3d 6f 2e 64 65 66 61 75 6c 74 2e 43 75 73 74 6f 6d 45 76 65 6e 74 3a 73 2e 64 65 66 61 75 6c 74 26 26 28 74 2e 45 76 65 6e 74 3d 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 Data Ascii: ?e:{default:e}}function d(e){return e instanceof Element}t.Event=i,"function"==typeof o.default.CustomEvent?t.Event=i=o.default.CustomEvent:s.default&&(t.Event=i=function(e,t){t=t\|\|{bubbles:!1,cancelable:!1,composed:!0,detail:void 0};var n=document.create
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 29 7d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 76 2c 72 29 26 26 74 68 69 73 2e 73 65 74 56 61 6c 75 65 28 74 68 69 73 2c 6f 2c 72 2c 76 5b 72 5d 5b 32 5d 2c 76 5b 72 5d 5b 31 5d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 56 61 6c 75 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 26 26 28 65 5b 69 5d 3d 22 61 6d 70 6d 22 3d 3d 3d 69 3f 74 3a 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 5d 2f 67 2c 22 30 22 29 2c 65 5b 22 72 61 77 22 2b 69 5d 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2f 67 2c 22 5f 22 29 29 2c 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6f 3d 65 5b 69 5d 3b 28 22 64 61 79 22 3d 3d 3d 69 Data Ascii: )}Object.prototype.hasOwnProperty.call(v,r)&&this.setValue(this,o,r,v[r][2],v[r][1])}}},{key:"setValue",value:function(e,t,n,i,r){if(void 0!==t&&(e[i]="ampm"===i?t:t.replace(/[^0-9]/g,"0"),e["raw"+i]=t.replace(/\s/g,"_")),void 0!==r){var o=e[i];("day"===i
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 69 78 50 6f 69 6e 74 3f 22 2c 22 3a 22 2e 22 5d 3d 65 2e 72 61 64 69 78 50 6f 69 6e 74 29 2c 6f 7d 2c 5f 6d 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 28 22 2b 65 2e 67 72 6f 75 70 53 65 70 61 72 61 74 6f 72 2b 22 39 39 39 29 7b 2b 7c 31 7d 22 7d 2c 64 69 67 69 74 73 3a 22 2a 22 2c 64 69 67 69 74 73 4f 70 74 69 6f 6e 61 6c 3a 21 30 2c 65 6e 66 6f 72 63 65 44 69 67 69 74 73 4f 6e 42 6c 75 72 3a 21 31 2c 72 61 64 69 78 50 6f 69 6e 74 3a 22 2e 22 2c 70 6f 73 69 74 69 6f 6e 43 61 72 65 74 4f 6e 43 6c 69 63 6b 3a 22 72 61 64 69 78 46 6f 63 75 73 22 2c 5f 72 61 64 69 78 44 61 6e 63 65 3a 21 30 2c 67 72 6f 75 70 53 65 70 61 72 61 74 6f 72 3a 22 22 2c 61 6c 6c 6f 77 4d 69 6e 75 73 3a 21 30 2c 6e 65 67 61 74 69 6f 6e 53 79 6d 62 6f 6c 3a Data Ascii: ixPoint?",":"."]=e.radixPoint),o},_mask:function(e){return"("+e.groupSeparator+"999){+\|1}"},digits:"*",digitsOptional:!0,enforceDigitsOnBlur:!1,radixPoint:".",positionCaretOnClick:"radixFocus",_radixDance:!0,groupSeparator:"",allowMinus:!0,negationSymbol:
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 74 6d 61 73 6b 2e 72 65 6d 6f 76 65 28 29 29 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 3d 6e 65 77 20 5f 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 30 29 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 6f 70 74 73 3d 73 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 6e 6f 4d 61 73 6b 73 43 61 63 68 65 3d 74 2e 6e 6f 4d 61 73 6b 73 43 61 63 68 65 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 75 73 65 72 4f 70 74 69 6f 6e 73 3d 72 2e 64 65 66 61 75 6c 74 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 2e 75 73 65 72 4f 70 74 69 6f 6e 73 29 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 65 6c 3d 65 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 24 65 6c 3d 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 65 29 2c 65 2e 69 6e 70 75 74 6d 61 73 6b 2e 6d 61 73 6b 73 65 74 3d 75 2c 72 2e 64 65 66 61 75 6c 74 2e Data Ascii: tmask.remove()),e.inputmask=new _(void 0,void 0,!0),e.inputmask.opts=s,e.inputmask.noMasksCache=t.noMasksCache,e.inputmask.userOptions=r.default.extend(!0,{},t.userOptions),e.inputmask.el=e,e.inputmask.$el=(0,r.default)(e),e.inputmask.maskset=u,r.default.
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 74 26 26 28 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 22 29 2c 65 3d 72 28 65 2c 61 29 2c 75 3d 63 3f 22 72 65 67 65 78 5f 22 2b 61 2e 72 65 67 65 78 3a 61 2e 6e 75 6d 65 72 69 63 49 6e 70 75 74 3f 65 2e 73 70 6c 69 74 28 22 22 29 2e 72 65 76 65 72 73 65 28 29 2e 6a 6f 69 6e 28 22 22 29 3a 65 2c 6e 75 6c 6c 21 3d 3d 61 2e 6b 65 65 70 53 74 61 74 69 63 26 26 28 75 3d 22 6b 73 5f 22 2b 61 2e 6b 65 65 70 53 74 61 74 69 63 2b 75 29 2c 76 6f 69 64 20 30 3d 3d 3d 6f 2e 64 65 66 61 75 6c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 73 6b 73 43 61 63 68 65 5b 75 5d 7c 7c 21 30 3d 3d 3d 74 3f 28 73 3d 7b 6d 61 73 6b 3a 65 2c 6d 61 73 6b 54 6f 6b 65 6e 3a 6f 2e 64 65 66 61 75 6c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6e 61 6c 79 73 65 4d 61 73 6b 28 65 2c 63 2c 61 Data Ascii: t&&(a.placeholder=""),e=r(e,a),u=c?"regex_"+a.regex:a.numericInput?e.split("").reverse().join(""):e,null!==a.keepStatic&&(u="ks_"+a.keepStatic+u),void 0===o.default.prototype.masksCache[u]\|\|!0===t?(s={mask:e,maskToken:o.default.prototype.analyseMask(e,c,a
2025-01-10 16:21:30 UTC	672	IN	Data Raw: 26 26 75 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 69 74 79 2d 72 3e 30 26 26 22 6d 61 73 74 65 72 22 3d 3d 3d 75 2e 6d 61 74 63 68 2e 6e 65 77 42 6c 6f 63 6b 4d 61 72 6b 65 72 26 26 28 21 66 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 69 74 79 7c 7c 66 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 69 74 79 2d 72 3c 31 7c 7c 21 66 2e 6d 61 74 63 68 2e 6e 65 77 42 6c 6f 63 6b 4d 61 72 6b 65 72 29 7c 7c 75 26 26 21 6e 2e 67 72 65 65 64 79 26 26 75 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 51 75 61 6e 74 69 66 69 65 72 26 26 21 66 2e 6d 61 74 63 68 2e 6f 70 74 69 6f 6e 61 6c 51 75 61 6e 74 69 66 69 65 72 29 26 26 28 73 3d 70 2c 75 3d 66 29 7d 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 6d Data Ascii: &&u.match.optionality-r>0&&"master"===u.match.newBlockMarker&&(!f.match.optionality\|\|f.match.optionality-r<1\|\|!f.match.newBlockMarker)\|\|u&&!n.greedy&&u.match.optionalQuantifier&&!f.match.optionalQuantifier)&&(s=p,u=f)}return u}function l(e,t){var n=this.m
2025-01-10 16:21:30 UTC	16384	IN	Data Raw: 6d 61 74 63 68 2e 73 74 61 74 69 63 7c 7c 21 30 3d 3d 3d 74 2e 6d 61 74 63 68 2e 73 74 61 74 69 63 29 26 26 2d 31 21 3d 3d 69 28 74 2e 6d 61 74 63 68 2e 66 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5b 5c 5d 2f 5d 2f 67 2c 22 22 29 29 2e 69 6e 64 65 78 4f 66 28 69 28 65 2e 6d 61 74 63 68 2e 66 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5b 5c 5d 2f 5d 2f 67 2c 22 22 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 61 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 64 65 70 65 6e 64 65 6e 63 79 4c 69 62 2c 75 3d 74 68 69 73 2e 6d 61 73 6b 73 65 74 2c 6c 3d 74 68 69 73 2e 6f 70 74 73 2c 66 3d 74 68 69 73 2e 65 6c 2c 70 3d 75 2e 6d 61 73 6b 54 6f 6b 65 6e 2c 68 3d 74 3f 6e 3a Data Ascii: match.static\|\|!0===t.match.static)&&-1!==i(t.match.fn.toString().replace(/[[\]/]/g,"")).indexOf(i(e.match.fn.toString().replace(/[[\]/]/g,"")))}function f(e,t,n){var i,o,a=this,s=this.dependencyLib,u=this.maskset,l=this.opts,f=this.el,p=u.maskToken,h=t?n:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49769	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:30 UTC	1102	OUT	GET /images/header/menu-icons/home.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:30 UTC	658	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:30 GMT Last-Modified: Fri, 18 Oct 2019 03:07:11 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=home.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:17 GMT Connection: close Content-Length: 1287
2025-01-10 16:21:30 UTC	1287	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 37 2e 31 32 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 37 2e 31 32 33 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="17.123" viewBox="0 0 17.867 17.123"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49768	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:30 UTC	1352	OUT	GET /images/header/menu-icons/business-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:30 UTC	667	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:30 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=business-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:17 GMT Connection: close Content-Length: 1287
2025-01-10 16:21:30 UTC	1287	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 35 2e 36 33 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 35 2e 36 33 34 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="15.634" viewBox="0 0 17.867 15.634"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49771	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:30 UTC	1107	OUT	GET /images/header/menu-icons/life-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:31 UTC	663	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:31 GMT Last-Modified: Fri, 18 Oct 2019 03:07:11 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=life-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:17 GMT Connection: close Content-Length: 1327
2025-01-10 16:21:31 UTC	1327	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 35 2e 36 33 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 35 2e 36 33 34 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="15.634" viewBox="0 0 17.867 15.634"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49770	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:30 UTC	1348	OUT	GET /images/header/menu-icons/farm-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:31 UTC	663	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:31 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=farm-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:17 GMT Connection: close Content-Length: 4009
2025-01-10 16:21:31 UTC	4009	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 37 2e 39 33 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 37 2e 39 33 35 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="17.935" viewBox="0 0 17.867 17.935"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49774	198.179.10.51	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:31 UTC	1155	OUT	GET /farmalytics.min.js HTTP/1.1 Host: farmalytics.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:31 UTC	692	IN	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 20 Dec 2024 02:13:39 GMT Accept-Ranges: bytes ETag: "1db5284c8779c1c" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=16070400; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="0", dtRpid;desc="1368380535" Date: Fri, 10 Jan 2025 16:21:18 GMT Connection: close Content-Length: 6044 Set-Cookie: TS0108e009=01d115748179758d1aa8f4a7eb564b510c610a4be413bdd6d9f5e1dda138b7015b5d6d1af3146cacff08f58a0fd9561cceba071d27; Path=/; Secure; HTTPOnly
2025-01-10 16:21:31 UTC	6044	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 46 61 72 6d 61 6c 79 74 69 63 73 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 68 74 74 70 73 3a 2f 2f 66 61 Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Farmalytics=t()}(this,(function(){"use strict";const e="https://fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49773	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:31 UTC	1111	OUT	GET /images/header/menu-icons/business-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892
2025-01-10 16:21:31 UTC	667	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:31 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=business-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:18 GMT Connection: close Content-Length: 1287
2025-01-10 16:21:31 UTC	1287	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 35 2e 36 33 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 35 2e 36 33 34 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="15.634" viewBox="0 0 17.867 15.634"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49779	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:32 UTC	1715	OUT	GET /WebResource.axd?d=NjxTqR2bqTw1rewxxlkHPpxO0HewYtVlDflpbYInUeVJFzzXK9ps5DCCOpHnJe-GLFYvfIwAYK88tAgrZ4UYiSFoIDxWM5fHSClLQ2OUIH6ur5dZ5UUk2GuBjdo7SvL8SQyR67VUUd5WdQi4Bp1p2rD86Flrj4pL0JXZer5l9HggNFK5Tv2OG7IFtNlP6HEIlaRLk_JT971y9JLQAC_AjXBfDLq38newr_lRYpTjOxM1&t=638343388220000000 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:32 UTC	631	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Mon, 05 Jan 2026 07:35:09 GMT Last-Modified: Tue, 31 Oct 2023 16:47:01 GMT ETag: "1698770822:dtagent10303241106123517POHb" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:19 GMT Connection: close Content-Length: 4191
2025-01-10 16:21:32 UTC	4191	IN	Data Raw: ef bb bf 76 61 72 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 72 61 63 6b 65 72 20 3d 20 6e 75 6c 6c 3b 20 21 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 72 61 63 6b 65 72 20 3d 20 7b 20 5f 63 61 6e 54 72 61 63 6b 3a 20 21 31 2c 20 5f 70 61 67 65 49 64 3a 20 6e 75 6c 6c 2c 20 5f 75 72 6c 3a 20 21 31 2c 20 74 72 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 69 66 20 28 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 72 61 63 6b 65 72 2e 5f 63 61 6e 54 72 61 63 6b 20 3d 20 65 2c 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 72 61 63 6b 65 72 2e 5f 63 61 6e 54 72 61 63 6b 29 20 7b 20 69 66 20 28 21 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 Data Ascii: var PersonalizationTracker = null; !function () { "use strict"; PersonalizationTracker = { _canTrack: !1, _pageId: null, _url: !1, track: function (e) { if (PersonalizationTracker._canTrack = e, PersonalizationTracker._canTrack) { if (!PersonalizationT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49778	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:32 UTC	1541	OUT	GET /images/header/menu-icons/finance-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:32 UTC	665	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:32 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=finance-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:19 GMT Connection: close Content-Length: 979
2025-01-10 16:21:32 UTC	979	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 69 64 3d 22 63 6f 69 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 34 39 32 22 20 68 65 69 67 68 74 3d 22 31 37 2e 34 39 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 34 39 32 20 31 37 2e 34 39 32 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 63 32 63 32 63 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg id="coin" xmlns="http://www.w3.org/2000/svg" width="17.492" height="17.492" viewBox="0 0 17.492 17.492"> <defs> <style> .cls-1 { fill: #2c2c2c; } </style> </defs> <g id

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49777	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:32 UTC	1537	OUT	GET /images/header/menu-icons/discount.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:32 UTC	662	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:32 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=discount.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:19 GMT Connection: close Content-Length: 2935
2025-01-10 16:21:32 UTC	2935	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 31 35 36 22 20 68 65 69 67 68 74 3d 22 31 36 2e 37 38 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 31 35 36 20 31 36 2e 37 38 33 22 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 64 69 73 63 6f 75 6e 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 32 31 31 20 30 2e 32 33 35 29 22 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 32 36 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 3e 0d 0a 20 20 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="16.156" height="16.783" viewBox="0 0 16.156 16.783"> <g id="discount" transform="translate(0.211 0.235)"> <g id="Group_266" transform="translate(0 0)"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49776	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:32 UTC	1541	OUT	GET /images/header/menu-icons/renters-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:32 UTC	666	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:32 GMT Last-Modified: Fri, 18 Oct 2019 03:07:11 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=renters-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:19 GMT Connection: close Content-Length: 1003
2025-01-10 16:21:32 UTC	1003	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 38 2e 32 37 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 38 2e 32 37 37 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="18.277" viewBox="0 0 17.867 18.277"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49780	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:32 UTC	1537	OUT	GET /images/header/menu-icons/umbrella.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:32 UTC	662	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:32 GMT Last-Modified: Fri, 18 Oct 2019 03:07:12 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=umbrella.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:19 GMT Connection: close Content-Length: 1945
2025-01-10 16:21:32 UTC	1945	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 31 32 39 22 20 68 65 69 67 68 74 3d 22 31 39 2e 33 35 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 31 32 39 20 31 39 2e 33 35 35 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 75 6d 62 72 65 6c 6c 61 22 20 64 3d 22 4d 32 31 2e 31 31 32 2c 39 2e 31 31 33 61 2e 33 31 35 2e 33 31 35 2c 30 2c 30 2c 30 2c 2e 30 31 34 2d 2e 30 36 37 73 30 2d 2e 30 30 39 2c 30 2d 2e 30 31 34 41 38 2e 30 37 33 2c 38 2e 30 37 33 2c 30 2c 30 2c 30 2c 31 33 2e 33 38 37 2e 39 37 36 56 2e 33 32 33 61 2e 33 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="16.129" height="19.355" viewBox="0 0 16.129 19.355"> <path id="umbrella" d="M21.112,9.113a.315.315,0,0,0,.014-.067s0-.009,0-.014A8.073,8.073,0,0,0,13.387.976V.323a.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49783	198.179.10.61	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:32 UTC	646	OUT	GET /farmhand/V1/fonts/44e7b0fa-6c8d-43c2-b19e-f1e3ce9ea57c.woff2 HTTP/1.1 Host: cdn.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.infarmbureau.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.infarmbureau.com/farmhand/V1/consumer/theme.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:32 UTC	1187	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Last-Modified: Tue, 13 Mar 2018 20:05:31 GMT Accept-Ranges: bytes ETag: "cf4973a46bbd31:0:dtagent10303241106123517WCdL" Access-Control-Allow-Origin: * X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Timing-Allow-Origin: * Server-Timing: dtSInfo;desc="0", dtRpid;desc="1804100698", dtTao;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_22FD0E5C7E31243663B2DC1860A939C5_perc_100000_ol_0_mul_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; Path=/; Domain=.infarmbureau.com Date: Fri, 10 Jan 2025 16:20:54 GMT Connection: close Content-Length: 24988 Set-Cookie: TS017720c6=01d11574813c9f74cb221453a24a0ddbe8f753b2f15d85da71799075e6b9cd36990d2b9e44b98ef9970f08e1c3c1f42bbfa7e5cb58; Path=/; Secure; HTTPOnly Set-Cookie: TS013a8a7c=01d11574815c16a10a3b07df7741c3a80911526a155d85da71799075e6b9cd36990d2b9e447000128fa82d6b51ee84beb13c08cc2587738d44c7962a297177bb8b890447f4; path=/; domain=.infarmbureau.com; HTTPonly; Secure
2025-01-10 16:21:32 UTC	15197	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 61 9c 00 11 00 00 00 01 06 84 00 00 61 36 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 4c 49 4e 4f 28 06 60 16 8b 60 00 83 50 08 22 09 85 66 11 10 0a 82 be 38 82 9c 1a 01 36 02 24 03 87 40 13 c3 22 0b 87 44 00 04 20 05 e1 10 07 20 0c 81 08 1b 7d f0 47 c4 dd 77 50 21 b7 83 47 4b 87 9e e2 02 73 53 c7 5b c1 75 27 33 a5 95 f0 3d 78 81 71 7b 08 dc 36 a8 86 f0 47 d2 cf b2 ff ff ff 73 92 8e 31 1c 60 03 d4 cc b4 de 41 e9 c1 08 e1 e1 59 13 49 c2 e1 c8 16 e8 ad 52 b4 44 cb d3 87 64 b4 86 0b 7d 56 d9 b2 a9 8e 7e 38 47 58 26 ce db 52 8b 57 53 35 ac 5d 66 e9 59 34 0d b3 ec a3 47 91 d0 e6 35 10 e2 fd 55 e1 f1 f4 c8 ef 75 19 5b 1b fd 11 03 e3 1e 09 0a ff 96 7a 61 c0 4f 9c 53 89 13 f4 d2 4e 83 53 10 17 5c f8 14 Data Ascii: wOF2aa6?LINO(``P"f86$@"D }GwP!GKsS[u'3=xq{6Gs1`AYIRDd}V~8GX&RWS5]fY4G5Uu[zaOSNS\
2025-01-10 16:21:32 UTC	321	IN	Data Raw: 7d 03 bf 69 9a 21 7e 43 91 62 1d e1 28 da b8 b8 69 73 7c 7c 52 a9 f3 be 40 95 43 cd 3c 55 e2 ff 11 4b 83 c7 59 46 a1 96 6b ee 24 a7 21 67 53 f0 52 59 74 92 41 40 b8 60 42 84 0a 3f 34 0b 5f b4 7b ce ef a2 fd 18 2a 74 d3 d4 a3 3a 4b e7 a1 60 58 59 38 f9 dd c0 a1 5f 24 9a 65 59 ae 12 39 86 6d 63 96 8f 9c a9 bb 4c 61 ab 7e 8a df 90 f2 75 46 20 4e 43 c1 bb 85 c0 47 84 3c 38 28 71 10 7b 95 70 f8 05 13 02 fd eb 81 6c 95 8b 92 60 eb 93 40 bd 48 a0 27 39 3d 48 1f 57 0e 75 88 d3 df d9 6b 45 a1 00 31 8f f9 1b 34 2f b3 fa a4 58 be 22 ab 2a 3c a8 17 08 ef 08 49 42 7e 80 22 e4 4b 19 93 1c f4 6f ca 2f 49 2f 92 74 84 aa b4 c5 8f df a6 fb 8e ad 60 29 dc 7c 3d 18 df cf 39 e9 8b a4 fb 42 82 fe 64 1f b2 f7 b3 87 a5 65 e9 5a 4c 3d b7 dd 56 82 62 3d ad 6c eb fb 75 7a 76 dc 63 Data Ascii: }i!~Cb(is\|\|R@C<UKYFk$!gSRYtA@`B?4_{t:K`XY8_$eY9mcLa~uF NCG<8(q{pl`@H'9=HWukE14/X"<IB~"Ko/I/t`)\|=9BdeZL=Vb=luzvc
2025-01-10 16:21:32 UTC	9470	IN	Data Raw: 80 5c 7c 23 76 d0 d6 c2 45 93 d9 3f 7b 91 70 af b9 05 0d 51 33 6a 90 66 c8 8a 32 e8 b1 a5 ba 39 34 d7 15 11 59 6c fa 1c 78 8a 3f 37 33 82 b1 2c 83 c8 92 1f 50 17 e4 de f0 8e 37 fd 26 8e 96 6e 61 3d c1 eb 0a d5 f2 6e 85 4c 52 f7 c0 9b ca e6 84 12 91 4b be 0a e5 d2 ac 1f 70 5c 02 bc 82 5e 21 9f 58 d5 3d 50 16 02 6f 5d e2 d7 c0 c4 50 81 59 5c 0e bb 8d bc 85 8c b6 35 d8 2b c4 67 06 de c0 2b 3c 67 29 1a 12 74 de 51 67 3d 22 c2 67 f2 90 14 48 ca 4a 6b d9 42 08 0a 9e 83 78 7d 6b 4f b3 e3 89 b1 c4 17 f3 ff 54 31 27 59 65 cc c5 34 30 95 02 d0 f2 c8 09 61 ca 58 29 92 4b f7 cb 22 45 dc b6 87 12 ab 09 e0 99 ea de b2 8f 0c 2c 23 3a 95 c2 07 af bd 85 95 3f c5 8b f6 e8 66 ce 2b 54 c9 8f a3 29 36 ca 2c 54 07 92 ca b2 41 9d 15 ec c2 25 77 58 6a 47 bf 7c ee 40 0f 9f 47 56 Data Ascii: \\|#vE?{pQ3jf294Ylx?73,P7&na=nLRKp\^!X=Po]PY\5+g+<g)tQg="gHJkBx}kOT1'Ye40aX)K"E,#:?f+T)6,TA%wXjG\|@GV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49784	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:32 UTC	1520	OUT	GET /images/icons/car.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:32 UTC	657	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:32 GMT Last-Modified: Wed, 11 Aug 2021 02:36:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=car.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:19 GMT Connection: close Content-Length: 5179
2025-01-10 16:21:32 UTC	5179	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="52px" height="42px" viewBox="0 0 52 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49782	13.107.246.45	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:32 UTC	608	OUT	GET /sdk/sitefinity-insight-client.min.3.1.27.js HTTP/1.1 Host: cdn.insight.sitefinity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.infarmbureau.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:32 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:32 GMT Content-Type: application/javascript Content-Length: 53449 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 17 Oct 2024 16:12:33 GMT ETag: 0x8DCEEC6827A0B0B x-ms-request-id: 6adb41c6-201e-006c-477b-63cc8a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type Access-Control-Allow-Origin: * x-azure-ref: 20250110T162132Z-156796c549b8zlhlhC1EWRxx400000001b3000000000dqwp Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 3 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-01-10 16:21:32 UTC	15705	IN	Data Raw: 76 61 72 20 73 66 44 61 74 61 49 6e 74 65 6c 6c 3d 73 66 44 61 74 61 49 6e 74 65 6c 6c 7c 7c 7b 7d 3b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 3d 7b 73 64 6b 56 65 72 73 69 6f 6e 3a 22 6a 73 2d 33 2e 31 2e 34 31 22 2c 63 6f 6f 6b 69 65 4e 61 6d 65 3a 22 73 66 2d 64 61 74 61 2d 69 6e 74 65 6c 6c 2d 73 75 62 6a 65 63 74 22 2c 64 6f 63 73 43 6f 6f 6b 69 65 4e 61 6d 65 3a 22 73 66 2d 69 6e 73 2d 6c 73 74 2d 64 6f 63 2d 74 72 63 6b 64 22 2c 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 22 73 66 2d 69 6e 73 2d 73 73 69 64 22 2c 70 61 67 65 56 69 73 69 74 49 64 43 6f 6f 6b 69 65 4e 61 6d 65 3a 22 73 66 2d 69 6e 73 2d 70 76 2d 69 64 22 2c 73 66 54 72 61 63 6b 69 6e 67 49 64 73 53 74 6f 72 61 67 65 4b 65 79 3a 22 73 66 2d 74 72 2d Data Ascii: var sfDataIntell=sfDataIntell\|\|{};sfDataIntell.constants={sdkVersion:"js-3.1.41",cookieName:"sf-data-intell-subject",docsCookieName:"sf-ins-lst-doc-trckd",sessionCookieName:"sf-ins-ssid",pageVisitIdCookieName:"sf-ins-pv-id",sfTrackingIdsStorageKey:"sf-tr-
2025-01-10 16:21:32 UTC	16384	IN	Data Raw: 74 69 6f 6e 5d 3d 22 61 70 70 61 75 74 68 20 22 2b 74 68 69 73 2e 61 70 69 4b 65 79 2c 63 5b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 68 65 61 64 65 72 73 2e 64 61 74 61 63 65 6e 74 65 72 6b 65 79 5d 3d 74 68 69 73 2e 61 70 69 4b 65 79 3b 76 61 72 20 64 3d 74 68 69 73 2e 61 70 69 53 65 72 76 65 72 55 72 6c 2b 22 61 6e 61 6c 79 74 69 63 73 2f 76 31 2f 63 6f 6e 76 65 72 73 69 6f 6e 73 2f 69 73 69 6e 22 2c 65 3d 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 75 74 69 6c 73 2e 67 65 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 28 6e 75 6c 6c 2c 22 47 45 54 22 2c 64 2c 63 29 3b 74 68 69 73 2e 72 65 71 75 65 73 74 65 72 2e 61 6a 61 78 43 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 7c 7c 21 41 72 72 61 79 2e 69 73 41 Data Ascii: tion]="appauth "+this.apiKey,c[sfDataIntell.constants.headers.datacenterkey]=this.apiKey;var d=this.apiServerUrl+"analytics/v1/conversions/isin",e=sfDataIntell.utils.getRequestOptions(null,"GET",d,c);this.requester.ajaxCall(e,function(a){if(!a\|\|!Array.isA
2025-01-10 16:21:32 UTC	16384	IN	Data Raw: 65 73 68 6f 6c 64 73 2e 66 69 6e 64 49 6e 64 65 78 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 6a 7d 29 2b 31 3b 6b 3c 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 76 69 64 65 6f 54 72 61 63 6b 69 6e 67 2e 70 72 6f 67 72 65 73 73 54 68 72 65 73 68 6f 6c 64 73 2e 6c 65 6e 67 74 68 26 26 28 65 5b 63 5d 3d 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 76 69 64 65 6f 54 72 61 63 6b 69 6e 67 2e 70 72 6f 67 72 65 73 73 54 68 72 65 73 68 6f 6c 64 73 5b 6b 5d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 66 5b 62 2e 69 64 5d 5b 61 5d 7c 7c 28 68 2e 73 65 6e 74 65 6e 63 65 43 6c 69 65 6e 74 2e 77 72 69 74 65 53 65 6e 74 65 6e 63 65 28 7b 70 72 65 64 69 63 61 74 65 3a 61 2c Data Ascii: esholds.findIndex(function(a){return a===j})+1;k<sfDataIntell.constants.videoTracking.progressThresholds.length&&(e[c]=sfDataIntell.constants.videoTracking.progressThresholds[k])}})}function g(a,b){f[b.id][a]\|\|(h.sentenceClient.writeSentence({predicate:a,
2025-01-10 16:21:32 UTC	4976	IN	Data Raw: 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 22 69 73 49 6e 43 61 6d 70 61 69 67 6e 73 22 20 6d 65 74 68 6f 64 2e 27 29 3b 76 61 72 20 64 3d 7b 7d 3b 64 5b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 68 65 61 64 65 72 73 2e 73 75 62 6a 65 63 74 5d 3d 74 68 69 73 2e 73 75 62 6a 65 63 74 4b 65 79 2c 64 5b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 68 65 61 64 65 72 73 2e 69 64 73 5d 3d 61 2c 64 5b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 68 65 61 64 65 72 73 2e 64 61 74 61 73 6f 75 72 63 65 5d 3d 74 68 69 73 2e 64 61 74 61 73 6f 75 72 63 65 2c 74 68 69 73 2e 63 61 6c 6c 28 22 2f 61 6e 61 6c 79 74 69 63 73 2f 76 31 2f 63 61 6d 70 61 69 67 6e 73 2f 69 73 69 6e 22 2c 64 2c 62 2c 63 29 Data Ascii: hen using the "isInCampaigns" method.');var d={};d[sfDataIntell.constants.headers.subject]=this.subjectKey,d[sfDataIntell.constants.headers.ids]=a,d[sfDataIntell.constants.headers.datasource]=this.datasource,this.call("/analytics/v1/campaigns/isin",d,b,c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49785	198.179.10.61	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:33 UTC	646	OUT	GET /farmhand/V1/fonts/be607c9f-3c81-41b4-b7ad-17af005c80bb.woff2 HTTP/1.1 Host: cdn.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.infarmbureau.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.infarmbureau.com/farmhand/V1/consumer/theme.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:33 UTC	1188	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Last-Modified: Tue, 13 Mar 2018 20:05:31 GMT Accept-Ranges: bytes ETag: "8cf774a46bbd31:0:dtagent10303241106123517WCdL" Access-Control-Allow-Origin: * X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Timing-Allow-Origin: * Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1602694745", dtTao;desc="1" Set-Cookie: dtCookie=v_4_srv_14_sn_669B5AA1E48A468C526B8F78957A65CB_perc_100000_ol_0_mul_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_1; Path=/; Domain=.infarmbureau.com Date: Fri, 10 Jan 2025 16:20:55 GMT Connection: close Content-Length: 24916 Set-Cookie: TS017720c6=01d11574811e20124420df094fb90c8ceb69c72a045c9705f1441830ba98abad14eac3531fba61953ea6998635598b094dff77f5c1; Path=/; Secure; HTTPOnly Set-Cookie: TS013a8a7c=01d1157481a18f62e0497d5d056d64d5e3132dba1d5c9705f1441830ba98abad14eac3531f1a6953a702adaa284027c343a8a0eadf0a0d5a1d654496107cbe1f12175c2f37; path=/; domain=.infarmbureau.com; HTTPonly; Secure
2025-01-10 16:21:33 UTC	15196	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 61 54 00 11 00 00 00 01 06 00 00 00 60 ed 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 4c 49 4e 4f 28 06 60 16 8b 60 00 83 50 08 2c 09 85 66 11 10 0a 82 c0 20 82 9e 10 01 36 02 24 03 87 40 13 bf 7e 0b 87 44 00 04 20 05 e1 07 07 20 0c 81 3e 1b 06 f0 27 d0 db f6 82 e4 3b f8 da 3f e5 00 f3 ac 83 d1 9b 59 88 a9 ff f5 c1 27 6f 0c af ca eb b9 4d d4 53 de 88 9c fd ff ff 69 c9 c6 18 06 67 1d 80 ea 32 6d db fe 85 62 a4 bb b8 38 30 4a 48 2a 77 89 0c 55 83 29 d4 6c c8 9c a8 43 b6 de cc 86 0d c6 cb ae 79 8f d5 bb 83 30 69 20 ad 34 d2 90 c9 1a 2a e0 1e 87 b6 e2 5a 98 a0 cb 78 5c bd 65 2d 57 d7 9d 59 e3 d6 71 a3 d9 52 79 ce 4f 7e e5 a5 7a 35 54 4d 2e 60 0e 86 22 6e 84 8b 80 42 48 92 c8 cc 84 14 13 aa 74 f5 8e Data Ascii: wOF2aT`?LINO(``P,f 6$@~D >';?Y'oMSig2mb80JHwU)lCy0i 4Zx\e-WYqRyO~z5TM.`"nBHt
2025-01-10 16:21:33 UTC	321	IN	Data Raw: a1 d2 2e e2 a8 d7 5b b5 0d 5d d3 f0 f0 fa be 6e c2 6f 9b a3 9f 29 23 c4 d8 77 41 b6 c3 f9 39 06 61 75 a1 8a 86 80 a8 d6 91 f6 97 38 28 57 66 b1 6b 44 92 4b 12 82 d7 3b e4 dc 71 38 15 67 aa 30 1c be 98 ab 76 5f 49 01 ee 51 3c 81 71 4e 4c 59 2e 45 9e 4d 2a da ab f8 0a ae 8f 46 35 9e d9 cd b9 12 5a cd 8a 43 c5 e0 46 5c 29 fe a6 5d fa 30 03 e1 d1 e0 2e 15 13 b4 56 59 b5 0d c9 92 ec bd d2 6e 27 59 ce c1 5b d0 d1 ca ee e5 bc 19 0a 9f 6b a2 a5 9c c8 cb c7 ff 30 6b e8 5d 67 05 2f 74 51 65 d7 8d 7c 63 8d c8 36 e4 ac 36 f8 bb 2a ac f1 d8 be b6 18 d7 51 30 98 fd 94 a8 b4 8f 29 29 1c b2 55 35 73 5e 78 c4 28 a7 28 c8 40 c5 31 ee 0e 3c dd e0 89 25 77 5a da 8b ad 7c d8 fc c3 0d c7 43 a1 21 d9 ad 19 3b af 84 1d 95 64 b7 91 f1 b7 6a 7f 10 3c 9a d0 12 85 5a c5 34 7d 98 e6 Data Ascii: .[]no)#wA9au8(WfkDK;q8g0v_IQ<qNLY.EMF5ZCF\)]0.VYn'Y[k0k]g/tQe\|c66Q0))U5s^x((@1<%wZ\|C!;dj<Z4}
2025-01-10 16:21:33 UTC	9399	IN	Data Raw: 7c d7 50 cd 9c 98 4e 78 6f 08 96 8a df c4 7f 69 4f 23 c7 9c 99 1d f9 32 55 40 b3 7a 8c 30 64 62 6b 89 7d 34 8b 70 8e cb 6e 00 ab d9 ad e1 a4 0d 19 a4 84 f9 b6 c8 b6 74 8e 35 c3 02 23 6e ec f0 c1 59 8c 87 05 5f 30 4e 00 63 b7 a5 02 97 7e 5a ef 6c 05 c1 c7 cc 23 e8 13 ff 02 31 be c8 ca 3c 89 a0 4d 54 72 d1 3f 49 be 58 9d 1a 84 d8 a5 74 ec 6b 43 20 32 6b 2c 65 a5 fc c0 5d b2 73 f7 b5 10 62 29 e5 de 80 a2 f3 92 24 9f 43 08 2a 74 d6 b0 c7 bc 9b 52 89 10 4a 23 ae 26 bc f2 a2 97 1b 1a ed a5 9e f9 65 de 98 5a da e6 06 1f 42 8f 43 1d 36 f9 8f 63 d3 49 05 00 a2 72 36 64 35 0c 92 1b fe 4c 04 2a 01 99 98 51 18 84 22 f0 1b 31 03 28 6a 28 86 03 06 53 02 f5 a3 5a 2f 9a 97 12 37 2b f6 f3 d7 41 47 0b 42 4c 77 2b 6f ce 0b 83 1a 2a de fd f8 b5 b9 d4 21 75 f3 10 78 1c f0 6d Data Ascii: \|PNxoiO#2U@z0dbk}4pnt5#nY_0Nc~Zl#1<MTr?IXtkC 2k,e]sb)$CtRJ#&eZBC6cIr6d5LQ"1(j(SZ/7+AGBLw+o*!uxm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49790	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:33 UTC	1586	OUT	GET /fonts/neutrafaceslabtext-bold-webfont.woff HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.infarmbureau.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.infarmbureau.com/ResourcePackages/IFBIRedesign/assets/dist/main.css?v=638659012120000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:33 UTC	665	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Type: application/font-woff Last-Modified: Wed, 30 Oct 2024 20:04:47 GMT Accept-Ranges: bytes ETag: "070b5f862bdb1:0:dtagent10303241106123517POHb" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Timing-Allow-Origin: * Server-Timing: dtSInfo;desc="1", dtTao;desc="1" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 31812
2025-01-10 16:21:33 UTC	15645	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 7c 44 00 12 00 00 00 01 3a a8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 94 00 00 00 1c 00 00 00 1c 76 31 4c 51 47 44 45 46 00 00 01 b0 00 00 00 22 00 00 00 24 01 13 01 bd 47 50 4f 53 00 00 01 d4 00 00 25 ec 00 00 80 8a 7a 0a a3 b3 47 53 55 42 00 00 27 c0 00 00 01 30 00 00 01 ac a6 52 97 7b 4f 53 2f 32 00 00 28 f0 00 00 00 57 00 00 00 60 70 40 7c d8 63 6d 61 70 00 00 29 48 00 00 01 b4 00 00 02 1a 81 b5 89 35 63 76 74 20 00 00 2a fc 00 00 00 48 00 00 00 48 0c 72 05 38 66 70 67 6d 00 00 2b 44 00 00 00 f7 00 00 01 61 92 41 da fa 67 61 73 70 00 00 2c 3c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 2c 44 00 00 39 68 00 00 68 fc 09 d8 99 a3 68 65 61 64 00 00 65 ac 00 00 00 Data Ascii: wOFF\|D:FFTMv1LQGDEF"$GPOS%zGSUB'0R{OS/2(W`p@\|cmap)H5cvt *HHr8fpgm+DaAgasp,<glyf,D9hhheade
2025-01-10 16:21:33 UTC	16167	IN	Data Raw: 14 f7 67 27 5b b2 3d 6e 42 0b a0 bd 0d a2 fc 1f 04 53 46 a6 30 10 aa 64 05 b1 7a 65 94 cb 60 ec 5a e2 18 6a 8a 03 b3 12 01 13 c9 90 91 3c 6f bf ae af a7 ab d8 4f dc f4 2d 89 cf 15 01 78 6e 0e 7d 00 9e 9b 10 9f 6b 80 bb 1b a4 e7 4a 0e c7 11 ce 19 d5 b6 8c 80 1d 34 80 42 81 a8 3a 0d 23 04 24 88 90 21 1b 9c d0 d2 de eb 3a cc 26 d2 9f 20 e6 4a 37 68 22 24 ed 86 19 ea 70 8c a8 88 cf ba 9b 55 aa 44 68 9b eb 11 30 2b 52 d7 87 07 ec 4f 6c 38 c1 ed 01 88 3e 59 c0 c9 44 d2 c5 05 71 00 a0 c4 77 1a 8d 27 bf fe 42 b7 d1 f8 59 03 33 98 d1 1b 74 4e fd 5b f9 77 18 5c 3a 83 8e 74 08 0c dc 7f 14 9f a3 bb e4 45 e7 a4 2f 1c 71 bb 1d 39 eb d7 bf 6e cd 3b 38 77 24 ec 9b 74 be 38 dc ff 5f 02 ba 24 d1 25 d4 8e 14 81 f8 c3 e9 4b b4 f0 41 c3 b7 21 b6 a2 31 0c c9 15 36 d8 62 30 6b Data Ascii: g'[=nBSF0dze`Zj<oO-xn}kJ4B:#$!:& J7h"$pUDh0+ROl8>YDqw'BY3tN[w\:tE/q9n;8w$t8_$%KA!16b0k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49788	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:33 UTC	1557	OUT	GET /images/life-insurance-matters/heart.svg?sfvrsn=57e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:33 UTC	637	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:33 GMT Last-Modified: Fri, 02 Aug 2019 01:53:37 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=heart.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 2432
2025-01-10 16:21:33 UTC	2432	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 70 78 22 20 68 65 69 67 68 74 3d 22 35 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e 0d 0a 20 20 3c 67 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56px" height="50px" viewBox="0 0 56 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item</title> <desc>Created with Sketch.</desc> <g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49791	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:33 UTC	1555	OUT	GET /images/life-insurance-matters/car.svg?sfvrsn=55e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:33 UTC	635	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:33 GMT Last-Modified: Fri, 02 Aug 2019 01:56:24 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=car.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 5184
2025-01-10 16:21:33 UTC	5184	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="52px" height="42px" viewBox="0 0 52 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49789	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:33 UTC	1556	OUT	GET /images/life-insurance-matters/home.svg?sfvrsn=51e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:33 UTC	636	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:33 GMT Last-Modified: Fri, 02 Aug 2019 01:53:38 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=home.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 2687
2025-01-10 16:21:33 UTC	2687	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 70 78 22 20 68 65 69 67 68 74 3d 22 35 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 32 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56px" height="54px" viewBox="0 0 56 54" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 2</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49786	198.179.10.61	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:33 UTC	646	OUT	GET /farmhand/V1/fonts/121784c1-863c-4e49-b682-625ea7de55b0.woff2 HTTP/1.1 Host: cdn.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.infarmbureau.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.infarmbureau.com/farmhand/V1/consumer/theme.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:33 UTC	1185	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Last-Modified: Tue, 13 Mar 2018 20:05:31 GMT Accept-Ranges: bytes ETag: "3cea71a46bbd31:0:dtagent10303241106123517WCdL" Access-Control-Allow-Origin: * X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Timing-Allow-Origin: * Server-Timing: dtSInfo;desc="0", dtRpid;desc="697958822", dtTao;desc="1" Set-Cookie: dtCookie=v_4_srv_8_sn_B33009054E9ED3B7EF95087DA66BB339_perc_100000_ol_0_mul_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; Path=/; Domain=.infarmbureau.com Date: Fri, 10 Jan 2025 16:20:55 GMT Connection: close Content-Length: 26196 Set-Cookie: TS017720c6=01d11574813fefecfaf7169f4e21945fc3aa9c0b0495af5436190dd5851beac22322a948d3580b08fd1f146233ada732517a3d5932; Path=/; Secure; HTTPOnly Set-Cookie: TS013a8a7c=01d11574815138b5271f80138c7e24bc2c2280bf2995af5436190dd5851beac22322a948d3924bf8839d949d0ce3f2914d2f375e963ad9f40fdc7c15b86614aaa521ca9928; path=/; domain=.infarmbureau.com; HTTPonly; Secure
2025-01-10 16:21:33 UTC	15199	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 66 54 00 11 00 00 00 01 13 08 00 00 65 f0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 4c 49 4e 4f 28 06 60 16 8b 60 00 83 50 08 20 09 85 66 11 10 0a 82 d6 04 82 b4 33 01 36 02 24 03 87 40 13 c4 62 0b 87 44 00 04 20 05 e0 75 07 20 0c 81 1a 1b 4b fd 27 d0 db 7e 75 81 db 41 5e 48 bf bf 8c 1b d1 36 bc 07 53 17 4d cf 6d 3a 78 d6 92 2e 71 03 dd b6 5d 2c 13 d2 9b e9 85 5f 36 e8 c7 ec ff ff cf 48 3a e4 56 dd 56 3f c7 c1 27 5d 09 72 68 88 54 31 49 76 0c 99 fd e8 e9 4c a2 83 48 11 1d 85 13 c9 36 57 b3 8c dc 23 b2 da 54 b3 8a 65 e0 69 9b e1 0c 2e fb ae 13 b4 92 77 49 d1 94 1a 95 a1 b8 32 a6 48 f9 b9 91 e4 54 d1 63 5a 61 70 63 dd 14 39 f0 e2 7b 1d fd 48 0c 93 89 df b9 45 b7 bb 64 78 3f 4e c8 4e a5 79 4c d6 Data Ascii: wOF2fTe?LINO(``P f36$@bD u K'~uA^H6SMm:x.q],_6H:VV?']rhT1IvLH6W#Tei.wI2HTcZapc9{HEdx?NNyL
2025-01-10 16:21:33 UTC	321	IN	Data Raw: c0 5e 26 fd de ae 30 8a c0 34 d5 2b 27 e5 93 5a 8e fc 22 77 6f d2 5d 77 35 cf a7 4e ec 9b 64 e2 a3 3d 84 95 a0 d5 06 52 a1 82 7a 13 76 c8 38 dc 54 62 db a7 ef a9 84 2f 11 1c 21 82 df 87 ac 1f 0e 9a 61 97 3c e8 69 d3 12 e2 fa d4 1d 92 e6 48 cd c5 17 1b f9 2f cb 83 6f 49 8c 1d 94 8a ef f7 30 f7 00 e4 ad 5e e7 a7 c7 7b e8 7a 0c 1f 20 20 e0 e2 de cd 78 b3 3d 97 09 40 6d 26 4c 1a be 1a 68 a3 cf 63 6f 9f 9b 32 7a 87 f7 95 55 c9 9e c0 e8 c1 12 ef 81 f0 0f 12 b4 61 3b aa f8 68 63 41 99 9f 87 a1 e6 86 91 0b 90 6e 02 a9 c2 0d c2 d8 40 ee 1b bd bc 37 32 a1 ae 2a a2 bd 40 b9 df c7 b6 a5 2b 4c 30 ea dd 8c dd 4f 87 16 28 f6 df 84 03 5e 4f 2a 8a 92 e0 3f 9b db 85 70 b6 bd 85 21 d8 3f 1a ba a6 9f 03 24 ae 2f 58 47 d9 2a 1d c1 26 4d 24 90 aa 39 1e aa 92 c0 3b 02 fb f9 fb Data Ascii: ^&04+'Z"wo]w5Nd=Rzv8Tb/!a<iH/oI0^{z x=@m&Lhco2zUa;hcAn@72@+L0O(^O?p!?$/XG*&M$9;
2025-01-10 16:21:33 UTC	10676	IN	Data Raw: c0 c3 f5 26 23 a2 9c 1c 34 66 29 6c 1d 56 8c 3b 00 a0 e8 43 9c f9 0f 8e d8 f9 e1 3f 20 6e 7f 31 62 f0 38 77 08 16 74 08 0b 18 3b ff 3b 4b 9e 93 fc 0f c4 e2 5a 00 9a 7f 36 ac ec 6a 4e 14 fc 7d 77 59 f0 66 1c 37 9e 1b 77 8f b3 39 d2 f5 6e d3 05 90 8b 21 54 a8 41 04 ff 61 b9 3f 36 8d b9 5c d7 84 6a eb 50 e4 cc 3d da 44 c8 e7 d7 ff b3 90 52 df a2 67 d1 6c 1b 79 03 a6 8c 24 ab 50 02 23 5e fe bc 58 75 30 d2 8f 2f d5 bc f1 4f b2 a5 2b 81 ff fe 2d 30 b1 92 2b 5f 28 72 a1 e9 71 e5 28 b4 b2 04 cb 00 f0 af b3 c3 ce d0 d0 8c 1e ce 47 57 76 ae 24 e7 dc 3a c8 f7 ba 27 ec b5 f7 19 2f 72 09 c4 43 95 bd 42 9c 5a 5d a7 f7 a2 a5 ec bb 53 b4 03 27 b3 f7 c9 43 c0 b6 b5 3d 4b 8a 81 d0 a6 c8 97 e6 30 9b 7d 4a 3e 92 a4 c7 25 76 f3 4a a0 54 df 09 dd 43 44 42 41 0c 33 49 18 3a 8d Data Ascii: &#4f)lV;C? n1b8wt;;KZ6jN}wYf7w9n!TAa?6\jP=DRgly$P#^Xu0/O+-0+_(rq(GWv$:'/rCBZ]S'C=K0}J>%vJTCDBA3I:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49793	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:33 UTC	1539	OUT	GET /images/default-album/icons/facebook.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:33 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:33 GMT Last-Modified: Wed, 13 May 2020 02:41:54 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=facebook.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 584
2025-01-10 16:21:33 UTC	584	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 5b 5d 3e 0d 0a 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 35 31 32 20 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 70 78 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 77 69 64 74 68 3d 22 35 31 32 70 78 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 Data Ascii: <?xml version="1.0"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]><svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49792	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:33 UTC	1538	OUT	GET /images/default-album/icons/twitter.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:33 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:33 GMT Last-Modified: Wed, 13 May 2020 02:41:54 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=twitter.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 1414
2025-01-10 16:21:33 UTC	1414	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49787	142.250.185.206	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:33 UTC	840	OUT	GET /embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:33 UTC	2394	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 10 Jan 2025 16:21:33 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=7qZAKuGErAw; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=iVrpiiKsmKo; Domain=.youtube.com; Expires=Wed, 09-Jul-2025 16:21:33 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgCw%3D%3D; Domain=.youtube.com; Expires=Wed, 09-Jul-2025 16:21:33 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: __Secure-ROLLOUT_TOKEN=CImgu4uh2s-9owEQn6TF58frigMYn6TF58frigM%3D; Domain=youtube.com; Expires=Wed, 09-Jul-2025 16:21:33 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 37 66 65 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 63 4a 71 37 42 6b 31 45 64 7a 68 62 73 58 32 70 67 2d 71 72 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 7fef<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="xcJq7Bk1EdzhbsX2pg-qrw">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 Data Ascii: 1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 20 6c 65 66 74 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 69 6d 67 2f 6d 65 68 37 2e 70 6e 67 29 20 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 Data Ascii: left: 0; right: 0; bottom: 0; padding: 25px; font-size: 13px; background: url(/img/meh7.png) 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 6c 74 28 65 6c 2c 30 29 7d 29 3b 65 6c 73 65 20 73 6c 74 28 65 6c 2c 31 36 29 7d 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 63 4a 71 37 42 6b 31 45 64 7a 68 62 73 58 32 70 67 2d 71 72 77 22 3e 76 61 72 20 79 74 63 66 67 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 79 74 26 26 79 74 2e 63 6f 6e 66 69 67 5f 7c 7c 79 74 63 66 67 2e 64 61 74 61 5f 7c 7c 28 79 74 63 66 67 2e 64 61 74 61 5f 3d 7b 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6f 29 7b 72 65 74 75 72 6e 20 6b 20 69 6e 20 79 74 63 66 67 2e 64 28 29 3f 79 74 63 66 67 2e 64 28 29 5b 6b Data Ascii: ationFrame(function(){slt(el,0)});else slt(el,16)}})(window,document);</script><script nonce="xcJq7Bk1EdzhbsX2pg-qrw">var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 6e 5f 6e 65 77 5f 74 61 62 5f 69 63 6f 6e 5f 66 6f 72 5f 73 68 6f 72 74 5f 64 72 5f 66 6f 72 5f 64 65 73 6b 74 6f 70 5f 73 65 61 72 63 68 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 61 63 66 5f 73 6c 6f 74 5f 61 73 64 65 5f 69 6e 66 65 65 64 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 61 63 66 5f 73 6c 6f 74 5f 61 73 64 65 5f 70 6c 61 79 65 72 5f 62 79 74 65 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 61 63 66 5f 73 6c 6f 74 5f 61 73 64 65 5f 70 6c 61 79 65 72 5f 62 79 74 65 5f 68 35 5f 54 56 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 65 72 73 69 73 74 65 6e 74 5f 64 65 76 69 63 65 5f 74 6f 6b 65 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 5f 72 5f 63 5f 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 5f Data Ascii: n_new_tab_icon_for_short_dr_for_desktop_search":true,"enable_pacf_slot_asde_infeed_h5":true,"enable_pacf_slot_asde_player_byte_h5":true,"enable_pacf_slot_asde_player_byte_h5_TV":true,"enable_persistent_device_token":true,"enable_pl_r_c_s":true,"enable_pl_
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 5f 74 61 72 67 65 74 5f 75 69 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 6d 6f 64 65 72 6e 5f 74 79 70 6f 67 72 61 70 68 79 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 73 68 6f 72 74 73 5f 63 6f 6d 6d 65 6e 74 73 5f 70 61 6e 65 6c 5f 69 64 5f 63 68 61 6e 67 65 22 3a 74 72 75 65 2c 22 6e 65 74 5f 70 69 6e 67 73 5f 75 73 65 5f 66 65 74 63 68 22 3a 74 72 75 65 2c 22 6e 65 74 77 6f 72 6b 6c 65 73 73 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 6e 65 77 5f 63 73 6e 5f 73 74 6f 72 61 67 65 5f 64 65 73 69 67 6e 22 3a 74 72 75 65 2c 22 6e 6f 5f 63 6c 69 65 6e 74 5f 76 65 5f 61 74 74 61 63 68 5f 75 6e 6c 65 73 73 5f 73 68 6f 77 6e 22 3a 74 72 75 65 2c 22 6e 77 6c 5f 73 65 6e 64 5f 66 72 6f 6d 5f 6d 65 6d 6f 72 79 5f 77 68 65 6e 5f 6f 6e 6c 69 6e 65 22 3a 74 72 75 65 2c Data Ascii: _target_ui":true,"mweb_modern_typography":true,"mweb_shorts_comments_panel_id_change":true,"net_pings_use_fetch":true,"networkless_logging":true,"new_csn_storage_design":true,"no_client_ve_attach_unless_shown":true,"nwl_send_from_memory_when_online":true,
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 6c 6f 67 67 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 77 6f 66 66 6c 65 5f 75 73 65 64 5f 73 74 61 74 65 5f 72 65 70 6f 72 74 22 3a 74 72 75 65 2c 22 79 74 69 64 62 5f 63 6c 65 61 72 5f 65 6d 62 65 64 64 65 64 5f 70 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 48 35 5f 61 73 79 6e 63 5f 6c 6f 67 67 69 6e 67 5f 64 65 6c 61 79 5f 6d 73 22 3a 33 30 30 30 30 2e 30 2c 22 61 75 74 6f 70 6c 61 79 5f 70 61 75 73 65 5f 62 79 5f 6c 61 63 74 5f 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 2c 22 6c 6f 67 5f 77 69 6e 64 6f 77 5f 6f 6e 65 72 72 6f 72 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 31 2c 22 74 76 5f 70 61 63 66 5f 6c 6f 67 67 69 6e 67 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2e 30 31 2c 22 77 65 62 5f 73 79 73 74 65 6d 5f 68 65 61 6c Data Ascii: logging_infra":true,"woffle_used_state_report":true,"ytidb_clear_embedded_player":true,"H5_async_logging_delay_ms":30000.0,"autoplay_pause_by_lact_sampling_fraction":0.0,"log_window_onerror_fraction":0.1,"tv_pacf_logging_sample_rate":0.01,"web_system_heal
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 2c 67 7a 69 70 28 67 66 65 29 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 35 30 31 30 37 2e 30 31 2e 30 30 22 2c 22 6f 73 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 56 65 72 73 69 6f 6e 22 3a 22 31 30 2e 30 22 2c 22 6f 72 69 67 69 6e 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 65 6d 62 65 64 2f 4d 5a 54 57 74 32 52 63 68 67 41 3f 73 69 5c Data Ascii: x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36,gzip(gfe)","clientName":"WEB_EMBEDDED_PLAYER","clientVersion":"1.20250107.01.00","osName":"Windows","osVersion":"10.0","originalUrl":"https://www.youtube.com/embed/MZTWt2RchgA?si\
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 22 22 2c 22 62 72 6f 77 73 65 72 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 56 65 72 73 69 6f 6e 22 3a 22 31 30 2e 30 22 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 44 45 53 4b 54 4f 50 22 2c 22 69 6e 74 65 72 66 61 63 65 4e 61 6d 65 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 2c 22 69 6e 74 65 72 66 61 63 65 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 35 30 31 30 37 2e 30 31 2e 30 30 22 7d 2c 22 73 65 72 69 61 6c 69 7a 65 64 45 78 70 65 72 69 6d 65 6e 74 49 64 73 22 3a 22 32 34 30 30 34 36 34 34 2c 32 34 34 33 39 33 36 31 2c 32 34 35 36 36 36 38 37 2c 35 31 30 31 30 32 33 35 2c 35 31 30 31 37 33 34 36 2c Data Ascii: "","browser":"Chrome","browserVersion":"117.0.0.0","os":"Windows","osVersion":"10.0","platform":"DESKTOP","interfaceName":"WEB_EMBEDDED_PLAYER","interfaceVersion":"1.20250107.01.00"},"serializedExperimentIds":"24004644,24439361,24566687,51010235,51017346,
2025-01-10 16:21:33 UTC	2394	IN	Data Raw: 5c 75 30 30 33 64 30 5c 75 30 30 32 36 63 6f 6d 70 72 65 73 73 69 6f 6e 5f 64 69 73 61 62 6c 65 5f 70 6f 69 6e 74 5c 75 30 30 33 64 31 30 5c 75 30 30 32 36 63 6f 77 5f 6f 70 74 69 6d 69 7a 65 5f 69 64 6f 6d 5f 63 6f 6d 70 61 74 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 73 69 5f 6f 6e 5f 67 65 6c 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 64 61 73 68 5f 6d 61 6e 69 66 65 73 74 5f 76 65 72 73 69 6f 6e 5c 75 30 30 33 64 35 5c 75 30 30 32 36 64 65 62 75 67 5f 62 61 6e 64 61 69 64 5f 68 6f 73 74 6e 61 6d 65 5c 75 30 30 33 64 5c 75 30 30 32 36 64 65 62 75 67 5f 73 68 65 72 6c 6f 67 5f 75 73 65 72 6e 61 6d 65 5c 75 30 30 33 64 Data Ascii: \u003d0\u0026compression_disable_point\u003d10\u0026cow_optimize_idom_compat\u003dtrue\u0026csi_config_handling_infra\u003dtrue\u0026csi_on_gel\u003dtrue\u0026dash_manifest_version\u003d5\u0026debug_bandaid_hostname\u003d\u0026debug_sherlog_username\u003d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49803	157.240.251.9	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	541	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:34 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-0cY1kCS3' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-10 16:21:34 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-10 16:21:34 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-01-10 16:21:34 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e Data Ascii: \|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefin
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f Data Ascii: urn j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enfo
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 Data Ascii: odules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefi
2025-01-10 16:21:34 UTC	1703	IN	Data Raw: 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c Data Ascii: b.getProtocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).l
2025-01-10 16:21:34 UTC	14681	IN	Data Raw: 6c 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 61 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 Data Ascii: l&&(this.moduleEncodings=a)}},{key:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 Data Ascii: lsFBEventsLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET");f.getFbeventsModule
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 6e 75 6d 62 65 72 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d Data Ascii: nction p(){return function(a){if(typeof a!=="string")throw new g();return a}}function q(){return function(a){if(typeof a!=="string"&&typeof a!=="number")throw new g();return a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49805	52.252.156.53	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	653	OUT	OPTIONS /collect/v2/data-centers/b9914fdb-2e6f-d6bb-b0aa-8ae951f29484/datasources/IFBI_MFSF_To_DevDEC/interactions HTTP/1.1 Host: api.dec.sitefinity.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-dataintelligence-sdk-version Origin: https://www.infarmbureau.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:34 UTC	1351	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:34 GMT Content-Length: 0 Connection: close Access-Control-Allow-Headers: Content-Type, Content-Length, X-Requested-With, Authorization, x-dataintelligence-accountkey, x-dataintelligence-datacenterkey, x-dataintelligence-datasource, x-dataintelligence-sort, x-dataintelligence-skip, x-dataintelligence-take, x-dataintelligence-fields, x-dataintelligence-count, x-dataintelligence-filterby, x-dataintelligence-filter, x-dataintelligence-contains, x-dataintelligence-nextrowkey, x-dataintelligence-flush, x-dataintelligence-fromdate, x-dataintelligence-todate, x-dataintelligence-period, x-dataintelligence-scale, x-dataintelligence-predicate, x-dataintelligence-subject, x-dataintelligence-ids, x-dataintelligence-datasources, x-dataintelligence-imagecrop, x-dataintelligence-contacts, x-forwarded-for, x-dataintelligence-sdk-version, Referer, Origin, x-dataintelligence-clientid, x-dataintelligence-campaignids, x-dataintelligence-userid, x-dataintelligence-errorid, x-dataintelligence-correlationid, cf-connecting-ip, x-forwarded-for, http_x_forwarded_for, x-forwarde [TRUNCATED] Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS Access-Control-Allow-Origin: * request-context: appId=cid-v1:a33f2e3a-ec15-4d53-8ac6-897af884626b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49808	13.107.246.45	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	532	OUT	GET /tag/bsa8xx9k5w HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:34 UTC	529	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:34 GMT Content-Type: application/x-javascript Content-Length: 1106 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=d0b76cf50d6948c988aa2100a70bfd50.20250110.20260110; expires=Sat, 10 Jan 2026 16:21:34 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:9c7c879b-c51a-427e-9701-218438da5f81 x-azure-ref: 20250110T162134Z-156796c549b92dr4hC1EWRy0q40000001cz0000000008ur0 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2025-01-10 16:21:34 UTC	1106	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 6e 3d 67 61 2e 67 65 74 41 6c 6c 28 29 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 7b 76 61 72 20 73 3d 6e 5b 6f 5d 3b 69 66 28 22 55 41 Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);a[c]("metadata",(function(e){function n(){var n=ga.getAll();for(var o in n){var s=n[o];if("UA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49812	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1539	OUT	GET /images/default-album/icons/linkedin.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8
2025-01-10 16:21:34 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Wed, 13 May 2020 02:41:54 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=linkedin.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 834
2025-01-10 16:21:34 UTC	834	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 5b 5d 3e 0d 0a 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 35 31 32 20 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 70 78 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 77 69 64 74 68 3d 22 35 31 32 70 78 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 Data Ascii: <?xml version="1.0"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]><svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49810	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1518	OUT	GET /api/myagent HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	559	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="0", dtRpid;desc="1391002708" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 4
2025-01-10 16:21:34 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49811	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1687	OUT	GET /images/homepage-hero-images/people-hero/happy-family-with-kids-in-front-of-indiana-skyline-min.png?sfvrsn=a91532ba_1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	683	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/png Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Mon, 11 Dec 2023 14:17:33 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=Happy-family-with-kids-in-front-of-indiana-skyline-min.png X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 84423
2025-01-10 16:21:34 UTC	15701	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cc 00 00 01 bb 08 03 00 00 00 79 22 55 cd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 03 00 50 4c 54 45 47 70 4c 63 5f 5a 75 6d 5f 66 61 57 05 03 02 07 06 04 04 03 02 5e 5d 5c 4b 48 3b 1f 1d 19 3e 2d 28 33 22 1a aa 9f 83 a9 33 32 8b 6a 4f ca b5 a3 d7 68 67 cd 5e 5c c1 a6 94 a0 87 74 c6 af 99 c7 b4 96 aa 8c 6f 59 4b 34 5d 41 2b a2 76 5a 9e 7f 59 79 8d a8 2c 20 17 cf ba a2 c3 94 73 3a 32 25 78 58 3d db c3 b1 a0 7c 5e db a0 48 72 4c 2e d7 c2 b0 2f 2a 20 c5 a7 8e b4 8f 71 4e 39 24 63 45 28 81 5a 3e d6 74 70 9f 6f 55 d2 67 61 5c 79 93 66 8a 9c 94 1d 18 2e 4b 63 07 05 06 e0 b6 9d dd 29 2c dd ae Data Ascii: PNGIHDRy"UgAMAasRGBpHYsPLTEGpLc_Zum_faW^]\KH;>-(3"32jOhg^\toYK4]A+vZYy, s:2%xX=\|^HrL./* qN9$cE(Z>tpoUga\yf.Kc),
2025-01-10 16:21:34 UTC	683	IN	Data Raw: a1 81 dd 04 82 93 0f 3b bb 7f 60 34 59 ec 6e 6d e1 82 e1 2c 4e 81 f5 48 f9 93 16 f3 64 e1 d5 bc b6 36 06 99 60 b9 3f aa fb c8 c0 c0 d1 6b a9 23 cd fb 9b 4f 9c 3b 81 ac c1 f0 25 ad d9 3c d5 3c 72 a9 01 5a 56 03 98 8a c9 d4 3b 4a 8b 25 55 20 e1 25 ed a5 ac ea 62 4c 85 8b 35 7b ae 50 1e 69 23 ab 76 f0 f5 ca 77 90 13 1e 15 98 a3 c0 3c 7a 65 c6 e5 f6 cb 97 3f f8 a0 67 eb 57 44 33 74 26 56 ab f5 cb 9a 08 16 8c a5 66 4c b7 16 05 69 10 35 ea 8b 13 33 0b 95 2d 13 ec 11 41 77 5d a1 cc cf 72 5e 24 97 1e a5 9d 4d 8f 74 8f 34 0a 4c d3 bc 07 a8 1e 31 0b 56 04 53 8a ed 11 4e b0 d4 33 84 b0 aa 45 80 10 3c c0 d1 44 76 1e 45 50 2b 6e 0e a9 6e a8 ae ae b7 e1 da bb fa ea d6 b5 0a 4c 0f bb 8f ee 16 71 4f 9b ff da 1f 9e fe 4e 4a 7e 7e a5 c3 31 00 7f 16 6d 43 c6 6e b6 15 18 2d Data Ascii: ;`4Ynm,NHd6`?k#O;%<<rZV;J%U %bL5{Pi#vw<ze?gWD3t&VfLi53-Aw]r^$Mt4L1VSN3E<DvEP+nnLqONJ~~1mCn-
2025-01-10 16:21:34 UTC	15598	IN	Data Raw: 2e e9 7d f4 7a a5 29 9e 6d 52 d9 99 58 20 e3 d0 17 37 54 63 45 68 7a 43 3e 6c 66 00 66 11 da 8f 3e 25 99 a1 a1 ca 35 53 80 f9 87 3f bc f6 fb d7 9e 38 76 5a 4c 26 d5 ac 9a 45 0e 76 f5 19 61 29 2c 4c ab 3b e1 cf 22 51 50 81 b4 f0 55 c0 ac c3 2c 57 47 5d 2e cc dc 4e da b8 de a1 eb 57 36 36 5f 1a 6e de 31 fa 61 d3 f5 1a cb b5 4b c3 27 4e 48 7e b5 d9 df 5b 5e 79 8c 53 5f e7 af be f2 ca 4f 7e f8 93 9f bc f2 31 ca 68 03 dd 83 51 64 42 a5 3a ba f1 ea c5 41 44 90 17 3f 78 ff af ed 84 a6 d8 4b c8 78 ca a1 c1 23 e5 55 55 81 04 1f 69 02 66 e4 87 4a 86 e8 ab 70 82 24 9b d7 df 05 98 4c ae eb 2c 1c dd b1 42 30 85 a6 b9 00 bb 20 63 60 1f 99 bb d9 cb f4 8d 32 65 79 98 1b 02 5f 8e ce 2a c9 94 87 2c 37 37 c1 19 80 69 30 3d fa c0 44 d0 0c 59 84 49 b0 54 d2 c4 c8 81 51 46 e9 Data Ascii: .}z)mRX 7TcEhzC>lff>%5S?8vZL&Eva),L;"QPU,WG].NW66_n1aK'NH~[^yS_O~1hQdB:AD?xKx#UUifJp$L,B0 c`2ey_*,77i0=DYITQF
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 4e 56 c2 32 51 99 f0 5c 8d a7 27 0e a9 7f b0 69 67 74 6d 34 58 1c 7f 3b 2f ff 68 62 e9 6f 83 e2 c3 cb 82 e5 88 8f a5 5d 02 4c 34 31 6d 04 4c b4 a5 c3 54 4a 23 c8 c2 42 e1 71 85 ef 01 f9 a3 d3 f3 e8 09 4c db c5 dd 2e 3d 6d 97 2e 9b 6d 31 20 dd cd 88 19 06 9f 9b 8c 04 58 77 b8 56 97 4c 52 08 e8 ea f5 05 ed f5 77 1e 96 d3 2a 27 4f 1e 58 3b 63 ed c0 c0 8c 6d 6b b6 f5 0f 0d bb 5e 3f 7b 7d 79 75 6b 31 50 2b 47 ae da 8f 79 bd 9c ca 62 1a 6a 0e 4b 53 82 99 52 5e 9c 9a b2 76 c6 00 32 dc 9c d4 f2 72 bc 58 9c 53 de ff b3 bf c5 ae f1 3f bb 6a 53 7a 0a cd 53 6a 1b 6c 4c 3a d4 b8 3b f9 8f e7 27 4d 3a d4 b4 0f 57 dc 76 83 d2 a3 7c 41 db e0 6b 4d b8 17 e4 d0 76 fb 6e 9b 2d 28 f6 78 83 11 34 f1 f6 8f fd 2c 60 5a 6b 75 a6 b2 cc 05 9b ca 66 ad 5e 06 d1 d9 ba 13 d3 bc d9 0a Data Ascii: NV2Q\'igtm4X;/hbo]L41mLTJ#BqL.=m.m1 XwVLRw*'OX;cmk^?{}yuk1P+GybjKSR^v2rXS?jSzSjlL:;'M:Wv\|AkMvn-(x4,`Zkuf^
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: f7 37 de 1c cf 60 59 85 b4 47 73 b3 2e 10 69 62 72 1b 19 d1 2e 67 e7 0f 2f 5d b7 6e fb 16 24 c2 70 b4 78 80 a6 4a 6c fd 54 62 ab 65 b5 4b 14 31 b4 44 c6 25 fc 60 9a b3 e7 44 64 a6 73 da 16 43 0b 28 5b 61 a4 9c 83 d6 73 e4 12 9a 23 47 eb 09 e6 6f bd cf 0d f7 b3 c8 b8 70 82 9c 80 f5 14 cb 8c af 20 19 e8 60 1f 47 07 9b 48 9d 6c 82 99 77 a1 a7 a7 5f a0 94 46 59 0a f7 fb 06 26 3f b7 0c 88 1a 23 82 25 17 86 68 a0 82 27 5f e2 27 60 89 81 83 fc 51 67 0b 34 63 a9 61 b8 99 81 d3 d9 82 a1 a7 f6 2e 76 a8 40 64 2d a9 01 c9 2a 64 29 47 05 42 b3 5e 74 db d6 d1 91 b5 ba 9d 7a b4 90 a0 b0 a1 f6 8b bb 4a 63 bd 46 2e ef 69 0a cf ee fe df b1 cb 96 c3 0a cc 37 ff e6 cd a3 54 96 00 9a d2 d0 64 1f 0c 96 5a 8a 29 92 82 76 c4 e1 e3 0d c7 0f 1f 3e bd 6e fb f6 9d 9b f0 ef 16 38 47 Data Ascii: 7`YGs.ibr.g/]n$pxJlTbeK1D%`DdsC([as#Gop `GHlw_FY&?#%h'_'`Qg4ca.v@d-*d)GB^tzJcF.i7TdZ)v>n8G
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 3a fb 3a e7 0c 6a 13 ac 65 c8 91 10 a8 5a aa f5 a3 7a b3 61 76 b4 af 7b 6e 56 b3 77 39 c8 00 aa ce 4e 7e 3a 9a 6a 76 77 c5 e1 30 77 33 c9 83 bb 62 f1 1a ea 89 7f 22 95 45 a3 d9 68 3c 97 0a e9 12 5a 6b e1 43 93 32 9e db 09 cf 48 8f 34 85 e6 8f 3a 87 96 bb ed 5f 50 c1 16 95 a2 a1 76 0e 68 59 0e 68 97 45 92 9f 4b b5 1f 55 14 8a fe 34 51 93 dc 23 05 b4 42 1a 9a 68 98 2f 19 db 8a 42 be 1a 8f 7f b6 8d c0 94 f6 d9 6d c0 24 c7 79 29 33 d9 e2 33 83 65 38 e9 9a dc 55 4c f9 a2 fa 1e e7 8f 75 03 ff 8c 8c 0c 00 99 41 df f1 2e 0f 54 f5 c9 63 6c f7 e1 e2 52 30 41 8a 53 68 71 c8 65 08 4d 1a 0b 0b f7 64 87 b9 f9 b9 f9 c8 b3 ee d2 8a e5 9a 67 92 4c b1 a2 f0 a2 2d 13 a8 fb a4 6a fa ee 6c a8 2c 22 6e 36 90 c7 f4 e0 4a 01 41 49 81 6c 73 73 4b b8 3f 05 e3 71 8d 9d 33 7a bd 5a Data Ascii: ::jeZzav{nVw9N~:jvw0w3b"Eh<ZkC2H4:_PvhYhEKU4Q#Bh/Bm$y)33e8ULuA.TclR0AShqeMdgL-jl,"n6JAIlssK?q3zZ
2025-01-10 16:21:34 UTC	3289	IN	Data Raw: 1c e7 20 a6 98 ee f2 c9 c5 9e bd b2 a6 c1 a3 9d 1c 43 8a dd 6e 6c 98 e5 89 12 16 a7 a4 b7 00 fc ab 04 9c 35 04 d3 ed 01 35 2b 4b ea 4b ea eb eb 39 e4 80 7b 31 64 dc 3a 76 44 fd fa fa d2 9e 63 27 b5 9d dd a1 c1 14 a9 fd a4 cf 01 a5 f9 7c 1a 98 fa e5 07 f9 80 15 ae 84 a4 04 b9 f4 b7 b8 7b ea 07 fe 2b f5 d4 32 e6 41 96 a1 3f 33 f0 70 f2 a9 99 9c b1 50 71 57 0a 99 59 ad a3 50 13 01 69 79 56 1d 53 50 69 89 31 b4 da cc 6a ab aa 24 03 85 a6 09 6c ad c8 c8 5b ad 52 96 40 9e 25 2f 99 60 36 1b cf 5a 3d 69 c2 b9 64 c9 33 ab 36 0c f6 0e 62 5c 6d 53 13 c5 77 4c ae 1d 3c 3a cd 71 20 2c 37 96 aa 65 26 da 61 86 87 e0 23 4b 8a 40 c6 9a 9a 3e 01 a1 29 5c 53 c3 9f 01 2f 8a 62 a8 7f 34 73 4e 37 96 7d b5 74 f5 5c f2 b8 b6 71 9d 02 d6 28 70 1a 22 cf 69 aa 96 ae 74 03 a4 81 13 Data Ascii: Cnl55+KK9{1d:vDc'\|{+2A?3pPqWYPiyVSPi1j$l[R@%/`6Z=id36b\mSwL<:q ,7e&a#K@>)\S/b4sN7}t\q(p"it

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49813	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1701	OUT	GET /images/homepage-hero-images/hero-banner/indiana-farm-bureau-background_125207343-0852-4dc5-bedc-4a47705856ea.png?sfvrsn=683a33ba_1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	698	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/png Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Wed, 17 May 2023 02:16:09 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=indiana-farm-bureau-background_125207343-0852-4dc5-bedc-4a47705856ea.png X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:20 GMT Connection: close Content-Length: 197512
2025-01-10 16:21:34 UTC	15583	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0c 0c 0c 0c 0d 0c 0e 10 10 0e 14 15 13 15 14 1d 1b 18 18 1b 1d 2c 1f 22 1f 22 1f 2c 42 29 30 29 29 30 29 42 3b 47 3a 36 3a 47 3b 69 53 49 49 53 69 7a 66 61 66 7a 93 84 84 93 ba b0 ba f3 f3 ff 01 0c 0c 0c 0c 0d 0c 0e 10 10 0e 14 15 13 15 14 1d 1b 18 18 1b 1d 2c 1f 22 1f 22 1f 2c 42 29 30 29 29 30 29 42 3b 47 3a 36 3a 47 3b 69 53 49 49 53 69 7a 66 61 66 7a 93 84 84 93 ba b0 ba f3 f3 ff ff c2 00 11 08 04 4c 0b 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 fd 88 b0 0d 42 81 51 14 a9 6c 2a 58 a5 28 2d a8 02 58 40 89 00 54 12 a5 b0 82 d5 b0 b7 31 22 a0 59 56 da a2 59 2b 46 89 4a 69 Data Ascii: JFIF,"",B)0))0)B;G:6:G;iSIISizfafz,"",B)0))0)B;G:6:G;iSIISizfafzL@"BQl*X(-X@T1"YVY+FJi
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 47 bb 7c be 77 e2 1c 7f 65 fc fb 5e 97 83 e7 7a 6f 7d 63 e9 fa bc 59 ef c2 7d 6f 27 1f 2e 3e 97 4e de 6f 4b cf b9 cb d3 cb 9f ed be a6 33 8f 2f e3 fa fe 47 c7 39 7d 1e 9e 6d fa 7a 79 7e 9f af c7 c7 3e 0f 2f d6 e9 e7 f9 dc 7d 3d 3e 8e 38 ef 96 e7 0e 5b e3 7a 67 8e 7d dc 21 be de 9c f9 3b f8 f9 bb 7a f7 e4 ef 3c dd b9 f3 e3 73 d6 67 1d 75 eb d7 8f af 0c 24 fa 5a f8 f7 d3 d3 1d b7 c3 ee fe c7 b5 63 76 75 b9 fe 5c 5e 7c 7d 1f 4b d2 fc ff 00 b3 93 b6 67 4f 9b bf bb 71 f1 fc d9 ef c6 f5 ed f5 3e 8f e3 fe c7 93 d7 e8 39 78 bb 7c ff 00 47 5e f8 e7 af a9 c5 df 7c 35 db 7e 7d 71 ed bf 2b cb ea e0 72 f2 f9 fe 8f d3 f1 b9 f6 ef 3c 5f 37 b7 29 d3 cf 27 7c f5 ce 3c db f4 70 9b ed d3 ad d7 1f b1 fb 6c ef 5e 4f 97 ed f9 5e de de 9f 4f cb 9e bf d1 7a 25 e7 ea f2 fc 4e 3e Data Ascii: G\|we^zo}cY}o'.>NoK3/G9}mzy~>/}=>8[zg}!;z<sgu$Zcvu\^\|}KgOq>9x\|G^\|5~}q+r<_7)'\|<pl^O^Oz%N>
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 21 65 79 5e 56 59 79 59 65 96 59 65 f2 bf db df 25 e7 7c 96 5f f4 3f 0f f5 7f 65 3d a2 c8 5a 1f f9 e2 5f 29 fb 2f 3e dc 8b 99 fb 0b 37 fd 6f 03 ea fe c9 ba 16 e3 ed fe 78 97 ca 5c f6 58 ff 00 b0 1f ec ac c0 fa ab f6 3b 0b 27 d5 7f 9e 25 f2 9f be bd 87 fd 80 f9 70 7e ac 7f 69 dd 7f 9e 25 f2 97 f6 e6 0f d5 87 ed 3b e7 1b 7a 8d 26 96 53 28 b2 d7 f9 bd fc a5 fb 57 fd 80 f2 7c b8 5f 52 1f b4 fb b2 93 a8 b3 0b e0 b9 5b b6 c7 9d b1 7f 9a df ca 5f db 98 7f 52 1f b4 fb 9e 58 8d 2a b8 e2 46 11 df 8f 82 4b 11 6c 96 4b 96 3f e6 b9 7c a5 fd 31 fb ab f7 cf 96 1f 38 7e d1 5e b9 65 8d d4 95 6c cd 31 11 c2 ae 9f aa ba 47 a7 2c 7f cd 6f ac bf b5 df 2c 3e 70 fd a2 ea f2 c4 f9 13 b1 2b cf 55 75 87 c3 96 1d 3f cd 6f ab e7 af 65 66 bf a3 2f df 3e 58 fc a3 fb 45 df 2c 4f 98 d5 Data Ascii: !ey^VYyYeYe%\|_?e=Z_)/>7ox\X;'%p~i%;z&S(W\|_R[_RX*FKlK?\|18~^el1G,o,>p+Uu?oef/>XE,O
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 2c e1 78 96 79 7c 72 5e 1b 15 45 b3 0f c3 62 4d 7a bc 91 c2 5c 7e 19 e4 f0 89 f8 48 da d3 2f 0d 0b db 85 80 68 c1 3f 45 11 86 0c 24 d9 2e 14 96 eb 4c 55 2d 67 57 a8 b6 59 6c f5 9e a3 71 59 a4 d2 28 a3 4c 4d 31 e4 a2 99 4c ac bd 28 f1 52 8b c2 55 19 e1 69 89 c5 c2 38 f8 67 1e 27 19 9c 59 9c 4c 63 56 39 78 c7 eb 15 8a 68 99 c3 25 86 2c 34 3c 28 0b 0e 27 0e 27 0e 06 88 d9 c2 81 c1 81 c1 44 70 ff 00 f2 28 71 92 4f 4e bc 73 8b 33 8c 8e 34 0e 26 1b 2e 39 6e 6e 69 4c e1 61 0f c3 60 9e 59 76 7e 1f 15 74 e1 f8 81 f1 a3 d7 88 fb f1 62 71 22 6a 2c d4 27 b9 27 b1 8d 89 0d 91 1d 0f a6 98 1c 38 18 90 8a 8e d0 84 5c 51 89 1a 6a 9e 1f a2 26 26 16 d6 61 e1 b9 59 c2 62 83 7b 93 8b 4c 8c 5b 66 89 95 23 41 a4 a2 b9 56 6c 62 2a 1b de 2c 16 98 35 1c 25 b1 08 4f 56 fe 26 11 85 Data Ascii: ,xy\|r^EbMz\~H/h?E$.LU-gWYlqY(LM1L(RUi8g'YLcV9xh%,4<(''Dp(qONs34&.9nniLa`Yv~tbq"j,''8\Qj&&aYb{L[f#AVlb*,5%OV&
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 47 48 8e 91 0b 82 17 04 2e 04 e1 e8 75 3f c2 d7 c1 ac 6f 12 10 c8 30 32 c1 4d a5 08 af d8 8a 69 1a ff 00 f5 09 12 30 90 c5 9d 1e 2d fa 2e e4 0f 78 11 85 ee ff 00 a3 8f c0 7a c7 f7 1c 39 26 2d 66 e4 49 d0 4f 16 9b f9 19 ed 1b 50 d3 f6 17 de ec c9 c9 bd 85 3e 98 a6 17 f6 df dc 12 36 10 99 36 27 64 d9 26 48 78 1f 78 95 24 2f 43 b8 8c ec 58 f0 d0 4e 13 81 31 c4 31 69 eb 6d 5e 08 20 81 da 5b 44 3d 39 10 88 27 e2 b2 30 c2 8a 11 02 12 40 81 aa b3 c1 11 93 74 b9 23 b6 46 d5 60 b3 54 87 c8 be 43 9e 44 bf 71 1d 95 59 0f 62 51 8c d1 f6 80 92 4a 16 10 9b 47 2c 96 70 b5 88 49 10 b2 23 61 f8 23 ad 24 72 45 6a d1 04 68 81 1b bd 12 bf a1 45 3d ff 00 c2 e7 9e 47 6b c9 41 7a 96 6e 16 46 28 bf 51 27 c8 55 59 5f 90 d4 f2 60 5e c2 f4 27 45 1b 0c ec 7a 44 39 7b b2 00 bf a3 82 Data Ascii: GH.u?o02Mi0-.xz9&-fIOP>66'd&Hxx$/CXN11im^ [D=9'0@t#F`TCDqYbQJG,pI#a#$rEjhE=GkAznF(Q'UY_`^'EzD9{
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 62 17 76 50 94 13 13 44 0b 2d b9 0d 6e 28 3a 21 e0 95 90 d4 a8 b2 31 d9 6d e1 f0 6f 91 bb 64 74 21 51 61 c9 c1 55 42 22 0c 11 8d 27 4c 1b 94 1d e0 15 62 3d cf 78 73 60 a8 92 76 09 e4 91 d8 51 b2 12 d7 07 53 16 43 b5 4e c5 42 12 f8 31 04 9b 73 08 72 ab 03 70 24 8f 81 d9 10 f2 18 24 89 94 e4 d9 c9 49 a3 c6 88 11 b4 81 0f 24 9d 0a 84 ed 10 90 9d 98 9d 2b c6 c5 55 f0 64 0c d5 92 e9 ad d8 48 39 79 1d af 21 c4 91 9a b8 27 b3 25 b4 92 62 09 5e 83 32 af 81 d6 cd 0e 98 57 6d 19 12 2c ce c4 49 14 b8 26 7f a8 ad 64 cb 24 92 05 61 16 12 50 74 54 fc 92 99 f6 32 dc b2 e4 c5 46 94 96 3e 03 59 10 bb 1b b9 29 8f 49 64 35 8c b1 38 24 43 34 24 0f 64 59 4b 7b 10 85 2e 43 76 91 b2 27 dc 28 dc 95 38 1a ef 49 20 2f 07 63 f0 b9 31 cb 14 b2 2f b1 b6 2c 49 04 93 34 31 76 5a b4 96 Data Ascii: bvPD-n(:!1modt!QaUB"'Lb=xs`vQSCNB1srp$$I$+UdH9y!'%b^2Wm,I&d$aPtT2F>Y)Id58$C4$dYK{.Cv'(8I /c1/,I41vZ
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 27 f3 e8 c9 24 92 4d f5 b4 de 49 34 e0 94 55 a9 83 a8 51 4d 6a a4 3c 73 b8 f1 ce e8 c5 52 15 55 0a a2 53 2a aa a4 c5 53 e0 97 84 9d 11 3f 95 b1 55 57 9b 3b ac 89 0b 2b c9 02 56 aa eb 7c 92 33 c8 b7 22 15 f9 2b 75 47 e5 a5 ff 00 e8 9a 9e f4 bb c6 b2 34 61 45 3a 3b 31 2f 4a 2d c1 09 23 42 47 e0 63 18 ca 6f e5 15 0b 71 88 63 17 91 88 fe 6f 1a 8c f2 b3 3d 87 ee 14 3a 59 4f 92 9d 6a 5f ec ae 8a 69 7a 0b c8 ed 4e ec 96 6b 84 d4 a6 64 aa d0 6a a4 86 43 66 1d cd aa 3f b6 c9 36 61 66 17 a9 81 98 3e 4c 3a 09 0d 10 ad 87 e0 c3 f0 47 c1 a9 a9 24 df 5f a5 8c d1 6d 72 4d b0 d3 c1 db a7 83 b5 4f 23 e9 c1 46 88 aa 8c 48 8a d1 f9 b0 21 2f ca b5 22 16 e6 1f 93 c6 e4 11 f2 41 04 2b 41 1a 09 47 91 9a 5a ad 11 8d 18 e9 31 52 62 46 21 54 89 f8 37 f1 68 3c e4 c0 99 81 78 30 a3 Data Ascii: '$MI4UQMj<sRUS*S?UW;+V\|3"+uG4aE:;1/J-#BGcoqco=:YOj_izNkdjCf?6af>L:G$_mrMO#FH!/"A+AGZ1RbF!T7h<x0
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 1b a4 6e a6 d7 c4 75 a8 0a d7 52 8c 62 03 c7 71 22 14 65 9a 32 c0 d6 fb 81 02 36 d6 0d c3 ec 6e 26 b1 dc a3 a6 5d 55 5e e3 5e dd ca d7 ff 00 b8 f5 51 2b da 00 12 9e 6b a9 56 71 50 37 2a 55 70 a2 57 91 44 b9 44 2b 41 51 87 8d dc 7a e0 f8 23 14 d2 e6 57 62 9a 83 55 40 56 a1 4f 8e 3c ca 95 28 20 7b ca 95 9d 4a 88 c4 2a 24 a9 52 b9 63 cb e8 27 89 99 7c 5f 07 a7 11 8b 30 73 58 fe 4f d7 17 c5 fa 6e 5f 17 06 0c b4 18 ca b2 da dc 22 da f4 0e 5c cb c9 2d c4 cc a9 7c f9 94 56 e1 c3 c0 4d 1c 25 b1 c4 29 e5 03 83 37 c1 e8 f1 1f 98 24 16 55 93 3e 80 a3 53 13 2f 07 a8 9d 4c fa 4f 4d 4e f8 d7 e2 19 7c 54 ae 47 d0 fa 2e 1f 95 65 cb fc 55 2b d1 52 bf 8a e9 86 d2 df fe b0 30 65 81 97 31 0b 6f 50 6a 50 11 23 88 c4 59 01 46 3b 8e b5 dc 6a 1a a6 30 18 43 82 6b 06 63 b6 08 ef Data Ascii: nuRbq"e26n&]U^^Q+kVqP7UpWDD+AQz#WbU@VO<( {J$Rc'\|_0sXOn_"\-\|VM%)7$U>S/LOMN\|TG.eU+R0e1oPjP#YF;j0Ckc
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 6e be 18 91 1f b0 4c 52 6a 0b c6 fa bc c3 d4 ae 21 40 63 2c 01 7b 41 86 2a c3 42 e8 b6 d2 3d 46 97 88 02 0b 22 e1 d1 6c 87 f6 44 f0 4b d4 31 cb f3 35 37 50 58 a2 0c fe 23 c6 67 ca e2 a2 45 97 4f 54 1b 16 0f fa 25 58 6e 0d 75 14 75 c6 d2 58 d0 11 81 07 53 07 95 95 ef 30 15 98 66 d2 c7 70 8d ed 16 a5 94 2e 1c 6c b0 a3 a8 5d 6f aa f5 02 d2 3f 82 04 75 7a 08 d3 81 14 76 40 b4 f9 89 bd f6 c3 60 aa 6e 78 c4 3e 7c 31 d0 0d 37 16 83 c9 60 ee b7 2b 36 7f c4 46 17 fe e1 58 96 47 46 ee 00 66 64 dd c0 43 2f 88 97 86 2f 15 9e 6f d3 5e 94 01 e5 25 26 5d 21 90 b9 45 c5 0c a4 9d 98 89 50 7c e5 29 03 a4 97 4c b2 a2 9e 66 1c 7f 72 a9 a9 65 df 71 47 72 90 22 71 04 77 0c 3a 95 83 04 af 08 81 58 8e 73 53 c4 5a 22 54 89 68 2f c5 ca e0 ab a4 8d 40 f1 a2 cf 4b 51 1d 69 6c 46 c2 Data Ascii: nLRj!@c,{A*B=F"lDK157PX#gEOT%XnuuXS0fp.l]o?uzv@`nx>\|17`+6FXGFfdC//o^%&]!EP\|)LfreqGr"qw:XsSZ"Th/@KQilF
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 50 79 69 3f 78 1a c5 ac 37 fd c2 e5 51 9c 45 c3 9a c2 b1 05 ec 01 67 b4 64 0c ae a2 0f 4a e2 20 97 aa a8 17 53 85 4a e2 da 8a d8 63 cd dc c6 d0 fe c2 20 bb 9d 0c 11 15 a2 19 5c 1b 94 db 09 9b e0 d4 15 70 d4 c1 30 6a 0d e0 45 5a 8a 85 9e cd c0 a5 e5 15 f3 8b 8d e3 03 c2 8c e0 af ed 60 99 f4 82 51 6d a5 09 6b c3 15 a2 57 19 ea 1a 86 6c 4f 29 76 06 c0 cc 95 6b 6a 77 04 4b 15 1f be f5 16 f8 c7 ed 1a dd 94 19 54 d4 74 98 34 05 55 4e 3e a5 f7 c1 80 ca 52 50 b8 88 33 79 ab 50 67 62 a1 2e 66 31 13 54 79 62 96 19 2b 47 71 a1 72 1a 0d 54 c7 50 43 0a 06 1e 12 ae 8e 09 7e b4 d4 7b 02 f0 cc 58 53 7b 8b 52 62 15 c1 2c b2 25 3c b3 72 3a dc 9d c6 21 57 88 40 6e 0c 08 cd 00 2d 3d e1 93 55 ed 2f 62 d6 59 8f 05 2b 50 a8 d6 e3 64 00 89 59 11 94 89 d4 7a c2 88 60 9d dc 8c cb Data Ascii: Pyi?x7QEgdJ SJc \p0jEZ`QmkWlO)vkjwKTt4UN>RP3yPgb.f1Tyb+GqrTPC~{XS{Rb,%<r:!W@n-=U/bY+PdYz`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49804	18.66.102.51	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	543	OUT	GET /c/hotjar-31017.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:34 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 10 Jan 2025 16:21:34 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/9543b86d219219ca0e7b8c68c54b55dc Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 891011d51eb2353ebe8601f5b6467070.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: DZ2mQTIN7wI_UXVV1RNqxPHOuvcA0eYrRPd3s6VzAZCj7eC1ROjZaA==
2025-01-10 16:21:34 UTC	13112	IN	Data Raw: 33 33 33 30 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 33 31 30 31 37 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 6d 61 6e 75 61 6c 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 61 6e 6f 6e 79 6d Data Ascii: 3330window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":31017,"rec_value":0.0,"state_change_listen_mode":"manual","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonym
2025-01-10 16:21:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49818	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1368	OUT	GET /images/header/menu-icons/farm-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	663	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=farm-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 4009
2025-01-10 16:21:34 UTC	4009	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 37 2e 39 33 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 37 2e 39 33 35 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="17.935" viewBox="0 0 17.867 17.935"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49821	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1371	OUT	GET /images/header/menu-icons/finance-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	665	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=finance-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 979
2025-01-10 16:21:34 UTC	979	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 69 64 3d 22 63 6f 69 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 34 39 32 22 20 68 65 69 67 68 74 3d 22 31 37 2e 34 39 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 34 39 32 20 31 37 2e 34 39 32 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 63 32 63 32 63 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg id="coin" xmlns="http://www.w3.org/2000/svg" width="17.492" height="17.492" viewBox="0 0 17.492 17.492"> <defs> <style> .cls-1 { fill: #2c2c2c; } </style> </defs> <g id

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49820	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1371	OUT	GET /images/header/menu-icons/renters-icon.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	666	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Fri, 18 Oct 2019 03:07:11 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=renters-icon.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 1003
2025-01-10 16:21:34 UTC	1003	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 2e 38 36 37 22 20 68 65 69 67 68 74 3d 22 31 38 2e 32 37 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 2e 38 36 37 20 31 38 2e 32 37 37 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 53 63 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="17.867" height="18.277" viewBox="0 0 17.867 18.277"> <defs> <style> .cls-1 { fill-rule: evenodd; } </style> </defs> <g id="Scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49822	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1367	OUT	GET /images/header/menu-icons/discount.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	662	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Fri, 18 Oct 2019 03:07:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=discount.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 2935
2025-01-10 16:21:34 UTC	2935	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 31 35 36 22 20 68 65 69 67 68 74 3d 22 31 36 2e 37 38 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 31 35 36 20 31 36 2e 37 38 33 22 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 64 69 73 63 6f 75 6e 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 32 31 31 20 30 2e 32 33 35 29 22 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 32 36 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 3e 0d 0a 20 20 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="16.156" height="16.783" viewBox="0 0 16.156 16.783"> <g id="discount" transform="translate(0.211 0.235)"> <g id="Group_266" transform="translate(0 0)"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49819	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1367	OUT	GET /images/header/menu-icons/umbrella.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	662	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Fri, 18 Oct 2019 03:07:12 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=umbrella.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 1945
2025-01-10 16:21:34 UTC	1945	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 2e 31 32 39 22 20 68 65 69 67 68 74 3d 22 31 39 2e 33 35 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 2e 31 32 39 20 31 39 2e 33 35 35 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 75 6d 62 72 65 6c 6c 61 22 20 64 3d 22 4d 32 31 2e 31 31 32 2c 39 2e 31 31 33 61 2e 33 31 35 2e 33 31 35 2c 30 2c 30 2c 30 2c 2e 30 31 34 2d 2e 30 36 37 73 30 2d 2e 30 30 39 2c 30 2d 2e 30 31 34 41 38 2e 30 37 33 2c 38 2e 30 37 33 2c 30 2c 30 2c 30 2c 31 33 2e 33 38 37 2e 39 37 36 56 2e 33 32 33 61 2e 33 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg xmlns="http://www.w3.org/2000/svg" width="16.129" height="19.355" viewBox="0 0 16.129 19.355"> <path id="umbrella" d="M21.112,9.113a.315.315,0,0,0,.014-.067s0-.009,0-.014A8.073,8.073,0,0,0,13.387.976V.323a.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49823	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1605	OUT	GET /WebResource.axd?d=NjxTqR2bqTw1rewxxlkHPpxO0HewYtVlDflpbYInUeVJFzzXK9ps5DCCOpHnJe-GLFYvfIwAYK88tAgrZ4UYiSFoIDxWM5fHSClLQ2OUIH6ur5dZ5UUk2GuBjdo7SvL8SQyR67VUUd5WdQi4Bp1p2rD86Flrj4pL0JXZer5l9HggNFK5Tv2OG7IFtNlP6HEIlaRLk_JT971y9JLQAC_AjXBfDLq38newr_lRYpTjOxM1&t=638343388220000000 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	631	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Mon, 05 Jan 2026 07:35:09 GMT Last-Modified: Tue, 31 Oct 2023 16:47:01 GMT ETag: "1698770822:dtagent10303241106123517POHb" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 4191
2025-01-10 16:21:34 UTC	4191	IN	Data Raw: ef bb bf 76 61 72 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 72 61 63 6b 65 72 20 3d 20 6e 75 6c 6c 3b 20 21 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 72 61 63 6b 65 72 20 3d 20 7b 20 5f 63 61 6e 54 72 61 63 6b 3a 20 21 31 2c 20 5f 70 61 67 65 49 64 3a 20 6e 75 6c 6c 2c 20 5f 75 72 6c 3a 20 21 31 2c 20 74 72 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 69 66 20 28 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 72 61 63 6b 65 72 2e 5f 63 61 6e 54 72 61 63 6b 20 3d 20 65 2c 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 72 61 63 6b 65 72 2e 5f 63 61 6e 54 72 61 63 6b 29 20 7b 20 69 66 20 28 21 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 54 Data Ascii: var PersonalizationTracker = null; !function () { "use strict"; PersonalizationTracker = { _canTrack: !1, _pageId: null, _url: !1, track: function (e) { if (PersonalizationTracker._canTrack = e, PersonalizationTracker._canTrack) { if (!PersonalizationT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49824	198.179.10.51	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1234	OUT	GET /farmalytics.min.js HTTP/1.1 Host: farmalytics.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; TS0108e009=01d115748179758d1aa8f4a7eb564b510c610a4be413bdd6d9f5e1dda138b7015b5d6d1af3146cacff08f58a0fd9561cceba071d27
2025-01-10 16:21:34 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 20 Dec 2024 02:13:39 GMT Accept-Ranges: bytes ETag: "1db5284c8779c1c" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=16070400; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="0", dtRpid;desc="1368380535" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 6044
2025-01-10 16:21:34 UTC	6044	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 46 61 72 6d 61 6c 79 74 69 63 73 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 68 74 74 70 73 3a 2f 2f 66 61 Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Farmalytics=t()}(this,(function(){"use strict";const e="https://fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49814	142.250.185.206	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	890	OUT	GET /s/player/3ede36f2/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=7qZAKuGErAw; VISITOR_INFO1_LIVE=iVrpiiKsmKo; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgCw%3D%3D; __Secure-ROLLOUT_TOKEN=CImgu4uh2s-9owEQn6TF58frigMYn6TF58frigM%3D
2025-01-10 16:21:34 UTC	681	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 405468 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 09:03:22 GMT Expires: Sat, 10 Jan 2026 09:03:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 26292 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:34 UTC	709	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 79 74 70 2d 62 69 67 2d Data Ascii: d-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 Data Ascii: ntainer{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscree
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 6e 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 72 61 6e 64 69 6e 67 2d 73 68 6f 77 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 65 6e 74 7b 72 69 67 68 74 3a 63 61 6c 63 28 32 32 70 78 20 2b 20 76 61 72 28 2d 2d 62 72 61 6e 64 69 6e 67 2d 69 6d 61 67 65 2d 77 69 64 74 68 29 29 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 Data Ascii: next){top:89px}.ytp-player-content.ytp-iv-player-content,.ytp-player-content.ytp-timely-actions-content{left:12px;right:12px}.ytp-branding-shown .ytp-player-content.ytp-timely-actions-content{right:calc(22px + var(--branding-image-width))}.ytp-big-mode .y
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 67 2d 65 6e 61 62 6c 65 20 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 6f 76 65 72 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 35 31 70 78 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 33 39 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 34 33 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d Data Ascii: g-enable .ytp-timely-actions-overlay{display:none}.ytp-ad-overlay-open .ytp-player-content{bottom:151px}.ytp-small-mode.ytp-ad-overlay-open .ytp-player-content{bottom:139px}.ytp-embed.ytp-ad-overlay-open .ytp-player-content{bottom:143px}.ytp-big-mode.ytp-
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 65 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 35 38 7d 2e 79 74 70 2d 73 68 6f 72 74 73 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 Data Ascii: ex;-webkit-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-box-pack:end;-webkit-justify-content:flex-end;justify-content:flex-end;left:12px;right:12px;top:0;z-index:58}.ytp-shorts-mode .ytp-chrome-top{-webkit-box-orient:vertical;-webkit-box-direction:normal;-we
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 2c 31 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 75 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 36 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 72 65 6d 6f 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 Data Ascii: ,1);overflow:hidden}.ytp-chrome-controls .ytp-button.ytp-mute-button{padding:6px}.ytp-chrome-controls .ytp-button.ytp-next-button{padding:0}.ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-chrome-controls .ytp-button.ytp-remote-button{padding:0
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 31 30 30 25 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 2d 70 6c 61 79 6c 69 73 74 29 3a 3a 62 65 66 Data Ascii: n:absolute;top:5px;bottom:0;left:-12px}.ytp-fullscreen-button::after{content:"";display:block;width:12px;position:absolute;top:5px;bottom:0;left:100%}.ytp-big-mode .ytp-prev-button::before,.ytp-big-mode .ytp-play-button:not(.ytp-play-button-playlist)::bef
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 38 70 78 3b 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 3a 61 66 74 65 72 7b 68 65 69 67 68 74 3a 32 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 6c 65 66 74 3a 32 30 70 78 3b 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 3a 61 66 74 65 72 7b 68 65 69 67 68 74 3a 33 70 78 Data Ascii: ontrols .ytp-button[aria-pressed]::after{left:18px;bottom:6px}.ytp-embed .ytp-chrome-controls .ytp-button[aria-pressed]::after{height:2px;border-radius:2px;left:20px;bottom:8px}.ytp-big-mode .ytp-chrome-controls .ytp-button[aria-pressed]::after{height:3px
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 6f 6e 73 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2d 62 75 74 74 6f 6e 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 74 65 78 74 2d 73 68 61 64 6f 77 3a 69 6e 68 65 72 69 74 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 79 74 70 2d 73 68 6f 72 74 73 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2d 62 75 74 74 6f 6e 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 34 38 70 78 7d 2e 79 74 70 2d 73 68 61 72 65 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 73 68 61 72 65 2d 62 75 74 74 6f 6e 2d 76 69 73 69 62 6c 65 29 2c 2e 79 74 70 2d 63 6f 70 79 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 63 6f 70 Data Ascii: ons{white-space:nowrap}.ytp-chrome-top-buttons .ytp-button{text-shadow:inherit}[dir=rtl] .ytp-shorts-mode .ytp-chrome-top-buttons{position:absolute;top:0;right:0;width:48px}.ytp-share-button:not(.ytp-share-button-visible),.ytp-copylink-button:not(.ytp-cop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49825	13.107.246.45	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	393	OUT	GET /sdk/sitefinity-insight-client.min.3.1.27.js HTTP/1.1 Host: cdn.insight.sitefinity.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:34 UTC	699	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:34 GMT Content-Type: application/javascript Content-Length: 53449 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 17 Oct 2024 16:12:33 GMT ETag: 0x8DCEEC6827A0B0B x-ms-request-id: 6adb41c6-201e-006c-477b-63cc8a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type Access-Control-Allow-Origin: * x-azure-ref: 20250110T162134Z-156796c549bkrq8hhC1EWR4ggg0000001af0000000001cfn Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 3 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-01-10 16:21:34 UTC	15685	IN	Data Raw: 76 61 72 20 73 66 44 61 74 61 49 6e 74 65 6c 6c 3d 73 66 44 61 74 61 49 6e 74 65 6c 6c 7c 7c 7b 7d 3b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 3d 7b 73 64 6b 56 65 72 73 69 6f 6e 3a 22 6a 73 2d 33 2e 31 2e 34 31 22 2c 63 6f 6f 6b 69 65 4e 61 6d 65 3a 22 73 66 2d 64 61 74 61 2d 69 6e 74 65 6c 6c 2d 73 75 62 6a 65 63 74 22 2c 64 6f 63 73 43 6f 6f 6b 69 65 4e 61 6d 65 3a 22 73 66 2d 69 6e 73 2d 6c 73 74 2d 64 6f 63 2d 74 72 63 6b 64 22 2c 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 22 73 66 2d 69 6e 73 2d 73 73 69 64 22 2c 70 61 67 65 56 69 73 69 74 49 64 43 6f 6f 6b 69 65 4e 61 6d 65 3a 22 73 66 2d 69 6e 73 2d 70 76 2d 69 64 22 2c 73 66 54 72 61 63 6b 69 6e 67 49 64 73 53 74 6f 72 61 67 65 4b 65 79 3a 22 73 66 2d 74 72 2d Data Ascii: var sfDataIntell=sfDataIntell\|\|{};sfDataIntell.constants={sdkVersion:"js-3.1.41",cookieName:"sf-data-intell-subject",docsCookieName:"sf-ins-lst-doc-trckd",sessionCookieName:"sf-ins-ssid",pageVisitIdCookieName:"sf-ins-pv-id",sfTrackingIdsStorageKey:"sf-tr-
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 74 73 2e 68 65 61 64 65 72 73 2e 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 5d 3d 22 61 70 70 61 75 74 68 20 22 2b 74 68 69 73 2e 61 70 69 4b 65 79 2c 63 5b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 68 65 61 64 65 72 73 2e 64 61 74 61 63 65 6e 74 65 72 6b 65 79 5d 3d 74 68 69 73 2e 61 70 69 4b 65 79 3b 76 61 72 20 64 3d 74 68 69 73 2e 61 70 69 53 65 72 76 65 72 55 72 6c 2b 22 61 6e 61 6c 79 74 69 63 73 2f 76 31 2f 63 6f 6e 76 65 72 73 69 6f 6e 73 2f 69 73 69 6e 22 2c 65 3d 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 75 74 69 6c 73 2e 67 65 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 28 6e 75 6c 6c 2c 22 47 45 54 22 2c 64 2c 63 29 3b 74 68 69 73 2e 72 65 71 75 65 73 74 65 72 2e 61 6a 61 78 43 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ts.headers.authorization]="appauth "+this.apiKey,c[sfDataIntell.constants.headers.datacenterkey]=this.apiKey;var d=this.apiServerUrl+"analytics/v1/conversions/isin",e=sfDataIntell.utils.getRequestOptions(null,"GET",d,c);this.requester.ajaxCall(e,function(
2025-01-10 16:21:34 UTC	16384	IN	Data Raw: 54 72 61 63 6b 69 6e 67 2e 70 72 6f 67 72 65 73 73 54 68 72 65 73 68 6f 6c 64 73 2e 66 69 6e 64 49 6e 64 65 78 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 6a 7d 29 2b 31 3b 6b 3c 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 76 69 64 65 6f 54 72 61 63 6b 69 6e 67 2e 70 72 6f 67 72 65 73 73 54 68 72 65 73 68 6f 6c 64 73 2e 6c 65 6e 67 74 68 26 26 28 65 5b 63 5d 3d 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 76 69 64 65 6f 54 72 61 63 6b 69 6e 67 2e 70 72 6f 67 72 65 73 73 54 68 72 65 73 68 6f 6c 64 73 5b 6b 5d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 66 5b 62 2e 69 64 5d 5b 61 5d 7c 7c 28 68 2e 73 65 6e 74 65 6e 63 65 43 6c 69 65 6e 74 2e 77 72 69 74 65 53 65 Data Ascii: Tracking.progressThresholds.findIndex(function(a){return a===j})+1;k<sfDataIntell.constants.videoTracking.progressThresholds.length&&(e[c]=sfDataIntell.constants.videoTracking.progressThresholds[k])}})}function g(a,b){f[b.id][a]\|\|(h.sentenceClient.writeSe
2025-01-10 16:21:34 UTC	4996	IN	Data Raw: 70 61 69 67 6e 49 64 73 22 20 61 72 67 75 6d 65 6e 74 20 77 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 22 69 73 49 6e 43 61 6d 70 61 69 67 6e 73 22 20 6d 65 74 68 6f 64 2e 27 29 3b 76 61 72 20 64 3d 7b 7d 3b 64 5b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 68 65 61 64 65 72 73 2e 73 75 62 6a 65 63 74 5d 3d 74 68 69 73 2e 73 75 62 6a 65 63 74 4b 65 79 2c 64 5b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 68 65 61 64 65 72 73 2e 69 64 73 5d 3d 61 2c 64 5b 73 66 44 61 74 61 49 6e 74 65 6c 6c 2e 63 6f 6e 73 74 61 6e 74 73 2e 68 65 61 64 65 72 73 2e 64 61 74 61 73 6f 75 72 63 65 5d 3d 74 68 69 73 2e 64 61 74 61 73 6f 75 72 63 65 2c 74 68 69 73 2e 63 61 6c 6c 28 22 2f 61 6e 61 6c 79 74 69 63 73 2f 76 31 2f 63 61 Data Ascii: paignIds" argument when using the "isInCampaigns" method.');var d={};d[sfDataIntell.constants.headers.subject]=this.subjectKey,d[sfDataIntell.constants.headers.ids]=a,d[sfDataIntell.constants.headers.datasource]=this.datasource,this.call("/analytics/v1/ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49828	142.250.185.206	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	894	OUT	GET /s/player/3ede36f2/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=7qZAKuGErAw; VISITOR_INFO1_LIVE=iVrpiiKsmKo; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgCw%3D%3D; __Secure-ROLLOUT_TOKEN=CImgu4uh2s-9owEQn6TF58frigMYn6TF58frigM%3D
2025-01-10 16:21:34 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 33718 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 06:22:54 GMT Expires: Sat, 10 Jan 2026 06:22:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 35920 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:34 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 24 71 79 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 2e 6d 75 74 65 64 41 75 74 6f 70 6c 61 79 3d 21 31 3b 70 2e 65 6e 64 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 70 2e 6c 69 6d 69 74 65 64 50 6c 61 79 62 61 63 6b 44 75 72 61 74 69 6f 6e 49 6e 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 67 2e 6b 42 28 70 29 7d 2c 4c 53 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 4c 3a 22 73 76 67 22 2c 0a 58 3a 7b 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 31 30 20 32 36 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 6a 3a 5b 7b 4c 3a 22 70 61 74 68 22 Data Ascii: (function(g){var window=this;'use strict';var $qy=function(p){p.mutedAutoplay=!1;p.endSeconds=NaN;p.limitedPlaybackDurationInSeconds=NaN;g.kB(p)},LSv=function(){return{L:"svg",X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},j:[{L:"path"
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 30 39 2c 30 20 63 20 2e 33 2c 2e 35 20 2e 37 31 2c 2e 38 38 20 31 2e 32 31 2c 31 2e 31 38 20 2e 35 2c 2e 33 20 31 2e 30 38 2c 2e 34 30 20 31 2e 36 38 2c 2e 34 30 20 31 2e 31 2c 30 20 31 2e 39 39 2c 2d 30 2e 34 39 20 32 2e 34 39 2c 2d 31 2e 35 39 20 2e 35 2c 2d 31 2e 31 20 2e 38 31 2c 2d 32 2e 37 30 20 2e 38 31 2c 2d 34 2e 39 30 20 6c 20 30 2c 2d 32 2e 34 30 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 31 2c 2d 32 2e 39 30 20 2d 30 2e 33 31 2c 2d 33 2e 39 30 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 35 2c 2d 31 2e 35 39 20 2d 31 2c 2d 32 2e 30 39 20 2d 30 2e 35 2c 2d 30 2e 34 20 2d 31 2e 31 30 2c 2d 30 2e 35 39 20 2d 31 2e 39 30 2c 2d 30 2e 35 39 20 2d 30 2e 35 39 2c 30 20 2d 31 2e 31 38 2c 2e 31 39 20 2d 31 2e 36 38 2c 2e 34 39 20 2d 30 2e 34 39 2c 2e 33 Data Ascii: 09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 32 2c 2d 32 2e 38 37 20 2d 30 2e 34 39 2c 2d 33 2e 38 37 20 2d 30 2e 33 2c 2d 30 2e 38 39 20 2d 30 2e 38 2c 2d 31 2e 36 32 20 2d 31 2e 34 39 2c 2d 32 2e 31 32 20 2d 30 2e 37 2c 2d 30 2e 35 20 2d 31 2e 35 38 2c 2d 30 2e 36 38 20 2d 32 2e 36 38 2c 2d 30 2e 36 38 20 7a 20 6d 20 31 32 2e 31 38 2c 2e 30 39 20 30 2c 31 31 2e 39 30 20 63 20 2d 30 2e 31 2c 2e 33 20 2d 30 2e 32 39 2c 2e 34 38 20 2d 30 2e 35 39 2c 2e 36 38 20 2d 30 2e 32 2c 2e 32 20 2d 30 2e 35 31 2c 2e 33 31 20 2d 30 2e 38 31 2c 2e 33 31 20 2d 30 2e 33 2c 30 20 2d 30 2e 35 38 2c 2d 30 2e 31 30 20 2d 30 2e 36 38 2c 2d 30 2e 34 30 20 2d 30 2e 31 2c 2d 30 2e 33 20 2d 30 2e 31 38 2c 2d 30 2e 37 30 20 2d 30 2e 31 38 2c 2d 31 2e 34 30 20 6c 20 30 2c 2d 31 30 2e 39 39 Data Ascii: c 0,-1.6 -0.2,-2.87 -0.49,-3.87 -0.3,-0.89 -0.8,-1.62 -1.49,-2.12 -0.7,-0.5 -1.58,-0.68 -2.68,-0.68 z m 12.18,.09 0,11.90 c -0.1,.3 -0.29,.48 -0.59,.68 -0.2,.2 -0.51,.31 -0.81,.31 -0.3,0 -0.58,-0.10 -0.68,-0.40 -0.1,-0.3 -0.18,-0.70 -0.18,-1.40 l 0,-10.99
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 39 20 2d 30 2e 35 39 2c 2d 30 2e 35 39 20 6c 20 30 2c 2d 38 2e 35 20 63 20 2e 31 2c 2d 30 2e 34 20 2e 32 39 2c 2d 30 2e 37 20 2e 35 39 2c 2d 31 20 2e 33 2c 2d 30 2e 33 20 2e 36 30 2c 2d 30 2e 34 30 20 2e 39 30 2c 2d 30 2e 34 30 20 7a 22 7d 7d 5d 7d 7d 2c 0a 67 71 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 4c 3a 22 73 76 67 22 2c 0a 58 3a 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 34 33 20 35 31 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 6a 3a 5b 7b 4c 3a 22 70 61 74 68 22 2c 58 3a 7b 64 3a 22 4d 35 38 2e 33 37 20 34 31 2e 33 39 48 36 32 2e 37 39 56 32 37 2e 32 33 43 36 32 2e 37 39 20 32 33 2e 30 33 20 36 32 2e 36 39 20 31 38 2e 36 39 20 36 32 2e 34 33 20 Data Ascii: 9 -0.59,-0.59 l 0,-8.5 c .1,-0.4 .29,-0.7 .59,-1 .3,-0.3 .60,-0.40 .90,-0.40 z"}}]}},gq5=function(){return{L:"svg",X:{fill:"none",height:"100%",viewBox:"0 0 143 51",width:"100%"},j:[{L:"path",X:{d:"M58.37 41.39H62.79V27.23C62.79 23.03 62.69 18.69 62.43
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 31 32 34 2e 31 36 20 38 2e 36 35 20 31 32 32 2e 35 20 38 2e 36 35 43 31 32 30 2e 38 34 20 38 2e 36 35 20 31 31 39 2e 39 34 20 39 2e 32 37 20 31 31 39 2e 39 34 20 31 31 2e 35 39 43 31 31 39 2e 39 34 20 31 33 2e 39 39 20 31 32 30 2e 38 32 20 31 34 2e 35 39 20 31 32 32 2e 35 20 31 34 2e 35 39 5a 4d 31 32 30 2e 32 20 34 31 2e 33 39 48 31 32 35 56 31 37 2e 37 33 48 31 32 30 2e 32 56 34 31 2e 33 39 5a 22 2c 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 7d 2c 7b 4c 3a 22 70 61 74 68 22 2c 58 3a 7b 64 3a 22 4d 31 33 34 2e 39 35 20 34 31 2e 37 39 43 31 33 37 2e 33 31 20 34 31 2e 37 39 20 31 33 38 2e 36 33 20 34 31 2e 34 39 20 31 33 39 2e 37 31 20 34 30 2e 34 37 43 31 34 31 2e 33 31 20 33 39 2e 30 31 20 31 34 31 2e 39 37 20 33 36 2e 36 33 20 31 34 31 2e 38 35 20 33 33 2e Data Ascii: 124.16 8.65 122.5 8.65C120.84 8.65 119.94 9.27 119.94 11.59C119.94 13.99 120.82 14.59 122.5 14.59ZM120.2 41.39H125V17.73H120.2V41.39Z",fill:"white"}},{L:"path",X:{d:"M134.95 41.79C137.31 41.79 138.63 41.49 139.71 40.47C141.31 39.01 141.97 36.63 141.85 33.
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 34 20 31 36 2e 30 37 20 31 36 2e 30 37 43 31 38 2e 34 33 20 31 33 2e 37 30 20 32 31 2e 36 34 20 31 32 2e 33 37 20 32 34 2e 39 39 20 31 32 2e 33 36 5a 4d 32 34 2e 39 39 20 31 30 2e 34 33 43 32 32 2e 31 31 20 31 30 2e 34 33 20 31 39 2e 32 39 20 31 31 2e 32 38 20 31 36 2e 38 39 20 31 32 2e 38 38 43 31 34 2e 35 30 20 31 34 2e 34 38 20 31 32 2e 36 33 20 31 36 2e 37 36 20 31 31 2e 35 33 20 31 39 2e 34 32 43 31 30 2e 34 32 20 32 32 2e 30 39 20 31 30 2e 31 33 20 32 35 2e 30 32 20 31 30 2e 37 30 20 32 37 2e 38 35 43 31 31 2e 32 36 20 33 30 2e 36 37 20 31 32 2e 36 35 20 33 33 2e 32 37 20 31 34 2e 36 39 20 33 35 2e 33 31 43 31 36 2e 37 33 20 33 37 2e 33 35 20 31 39 2e 33 32 20 33 38 2e 37 33 20 32 32 2e 31 35 20 33 39 2e 33 30 43 32 34 2e 39 38 20 33 39 2e 38 36 20 Data Ascii: 4 16.07 16.07C18.43 13.70 21.64 12.37 24.99 12.36ZM24.99 10.43C22.11 10.43 19.29 11.28 16.89 12.88C14.50 14.48 12.63 16.76 11.53 19.42C10.42 22.09 10.13 25.02 10.70 27.85C11.26 30.67 12.65 33.27 14.69 35.31C16.73 37.35 19.32 38.73 22.15 39.30C24.98 39.86
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 65 6e 74 29 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 3d 6e 65 77 20 67 2e 77 28 7b 4c 3a 22 64 69 76 22 2c 42 3a 22 79 74 70 2d 73 75 67 67 65 73 74 69 6f 6e 73 22 7d 29 3b 67 2e 52 28 74 68 69 73 2c 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 29 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 2e 75 5f 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 67 2e 52 28 74 68 69 73 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 29 3b 74 68 69 73 2e 70 72 65 76 69 6f 75 73 2e 75 5f 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 0a 74 68 69 73 2e 70 72 65 76 69 6f 75 73 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 56 30 2c 74 68 69 73 29 3b 67 2e 52 28 74 68 69 73 2c 74 68 69 73 2e 5a 29 3b 66 6f 72 28 76 61 72 20 56 3d 7b 55 57 3a 30 7d 3b Data Ascii: ent);this.suggestions=new g.w({L:"div",B:"ytp-suggestions"});g.R(this,this.suggestions);this.suggestions.u_(this.element);g.R(this,this.previous);this.previous.u_(this.element);this.previous.listen("click",this.V0,this);g.R(this,this.Z);for(var V={UW:0};
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 61 70 69 2e 4b 28 29 2e 47 28 22 77 65 62 5f 70 6c 61 79 65 72 5f 6c 6f 67 5f 63 6c 69 63 6b 5f 62 65 66 6f 72 65 5f 67 65 6e 65 72 61 74 69 6e 67 5f 76 65 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 70 61 72 61 6d 73 22 29 29 66 6f 72 28 76 61 72 20 56 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 2d 70 2e 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 2f 28 70 2e 56 2b 70 2e 43 29 29 2c 4e 3d 4d 61 74 68 2e 6d 69 6e 28 56 2b 70 2e 63 6f 6c 75 6d 6e 73 2c 70 2e 73 75 67 67 65 73 74 69 6f 6e 44 61 74 61 2e 6c 65 6e 67 74 68 29 2d 31 3b 56 3c 3d 4e 3b 56 2b 2b 29 70 2e 61 70 69 2e 6c 6f 67 56 69 73 69 62 69 6c 69 74 79 28 70 2e 54 5b 56 5d 2e 65 6c 65 6d 65 6e 74 2c 43 29 7d 2c 72 32 50 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 2e 6e 65 78 74 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 Data Ascii: api.K().G("web_player_log_click_before_generating_ve_conversion_params"))for(var V=Math.floor(-p.scrollPosition/(p.V+p.C)),N=Math.min(V+p.columns,p.suggestionData.length)-1;V<=N;V++)p.api.logVisibility(p.T[V].element,C)},r2P=function(p){p.next.element.sty
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 6e 44 61 74 61 29 26 26 56 2e 69 74 63 74 29 26 26 70 2e 61 70 69 2e 73 65 74 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 28 4e 2e 65 6c 65 6d 65 6e 74 2c 56 29 29 7d 66 6f 72 28 3b 43 3c 70 2e 54 2e 6c 65 6e 67 74 68 3b 43 2b 2b 29 70 2e 54 5b 43 5d 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 72 32 50 28 70 29 7d 2c 72 35 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 67 2e 47 62 2e 63 61 6c 6c 28 74 68 69 73 2c 70 29 3b 0a 76 61 72 20 43 3d 74 68 69 73 3b 74 68 69 73 2e 54 3d 6e 75 6c 6c 3b 76 61 72 20 56 3d 70 2e 4b 28 29 2c 4e 3d 7b 74 61 72 67 65 74 3a 56 2e 5a 7d 2c 48 3d 5b 22 79 74 70 2d 73 6d 61 6c 6c 2d 72 65 64 69 72 65 63 74 22 5d 3b 56 2e 56 3f 48 2e 70 75 73 68 28 22 6e 6f 2d 6c 69 6e 6b 22 29 3a 28 56 3d Data Ascii: nData)&&V.itct)&&p.api.setTrackingParams(N.element,V))}for(;C<p.T.length;C++)p.T[C].element.style.display="none";r2P(p)},r5=function(p){g.Gb.call(this,p);var C=this;this.T=null;var V=p.K(),N={target:V.Z},H=["ytp-small-redirect"];V.V?H.push("no-link"):(V=
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 73 69 7a 65 28 43 2c 43 2e 68 65 69 67 68 74 2d 4e 29 3b 56 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 54 6f 70 3d 28 43 2e 68 65 69 67 68 74 2d 28 70 2e 54 3f 70 2e 54 2e 65 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3a 30 29 29 2f 32 2d 4e 2f 32 2b 22 70 78 22 7d 2c 56 53 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 43 29 7b 76 61 72 20 56 3d 70 2e 61 70 69 2e 4b 28 29 2c 4e 3b 0a 43 2e 72 65 61 73 6f 6e 26 26 28 43 6d 63 28 43 2e 72 65 61 73 6f 6e 29 3f 4e 3d 67 2e 4d 79 28 43 2e 72 65 61 73 6f 6e 29 3a 4e 3d 67 2e 70 5a 28 67 2e 54 42 28 43 2e 72 65 61 73 6f 6e 29 29 2c 70 2e 4a 63 28 4e 2c 22 63 6f 6e 74 65 6e 74 22 29 29 3b 76 61 72 20 48 3b 43 2e 73 75 62 72 65 61 73 6f 6e 26 26 28 43 6d 63 28 43 2e 73 75 62 72 65 61 73 6f 6e 29 3f 48 3d 67 Data Ascii: size(C,C.height-N);V.style.paddingTop=(C.height-(p.T?p.T.element.clientHeight:0))/2-N/2+"px"},VSG=function(p,C){var V=p.api.K(),N;C.reason&&(Cmc(C.reason)?N=g.My(C.reason):N=g.pZ(g.TB(C.reason)),p.Jc(N,"content"));var H;C.subreason&&(Cmc(C.subreason)?H=g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49829	142.250.185.206	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	893	OUT	GET /s/player/3ede36f2/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=7qZAKuGErAw; VISITOR_INFO1_LIVE=iVrpiiKsmKo; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgCw%3D%3D; __Secure-ROLLOUT_TOKEN=CImgu4uh2s-9owEQn6TF58frigMYn6TF58frigM%3D
2025-01-10 16:21:34 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2517525 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 15:31:22 GMT Expires: Sat, 10 Jan 2026 15:31:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 3012 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:34 UTC	702	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of th
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a Data Ascii: ge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 20 6d 75 73 74 20 6e 6f 74 0a 20 20 20 20 20 20 63 6c 61 69 6d 20 74 68 61 74 20 79 6f 75 20 77 72 6f 74 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 6f 66 74 77 61 72 65 2e 20 49 66 20 79 6f 75 20 75 Data Ascii: including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you must not claim that you wrote the original software. If you u
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 Data Ascii: t to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDI
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 42 2c 74 50 2c 74 6b 6a 2c 63 34 2c 63 42 73 2c 54 41 2c 54 6f 51 2c 4a 50 2c 4d 6d 2c 6d 4d 2c 76 34 2c 46 61 2c 53 71 2c 4b 79 2c 4d 6b 58 2c 6d 4c 48 2c 5a 6d 2c 76 54 76 2c 46 71 58 2c 55 6c 2c 66 79 2c 71 6d 2c 4b 71 31 2c 44 4c 56 2c 49 74 2c 66 56 58 2c 71 76 75 2c 75 76 58 2c 79 42 4c 2c 4f 36 39 2c 55 4c 48 2c 5a 36 4c 2c 49 56 53 2c 62 36 76 2c 62 42 2c 6b 56 2c 41 42 56 2c 6f 74 2c 59 56 2c 6b 74 61 2c 6e 79 2c 59 76 59 2c 65 71 2c 50 34 2c 77 43 2c 7a 36 53 2c 24 56 2c 52 36 39 2c 4c 79 2c 6e 54 53 2c 65 36 73 2c 67 43 2c 50 72 51 2c 57 34 2c 51 47 2c 42 34 2c 47 41 2c 24 4c 75 2c 6a 6c 2c 57 71 39 2c 77 79 65 2c 56 35 2c 48 6e 2c 58 48 2c 72 42 31 2c 64 56 2c 73 51 2c 42 6f 59 2c 70 54 65 2c 43 67 59 2c 61 63 2c 45 51 2c 0a 6c 30 2c 74 62 2c Data Ascii: B,tP,tkj,c4,cBs,TA,ToQ,JP,Mm,mM,v4,Fa,Sq,Ky,MkX,mLH,Zm,vTv,FqX,Ul,fy,qm,Kq1,DLV,It,fVX,qvu,uvX,yBL,O69,ULH,Z6L,IVS,b6v,bB,kV,ABV,ot,YV,kta,ny,YvY,eq,P4,wC,z6S,$V,R69,Ly,nTS,e6s,gC,PrQ,W4,QG,B4,GA,$Lu,jl,Wq9,wye,V5,Hn,XH,rB1,dV,sQ,BoY,pTe,CgY,ac,EQ,l0,tb,
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 63 31 2c 79 68 2c 71 5f 2c 49 73 2c 77 47 6a 2c 62 70 2c 41 45 2c 6f 73 2c 6b 33 2c 24 24 48 2c 59 33 2c 7a 69 2c 52 73 2c 4c 39 39 2c 67 35 65 2c 6e 45 2c 57 39 76 2c 47 68 73 2c 42 49 4c 2c 70 65 61 2c 43 4b 61 2c 6a 4e 4c 2c 51 61 39 2c 4e 57 65 2c 65 5a 2c 50 32 2c 77 68 2c 48 65 61 2c 4c 45 2c 24 33 2c 58 65 4c 2c 64 71 59 2c 69 65 73 2c 72 68 2c 68 43 39 2c 42 32 2c 47 69 2c 73 4e 76 2c 70 68 2c 45 71 65 2c 43 68 2c 61 7a 75 2c 6c 7a 56 2c 74 75 6a 2c 63 32 61 2c 6a 31 2c 56 41 2c 4e 6b 2c 48 73 2c 58 4c 2c 64 54 2c 69 5a 2c 54 57 48 2c 68 55 2c 73 68 2c 61 6f 2c 4d 75 75 2c 6d 71 48 2c 76 71 59 2c 6c 5a 2c 63 73 2c 74 55 2c 4d 6b 2c 4a 55 2c 6d 67 2c 53 6f 79 2c 4b 53 6a 2c 76 73 2c 46 4c 2c 53 31 2c 75 51 65 2c 5a 65 53 2c 4f 65 73 2c 55 71 51 2c Data Ascii: c1,yh,q_,Is,wGj,bp,AE,os,k3,$$H,Y3,zi,Rs,L99,g5e,nE,W9v,Ghs,BIL,pea,CKa,jNL,Qa9,NWe,eZ,P2,wh,Hea,LE,$3,XeL,dqY,ies,rh,hC9,B2,Gi,sNv,ph,Eqe,Ch,azu,lzV,tuj,c2a,j1,VA,Nk,Hs,XL,dT,iZ,TWH,hU,sh,ao,Muu,mqH,vqY,lZ,cs,tU,Mk,JU,mg,Soy,KSj,vs,FL,S1,uQe,ZeS,Oes,UqQ,
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 48 2c 6f 63 61 2c 52 75 59 2c 6b 79 61 2c 4a 6b 2c 6d 6c 2c 76 46 2c 53 4a 2c 4b 67 2c 24 6b 56 2c 44 4a 2c 75 49 2c 5a 4a 2c 67 63 59 2c 4f 64 2c 57 67 48 2c 51 6f 58 2c 79 32 2c 42 54 59 2c 49 4c 2c 62 49 2c 41 6b 2c 6f 4c 2c 47 79 59 2c 6b 46 2c 59 46 2c 7a 7a 2c 52 4c 2c 6e 67 2c 70 66 75 2c 50 46 2c 77 30 2c 24 46 2c 4c 67 2c 67 30 2c 57 46 2c 43 34 53 2c 6a 39 75 2c 56 68 61 2c 4e 39 75 2c 48 32 31 2c 58 66 79 2c 51 32 2c 64 4b 56 2c 56 4a 2c 69 32 65 2c 68 55 73 2c 73 39 75 2c 4e 76 2c 58 43 2c 64 66 2c 69 61 2c 61 36 2c 45 67 2c 6c 61 2c 45 6f 73 2c 54 48 2c 4d 76 2c 4a 70 2c 6c 6f 4c 2c 74 68 58 2c 6d 32 2c 63 78 58 2c 54 39 53 2c 46 43 2c 44 4b 4c 2c 75 6a 39 2c 5a 32 53 2c 53 37 2c 55 4b 39 2c 66 6f 51 2c 71 45 39 2c 44 44 2c 62 32 51 2c 49 6f Data Ascii: H,oca,RuY,kya,Jk,ml,vF,SJ,Kg,$kV,DJ,uI,ZJ,gcY,Od,WgH,QoX,y2,BTY,IL,bI,Ak,oL,GyY,kF,YF,zz,RL,ng,pfu,PF,w0,$F,Lg,g0,WF,C4S,j9u,Vha,N9u,H21,Xfy,Q2,dKV,VJ,i2e,hUs,s9u,Nv,XC,df,ia,a6,Eg,la,Eos,TH,Mv,Jp,loL,thX,m2,cxX,T9S,FC,DKL,uj9,Z2S,S7,UK9,foQ,qE9,DD,b2Q,Io
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 6b 48 31 2c 65 46 2c 50 6c 2c 77 24 2c 59 67 4c 2c 24 4a 2c 4c 31 2c 7a 69 75 2c 57 6c 2c 42 6c 2c 72 24 2c 51 71 2c 47 37 2c 70 6d 2c 65 69 59 2c 57 32 53 2c 72 70 59 2c 67 51 53 2c 4c 32 58 2c 51 36 79 2c 56 6d 2c 58 49 2c 43 31 76 2c 42 66 48 2c 47 48 59 2c 70 64 53 2c 6e 51 53 2c 73 4b 51 2c 54 6a 2c 0a 68 72 48 2c 6c 72 48 2c 69 4f 6a 2c 6a 47 2c 4d 59 2c 73 4b 2c 74 47 2c 61 72 39 2c 69 7a 2c 77 36 59 2c 50 61 39 2c 24 76 6a 2c 48 51 2c 64 55 31 2c 46 49 2c 6d 55 53 2c 53 47 2c 46 31 53 2c 53 6b 59 2c 4b 31 61 2c 44 45 2c 44 55 51 2c 75 35 59 2c 5a 4f 6a 2c 66 72 75 2c 4f 4f 59 2c 55 4b 2c 71 6b 31 2c 66 6d 2c 49 72 56 2c 62 4f 75 2c 6f 44 56 2c 6b 51 53 2c 79 6d 2c 78 55 4c 2c 7a 72 65 2c 71 59 2c 52 72 51 2c 49 57 2c 62 7a 2c 69 4e 2c 24 55 58 2c Data Ascii: kH1,eF,Pl,w$,YgL,$J,L1,ziu,Wl,Bl,r$,Qq,G7,pm,eiY,W2S,rpY,gQS,L2X,Q6y,Vm,XI,C1v,BfH,GHY,pdS,nQS,sKQ,Tj,hrH,lrH,iOj,jG,MY,sK,tG,ar9,iz,w6Y,Pa9,$vj,HQ,dU1,FI,mUS,SG,F1S,SkY,K1a,DE,DUQ,u5Y,ZOj,fru,OOY,UK,qk1,fm,IrV,bOu,oDV,kQS,ym,xUL,zre,qY,RrQ,IW,bz,iN,$UX,
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 67 2c 69 36 2c 68 61 2c 73 72 2c 61 77 2c 45 72 2c 6c 36 2c 74 61 2c 63 56 2c 54 63 2c 4d 47 2c 4a 61 2c 6d 74 2c 76 56 2c 46 77 2c 53 54 2c 4b 46 2c 44 53 2c 75 36 2c 5a 53 2c 55 72 2c 66 46 2c 4f 72 2c 79 79 2c 71 47 2c 49 77 2c 62 36 2c 41 61 2c 6f 77 2c 6b 5f 2c 78 5f 2c 59 5f 2c 7a 63 2c 52 77 2c 6e 46 2c 65 54 2c 50 56 2c 77 67 2c 24 5f 2c 4c 46 2c 67 67 2c 57 56 2c 51 79 2c 72 67 2c 42 56 2c 70 50 2c 43 50 2c 74 46 39 2c 6a 55 2c 42 2c 56 56 2c 47 63 2c 4e 7a 2c 48 55 2c 58 4a 2c 54 24 56 2c 69 48 2c 4a 33 51 2c 64 74 2c 6d 4d 51 2c 73 66 2c 76 4a 75 2c 45 66 2c 68 34 2c 6c 48 2c 74 34 2c 63 55 2c 4d 7a 2c 53 49 76 2c 4b 64 48 2c 44 4d 31 2c 75 33 39 2c 0a 5a 63 2c 55 66 2c 53 55 2c 66 50 2c 55 4d 53 2c 66 39 51 2c 4f 31 51 2c 79 33 31 2c 46 64 76 Data Ascii: g,i6,ha,sr,aw,Er,l6,ta,cV,Tc,MG,Ja,mt,vV,Fw,ST,KF,DS,u6,ZS,Ur,fF,Or,yy,qG,Iw,b6,Aa,ow,k_,x_,Y_,zc,Rw,nF,eT,PV,wg,$_,LF,gg,WV,Qy,rg,BV,pP,CP,tF9,jU,B,VV,Gc,Nz,HU,XJ,T$V,iH,J3Q,dt,mMQ,sf,vJu,Ef,h4,lH,t4,cU,Mz,SIv,KdH,DM1,u39,Zc,Uf,SU,fP,UMS,f9Q,O1Q,y31,Fdv
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 51 2c 63 53 2c 54 54 2c 4a 56 2c 71 75 4c 2c 6d 4c 2c 76 53 2c 46 63 2c 49 37 48 2c 53 49 2c 62 74 79 2c 4b 72 2c 41 37 39 2c 44 51 2c 6f 55 4c 2c 6b 36 53 2c 75 62 2c 78 4e 59 2c 59 75 65 2c 7a 53 48 2c 5a 51 2c 55 47 2c 66 72 2c 4f 47 2c 79 34 2c 52 53 75 2c 6e 55 53 2c 71 56 2c 49 6c 2c 62 62 2c 65 53 4c 2c 41 56 2c 6f 6c 2c 6b 50 2c 78 50 2c 59 50 2c 50 24 75 2c 77 45 58 2c 7a 54 2c 52 6c 2c 24 4e 4c 2c 6e 72 2c 65 49 2c 50 53 2c 77 46 2c 6e 4a 51 2c 4c 41 76 2c 67 55 31 2c 24 50 2c 57 41 56 2c 51 30 79 2c 72 37 65 2c 4c 72 2c 67 46 2c 57 53 2c 51 34 2c 72 46 2c 42 53 2c 47 54 2c 70 6a 2c 43 6a 2c 6a 42 2c 56 39 2c 42 6b 53 2c 47 36 48 2c 61 64 2c 45 54 2c 70 68 59 2c 6c 6e 2c 76 50 2c 63 50 2c 58 68 79 2c 61 61 39 2c 64 51 76 2c 45 69 76 2c 74 69 79 Data Ascii: Q,cS,TT,JV,quL,mL,vS,Fc,I7H,SI,bty,Kr,A79,DQ,oUL,k6S,ub,xNY,Yue,zSH,ZQ,UG,fr,OG,y4,RSu,nUS,qV,Il,bb,eSL,AV,ol,kP,xP,YP,P$u,wEX,zT,Rl,$NL,nr,eI,PS,wF,nJQ,LAv,gU1,$P,WAV,Q0y,r7e,Lr,gF,WS,Q4,rF,BS,GT,pj,Cj,jB,V9,BkS,G6H,ad,ET,phY,ln,vP,cP,Xhy,aa9,dQv,Eiv,tiy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49827	142.250.185.206	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	905	OUT	GET /s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=7qZAKuGErAw; VISITOR_INFO1_LIVE=iVrpiiKsmKo; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgCw%3D%3D; __Secure-ROLLOUT_TOKEN=CImgu4uh2s-9owEQn6TF58frigMYn6TF58frigM%3D
2025-01-10 16:21:34 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 339582 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 14:32:16 GMT Expires: Sat, 10 Jan 2026 14:32:16 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 6558 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:34 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 Data Ascii: c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=f;ba(this,"de
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 2e 63 61 6c 6c 28 63 2c 65 2c 64 29 7c 7c 65 7d 7d 28 29 2c 6c 61 3b 0a 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6c 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 70 61 3d 7b 7d 3b 74 72 79 7b 70 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 70 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6c 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f Data Ascii: \|\|Object.prototype);return Function.prototype.apply.call(c,e,d)\|\|e}}(),la;if(typeof Object.setPrototypeOf=="function")la=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},pa={};try{pa.__proto__=na;ma=pa.a;break a}catch(a){}ma=!1}la=ma?function(a,b){a.__
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 64 20 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 75 3d 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 50 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 69 66 28 61 2e 42 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 42 3d 21 30 7d 0a 77 61 2e 70 72 6f 74 6f 74 79 70 65 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 6d 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 6f 7c 7c 61 2e 75 7d 0a 77 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: d 0;this.h=1;this.u=this.o=0;this.P=this.j=null}function xa(a){if(a.B)throw new TypeError("Generator is already running");a.B=!0}wa.prototype.G=function(a){this.i=a};function ya(a,b){a.j={exception:b,md:!0};a.h=a.o\|\|a.u}wa.prototype.return=function(a)
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 65 78 74 2c 62 2c 61 2e 68 2e 47 29 3a 28 61 2e 68 2e 47 28 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 61 28 61 2e 68 29 3b 61 2e 68 2e 48 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 48 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 47 29 3a 28 79 61 28 61 2e 68 2c 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 44 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 Data Ascii: ext,b,a.h.G):(a.h.G(b),b=Fa(a));return b};this.throw=function(b){xa(a.h);a.h.H?b=Ea(a,a.h.H["throw"],b,a.h.G):(ya(a.h,b),b=Fa(a));return b};this.return=function(b){return Da(a,b)};this[Symbol.iterator]=function(){return this}}function Ha(a){function b
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 59 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 75 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 59 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 75 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 Data Ascii: is.j(function(){throw g;})};b.prototype.o=function(){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:g(this.Y),reject:g(this.u)}};b.prototype.Y=function(g){if(g===this)this.u(new TypeError("A Promise cannot resolv
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 74 68 69 73 2e 69 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 69 28 74 68 69 73 2e 69 5b 67 5d 29 3b 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6f 28 29 3b 67 2e 59 62 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6f 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e Data Ascii: this.i.length;++g)f.i(this.i[g]);this.i=null}};var f=new c;b.prototype.ia=function(g){var h=this.o();g.Yb(h.resolve,h.reject)};b.prototype.oa=function(g,h){var k=this.o();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 75 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 Data Ascii: ).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!ua(k,g)){var l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m inst
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 75 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 6e 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 65 6e 74 72 79 3a 6e 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 65 6e 74 72 79 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 Data Ascii: g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&ua(h[0],l))for(h=0;h<m.length;h++){var n=m[h];if(k!==k&&n.key!==n.key\|\|k===n.key)return{id:l,list:m,index:h,entry:n}}return{id:l,list:m,index:-1,entry:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(
2025-01-10 16:21:34 UTC	1390	IN	Data Raw: 7a 65 3d 30 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 2e 76 61 6c 75 65 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 Data Ascii: ze=0};e.prototype.has=function(h){return!!d(this,h).entry};e.prototype.get=function(h){return(h=d(this,h).entry)&&h.value};e.prototype.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49831	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1592	OUT	GET /images/icons/home.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	658	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Wed, 11 Aug 2021 02:36:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=home.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 2677
2025-01-10 16:21:34 UTC	2677	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 70 78 22 20 68 65 69 67 68 74 3d 22 35 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 32 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56px" height="54px" viewBox="0 0 56 54" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 2</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49834	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1591	OUT	GET /images/icons/key.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:34 UTC	657	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Wed, 11 Aug 2021 02:36:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=key.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 1926
2025-01-10 16:21:34 UTC	1926	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 39 70 78 22 20 68 65 69 67 68 74 3d 22 34 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 20 34 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 33 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="39px" height="40px" viewBox="0 0 39 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 3</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49833	13.107.246.45	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	417	OUT	GET /tag/bsa8xx9k5w HTTP/1.1 Host: www.clarity.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=d0b76cf50d6948c988aa2100a70bfd50.20250110.20260110
2025-01-10 16:21:34 UTC	380	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:34 GMT Content-Type: application/x-javascript Content-Length: 1056 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78 x-azure-ref: 20250110T162134Z-156796c549bcq9zshC1EWRz8u400000001yg000000007k5q X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2025-01-10 16:21:34 UTC	1056	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 6e 3d 67 61 2e 67 65 74 41 6c 6c 28 29 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 7b 76 61 72 20 73 3d 6e 5b 6f 5d 3b 69 66 28 22 55 41 Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);a[c]("metadata",(function(e){function n(){var n=ga.getAll();for(var o in n){var s=n[o];if("UA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49832	52.252.156.53	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	763	OUT	POST /collect/v2/data-centers/b9914fdb-2e6f-d6bb-b0aa-8ae951f29484/datasources/IFBI_MFSF_To_DevDEC/interactions HTTP/1.1 Host: api.dec.sitefinity.com Connection: keep-alive Content-Length: 1669 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-dataintelligence-sdk-version: js-3.1.41 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.infarmbureau.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:34 UTC	1669	OUT	Data Raw: 5b 7b 22 53 22 3a 22 31 37 33 36 35 32 36 30 38 39 36 31 36 2d 64 39 62 31 33 35 39 63 2d 31 31 63 36 2d 34 32 33 66 2d 39 32 39 62 2d 33 30 38 65 66 31 63 63 63 32 37 33 22 2c 22 53 4d 22 3a 7b 22 55 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 42 72 6f 77 73 65 72 20 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 7d 2c 22 49 4d 22 3a 7b 22 49 6e 74 65 72 61 63 74 69 6f 6e 49 64 22 3a 22 66 64 64 32 35 66 38 30 2d 30 32 64 36 Data Ascii: [{"S":"1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273","SM":{"UserAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","Browser language":"en-US"},"IM":{"InteractionId":"fdd25f80-02d6
2025-01-10 16:21:34 UTC	1439	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:34 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1 Connection: close Access-Control-Allow-Headers: Content-Type, Content-Length, X-Requested-With, Authorization, x-dataintelligence-accountkey, x-dataintelligence-datacenterkey, x-dataintelligence-datasource, x-dataintelligence-sort, x-dataintelligence-skip, x-dataintelligence-take, x-dataintelligence-fields, x-dataintelligence-count, x-dataintelligence-filterby, x-dataintelligence-filter, x-dataintelligence-contains, x-dataintelligence-nextrowkey, x-dataintelligence-flush, x-dataintelligence-fromdate, x-dataintelligence-todate, x-dataintelligence-period, x-dataintelligence-scale, x-dataintelligence-predicate, x-dataintelligence-subject, x-dataintelligence-ids, x-dataintelligence-datasources, x-dataintelligence-imagecrop, x-dataintelligence-contacts, x-forwarded-for, x-dataintelligence-sdk-version, Referer, Origin, x-dataintelligence-clientid, x-dataintelligence-campaignids, x-dataintelligence-userid, x-dataintelligence-errorid, x-dataintelligence-correlationid, cf-connecting-ip, x-forwarded-for, http_x_forwarded_for, x-forwarde [TRUNCATED] Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS Access-Control-Allow-Origin: * ETag: W/"1-d95o2uzYI7q7tY7bHI4U1xBug7s" request-context: appId=cid-v1:a33f2e3a-ec15-4d53-8ac6-897af884626b
2025-01-10 16:21:34 UTC	1	IN	Data Raw: 33 Data Ascii: 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49836	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1763	OUT	GET /images/default-album/men-in-blue-jeans-jacket-and-glasses-reclining-on-chair-happily-after-bundling-his-insurance-and-get-discounted-rates15dd5c5e32056b8a9f2eff03000bf66e.jpg?sfvrsn=d8d837ba_0 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	801	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/jpeg Expires: Thu, 10 Apr 2025 15:21:34 GMT Last-Modified: Wed, 06 Dec 2023 13:31:53 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=men-in-blue-jeans-jacket-and-glasses-reclining-on-chair-happily-after-bundling-his-insurance-and-get-discounted-rates15dd5c5e32056b8a9f2eff03000bf66e.jpg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 98981
2025-01-10 16:21:35 UTC	15583	IN	Data Raw: ff d8 ff e1 19 a0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 68 00 00 01 01 00 03 00 00 00 01 02 94 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 33 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 31 32 3a 30 36 20 30 38 3a 32 39 3a 34 34 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*h(1!2i$''Adobe Photoshop 24.3 (Macintosh)2023:12:06 08:29:44
2025-01-10 16:21:35 UTC	801	IN	Data Raw: 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f Data Ascii: g/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photo
2025-01-10 16:21:35 UTC	16384	IN	Data Raw: 30 36 54 30 38 3a 32 39 3a 34 34 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 33 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 06T08:29:44-05:00" stEvt:softwareAgent="Adobe Photoshop 24.3 (Macintosh)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2025-01-10 16:21:35 UTC	16384	IN	Data Raw: b9 9c 50 44 11 63 88 f1 5a 33 35 93 44 88 16 28 e5 15 b0 88 e5 15 b2 22 8a 50 cb a0 59 2e 6c 74 92 f4 4d 63 ec 35 19 51 43 41 15 65 a9 e1 e4 73 50 73 b0 73 d4 5c ec 39 ac 1b 9a 4a 50 8e a2 17 45 0c 81 04 95 25 41 b2 80 10 41 40 00 50 02 a2 ea 2d 2d 2c 01 62 0b 90 23 40 b0 b0 f0 00 01 b2 b1 50 44 24 4a 05 0a 6d ce 7a ba d2 1c 58 f4 73 b9 d7 9d ad 66 46 8b 08 41 32 8b 36 25 64 32 54 ce 88 19 29 07 22 aa 2a 4a 88 50 0a 2a 21 0e 69 30 07 64 ba 3a 9d 73 2e b3 2f 49 26 e3 a8 a7 53 ec 92 58 b9 da 7c 35 0e 7a 36 22 84 c9 65 2c 15 21 51 da 22 03 a8 12 04 15 15 25 6a 24 d2 04 00 a2 20 90 b4 06 8a 2c 85 8b 4b 4d b4 45 b0 80 68 58 4d 19 2a 3a 55 87 28 89 2a 03 4d 44 44 80 6d 20 d2 96 a2 d2 c4 ba cd bf 56 2e 74 e7 67 47 c2 4a 83 73 59 11 62 b2 6a 39 94 a6 e6 8d 02 b2 Data Ascii: PDcZ35D("PY.ltMc5QCAesPss\9JPE%AA@P--,b#@PD$JmzXsfFA26%d2T)"JP!i0d:s./I&SX\|5z6"e,!Q"%j$ ,KMEhXM:U(MDDm V.tgGJsYbj9
2025-01-10 16:21:35 UTC	15480	IN	Data Raw: a8 b6 31 6c 8d 18 a3 46 26 af 10 46 22 bc 72 2f 1b c2 fd 41 7e a5 57 2a b9 07 14 5d d8 bc 29 48 20 bc 52 57 6e 91 a1 06 95 42 9b fb ae 7f b7 c5 ff 00 0f 40 eb 0a 51 fd 38 a8 d8 b3 3c e3 8d 62 0e 43 ee 1c 7d b0 8f ee d6 b8 da 7d bf c5 1e 2c b2 78 fb d8 fd 01 a5 7a f9 2b 6f 95 b4 fc 94 dc 45 6d 70 f6 b6 c5 d4 f8 2d a0 b3 65 3e 33 02 f0 31 78 1a 8c 4d 5e 30 bc 68 b1 6c 6a d8 dd 02 ff 00 f2 91 29 be d5 45 dd a4 f7 97 f6 5b 7f 14 1d e5 de d6 8b af d6 f2 d7 82 5c b7 27 39 4b dd b6 a2 92 da fe c6 a2 7b 4b 2b 02 13 34 a0 f0 b7 05 b9 07 0e 82 86 95 55 ea a2 a0 5b 42 da 13 9a 11 68 45 81 48 c4 f6 0a 6d fd 4c 1a 8f 7b 91 ff 00 5f 16 3f eb d3 d4 cb 64 ad 2c 2c 39 17 32 e7 39 f7 62 78 65 d8 92 3e 32 c6 c3 0e 0a 3d b3 f1 cc 7c e1 9c 46 fb 0f 71 83 fb 32 7b 79 6d ae ed Data Ascii: 1lF&F"r/A~W*])H RWnB@Q8<bC}},xz+oEmp-e>31xM^0hlj)E[\'9K{K+4U[BhEHmL{_?d,,929bxe>2=\|Fq2{ym
2025-01-10 16:21:35 UTC	16384	IN	Data Raw: ef 9d 8e b4 8e 66 5f 36 c6 19 24 86 d8 b1 b7 17 17 86 27 63 e4 6c 77 56 97 2c b8 c3 9f 77 1e cc 47 d9 47 43 76 4d 74 77 66 b4 76 47 59 18 1c 76 86 a9 99 1c 8d b8 81 cc 65 dc 31 cd 17 22 c0 06 ac 1f 23 c9 e1 6e 78 27 3b b5 cb 5a df 8f 1c f7 a7 99 58 72 0b 69 df 71 6f 75 62 48 7b dd 0b 84 4e 99 9e 1b d2 e6 db 64 25 6c f8 0b 97 98 78 f5 f3 1b 1f 14 6b 8b 78 95 a2 87 0d 6f 03 4e 23 12 5e cb 2c 7b 1e 64 00 1b 86 93 e6 6a f2 f6 7d c4 4d 6c 99 ac 6c 4d b9 e6 7c 6e 05 7f f6 ff 00 0b b2 37 bf ec 17 12 89 5d 7f b1 b0 01 73 f7 ef 27 b9 92 c7 ed 3e 59 77 11 e4 bc e6 f6 5c 24 5c 8a 53 8f 64 a0 35 c4 2d eb 75 74 6d 09 6d 94 af 50 d8 31 ab e3 43 47 58 c4 e4 fc 7f 67 da cf 18 20 84 7d ab 52 74 3e 88 20 00 9b 3c 8c 2d bc aa f9 0c 08 5d 43 20 74 2f 62 13 19 1c cb 51 bf 7d Data Ascii: f_6$'clwV,wGGCvMtwfvGYve1"#nx';ZXriqoubH{Nd%lxkxoN#^,{dj}MllM\|n7]s'>Yw\$\Sd5-utmmP1CGXg }Rt> <-]C t/bQ}
2025-01-10 16:21:35 UTC	16384	IN	Data Raw: 50 94 b8 87 00 23 5f dd 92 31 91 ee c8 e0 dd 4a cb 62 5a 46 c8 46 3c f4 9f 10 54 d4 7f e5 46 53 93 64 4c b1 0a 51 25 e7 a9 fb 16 28 df 3c 87 84 75 94 48 1a ac 99 c0 0e b5 0d f5 f5 88 fa 86 fa 11 36 49 b1 8c 06 22 25 9f bd 8a c0 bf 24 63 2f bb 8f ce ca 72 e7 97 bb a5 d0 58 94 27 7d 82 b8 83 81 2f 9f b9 d6 ea 54 dc 27 dd c0 07 c1 db 9b 2d b5 40 b4 a5 2d 72 ec 89 66 f9 fe 5c f4 15 47 3d 41 44 f5 04 7e 54 a3 ed 46 10 e3 99 58 62 79 fb 04 9f 82 91 e6 54 ab 28 9f ba 78 f4 cf d5 b6 15 be f7 6e 09 be 31 ce 71 00 c9 01 31 a6 70 2d 28 9c c1 18 32 8c 04 9a 07 bf fc d1 f0 84 61 a9 e9 be 22 62 5c c9 0e 42 15 b1 78 c8 31 fe 65 b2 9c 7c 42 4e 5f b4 2d bd 6e e2 c0 35 75 60 14 2f 9d 86 34 96 32 8f 30 b4 d5 4c 61 18 36 99 3e 25 91 89 93 c8 9c 94 89 e1 8a 84 69 c7 54 46 a6 Data Ascii: P#_1JbZFF<TFSdLQ%(<uH6I"%$c/rX'}/T'-@-rf\G=AD~TFXbyT(xn1q1p-(2a"b\Bx1e\|BN_-n5u`/420La6>%iTF
2025-01-10 16:21:35 UTC	1581	IN	Data Raw: f1 1e e5 e3 5e 35 e3 1f 3f d8 bc 45 08 f9 9a 64 72 7f ec 13 c2 62 43 a8 fc ae 1f 3f 46 18 2c 7e 44 c6 71 12 07 30 51 8e eb 6b 08 c8 e3 ae 20 09 38 56 c3 69 73 ed 4d b2 b4 52 47 38 b7 16 e4 a7 2b 76 f2 9d 40 96 9c 78 fb 9c a9 09 44 c6 4f f7 83 27 97 1e 1d 0d 22 c8 81 8f 22 b1 51 20 b3 1c f9 2a b7 51 3a e3 33 a2 51 c8 82 70 07 15 5d d1 93 cb 08 18 7d 6a 2f 3d 66 04 48 06 cb e2 ae b8 d6 64 08 20 17 e0 a3 a7 ef 16 1d 4e b6 e1 de 55 c0 42 67 ac 7b 05 48 f3 91 e9 87 59 fd 7f 2f 12 dd be c1 e9 3f 22 c0 3a c2 39 71 2b be 71 e4 b2 7e 6b 0c 16 2b 3e 8e f4 80 74 5e 61 78 81 ea e8 c0 3a c2 04 fb 96 31 65 84 56 4b 08 80 38 3a fb ab 82 73 2e dc 53 42 ce e8 e4 b1 b0 a0 67 61 2d 90 2b 19 2c df b5 63 00 bc 01 18 91 a5 f8 8c d1 99 9c f7 be 93 7c 98 ea c4 c4 7b db 9a 85 f4 Data Ascii: ^5?EdrbC?F,~Dq0Qk 8VisMRG8+v@xDO'""Q *Q:3Qp]}j/=fHd NUBg{HY/?":9q+q~k+>t^ax:1eVK8:s.SBga-+,c\|{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49837	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:34 UTC	1636	OUT	GET /ResourcePackages/IFBIRedesign/assets/dist/images/inside-story.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	587	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Type: image/svg+xml Last-Modified: Wed, 30 Oct 2024 20:06:52 GMT Accept-Ranges: bytes ETag: "0569e4272bdb1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 9211
2025-01-10 16:21:35 UTC	9211	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 34 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 31 37 20 30 2e 39 34 43 30 2e 31 37 20 30 2e 38 32 20 30 2e 32 33 20 30 2e 37 36 20 30 2e 33 35 20 30 2e 37 36 48 32 2e 36 33 36 43 32 2e 37 35 36 20 30 2e 37 36 20 32 2e 38 31 36 20 30 2e 38 32 20 32 2e 38 31 36 20 30 2e 39 34 56 31 32 2e 38 32 43 32 2e 38 31 36 20 31 32 2e 39 34 20 32 2e 37 35 36 20 31 33 20 32 2e 36 33 36 20 31 33 48 30 2e 33 35 43 30 2e 32 33 20 31 33 20 30 2e 31 37 20 31 32 2e 39 34 20 30 2e 31 37 20 31 32 Data Ascii: <svg width="104" height="14" viewBox="0 0 104 14" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.17 0.94C0.17 0.82 0.23 0.76 0.35 0.76H2.636C2.756 0.76 2.816 0.82 2.816 0.94V12.82C2.816 12.94 2.756 13 2.636 13H0.35C0.23 13 0.17 12.94 0.17 12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49840	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1350	OUT	GET /images/icons/car.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	657	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Wed, 11 Aug 2021 02:36:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=car.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 5179
2025-01-10 16:21:35 UTC	5179	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="52px" height="42px" viewBox="0 0 52 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49841	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1387	OUT	GET /images/life-insurance-matters/heart.svg?sfvrsn=57e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	637	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Fri, 02 Aug 2019 01:53:37 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=heart.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:21 GMT Connection: close Content-Length: 2432
2025-01-10 16:21:35 UTC	2432	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 70 78 22 20 68 65 69 67 68 74 3d 22 35 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e 0d 0a 20 20 3c 67 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56px" height="50px" viewBox="0 0 56 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item</title> <desc>Created with Sketch.</desc> <g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49839	3.131.211.191	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	547	OUT	GET /tv2track.js HTTP/1.1 Host: collector-44978.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:35 UTC	333	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=600 Content-Type: application/javascript Date: Fri, 10 Jan 2025 16:21:35 GMT ETag: "65cf3449-5152" Expires: Fri, 10 Jan 2025 16:31:35 GMT Last-Modified: Fri, 16 Feb 2024 10:09:13 GMT Server: nginx X-Robots-Tag: noindex Content-Length: 20818 Connection: Close
2025-01-10 16:21:35 UTC	14142	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 69 77 69 6b 20 2d 20 57 65 62 20 41 6e 61 6c 79 74 69 63 73 0a 20 2a 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 74 72 61 63 6b 69 6e 67 20 63 6c 69 65 6e 74 0a 20 2a 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 0a 20 2a 20 40 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 70 69 77 69 6b 2f 70 69 77 69 6b 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6a 73 2f 70 69 77 69 6b 2e 6a 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 2f 66 72 65 65 2d 73 6f 66 74 77 61 72 65 2f 62 73 64 2f 20 53 69 6d 70 6c 69 66 69 65 64 20 42 53 44 20 28 61 6c 73 6f 20 69 6e 20 6a 73 2f 4c 49 43 45 4e 53 45 2e 74 78 74 29 0a 20 2a 2f 0a 69 66 28 74 79 70 Data Ascii: /! Piwik - Web Analytics * * JavaScript tracking client * * @link http://piwik.org * @source https://github.com/piwik/piwik/blob/master/js/piwik.js * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt) */if(typ
2025-01-10 16:21:35 UTC	6676	IN	Data Raw: 2b 28 72 28 62 6e 29 3f 22 26 73 65 61 72 63 68 5f 63 6f 75 6e 74 3d 22 2b 62 6e 3a 22 22 29 2c 62 71 2c 22 73 69 74 65 73 65 61 72 63 68 22 29 3b 61 78 28 62 6f 2c 61 4d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 4b 28 62 6d 2c 62 70 2c 62 6f 29 7b 76 61 72 20 62 6e 3d 61 74 28 22 69 64 67 6f 61 6c 3d 22 2b 62 6d 2b 28 62 70 3f 22 26 72 65 76 65 6e 75 65 3d 22 2b 62 70 3a 22 22 29 2c 62 6f 2c 22 67 6f 61 6c 22 29 3b 61 78 28 62 6e 2c 61 4d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 37 28 62 6e 2c 62 6d 2c 62 70 29 7b 76 61 72 20 62 6f 3d 61 74 28 62 6d 2b 22 3d 22 2b 6a 28 62 65 28 62 6e 29 29 2c 62 70 2c 22 6c 69 6e 6b 22 29 3b 0a 61 78 28 62 6f 2c 61 4d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 62 28 62 6e 2c 62 6d 29 7b 69 66 28 62 6e 21 3d 3d 22 22 29 7b 72 65 74 75 72 Data Ascii: +(r(bn)?"&search_count="+bn:""),bq,"sitesearch");ax(bo,aM)}function aK(bm,bp,bo){var bn=at("idgoal="+bm+(bp?"&revenue="+bp:""),bo,"goal");ax(bn,aM)}function a7(bn,bm,bp){var bo=at(bm+"="+j(be(bn)),bp,"link");ax(bo,aM)}function bb(bn,bm){if(bn!==""){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49845	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1369	OUT	GET /images/default-album/icons/facebook.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Wed, 13 May 2020 02:41:54 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=facebook.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 584
2025-01-10 16:21:35 UTC	584	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 5b 5d 3e 0d 0a 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 35 31 32 20 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 70 78 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 77 69 64 74 68 3d 22 35 31 32 70 78 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 Data Ascii: <?xml version="1.0"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]><svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49846	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1386	OUT	GET /images/life-insurance-matters/home.svg?sfvrsn=51e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	636	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Fri, 02 Aug 2019 01:53:38 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=home.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 2687
2025-01-10 16:21:35 UTC	2687	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 70 78 22 20 68 65 69 67 68 74 3d 22 35 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 32 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56px" height="54px" viewBox="0 0 56 54" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 2</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49844	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1385	OUT	GET /images/life-insurance-matters/car.svg?sfvrsn=55e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	635	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Fri, 02 Aug 2019 01:56:24 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=car.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 5184
2025-01-10 16:21:35 UTC	5184	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="52px" height="42px" viewBox="0 0 52 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49847	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1368	OUT	GET /images/default-album/icons/twitter.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Wed, 13 May 2020 02:41:54 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=twitter.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 1414
2025-01-10 16:21:35 UTC	1414	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49848	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1615	OUT	GET /images/footer/facebook.svg?sfvrsn=2b7424ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Fri, 20 Mar 2020 04:44:48 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=facebook.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 584
2025-01-10 16:21:35 UTC	584	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 5b 5d 3e 0d 0a 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 35 31 32 20 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 70 78 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 77 69 64 74 68 3d 22 35 31 32 70 78 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 Data Ascii: <?xml version="1.0"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]><svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49849	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1625	OUT	GET /images/footer/xlogo-twitter-logo.svg?sfvrsn=948136ba_1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	671	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Mon, 04 Mar 2024 16:43:09 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=xlogo-twitter-logo.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 649
2025-01-10 16:21:35 UTC	649	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 31 36 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 30 30 22 20 68 65 69 67 68 74 3d 22 31 32 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 30 20 31 32 32 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 35 31 5f 32 29 22 3e 0d 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 31 34 2e 31 36 33 20 35 31 39 2e 32 38 34 4c 31 31 36 30 2e 38 39 20 30 48 31 30 35 35 2e 30 33 4c 36 36 37 2e 31 33 37 20 34 35 30 2e 38 38 37 4c 33 35 37 2e 33 32 38 20 Data Ascii: <?xml version="1.0" encoding="utf-16"?><svg width="1200" height="1227" viewBox="0 0 1200 1227" fill="none" xmlns="http://www.w3.org/2000/svg"> <g clip-path="url(#clip0_251_2)"> <path d="M714.163 519.284L1160.89 0H1055.03L667.137 450.887L357.328

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49843	3.161.82.86	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	606	OUT	GET /bob_002.gif?bob_bk=1&eid=4312 HTTP/1.1 Host: bob.dmpxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:35 UTC	457	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Mon, 03 Feb 2020 23:36:22 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 04:26:44 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 b61ff825a3ca0ff851caf7741034ca52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: IyK-f-GdH88YSrQng3TLIb773eT_LbtvTgW6vJ82aKAaA10eRAYUlg== Age: 42892
2025-01-10 16:21:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49855	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	2098	OUT	POST /rb_bf40802pra?type=js3&sn=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0&svrid=14&flavor=post&vi=CCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0&modifiedSince=1736364532155&rf=https%3A%2F%2Fwww.infarmbureau.com%2F&bp=3&app=9a75f8cfaaed44c6&crc=839905937&en=g7j0dusa&end=1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive Content-Length: 337 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.infarmbureau.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:35 UTC	337	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 33 36 35 32 36 30 38 33 38 30 30 25 37 43 30 25 37 43 64 6e 25 37 43 2d 31 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 24 50 56 3d 31 24 72 49 64 3d 52 49 44 5f 32 34 31 38 24 72 70 49 64 3d 2d 32 31 33 36 33 35 35 33 34 34 24 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 69 6e 66 61 72 6d 62 75 72 65 61 75 2e 63 6f 6d 25 32 46 24 74 69 74 6c 65 3d 49 6e 64 69 61 6e 61 25 32 30 46 61 72 6d 25 32 30 42 75 72 65 61 75 25 32 30 49 6e 73 75 72 61 6e 63 65 24 6c 61 74 43 3d 30 24 61 70 70 3d 39 61 37 35 66 38 63 66 61 61 65 64 34 34 63 36 24 76 69 3d 43 43 48 4a 4d 56 50 4d 4b Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1736526083800%7C0%7Cdn%7C-1%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0$PV=1$rId=RID_2418$rpId=-2136355344$url=https%3A%2F%2Fwww.infarmbureau.com%2F$title=Indiana%20Farm%20Bureau%20Insurance$latC=0$app=9a75f8cfaaed44c6$vi=CCHJMVPMK
2025-01-10 16:21:35 UTC	411	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 116
2025-01-10 16:21:35 UTC	116	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 4e 56 66 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 33 30 33 32 34 31 31 30 36 31 32 33 35 31 37 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 33 36 33 36 34 35 33 32 31 35 35 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICANVfqru\|version=\|buildNumber=10303241106123517\|lastModification=1736364532155

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49854	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1649	OUT	GET /images/footer/youtube.svg?sfvrsn=2a7424ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094
2025-01-10 16:21:35 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Fri, 20 Mar 2020 04:44:46 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=youtube.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 1204
2025-01-10 16:21:35 UTC	1204	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49851	142.250.185.66	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1290	OUT	GET /td/fls/rul/activityi;fledge=1;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:35 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 16:36:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:21:35 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-01-10 16:21:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49850	13.107.246.45	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	602	OUT	GET /s/0.7.59/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=d0b76cf50d6948c988aa2100a70bfd50.20250110.20260110
2025-01-10 16:21:35 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:35 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 68544 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 08 Jan 2025 11:37:03 GMT ETag: "0x8DD2FD8C5BBA94B" x-ms-request-id: 6af69a2e-c01e-0066-7aee-6161fb000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20250110T162135Z-156796c549bkrq8hhC1EWR4ggg0000001adg000000004br8 Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 79034942 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-01-10 16:21:35 UTC	15834	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 35 39 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 62 72 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 79 72 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 77 72 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 68 72 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.59: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return br},get start(){return yr},get stop(){return wr},get track(){return hr}}),e=Object.freeze({__pro
2025-01-10 16:21:35 UTC	16384	IN	Data Raw: 2c 63 68 69 6c 64 72 65 6e 3a 5b 5d 2c 64 61 74 61 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 6e 75 6c 6c 2c 68 61 73 68 3a 6e 75 6c 6c 2c 72 65 67 69 6f 6e 3a 73 2c 6d 65 74 61 64 61 74 61 3a 7b 61 63 74 69 76 65 3a 21 30 2c 73 75 73 70 65 6e 64 3a 21 31 2c 70 72 69 76 61 63 79 3a 64 2c 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 66 72 61 75 64 3a 6c 2c 73 69 7a 65 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 2c 72 3d 65 2e 64 61 74 61 2c 69 3d 65 2e 6d 65 74 61 64 61 74 61 2c 6f 3d 69 2e 70 72 69 76 61 63 79 2c 75 3d 72 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 63 3d 72 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 48 74 2e 69 6e 64 65 78 4f 66 28 63 29 3e Data Ascii: ,children:[],data:n,selector:null,hash:null,region:s,metadata:{active:!0,suspend:!1,privacy:d,position:null,fraud:l,size:null}},function(t,e,n){var a,r=e.data,i=e.metadata,o=i.privacy,u=r.attributes\|\|{},c=r.tag.toUpperCase();switch(!0){case Ht.indexOf(c)>
2025-01-10 16:21:35 UTC	16384	IN	Data Raw: 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3c 30 26 26 46 6e 2e 70 75 73 68 28 74 29 2c 56 6e 26 26 59 28 56 6e 29 2c 56 6e 3d 58 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 65 3d 46 6e 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 29 7b 76 61 72 20 61 3d 6e 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 46 52 41 47 4d 45 4e 54 5f 4e 4f 44 45 3b 69 66 28 61 26 26 61 65 28 6e 29 29 63 6f 6e 74 69 6e 75 65 3b 61 61 28 6e 2c 61 3f 22 63 68 69 6c 64 4c 69 73 74 22 3a 22 63 68 61 72 61 63 74 65 72 44 61 74 61 22 29 7d 7d 46 6e 3d 5b 5d 7d 28 29 7d 29 2c 33 33 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 61 28 74 2c 65 29 7b Data Ascii: n.indexOf(t)<0&&Fn.push(t),Vn&&Y(Vn),Vn=X((function(){!function(){for(var t=0,e=Fn;t<e.length;t++){var n=e[t];if(n){var a=n.nodeType===Node.DOCUMENT_FRAGMENT_NODE;if(a&&ae(n))continue;aa(n,a?"childList":"characterData")}}Fn=[]}()}),33),t}function aa(t,e){
2025-01-10 16:21:35 UTC	16384	IN	Data Raw: 74 65 6d 70 74 73 3a 6e 2e 61 74 74 65 6d 70 74 73 2c 73 74 61 74 75 73 3a 74 2e 73 74 61 74 75 73 7d 2c 6e 2e 61 74 74 65 6d 70 74 73 3e 31 26 26 47 72 28 32 29 2c 32 30 30 3d 3d 3d 74 2e 73 74 61 74 75 73 26 26 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 74 2e 73 70 6c 69 74 28 22 5c 6e 22 29 3a 5b 5d 2c 6e 3d 30 2c 61 3d 65 3b 6e 3c 61 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 61 5b 6e 5d 2c 69 3d 72 26 26 72 2e 6c 65 6e 67 74 68 3e 30 3f 72 2e 73 70 6c 69 74 28 2f 20 28 2e 2a 29 2f 29 3a 5b 22 22 5d 3b 73 77 69 74 63 68 28 69 5b 30 5d 29 7b 63 61 73 65 22 45 4e 44 22 3a 51 72 28 36 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 55 50 Data Ascii: tempts:n.attempts,status:t.status},n.attempts>1&&Gr(2),200===t.status&&t.responseText&&function(t){for(var e=t&&t.length>0?t.split("\n"):[],n=0,a=e;n<a.length;n++){var r=a[n],i=r&&r.length>0?r.split(/ (.*)/):[""];switch(i[0]){case"END":Qr(6);break;case"UP
2025-01-10 16:21:35 UTC	3558	IN	Data Raw: 6f 72 28 28 67 6f 28 29 2d 68 6f 29 2f 35 30 29 29 3b 72 65 74 75 72 6e 20 70 6f 5b 74 5d 2e 6c 61 74 65 6e 63 79 7d 2c 79 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6f 3d 67 6f 28 29 2c 70 6f 2e 6c 65 6e 67 74 68 3d 30 2c 76 6f 2e 63 6c 65 61 72 28 29 7d 2c 62 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 26 26 21 28 74 2e 64 75 72 61 74 69 6f 6e 3c 34 30 29 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 22 69 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 3f 73 6f 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 3a 74 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 26 26 28 6c 6f 3d 4d 61 74 68 2e 6d 69 6e 28 6c 6f 2c 74 2e 69 6e 74 Data Ascii: or((go()-ho)/50));return po[t].latency},yo=function(){ho=go(),po.length=0,vo.clear()},bo=function(t){if(t.interactionId&&!(t.duration<40)){!function(t){"interactionCount"in performance?so=performance.interactionCount:t.interactionId&&(lo=Math.min(lo,t.int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49856	142.250.186.38	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1279	OUT	GET /activityi;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: 8339572.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:35 UTC	1245	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://8339572.fls.doubleclick.net/activityi;dc_pre=CO-P2ujH64oDFU-jgwcddVgQ1Q;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49852	142.250.185.66	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1295	OUT	GET /td/fls/rul/activityi;fledge=1;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:35 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 16:36:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:21:35 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-01-10 16:21:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49857	142.250.186.38	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1284	OUT	GET /activityi;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: 8339572.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:35 UTC	1250	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://8339572.fls.doubleclick.net/activityi;dc_pre=CLWe2ujH64oDFbuDgwcdSrArRQ;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49860	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1341	OUT	GET /api/myagent HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	559	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="0", dtRpid;desc="1688018139" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 4
2025-01-10 16:21:35 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49859	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1651	OUT	GET /images/footer/instagram.svg?sfvrsn=a47124ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094
2025-01-10 16:21:35 UTC	663	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Fri, 20 Mar 2020 04:52:16 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=instagram.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 1200
2025-01-10 16:21:35 UTC	1200	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49861	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1369	OUT	GET /images/default-album/icons/linkedin.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/
2025-01-10 16:21:35 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Wed, 13 May 2020 02:41:54 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=linkedin.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 834
2025-01-10 16:21:35 UTC	834	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 5b 5d 3e 0d 0a 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 35 31 32 20 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 70 78 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 77 69 64 74 68 3d 22 35 31 32 70 78 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 Data Ascii: <?xml version="1.0"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]><svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49858	142.250.185.66	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1430	OUT	GET /td/rul/573981699?random=1736526093885&cv=11&fst=1736526093885&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:36 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 16:36:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:21:36 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-01-10 16:21:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49862	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1656	OUT	GET /images/default-album/careers.jpg?sfvrsn=3e9d3dba_0 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094
2025-01-10 16:21:36 UTC	660	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/jpeg Expires: Thu, 10 Apr 2025 15:21:35 GMT Last-Modified: Wed, 05 Oct 2022 06:42:51 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=careers.jpg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 151062
2025-01-10 16:21:36 UTC	15724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 22 6f 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0e 00 00 01 03 00 01 00 00 00 40 1a 00 00 01 01 03 00 01 00 00 00 80 11 00 00 02 01 03 00 03 00 00 00 b6 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0f 01 02 00 06 00 00 00 bc 00 00 00 10 01 02 00 15 00 00 00 c2 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 d7 00 00 00 1b 01 05 00 01 00 00 00 df 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 24 00 00 00 e7 00 00 00 32 01 02 00 14 00 00 00 0b 01 00 00 69 87 04 00 01 00 00 00 20 01 00 00 80 03 00 00 08 00 08 00 08 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 35 44 20 4d 61 72 6b 20 49 56 00 48 00 00 00 01 00 00 00 48 00 Data Ascii: JFIF,,"oExifII*@(1$2i CanonCanon EOS 5D Mark IVHH
2025-01-10 16:21:36 UTC	660	IN	Data Raw: cd 6b a3 77 d0 ea 86 bd a9 b8 2b 36 9a 0c 18 f9 23 dd 82 3f 1c e3 1c f6 02 bd 17 0c 35 1a 51 8d 3d fc b4 4b f0 3b 30 75 73 7a f8 ea af 13 4e 30 a4 9d a3 ad e7 2b 3f 8b 49 35 67 ae 96 4d 69 be e5 ef 09 da df ea 76 3a 86 ae 15 21 8b 4e 80 ca d0 c8 4b 19 39 e0 0f 4c f3 58 d4 c6 e0 30 aa 9c 2b 26 e7 52 5c aa dd 34 bd df cf 43 a6 b5 2c c2 78 85 ec 5a 50 4a ee ea fc de f5 9a f2 d3 5f 9f 52 93 eb 77 b3 6a 30 79 ad 15 ad b0 60 27 92 59 09 c0 cf 5a ca ad 68 d2 83 94 b4 3b 7f 75 1d 64 ec 8e 7f c4 5a 1d 97 88 6f 9b 52 68 89 62 0a a8 13 15 0e b9 e3 b1 c5 7a f9 7e 75 88 c2 d0 b5 25 74 fa 9f 39 9b f0 c6 59 9e 62 21 5a ac 9b e5 e9 b2 7a ff 00 5e a3 6e 97 76 96 34 8d 43 c3 36 53 da e3 6f 95 21 dc 3f 1c 8e 6b 82 b5 59 d7 94 a5 3d 5b dc f7 68 61 68 61 a9 46 9d 38 a4 a3 6b Data Ascii: kw+6#?5Q=K;0uszN0+?I5gMiv:!NK9LX0+&R\4C,xZPJ_Rwj0y`'YZh;udZoRhbz~u%t9Yb!Zz^nv4C6So!?kY=[hahaF8k
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: 6d 3c 49 7b 3f d9 e1 80 c8 2d e3 98 af 9e 73 80 be c3 b9 fa 62 bc 3e 20 cc aa 65 98 17 52 9e ed ef 6b 9a d2 a4 a7 35 7f 97 e2 7b 1a f8 07 c2 f6 1e 45 9e 8d a3 c3 6e b0 0e 63 8c 74 18 ff 00 3c d7 8d c2 b9 ae 63 98 ce a4 6b 37 28 2d 9b 2f 17 08 c2 d6 dc b9 1d 9c 3a 44 07 32 c2 b1 37 25 b7 60 a9 3f a5 7b 99 86 1a b3 c3 54 a8 9b 94 d2 7c ab a2 d3 b1 8d 39 c1 c9 5b 6e a5 77 b7 bf bc 98 69 ba 74 ff 00 be ba 3f bb e3 77 e2 07 7e d5 f8 8f 85 98 ee 27 a9 c4 58 88 e3 5c 9c 25 7d 1f 4b 3f c3 b1 ee e6 d0 c2 ac 3c 79 2d 72 c6 95 e0 eb 3f 07 4d 71 f6 a7 b8 b8 bd 50 0b 49 30 cc b9 3f dd 1f c2 31 e9 5f d0 6d ab 6a 7c f3 76 95 ad 63 40 e8 d7 6d 0c d2 cb 7a 62 47 8f f7 4b 1f 0c 99 1c e5 bb 9f 7f 6a 1a 95 89 8c a2 9f 2f f5 fd 79 92 69 d7 16 ff 00 61 8a d2 d2 22 f2 47 18 dd Data Ascii: m<I{?-sb> eRk5{Enct<ck7(-/:D27%`?{T\|9[nwit?w~'X\%}K?<y-r?MqPI0?1_mj\|vc@mzbGKj/yia"G
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: 3b 24 37 97 d3 2f 9b 30 52 4b 95 50 a3 9f 60 06 05 6b 53 11 5a ad 28 53 9c af 18 7c 2b a2 bb bb ff 00 82 f7 3c fc 1e 4d 96 60 71 d8 8c 6e 1e 92 8d 5c 43 4e a4 f5 72 97 2c 54 62 9b 6d d9 46 2a ca 2a d1 5a b4 ae db 7a 6d 62 43 33 33 6c 5c 67 6a 9e 4e 3a 56 5a 23 d0 bd d8 dd 44 6a 51 e9 c9 73 a7 58 b3 3e 08 75 3d 40 f5 02 be 47 3a e1 ba 39 86 21 62 5b 6e db a2 de 26 b5 28 5a 0b 53 8d d4 3c 79 a2 f8 57 c4 16 9e 15 f1 2f 8a b4 fb 2d 5b 5b 2e ba 2e 9b 7d 7a 89 2d dc aa 8c db 23 46 39 66 da ac 40 1c 90 a7 15 f2 5c 4f 82 cc 2b d3 a1 84 a1 75 17 ae fd 17 5b 5c f5 72 0c bf 17 59 4f 13 38 be 44 d2 6f a2 d5 6e ff 00 03 e7 49 7c 59 04 57 77 3f 06 3c 4d e1 89 9e 6b d3 79 72 75 3b 78 d4 5b c8 e1 fc c0 65 19 dc 25 6d f2 21 6d a4 3a a4 79 20 af cd e8 27 46 38 58 d0 51 e5 Data Ascii: ;$7/0RKP`kSZ(S\|+<M`qn\CNr,TbmF**ZzmbC33l\gjN:VZ#DjQsX>u=@G:9!b[n&(ZS<yW/-[[..}z-#F9f@\O+u[\rYO8DonI\|YWw?<Mkyru;x[e%m!m:y 'F8XQ
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: 6e 8f 5e f1 b4 43 fe 10 fd 43 b8 36 6c 3a 7b 56 c9 05 6f e1 32 2f 01 5a 88 34 8b 77 c9 3f e8 a8 39 ed c5 28 21 c5 5c e7 3c 73 67 8f 08 78 b2 75 90 fc db 81 5e c3 e4 1c fe 95 4d 6e 61 3d 20 fd 7f 54 71 b3 75 c7 a0 f4 a7 63 36 64 78 b1 60 fe c7 90 dd 5d fd 9e 05 05 a5 b8 27 1e 5a 8e 73 ed d3 ad 72 e2 67 4e 95 27 39 cb 95 2d 6f d8 d2 38 98 61 fd f9 fc 2b 73 8c f8 4f f1 73 46 f8 8f a6 b5 de 8f 0c 51 24 77 0f 0a b4 91 95 f3 f6 9c 6f 5c fd e5 3d 6b 8b 29 cd b0 b9 c6 15 56 a1 7b 5d ad 55 b6 ed e5 e6 45 2a 94 b1 34 15 7a 2e f0 7b 7d fd 4e c2 24 b8 c7 ef 5e 2c e4 fd c0 70 07 6e b5 ea 14 ef 62 8d f6 9d ab c9 33 bd be b8 21 43 b7 6a 7d 98 1c 7a f2 69 5d 26 2b 16 f4 e8 8a 5c 2a 31 dc 4c 4e a5 bd 49 8c 8f e7 58 62 95 f0 d2 f4 3a 70 72 e5 c4 45 f9 9e 0d e3 bf 30 4a 27 Data Ascii: n^CC6l:{Vo2/Z4w?9(!\<sgxu^Mna= Tquc6dx`]'ZsrgN'9-o8a+sOsFQ$wo\=k)V{]UE4z.{}N$^,pnb3!Cj}zi]&+\1LNIXb:prE0J'
2025-01-10 16:21:36 UTC	15621	IN	Data Raw: 1d 26 3b 7b 59 22 13 5d a1 96 e5 a3 39 6e a7 00 9f 61 81 f8 9a 9a 74 f9 69 ed d3 f3 3d 04 9c e7 77 b9 87 a1 5c ae a5 af c9 a9 c8 e4 c6 a4 08 f3 8c 03 eb f5 eb 8a 7d 2c 5c 96 9a 1e 0b ff 00 05 36 f1 8e a9 63 ac 78 57 c0 b0 16 fb 2d ae 8e da 94 d1 a7 3f bc 96 67 8d 59 86 79 21 60 60 3f de 6a f8 3e 34 ab 24 e9 50 e9 ab fd 0f d0 f8 13 0b 49 e1 ab 62 1a bc 9c b9 7e 49 27 fa 9f 2e db 78 d2 7d 1d 1f 51 d3 64 1f 69 82 50 d1 90 8d cf 50 7b 7f f5 eb e1 39 5f c4 b5 7f d7 f5 f8 9f 73 8b c2 d2 c4 e1 e5 42 ae d2 ed f7 f4 f9 98 ba af 8c b5 9f 14 6b 53 6b 3a 95 db bb f9 a3 f7 68 c4 63 8c 71 f4 3d 6b ad be 66 9b bf f5 e9 ea 61 84 c3 e1 f0 74 23 42 8a 56 8f f5 d4 ec 3c 3b e2 3b eb 2b 52 bf 69 85 09 0b 9c 4d 8c 90 3b 8c 8c 1a 7e d2 50 5b 37 ab da ff 00 a1 72 e5 7f 14 6f f7 Data Ascii: &;{Y"]9nati=w\},\6cxW-?gYy!``?j>4$PIb~I'.x}QdiPP{9_sBkSk:hcq=kfat#BV<;;+RiM;~P[7ro
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: ec 46 40 de 62 08 26 0a d9 57 86 40 c8 eb bd 1d 58 13 5f 55 80 ce b1 ff 00 54 6e a5 47 52 9c be 28 49 b9 26 96 eb 5b d9 f6 6a cd 3d 53 3c 3c c3 2e c3 43 12 a9 c2 1c 92 8e aa 4b 46 9d b4 7a 68 d7 74 ef 73 e3 bf 8e 7a c6 b7 a2 7c 4c d2 3e 24 69 f1 49 6f 61 e3 df 0c cb 3d d6 9c 98 2b 67 ad 5b 3a 59 ea 10 0c f2 36 3c 70 82 33 f7 95 cf 73 5f 37 9c e0 fe af 89 74 d6 b6 7a 3e eb 74 d7 ac 6c fe 67 d3 60 b1 ef 17 95 51 aa f4 94 5c a3 2f fd 29 27 77 d2 7e d1 7c be 47 e8 5f fc 13 8f 5c f1 d7 c6 af 84 1a 27 c6 df 8c 5a 1e 99 75 3f 86 e2 7d 17 c0 da c3 da 11 7d 24 29 1a c1 77 3b 49 bb 69 04 af 90 0a aa 92 63 9b 39 dd 9a e4 e1 2e 19 c2 65 b8 ba f8 fa 6e 4b da 68 a2 fe 15 ad dc 92 b5 ef af 2a d7 45 74 7c e7 11 62 f9 5c 70 b1 7e 72 d6 fa db 45 fa bf 91 f0 87 fc 15 cf f6 Data Ascii: F@b&W@X_UTnGR(I&[j=S<<.CKFzhtsz\|L>$iIoa=+g[:Y6<p3s_7tz>tlg`Q\/)'w~\|G_\'Zu?}}$)w;Iic9.enKh*Et\|b\p~rE
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: ea ee b7 b3 62 2d d3 fe 7a 4a 78 07 dc 2f 27 eb b7 d2 ae 29 a5 a1 7c d6 8b 45 86 46 b7 d3 23 8b 6e 19 db 7e 00 07 d3 fa 52 7a c9 91 1b ab 19 ad 6f 1a b1 f3 0b f2 73 8d a3 8e 07 a8 a0 d5 34 be 2b 9f 41 f8 af c0 9a 76 8b e0 f9 a6 d2 6c 09 7b 7c 48 c9 08 f9 dc 74 38 27 a9 e7 3f 85 71 c6 29 6d a0 4a 36 8d cf 26 f1 9e 83 ac eb 9a 2d ee 9d a7 78 92 e2 c2 67 b7 65 b7 bd 8f 83 13 81 f2 37 20 e7 91 c8 c7 4a d6 12 8c 66 9c 95 cc ac 60 f8 ab 5e d1 f4 5b fd 2d 75 14 75 8b 58 d5 c6 9d 61 b0 70 b2 98 66 94 17 39 e0 11 13 0f a9 1e f5 a5 3a 73 9c 65 6f b2 ae fe f4 bf 52 65 35 17 15 d6 5f a2 6f f4 2d a4 04 ca a9 1a 82 e5 f8 5e ca 3f c7 34 95 83 a5 ce 07 e3 b6 b3 a2 7c 24 f0 15 d6 8b e1 d6 30 de f8 93 57 69 2e 65 f3 b2 ef 34 ee 03 be 4f 38 03 00 0e ca a0 0c 62 9d 57 3a f6 Data Ascii: b-zJx/')\|EF#n~Rzos4+Avl{\|Ht8'?q)mJ6&-xge7 Jf`^[-uuXapf9:seoRe5_o-^?4\|$0Wi.e4O8bW:
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: d8 f8 8b 55 d5 5e 2b 9b 0b 8b 26 02 e6 38 11 b7 28 25 93 e4 91 8a 30 3b 37 6e 2c 40 07 f8 7e 62 8c 65 4e 9c a8 ab cb fb cf 7d 2d ab 7d 64 fa f9 dc fd 4e 18 da 39 ae 1e 38 c8 c1 41 a7 f0 a5 a5 db bb 51 4b 68 24 f4 f2 39 af 83 1f f0 4f bf db 3f f6 80 f1 46 a5 a7 a7 81 b5 7d 13 43 d4 a6 8f ed 33 9b 09 f4 fb 29 37 02 19 65 91 87 9d 32 2a e3 28 32 9c 1f 93 26 a9 e1 f1 34 69 29 ca 1e ce 3d 5b ba 7f 86 bf 72 b9 c7 5b 19 81 a7 39 73 d5 4d df 64 d7 fc 17 e9 76 8f dc 3f d9 27 f6 70 f0 cf ec 89 fb 35 78 6b e0 c7 85 66 5b ab 7f 0e e9 03 ed 9a 8a 42 50 de dc 95 dd 34 e5 4e 48 05 b8 00 e4 aa 2a 8f e1 af a9 9e 2e 86 5d 93 4b 11 47 de 8c 21 29 27 de c9 b6 fe 7b 9f 9a e3 eb d5 cd 73 47 3a 8a dc cd 24 b7 b2 d9 2f f3 f3 6c e1 bc 1a cf 2c 32 ea 78 c1 d9 e5 c4 ed d7 d5 8f e7 Data Ascii: U^+&8(%0;7n,@~beN}-}dN98AQKh$9O?F}C3)7e2(2&4i)=[r[9sMdv?'p5xkf[BP4NH.]KG!)'{sG:$/l,2x
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: a2 d4 a1 d4 9b 4f 13 25 9e af a4 4b 65 71 0c 70 dc 79 12 87 8e 55 56 4c 3b a9 19 e1 81 52 09 1c 8c aa 50 97 32 e6 69 f2 b4 f4 b3 57 d7 f3 f2 23 db 46 71 f7 7a ae ba 3e cf 4d d3 bf 46 7d 13 f0 c0 5c cd e3 ed 24 f8 47 54 b4 8a e3 54 92 16 d2 26 f2 4c a8 f3 b0 58 cd cc 9b 4e 1a 20 a6 dd 47 23 23 23 3c 8a e8 ab ed 3d 84 b9 7e 25 7b 5f 6b f4 fc 6f 73 89 38 3a b6 7a a7 db aa eb af a6 88 fb 61 7e 0f f8 2d a2 48 ef 20 b9 9e 55 40 24 98 5d 32 6f 6c 72 70 0e 06 4f 61 59 a9 49 2b 5c c1 d2 83 63 26 f8 3f f0 f6 18 9a 77 d3 2e 58 22 93 c5 ec 9f e3 54 a5 21 3a 51 4a e7 9f fc 6d f8 5f 36 81 e0 d9 a7 f0 0d ed dd 96 a4 22 79 5e 73 38 95 61 0c 36 a0 da e0 82 03 91 fa d7 26 3e be 22 95 0e 6a 7b ad fd 3f e1 ce ac 05 0a 13 c4 72 d5 d5 3f 96 bf 2f 99 f3 cf 8c be 3e ea bf 0c ff Data Ascii: O%KeqpyUVL;RP2iW#Fqz>MF}\$GTT&LXN G###<=~%{_kos8:za~-H U@$]2olrpOaYI+\c&?w.X"T!:QJm_6"y^s8a6&>"j{?r?/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49864	216.239.32.181	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:35 UTC	1267	OUT	POST /g/collect?v=2&tid=G-7179S89KQB&gtm=45je5190v890033544z876386024za200zb76386024&_p=1736526089614&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101925629~102067555~102067808~102081485~102123608~102198178&cid=1564115657.1736526094&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1736526093&sct=1&seg=0&dl=https%3A%2F%2Fwww.infarmbureau.com%2F&dt=Indiana%20Farm%20Bureau%20Insurance&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=10380 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.infarmbureau.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:36 UTC	851	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.infarmbureau.com Date: Fri, 10 Jan 2025 16:21:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49865	142.250.185.66	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	1027	OUT	GET /td/ga/rul?tid=G-7179S89KQB&gacid=1564115657.1736526094&gtm=45je5190v890033544z876386024za200zb76386024&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102123608~102198178&z=1623100686 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:36 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 16:36:36 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:21:36 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-01-10 16:21:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49867	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	1670	OUT	GET /images/default-album/community-involvement.jpg?sfvrsn=8a9c3dba_0 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094
2025-01-10 16:21:36 UTC	674	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/jpeg Expires: Thu, 10 Apr 2025 15:21:36 GMT Last-Modified: Wed, 05 Oct 2022 06:46:38 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=community-involvement.jpg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 140777
2025-01-10 16:21:36 UTC	15607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 22 3d 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0b 00 0f 01 02 00 06 00 00 00 92 00 00 00 10 01 02 00 17 00 00 00 98 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 af 00 00 00 1b 01 05 00 01 00 00 00 b7 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 24 00 00 00 bf 00 00 00 32 01 02 00 14 00 00 00 e3 00 00 00 3b 01 02 00 0c 00 00 00 f7 00 00 00 98 82 02 00 0e 00 00 00 03 01 00 00 69 87 04 00 01 00 00 00 14 01 00 00 6c 03 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 2d 31 44 20 58 20 4d 61 72 6b 20 49 49 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 4d 61 63 69 6e 74 6f 73 68 Data Ascii: JFIF,,"=ExifII*(1$2;ilCanonCanon EOS-1D X Mark IIHHAdobe Photoshop CC 2019 (Macintosh
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: c7 13 09 b8 c9 c5 db b3 bf e9 fe 67 b2 c6 d2 bc 0a d7 10 84 90 ae 5d 15 f7 05 3e 99 c0 cf e5 50 74 05 00 14 00 50 02 9f 5a 00 51 c9 e9 40 09 8e 48 14 00 a7 ee d0 02 11 c6 71 40 0a 38 a0 04 23 db f3 a0 00 82 28 01 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 00 f4 a0 06 9c 03 92 32 7d a8 02 9d dd fd b5 a3 01 2d c8 8b 3d 33 1e ec e3 f9 0f e7 cd 3b 36 23 f0 cb c2 7e 2a f1 ff 00 c3 fd 5f 55 d2 fe 2f e9 97 32 6b 7a 1d d5 bd cc a3 0d 08 30 2c c2 36 99 50 31 8e 49 15 41 2d b4 64 86 38 3c e2 be 1a 83 ab 95 e2 a9 2c 23 5e c6 77 f7 5d da 4f 7d 16 9c af b3 f3 d5 1e 6c a8 d3 72 e6 94 7d f4 f7 eb db 7e a8 fa e3 f6 9c f8 f9 f1 3b c0 3f 11 fc 23 ab d9 78 8d ef fc 2b e3 1d 3e c3 5a 83 4f 9a 33 22 d8 5e c2 55 27 96 27 e0 c6 Data Ascii: g]>PtPZQ@Hq@8#((((((2}-=3;6#~*_U/2kz0,6P1IA-d8<,#^w]O}lr}~;?#x+>ZO3"^U''
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: 5e 3f 82 4d 67 c3 16 9f d8 ed 2f ce 97 ba 0d d6 c0 72 33 f7 01 da 79 f6 af 5e 9e 1a 9c df b9 23 55 8a 9d b5 d4 f1 69 fe 31 fe d1 3f b1 c3 fd 9f e0 4f ed 57 ae c1 64 d2 16 6d 2a db 50 91 23 71 fe d4 24 98 98 e3 d5 6b be 18 5c 6c 63 7b a6 bb 3d 7f 33 9a 75 30 d5 25 f0 d9 f7 5a 7d ed 59 9e a3 f0 23 fe 0b a5 fb 65 7c 38 d6 45 95 ff 00 85 2c fc 74 12 c1 e0 5d 39 a4 6d ac f3 4a 6e 16 e5 d2 db 27 cd c1 61 c0 51 b0 e0 8e 33 58 c7 d8 45 f2 b8 3b f9 3f f8 0c b9 42 bc fe 09 fd ea ff 00 aa fc 4f 41 f1 07 fc 17 e3 f6 fb 3a 44 5a fc 3f b2 e7 87 b4 5d 36 f2 61 15 9e a3 a8 78 7f 50 48 5d 99 b7 a2 ac d3 4e b1 b9 f2 d4 83 8e 08 dc d8 1c 62 f9 60 97 37 23 b7 9f f4 86 a9 54 93 b7 3f dc 97 ea d9 c4 6a 3f f0 5b ff 00 f8 29 7e be cd 2e 8b a8 78 63 4f 43 29 60 b0 e8 d6 a4 28 f3 Data Ascii: ^?Mg/r3y^#Ui1?OWdm*P#q$k\lc{=3u0%Z}Y#e\|8E,t]9mJn'aQ3XE;?BOA:DZ?]6axPH]Nb`7#T?j?[)~.xcOC)`(
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: 94 1f 04 e7 d6 35 2d 7e fa da ff 00 4b d2 e5 84 df 5a 69 ae 24 45 57 2c 0b 0c e1 b0 a4 82 70 0f 1d a9 e1 28 e2 e7 41 4a 32 4a dd 19 c9 8b 78 58 c9 a7 17 b5 ae 7c a7 f0 bf c0 9a 0d ef ed fd f0 73 57 d5 fc 63 1c 7a 7f 8d fc 21 e2 1d 19 2f ac 9d 7e 79 ed 1e 2b 98 c3 2b 1e 09 0a e4 03 ce 6b d0 8d 39 4e 9c a1 da 4b f1 4d 3f d0 8a 0e 1e c1 dd ed a9 f6 d7 c5 44 b8 f0 33 e9 d6 3e 15 f8 94 75 18 ed 22 22 13 3c 5f 34 05 49 1b 01 c9 c7 d3 15 9e 21 7b 2b 2e 62 a9 3f 69 76 91 e1 3f 1a 7c 60 35 5d 58 5f 35 fc 37 b3 5d 22 b4 f6 b6 b7 45 26 dc ac d1 e5 97 1d 79 53 c5 79 75 a5 cc f9 8e da 54 f5 e5 ea 7c 73 fb 38 f8 ae 6d 07 e2 1f c5 5f 0a 26 aa d6 b0 d9 f8 ea 5d 44 12 81 88 49 ad e0 91 f8 c6 72 79 f6 fc aa 30 38 3f ae cf 0f 4d e9 78 b5 f2 8b 68 f4 71 aa 6a bd 4e 5e f7 fb Data Ascii: 5-~KZi$EW,p(AJ2JxX\|sWcz!/~y++k9NKM?D3>u""<_4I!{+.b?iv?\|`5]X_57]"E&ySyuT\|s8m_&]DIry08?MxhqjN^
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: b1 cb 5c 25 fb e9 25 e4 b5 67 25 27 89 7e 24 7e d3 1e 1b b9 49 af 9f 54 d0 2e 37 d9 de e9 9a 42 2c 1a 7d cb 0d c1 d6 49 18 79 ae a5 59 55 93 cc d8 48 3d 7a 57 1a fa de 3a 5e fb f7 53 d9 68 ae bc f7 fc 77 3b 9a c1 e0 75 8e 92 7d 5e ae cf cb 6f c0 8f c4 1f b2 07 c2 2f 16 e8 f0 78 6b c7 9f 00 7c 1f 7f 68 8f f3 da 5e e9 2b 34 48 31 8e 18 e5 83 00 00 c8 39 ce 4e 6b b6 14 aa 51 97 ba ad f3 7f e6 72 cf 13 0a 91 b3 7a 7a 2f ca d6 3e 59 fd ac bf e0 88 9f 08 35 6b 58 be 22 fe ca 16 d1 78 1b c4 fa 6c 88 d6 fa 7c 77 25 b4 eb c8 55 d7 7c 44 30 32 46 c5 17 e5 c3 14 04 9c 8e 77 57 5d 3a f5 20 df 36 a9 fd e7 1c e8 d1 af 0e 54 b9 5f 4b 6d f3 5f e5 f7 1f 35 f8 a7 46 d6 7c 0b ad 4b e0 6f 1a 78 6a 4b 2b ed 2d bc 89 6d af 22 c3 02 bc 64 12 39 53 d4 11 c1 06 a2 b6 22 3f 64 f3 Data Ascii: \%%g%'~$~IT.7B,}IyYUH=zW:^Shw;u}^o/xk\|h^+4H19NkQrzz/>Y5kX"xl\|w%U\|D02FwW]: 6T_Km_5F\|KoxjK+-m"d9S"?d
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: 01 37 bc 9f e4 bf e0 a3 e6 31 55 15 5c 5f 94 57 e7 ff 00 0c 7b 97 83 ac e1 fb 6d f0 86 3c 63 59 92 3d a9 ce d0 60 88 2d 13 97 2d 92 30 8a e6 b9 ea 5f 04 23 f1 bf 8b be 26 cf f0 e7 c0 02 18 ee bc 45 14 16 0b 75 74 48 86 d6 d8 c8 d2 5c cf 2e 33 fb 98 e1 8e 67 7e 3e e4 6d 80 48 ac 2a d4 52 82 7b 95 f0 36 cf da 2f d8 fb e1 8f 86 fc 1b f0 73 4c f1 3d f5 be af 61 e1 b1 24 d7 9a 2e 99 aa 1c 5f 6b d7 0f 21 77 d6 6f 97 62 b9 b8 b9 3f bc 58 8b 15 8e 37 00 f1 d3 b3 07 85 84 a9 aa b5 9f bb 7d 17 f3 79 db b7 65 db ab 5b fc f6 37 11 52 55 5d 3a 76 73 ea fb 2e c9 f9 75 7d fc ce b6 df e2 df 8a be 23 eb 72 e8 fe 1e f1 25 b6 93 a7 db 29 0d 6b a1 a2 cf 74 ab 8c 28 9a 67 1e 5c 04 60 fc a8 ae 78 c6 e1 8e 7b 1e 22 b5 79 72 c1 f2 ae cb 7f bf a7 c8 e7 fa bd 0a 11 e6 9a e6 7e 7b Data Ascii: 71U\_W{m<cY=`--0_#&EutH\.3g~>mH*R{6/sL=a$._k!wob?X7}ye[7RU]:vs.u}#r%)kt(g\`x{"yr~{
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: ba d4 16 b1 c7 7f 6b 26 e1 ba 36 92 44 6b 98 cb 81 9f 31 c0 07 ca 71 5c 19 3f b4 c5 65 74 e5 34 d4 ad d7 7f bb 47 64 f4 d5 5e c9 1c 75 eb 28 62 a4 d6 d7 2d 7f c1 38 be 2d e9 9a 27 c4 6d 7f e1 c5 d5 de eb 6f 14 68 e2 f7 4a 27 8f 32 7b 56 66 78 80 fe f8 8e 49 9b 1c fd ca fb ee 00 c7 47 07 9b d4 c3 4f 45 51 5d 7a c6 ff 00 9a 6d fc 8f 17 89 68 bc 4e 0a 9d 68 7d 97 6f 93 ff 00 82 97 de 7d a7 f0 f5 96 f3 46 9b 48 9d 81 7b 49 d9 51 c1 ce 63 24 95 23 db a8 fc 2b f5 b8 d9 4e 50 e9 fa 1f 13 59 3b c6 68 8b 5d f0 de 8b ac d9 5d 78 4b c4 ba 45 ae a3 a7 5e 21 49 ec af 6d 96 58 66 8c f5 57 46 04 30 f6 35 cc ab fb 3e 6a 15 a3 cd 17 a6 ba a6 bb 34 f4 67 62 8b 93 55 a9 b6 9e fa 3b 34 fc 9a 3c 66 3f f8 26 47 ec 8f 77 e3 8b 4f 15 a7 83 b5 28 61 b6 bb 4b 8f ec 54 d5 9a 4b 1b Data Ascii: k&6Dk1q\?et4Gd^u(b-8-'mohJ'2{VfxIGOEQ]zmhNh}o}FH{IQc$#+NPY;h]]xKE^!ImXfWF05>j4gbU;4<f?&GwO(aKTK
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: d4 ac a9 d3 72 fb bd 4f d6 8f 85 17 ba 2f 88 3e 33 2f d8 2d 21 b7 d3 74 2b 17 b6 b0 b7 b6 e2 3b 78 11 04 0a aa 3a 00 aa c1 45 7d 34 39 55 5e 6e 88 e4 a9 79 51 71 5b bf f8 73 d0 35 d8 d9 b5 1b dd 12 49 d9 12 e5 03 44 e8 7f 8b af 1f 8f 35 d7 38 b9 41 4d 6a d1 e6 52 a8 a1 5a 54 a4 ec 9e de 4c c3 f8 5f ae 6b ba 3d fe a7 e1 4f 11 ec 3f 63 2b 73 65 74 1b 6a 4f 0b 1c 11 8f e1 65 60 09 07 fe 7a 71 d2 bc fa 89 42 6a a4 36 7b 9e a5 07 29 d3 74 aa ee b6 f4 3d 04 19 af ad 92 5f b3 ba ab fc c1 ba 83 ef c7 d6 bb 28 54 72 5b 1e 5e 37 0f 18 3d 0a 5f 60 54 c1 dc 41 f3 b2 c4 f1 9e dd 3f 0a ed 81 e3 ca fd 4a 77 30 9b 7d 69 a6 c1 da 40 c3 83 d7 1c 91 f9 55 5a f7 04 ed 66 5c b6 8e 31 ad 09 62 39 59 61 0f 90 38 fe ed 73 55 5c d0 3d 0c 3c 94 6b 27 dc f3 cf da c7 c1 8b e3 5f 83 Data Ascii: rO/>3/-!t+;x:E}49U^nyQq[s5ID58AMjRZTL_k=O?c+setjOe`zqBj6{)t=_(Tr[^7=_`TA?Jw0}i@UZf\1b9Ya8sU\=<k'_
2025-01-10 16:21:36 UTC	10482	IN	Data Raw: 3d e8 74 d3 2e 15 5f 43 cf 75 b8 26 b7 66 f9 71 e9 5c 93 a3 66 74 46 a9 ce 5e df b4 47 ef 74 ae 69 53 b3 3a 55 43 3e 7d 6d 57 39 6c d4 a8 d8 1c d1 99 7b a9 5b ce 0e e6 1f 85 5a 46 52 7a dc c6 bb 48 1e 4c ae 2b 44 ac 8c dc 9b 3d 0b e0 bf ec 65 e1 49 b5 88 ef 3c 4f ab 5d eb ac 85 48 b7 d9 e5 40 1b 03 25 8e 4b 38 cf 41 f2 8c 70 73 5f 3b 9c f8 8b 88 54 9c 70 d0 f6 7e 6f 59 7c b4 b2 fc 5f 63 f4 ec 8b c2 9c be 9d 5f 69 8e ab ed ad f6 52 71 8f cf 56 e5 f7 a5 dd 33 eb 3f 06 fc 17 d2 34 bb 08 6c a2 5b 7b 68 22 40 b1 db db db 2a aa 8f 41 83 81 5f 94 63 78 b2 bc aa 39 59 b9 3d db 7a bf c0 fd 77 0b 94 61 70 d4 55 3a 71 51 8a d9 25 64 bd 11 e9 be 0d f8 57 a3 8d bf 67 b5 01 7d 44 60 67 f5 af 9a c5 f1 0e 2e b6 ff 00 99 a5 59 50 c2 c7 44 78 e7 ed a1 f0 7f c6 1f 0f ee 74 Data Ascii: =t._Cu&fq\ftF^GtiS:UC>}mW9l{[ZFRzHL+D=eI<O]H@%K8Aps_;Tp~oY\|_c_iRqV3?4l[{h"@*A_cx9Y=zwapU:qQ%dWg}D`g.YPDxt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49869	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	1826	OUT	GET /images/life-insurance-matters/business.svg?sfvrsn=56e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:36 UTC	640	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:36 GMT Last-Modified: Fri, 02 Aug 2019 01:53:38 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=business.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:22 GMT Connection: close Content-Length: 2251
2025-01-10 16:21:36 UTC	2251	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 70 78 22 20 68 65 69 67 68 74 3d 22 35 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 35 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56px" height="50px" viewBox="0 0 56 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 5</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49874	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	1950	OUT	GET /images/life-insurance-matters/farm.svg?sfvrsn=50e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:36 UTC	636	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:36 GMT Last-Modified: Fri, 02 Aug 2019 01:53:38 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=farm.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:23 GMT Connection: close Content-Length: 9247
2025-01-10 16:21:36 UTC	9247	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 70 78 22 20 68 65 69 67 68 74 3d 22 35 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 34 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56px" height="56px" viewBox="0 0 56 56" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 4</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49873	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	1949	OUT	GET /images/life-insurance-matters/key.svg?sfvrsn=54e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:36 UTC	635	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:36 GMT Last-Modified: Fri, 02 Aug 2019 01:53:37 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=key.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:23 GMT Connection: close Content-Length: 1931
2025-01-10 16:21:36 UTC	1931	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 39 70 78 22 20 68 65 69 67 68 74 3d 22 34 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 20 34 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 33 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="39px" height="40px" viewBox="0 0 39 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 3</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49875	13.33.187.109	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	552	OUT	GET /modules.60031afbf51fb3e88a5b.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:36 UTC	720	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 228108 Connection: close Date: Wed, 18 Dec 2024 11:51:09 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "51f0735cf6390af81e4cb97c3cde2cb7" Last-Modified: Wed, 18 Dec 2024 11:50:24 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 af1c2193a818b5824fd85ddd651620a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 0gyNyUl5Isevi46uwgaZQYgaE2DkEfa-444mSJ9WOZWMcEdQqTq5Jg== Age: 2003427
2025-01-10 16:21:36 UTC	15664	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 30 30 33 31 61 66 62 66 35 31 66 62 33 65 38 38 61 35 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.60031afbf51fb3e88a5b.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: 6c 6f 67 2e 64 65 62 75 67 28 22 55 73 65 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 41 50 49 20 63 61 6c 6c 20 73 75 63 63 65 73 73 66 75 6c 2e 22 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 65 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 29 2c 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 55 73 65 72 20 41 74 74 72 69 62 75 74 65 73 20 76 61 6c 69 64 61 74 69 6f 6e 20 41 50 49 20 63 61 6c 6c 20 66 61 69 6c 65 64 2e 22 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 26 26 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 7c 7c 22 75 6e 6b 6e 6f 77 6e 5f 66 61 69 6c 75 72 65 22 29 7d 29 2c Data Ascii: log.debug("User validation API call successful.","userAttributes",e)}),"userAttributes"),hj.tryCatch((function(e){hj.log.debug("User Attributes validation API call failed.","userAttributes",e.responseText&&JSON.parse(e.responseText)\|\|"unknown_failure")}),
2025-01-10 16:21:36 UTC	16384	IN	Data Raw: 28 29 7d 7d 7d 28 29 2c 6e 3d 76 6f 69 64 20 30 21 3d 3d 74 2c 6f 3d 6e 75 6c 6c 21 3d 3d 69 2e 67 65 74 28 29 3b 72 65 74 75 72 6e 20 6e 26 26 69 2e 73 65 74 28 7b 72 65 66 65 72 72 65 72 3a 74 7d 29 2c 6f 7c 7c 6e 7d 7d 2c 36 31 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 3d 28 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 29 7d 29 2e 74 65 73 74 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 21 6e 61 76 69 67 61 74 6f 72 29 72 65 74 75 72 6e 22 4e 6f 20 55 73 65 72 2d 41 67 65 6e 74 20 50 72 6f 76 69 64 65 64 22 3b 69 66 28 6e 75 6c 6c Data Ascii: ()}}}(),n=void 0!==t,o=null!==i.get();return n&&i.set({referrer:t}),o\|\|n}},6175:function(e,t,n){"use strict";n.d(t,{K:function(){return i}});var r,o,i=((o=function(){return r()}).test=r=function(){var e;if(!navigator)return"No User-Agent Provided";if(null
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 73 69 67 6e 65 64 53 6c 6f 74 3b 29 73 3d 73 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 3b 72 65 74 75 72 6e 20 75 28 68 6a 2e 68 71 28 73 29 2e 70 61 72 65 6e 74 28 29 2c 22 3e 22 2b 6f 2b 6e 29 7d 72 65 74 75 72 6e 20 75 28 65 2e 70 61 72 65 6e 74 28 29 2c 22 3e 22 2b 6f 2b 6e 29 7d 29 2c 22 63 6f 6d 6d 6f 6e 22 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 22 29 29 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 65 2e 69 6e 64 65 78 4f 66 28 22 79 75 69 5f 22 29 3e 2d 31 29 26 26 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 6e 2c 22 5c 5c 24 31 22 29 29 2e 73 70 6c 69 74 28 Data Ascii: signedSlot;)s=s.assignedSlot;return u(hj.hq(s).parent(),">"+o+n)}return u(e.parent(),">"+o+n)}),"common"),l=function(e){var r=[];return!(void 0===(e=hj.hq.trim((e\|\|"").replace(/\s\s+/g," ")))\|\|""===e\|\|e.indexOf("yui_")>-1)&&((e=e.replace(n,"\\$1")).split(
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 73 74 53 65 65 6e 22 29 7d 7d 28 68 6a 2e 76 69 73 69 74 44 61 74 61 2e 67 65 74 50 61 67 65 56 69 73 69 74 49 6e 66 6f 28 74 2c 68 6a 2e 73 65 74 74 69 6e 67 73 2e 73 69 74 65 5f 69 64 29 2c 6e 2c 72 29 7d 2c 61 29 29 2e 66 6c 75 73 68 28 29 2c 68 6a 2e 65 76 65 6e 74 53 74 72 65 61 6d 2e 72 65 70 6f 72 74 50 61 67 65 43 6f 6e 74 65 6e 74 28 65 29 2c 28 30 2c 63 2e 4e 29 28 69 2e 73 2e 53 43 52 4f 4c 4c 5f 52 45 41 43 48 2c 7b 6d 61 78 5f 62 6f 74 74 6f 6d 3a 68 6a 2e 75 69 2e 67 65 74 42 6f 74 74 6f 6d 41 73 50 65 72 63 65 6e 74 61 67 65 28 29 7d 2c 21 30 29 2c 6f 3f 71 2e 65 6e 61 62 6c 65 52 65 63 6f 72 64 69 6e 67 28 29 3a 42 2e 79 2e 6f 6e 28 22 70 61 67 65 49 6e 66 6f 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4b 2e 69 6e 69 74 69 61 6c 69 Data Ascii: stSeen")}}(hj.visitData.getPageVisitInfo(t,hj.settings.site_id),n,r)},a)).flush(),hj.eventStream.reportPageContent(e),(0,c.N)(i.s.SCROLL_REACH,{max_bottom:hj.ui.getBottomAsPercentage()},!0),o?q.enableRecording():B.y.on("pageInfo",(function(e,t){K.initiali
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 68 6a 5f 6d 75 74 61 74 69 6f 6e 5f 73 75 6d 6d 61 72 79 5f 6e 6f 64 65 5f 6d 61 70 5f 69 64 5f 5f 22 2c 74 65 2e 6e 65 78 74 49 64 5f 3d 31 3b 76 61 72 20 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 65 2e 53 54 41 59 45 44 5f 4f 55 54 3d 30 5d 3d 22 53 54 41 59 45 44 5f 4f 55 54 22 2c 65 5b 65 2e 45 4e 54 45 52 45 44 3d 31 5d 3d 22 45 4e 54 45 52 45 44 22 2c 65 5b 65 2e 53 54 41 59 45 44 5f 49 4e 3d 32 5d 3d 22 53 54 41 59 45 44 5f 49 4e 22 2c 65 5b 65 2e 52 45 50 41 52 45 4e 54 45 44 3d 33 5d 3d 22 52 45 50 41 52 45 4e 54 45 44 22 2c 65 5b 65 2e 52 45 4f 52 44 45 52 45 44 3d 34 5d 3d 22 52 45 4f 52 44 45 52 45 44 22 2c 65 5b 65 2e 45 58 49 54 45 44 3d 35 5d 3d 22 45 58 49 54 45 44 22 2c 65 7d 28 6e 65 7c 7c 7b 7d 29 2c 72 65 Data Ascii: hj_mutation_summary_node_map_id__",te.nextId_=1;var ne=function(e){return e[e.STAYED_OUT=0]="STAYED_OUT",e[e.ENTERED=1]="ENTERED",e[e.STAYED_IN=2]="STAYED_IN",e[e.REPARENTED=3]="REPARENTED",e[e.REORDERED=4]="REORDERED",e[e.EXITED=5]="EXITED",e}(ne\|\|{}),re
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 74 65 6e 74 3a 22 22 7d 5d 2c 6f 2e 72 65 64 61 63 74 65 64 43 6f 6e 74 65 6e 74 49 64 2d 2d 29 3a 74 26 26 28 68 2e 63 68 69 6c 64 4e 6f 64 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 2c 6e 3d 65 2e 73 68 61 64 6f 77 52 6f 6f 74 2c 72 3d 65 2e 73 65 72 69 61 6c 69 7a 65 2c 6f 3d 65 2e 69 6e 69 74 69 61 6c 43 68 69 6c 64 4e 6f 64 65 73 7c 7c 5b 5d 3b 69 66 28 6e 26 26 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 7b 6f 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 3d 6e 2e 66 69 72 73 74 43 68 69 6c 64 3b 69 3b 69 3d 69 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7b 76 61 72 20 61 3d 72 28 69 29 3b 61 2e 69 73 49 6e 53 68 61 64 6f 77 52 6f 6f 74 3d 21 30 2c 6f 2e 70 75 73 68 28 61 29 7d 7d 69 66 28 74 2e 63 68 69 6c Data Ascii: tent:""}],o.redactedContentId--):t&&(h.childNodes=function(e){var t=e.node,n=e.shadowRoot,r=e.serialize,o=e.initialChildNodes\|\|[];if(n&&n.childNodes.length){o=[];for(var i=n.firstChild;i;i=i.nextSibling){var a=r(i);a.isInShadowRoot=!0,o.push(a)}}if(t.chil
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 64 28 65 29 2c 6e 26 26 28 69 2e 69 64 3d 6e 29 2c 69 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6f 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 5b 65 5d 29 7d 29 29 7d 72 65 74 75 72 6e 20 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 28 65 3d 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 52 75 6c 65 2c 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 6e 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6f 3d 74 68 69 73 Data Ascii: d(e),n&&(i.id=n),i};function a(e){o.forEach((function(t){t([e])}))}return t.init=function(){n\|\|(e=CSSStyleSheet.prototype.deleteRule,CSSStyleSheet.prototype.deleteRule=function(){var t=Array.prototype.slice.call(arguments),n=e.apply(this,arguments),o=this
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 69 6e 63 72 28 29 2c 72 2e 72 65 61 64 28 29 2e 74 68 65 6e 28 65 29 7d 29 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 69 6d 65 2c 72 3d 65 2e 63 6f 6d 70 72 65 73 73 65 64 3b 74 28 7b 73 75 63 63 65 73 73 3a 21 30 2c 63 6f 6d 70 72 65 73 73 65 64 3a 72 2c 74 69 6d 65 3a 6e 7d 29 7d 29 29 2e 63 61 74 63 68 28 61 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 28 74 2c 73 29 7d 2c 72 65 70 6f 72 74 50 61 67 65 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 3d 21 31 2c 67 3d 75 2e 79 2e 6f 6e 28 22 70 61 67 65 43 6f 6e 74 65 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 6f 3d 74 2e 75 75 69 64 2c 69 3d 74 2e 6d 64 35 2c 61 3d 68 6a 2e 64 6f 6d 2e 67 65 74 43 53 53 55 52 Data Ascii: incr(),r.read().then(e)}))).then((function(e){var n=e.time,r=e.compressed;t({success:!0,compressed:r,time:n})})).catch(a)}catch(e){a(e)}}(t,s)},reportPageContent:function(e){w=!1,g=u.y.on("pageContent",(function(t){var n,o=t.uuid,i=t.md5,a=hj.dom.getCSSUR
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 74 29 7c 7c 74 3b 72 65 74 75 72 6e 20 6f 3f 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3f 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 5b 6f 5d 7c 7c 28 61 28 22 55 6e 61 62 6c 65 20 74 6f 20 61 63 63 65 73 73 20 70 72 6f 70 65 72 74 79 20 77 69 74 68 20 6e 61 6d 65 20 5b 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 5d 20 66 72 6f 6d 20 61 6e 20 49 46 72 61 6d 65 20 63 6f 6e 74 65 78 74 22 29 29 2c 65 29 3a 28 61 28 22 55 6e 61 62 6c 65 20 74 6f 20 61 63 63 65 73 73 20 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 20 70 72 6f 70 65 72 74 79 22 29 2c 65 29 3a 28 61 28 22 55 6e 61 62 6c 65 20 74 6f 20 6e 61 6d 65 20 70 72 6f 70 65 72 74 79 20 6f 72 20 6d 69 73 73 69 6e 67 20 66 61 6c 6c 62 61 63 6b 4e 61 6d 65 22 29 2c 65 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 Data Ascii: t)\|\|t;return o?r.contentWindow?r.contentWindow[o]\|\|(a("Unable to access property with name [".concat(o,"] from an IFrame context")),e):(a("Unable to access contentWindow property"),e):(a("Unable to name property or missing fallbackName"),e)}catch(t){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49876	157.240.251.9	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	1386	OUT	GET /signals/config/1686000021639755?v=2.9.179&r=stable&domain=www.infarmbureau.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:37 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-9oTAn80U' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-10 16:21:37 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2025-01-10 16:21:37 UTC	1491	IN	Data Raw: 7c 7c 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 3b 69 66 28 62 2e 63 6f 6e 76 65 72 73 69 6f 6e 42 69 74 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 2e 63 6f 6e 76 65 72 73 69 6f 6e 42 69 74 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 62 2e 70 72 69 6f 72 69 74 79 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 2e 70 72 69 6f 72 69 74 79 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 62 2e 65 74 6c 64 4f 6e 65 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 2e 65 74 6c 64 4f 6e 65 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 63 6f 6e 76 65 Data Ascii: \|\|typeof a!=="string")return null;else{var b=JSON.parse(a);if(b.conversionBit!=null&&typeof b.conversionBit==="number"&&b.priority!=null&&typeof b.priority==="number"&&b.etldOne!=null&&typeof b.etldOne==="string")return a;else return JSON.stringify({conve
2025-01-10 16:21:37 UTC	14893	IN	Data Raw: 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 61 62 70 63 6d 61 65 62 72 69 64 67 65 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 61 62 70 63 6d 61 65 62 72 69 64 67 65 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 61 62 70 63 6d 61 65 62 72 69 64 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 Data Ascii: });e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.iabpcmaebridge");f.registerPlugin&&f.registerPlugin("fbevents.plugins.iabpcmaebridge",e.exports);f.ensureModuleRegistered("fbevents.plugins.iabpcmaebridge",function(){return e.exports})})()})(wi
2025-01-10 16:21:37 UTC	1500	IN	Data Raw: 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 61 21 3d 3d 22 75 72 6c 22 29 72 65 74 75 72 6e 20 62 3b 61 3d 5b 22 68 74 74 70 3a 2f 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 22 2c 22 77 77 77 2e 22 5d 3b 76 61 72 20 64 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 63 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 73 74 61 72 74 73 57 69 74 68 28 61 29 26 26 28 64 3d 64 2e 73 6c 69 63 65 28 61 2e 6c 65 6e 67 74 68 29 29 7d 29 3b 72 65 74 75 72 6e 20 64 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2b 24 2f 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 63 5b 67 28 63 29 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2c 66 3d 67 28 63 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 63 3d 64 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d Data Ascii: on h(a,b){if(a!=="url")return b;a=["http://","https://","www."];var d=b.toLowerCase();c(a,function(a){d.startsWith(a)&&(d=d.slice(a.length))});return d.replace(/\/+$/,"")}function i(a,c,d){var e=c[g(c)].toString(),f=g(c).toLowerCase();c=d[a.toLowerCase()]
2025-01-10 16:21:37 UTC	14884	IN	Data Raw: 31 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 29 72 65 74 75 72 6e 20 62 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 66 2c 61 29 7d 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6c 28 65 2c 66 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 73 77 69 74 63 68 28 62 29 7b 63 61 73 65 22 69 6e 22 3a 63 61 73 65 22 69 73 5f 61 6e 79 22 3a 72 65 74 75 72 6e 20 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 29 2e 69 6e 63 6c 75 64 65 73 28 63 29 3b 63 61 73 65 22 69 5f 73 74 72 5f 69 6e 22 3a 63 61 73 65 22 69 5f 69 73 5f 61 6e 79 22 3a 72 65 74 75 72 6e 20 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: 1;if(Array.isArray(c))return b(c,function(a){return l(e,f,a)});else return l(e,f,c)}function l(a,b,c){switch(b){case"in":case"is_any":return a.map(function(a){return a.toString()}).includes(c);case"i_str_in":case"i_is_any":return a.map(function(a){return
2025-01-10 16:21:37 UTC	1500	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 63 3d 62 2e 67 65 74 43 75 73 74 6f 6d 50 61 72 61 6d 65 74 65 72 73 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 67 3d 66 2e 67 65 74 46 62 65 76 Data Ascii: function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("SignalsFBEventsEvents"),c=b.getCustomParameters;b=f.getFbeventsModules("SignalsFBEventsPlugin");var d=f.getFbeventsModules("SignalsParamList"),g=f.getFbev
2025-01-10 16:21:37 UTC	14884	IN	Data Raw: 61 62 6c 65 42 61 63 6b 75 70 54 69 6d 65 6f 75 74 3a 21 31 3b 21 62 26 26 73 3d 3d 3d 6e 75 6c 6c 26 26 28 73 3d 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2c 72 2c 70 29 7d 2c 63 29 29 7d 29 2c 69 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 71 29 7b 76 61 72 20 62 3d 61 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 3b 62 2e 67 65 74 28 6e 29 3d 3d 6e 75 6c 6c 26 26 62 2e 61 70 70 65 6e 64 28 6e 2c 72 29 3b 61 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 3d 62 3b 72 65 74 75 72 6e 21 31 7d 62 3d 61 2e 69 64 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 31 3b 70 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 29 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 Data Ascii: ableBackupTimeout:!1;!b&&s===null&&(s=a.setTimeout(function(){t(e,r,p)},c))}),i.listen(function(a){if(!q){var b=a.customParams\|\|new d();b.get(n)==null&&b.append(n,r);a.customParams=b;return!1}b=a.id;if(b==null)return!1;p.push(a);return!0}))})})();return e
2025-01-10 16:21:37 UTC	1491	IN	Data Raw: 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 22 3a 22 50 61 67 65 56 69 65 77 22 7d 7d 2c 7b 22 6f 72 22 3a 5b 7b 22 55 52 4c 22 3a 7b 22 65 71 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 69 6e 66 61 72 6d 62 75 72 65 61 75 2e 63 6f 6d 5c 2f 73 70 6f 6e 73 6f 72 73 5c 2f 70 65 72 69 6c 2d 70 72 6f 74 65 63 74 5c 2f 73 75 62 6d 69 73 73 69 6f 6e 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 7d 7d 5d 7d 5d 7d 7d 2c 7b 22 69 64 22 3a 22 39 35 30 38 35 32 38 34 36 31 38 33 31 30 32 22 2c 22 72 75 6c 65 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 22 3a 22 50 61 67 65 56 69 65 77 22 7d 7d 2c 7b 22 6f 72 22 3a 5b 7b 22 55 52 4c 22 3a 7b 22 69 5f 63 6f 6e 74 61 69 6e 73 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 Data Ascii: ":{"and":[{"event":{"eq":"PageView"}},{"or":[{"URL":{"eq":"https:\/\/www.infarmbureau.com\/sponsors\/peril-protect\/submission-confirmation"}}]}]}},{"id":"950852846183102","rule":{"and":[{"event":{"eq":"PageView"}},{"or":[{"URL":{"i_contains":"https:\/\/w
2025-01-10 16:21:37 UTC	14893	IN	Data Raw: 34 34 35 36 32 34 30 36 33 38 31 22 2c 22 72 75 6c 65 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 22 3a 22 50 61 67 65 56 69 65 77 22 7d 7d 2c 7b 22 6f 72 22 3a 5b 7b 22 55 52 4c 22 3a 7b 22 69 5f 63 6f 6e 74 61 69 6e 73 22 3a 22 61 75 74 6f 5c 2f 66 69 6e 61 6c 44 65 74 61 69 6c 73 22 7d 7d 2c 7b 22 55 52 4c 22 3a 7b 22 69 5f 63 6f 6e 74 61 69 6e 73 22 3a 22 71 75 6f 74 65 5c 2f 43 6f 6e 74 61 63 74 55 73 22 7d 7d 2c 7b 22 55 52 4c 22 3a 7b 22 69 5f 63 6f 6e 74 61 69 6e 73 22 3a 22 71 75 6f 74 65 5c 2f 68 6f 6d 65 5c 2f 43 6f 6e 74 61 63 74 55 73 22 7d 7d 5d 7d 5d 7d 7d 2c 7b 22 69 64 22 3a 22 32 39 34 36 35 35 34 34 30 38 39 30 33 34 37 36 22 2c 22 72 75 6c 65 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 Data Ascii: 44562406381","rule":{"and":[{"event":{"eq":"PageView"}},{"or":[{"URL":{"i_contains":"auto\/finalDetails"}},{"URL":{"i_contains":"quote\/ContactUs"}},{"URL":{"i_contains":"quote\/home\/ContactUs"}}]}]}},{"id":"2946554408903476","rule":{"and":[{"event":{"eq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49877	142.250.186.110	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	446	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:37 UTC	2383	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Fri, 10 Jan 2025 16:21:36 GMT Date: Fri, 10 Jan 2025 16:21:36 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Content-Security-Policy: require-trusted-types-for 'script' Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=FNmkoI3fSJo; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=9kK3clCl6Sg; Domain=.youtube.com; Expires=Wed, 09-Jul-2025 16:21:36 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; Domain=.youtube.com; Expires=Wed, 09-Jul-2025 16:21:36 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D; Domain=youtube.com; Expires=Wed, 09-Jul-2025 16:21:36 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:21:37 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 33 65 64 65 33 36 66 32 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2025-01-10 16:21:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49878	142.250.184.198	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	1301	OUT	GET /activity;register_conversion=1;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 16:21:37 UTC	2498	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"3447713391463953071"}],"aggregatable_trigger_data":[{"filters":[{"14":["9320362"]}],"key_piece":"0xe5ce05c888e0a557","source_keys":["12","13","14","15","16","17","18","19","20","21","27840256","27840257","27840258","27840259","644880588","644880589","644880590","644880591"]},{"key_piece":"0xc94108ef345fb8ff","not_filters":{"14":["9320362"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","27840256","27840257","27840258","27840259","644880588","644880589","644880590","644880591"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"27840256":65,"27840257":65,"27840258":65,"27840259":6356,"644880588":65,"644880589":65,"644880590":65,"644880591":6356},"debug_key":"4793829701341010820","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"3447713391463953071","filters":[{"14":["9320362"],"source_type":["event"]}],"priority":"10", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 09-Feb-2025 16:21:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmAyYpSUHKiIOONK2ycUCQhkZ4r4rAOlUJUtN1-rUfEyRGXJ8sT5hFTvV8K; expires=Sun, 10-Jan-2027 16:21:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49879	142.250.186.38	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	1358	OUT	GET /activityi;dc_pre=CLWe2ujH64oDFbuDgwcdSrArRQ;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: 8339572.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 16:21:37 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:37 GMT Expires: Fri, 10 Jan 2025 16:21:37 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmIWlw1o1mrVOT7v7ZZDThytLbxZ1qFePVwFI1NGIA3qaulW2BgHEqXkQgcbPg; expires=Sun, 10-Jan-2027 16:21:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:21:37 UTC	406	IN	Data Raw: 32 65 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4c 57 65 32 75 6a 48 36 34 6f 44 46 62 Data Ascii: 2e6<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLWe2ujH64oDFb
2025-01-10 16:21:37 UTC	343	IN	Data Raw: 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 66 72 6d 3d 30 3b 67 74 6d 3d 34 35 66 65 35 31 39 30 76 39 31 38 38 31 31 33 35 31 37 7a 38 37 36 33 38 36 30 32 34 7a 61 32 30 31 7a 62 37 36 33 38 36 30 32 34 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 64 6d 61 3d 30 3b 74 61 67 5f 65 78 70 3d 31 30 31 39 32 35 36 32 39 7e 31 30 32 30 36 37 35 35 35 7e 31 30 32 30 36 37 38 30 38 7e 31 30 32 30 38 31 34 38 35 7e 31 30 Data Ascii: 7.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~10
2025-01-10 16:21:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49880	142.250.186.38	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:36 UTC	1353	OUT	GET /activityi;dc_pre=CO-P2ujH64oDFU-jgwcddVgQ1Q;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: 8339572.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 16:21:37 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:37 GMT Expires: Fri, 10 Jan 2025 16:21:37 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlAGuhcaog4MWvwayYFHKhjNi0loxyXN9QkYDXWiS3gF3ct7mOH0m96W61-yos; expires=Sun, 10-Jan-2027 16:21:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:21:37 UTC	406	IN	Data Raw: 32 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4f 2d 50 32 75 6a 48 36 34 6f 44 46 55 Data Ascii: 2e1<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CO-P2ujH64oDFU
2025-01-10 16:21:37 UTC	338	IN	Data Raw: 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 66 72 6d 3d 30 3b 67 74 6d 3d 34 35 66 65 35 31 39 30 76 39 31 38 38 31 31 33 35 31 37 7a 38 37 36 33 38 36 30 32 34 7a 61 32 30 31 7a 62 37 36 33 38 36 30 32 34 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 64 6d 61 3d 30 3b 74 61 67 5f 65 78 70 3d 31 30 31 39 32 35 36 32 39 7e 31 30 32 30 36 37 35 35 35 7e 31 30 32 30 36 37 38 30 38 7e 31 30 32 30 38 31 34 38 35 7e 31 30 32 31 32 33 36 Data Ascii: 938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~1021236
2025-01-10 16:21:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49886	3.131.211.191	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:37 UTC	903	OUT	GET /tv2track.php?action_name=Indiana%20Farm%20Bureau%20Insurance&idsite=TV-5454092718-1&rec=1&r=168345&h=11&m=21&s=34&url=https%3A%2F%2Fwww.infarmbureau.com%2F&_id=fe57b8effe7e4586&_idts=1736526094&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=912 HTTP/1.1 Host: collector-44978.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:37 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 10 Jan 2025 16:21:37 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 61c42f4e-400d-4c6a-a239-44e685bc399f Server: nginx Content-Length: 42 Connection: Close
2025-01-10 16:21:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49883	142.250.184.198	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:37 UTC	1306	OUT	GET /activity;register_conversion=1;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 16:21:37 UTC	2498	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"4581461479018616670"}],"aggregatable_trigger_data":[{"filters":[{"14":["9305035"]}],"key_piece":"0x57abdba08d21a60e","source_keys":["12","13","14","15","16","17","18","19","20","21","27840256","27840257","27840258","27840259","644880588","644880589","644880590","644880591"]},{"key_piece":"0xa1d05b07a9dc4bab","not_filters":{"14":["9305035"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","27840256","27840257","27840258","27840259","644880588","644880589","644880590","644880591"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"27840256":65,"27840257":65,"27840258":65,"27840259":6356,"644880588":65,"644880589":65,"644880590":65,"644880591":6356},"debug_key":"8192225816251994201","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"4581461479018616670","filters":[{"14":["9305035"],"source_type":["event"]}],"priority":"10", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 09-Feb-2025 16:21:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc; expires=Sun, 10-Jan-2027 16:21:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49897	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:37 UTC	1805	OUT	GET /images/homepage-hero-images/people-hero/happy-family-with-kids-in-front-of-indiana-skyline-min.png?sfvrsn=a91532ba_1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:37 UTC	683	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/png Expires: Thu, 10 Apr 2025 15:21:37 GMT Last-Modified: Mon, 11 Dec 2023 14:17:33 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=Happy-family-with-kids-in-front-of-indiana-skyline-min.png X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:24 GMT Connection: close Content-Length: 84423
2025-01-10 16:21:37 UTC	15598	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cc 00 00 01 bb 08 03 00 00 00 79 22 55 cd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 03 00 50 4c 54 45 47 70 4c 63 5f 5a 75 6d 5f 66 61 57 05 03 02 07 06 04 04 03 02 5e 5d 5c 4b 48 3b 1f 1d 19 3e 2d 28 33 22 1a aa 9f 83 a9 33 32 8b 6a 4f ca b5 a3 d7 68 67 cd 5e 5c c1 a6 94 a0 87 74 c6 af 99 c7 b4 96 aa 8c 6f 59 4b 34 5d 41 2b a2 76 5a 9e 7f 59 79 8d a8 2c 20 17 cf ba a2 c3 94 73 3a 32 25 78 58 3d db c3 b1 a0 7c 5e db a0 48 72 4c 2e d7 c2 b0 2f 2a 20 c5 a7 8e b4 8f 71 4e 39 24 63 45 28 81 5a 3e d6 74 70 9f 6f 55 d2 67 61 5c 79 93 66 8a 9c 94 1d 18 2e 4b 63 07 05 06 e0 b6 9d dd 29 2c dd ae Data Ascii: PNGIHDRy"UgAMAasRGBpHYsPLTEGpLc_Zum_faW^]\KH;>-(3"32jOhg^\toYK4]A+vZYy, s:2%xX=\|^HrL./* qN9$cE(Z>tpoUga\yf.Kc),
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 2f 63 67 32 1c 18 0f cd 25 94 16 de d9 f1 bc 77 54 97 28 9d b2 a4 59 c7 10 53 b2 b4 b1 6b 56 47 97 48 a4 de e5 96 47 51 3b 06 13 de 2c 26 4e e0 cf ea 74 70 4d ea 6d 52 0f 81 d7 69 cd 49 55 23 36 b4 e2 4a 02 27 fa dd b0 73 b2 d8 51 5a 8d 86 63 c8 24 86 b3 d2 11 ec b7 b2 ae a4 19 87 79 b7 16 97 f6 ef 60 f0 a4 a1 81 dd 04 82 93 0f 3b bb 7f 60 34 59 ec 6e 6d e1 82 e1 2c 4e 81 f5 48 f9 93 16 f3 64 e1 d5 bc b6 36 06 99 60 b9 3f aa fb c8 c0 c0 d1 6b a9 23 cd fb 9b 4f 9c 3b 81 ac c1 f0 25 ad d9 3c d5 3c 72 a9 01 5a 56 03 98 8a c9 d4 3b 4a 8b 25 55 20 e1 25 ed a5 ac ea 62 4c 85 8b 35 7b ae 50 1e 69 23 ab 76 f0 f5 ca 77 90 13 1e 15 98 a3 c0 3c 7a 65 c6 e5 f6 cb 97 3f f8 a0 67 eb 57 44 33 74 26 56 ab f5 cb 9a 08 16 8c a5 66 4c b7 16 05 69 10 35 ea 8b 13 33 0b 95 2d Data Ascii: /cg2%wT(YSkVGHGQ;,&NtpMmRiIU#6J'sQZc$y`;`4Ynm,NHd6`?k#O;%<<rZV;J%U %bL5{Pi#vw<ze?gWD3t&VfLi53-
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 4e 56 c2 32 51 99 f0 5c 8d a7 27 0e a9 7f b0 69 67 74 6d 34 58 1c 7f 3b 2f ff 68 62 e9 6f 83 e2 c3 cb 82 e5 88 8f a5 5d 02 4c 34 31 6d 04 4c b4 a5 c3 54 4a 23 c8 c2 42 e1 71 85 ef 01 f9 a3 d3 f3 e8 09 4c db c5 dd 2e 3d 6d 97 2e 9b 6d 31 20 dd cd 88 19 06 9f 9b 8c 04 58 77 b8 56 97 4c 52 08 e8 ea f5 05 ed f5 77 1e 96 d3 2a 27 4f 1e 58 3b 63 ed c0 c0 8c 6d 6b b6 f5 0f 0d bb 5e 3f 7b 7d 79 75 6b 31 50 2b 47 ae da 8f 79 bd 9c ca 62 1a 6a 0e 4b 53 82 99 52 5e 9c 9a b2 76 c6 00 32 dc 9c d4 f2 72 bc 58 9c 53 de ff b3 bf c5 ae f1 3f bb 6a 53 7a 0a cd 53 6a 1b 6c 4c 3a d4 b8 3b f9 8f e7 27 4d 3a d4 b4 0f 57 dc 76 83 d2 a3 7c 41 db e0 6b 4d b8 17 e4 d0 76 fb 6e 9b 2d 28 f6 78 83 11 34 f1 f6 8f fd 2c 60 5a 6b 75 a6 b2 cc 05 9b ca 66 ad 5e 06 d1 d9 ba 13 d3 bc d9 0a Data Ascii: NV2Q\'igtm4X;/hbo]L41mLTJ#BqL.=m.m1 XwVLRw*'OX;cmk^?{}yuk1P+GybjKSR^v2rXS?jSzSjlL:;'M:Wv\|AkMvn-(x4,`Zkuf^
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: f7 37 de 1c cf 60 59 85 b4 47 73 b3 2e 10 69 62 72 1b 19 d1 2e 67 e7 0f 2f 5d b7 6e fb 16 24 c2 70 b4 78 80 a6 4a 6c fd 54 62 ab 65 b5 4b 14 31 b4 44 c6 25 fc 60 9a b3 e7 44 64 a6 73 da 16 43 0b 28 5b 61 a4 9c 83 d6 73 e4 12 9a 23 47 eb 09 e6 6f bd cf 0d f7 b3 c8 b8 70 82 9c 80 f5 14 cb 8c af 20 19 e8 60 1f 47 07 9b 48 9d 6c 82 99 77 a1 a7 a7 5f a0 94 46 59 0a f7 fb 06 26 3f b7 0c 88 1a 23 82 25 17 86 68 a0 82 27 5f e2 27 60 89 81 83 fc 51 67 0b 34 63 a9 61 b8 99 81 d3 d9 82 a1 a7 f6 2e 76 a8 40 64 2d a9 01 c9 2a 64 29 47 05 42 b3 5e 74 db d6 d1 91 b5 ba 9d 7a b4 90 a0 b0 a1 f6 8b bb 4a 63 bd 46 2e ef 69 0a cf ee fe df b1 cb 96 c3 0a cc 37 ff e6 cd a3 54 96 00 9a d2 d0 64 1f 0c 96 5a 8a 29 92 82 76 c4 e1 e3 0d c7 0f 1f 3e bd 6e fb f6 9d 9b f0 ef 16 38 47 Data Ascii: 7`YGs.ibr.g/]n$pxJlTbeK1D%`DdsC([as#Gop `GHlw_FY&?#%h'_'`Qg4ca.v@d-*d)GB^tzJcF.i7TdZ)v>n8G
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 3a fb 3a e7 0c 6a 13 ac 65 c8 91 10 a8 5a aa f5 a3 7a b3 61 76 b4 af 7b 6e 56 b3 77 39 c8 00 aa ce 4e 7e 3a 9a 6a 76 77 c5 e1 30 77 33 c9 83 bb 62 f1 1a ea 89 7f 22 95 45 a3 d9 68 3c 97 0a e9 12 5a 6b e1 43 93 32 9e db 09 cf 48 8f 34 85 e6 8f 3a 87 96 bb ed 5f 50 c1 16 95 a2 a1 76 0e 68 59 0e 68 97 45 92 9f 4b b5 1f 55 14 8a fe 34 51 93 dc 23 05 b4 42 1a 9a 68 98 2f 19 db 8a 42 be 1a 8f 7f b6 8d c0 94 f6 d9 6d c0 24 c7 79 29 33 d9 e2 33 83 65 38 e9 9a dc 55 4c f9 a2 fa 1e e7 8f 75 03 ff 8c 8c 0c 00 99 41 df f1 2e 0f 54 f5 c9 63 6c f7 e1 e2 52 30 41 8a 53 68 71 c8 65 08 4d 1a 0b 0b f7 64 87 b9 f9 b9 f9 c8 b3 ee d2 8a e5 9a 67 92 4c b1 a2 f0 a2 2d 13 a8 fb a4 6a fa ee 6c a8 2c 22 6e 36 90 c7 f4 e0 4a 01 41 49 81 6c 73 73 4b b8 3f 05 e3 71 8d 9d 33 7a bd 5a Data Ascii: ::jeZzav{nVw9N~:jvw0w3b"Eh<ZkC2H4:_PvhYhEKU4Q#Bh/Bm$y)33e8ULuA.TclR0AShqeMdgL-jl,"n6JAIlssK?q3zZ
2025-01-10 16:21:37 UTC	3289	IN	Data Raw: 1c e7 20 a6 98 ee f2 c9 c5 9e bd b2 a6 c1 a3 9d 1c 43 8a dd 6e 6c 98 e5 89 12 16 a7 a4 b7 00 fc ab 04 9c 35 04 d3 ed 01 35 2b 4b ea 4b ea eb eb 39 e4 80 7b 31 64 dc 3a 76 44 fd fa fa d2 9e 63 27 b5 9d dd a1 c1 14 a9 fd a4 cf 01 a5 f9 7c 1a 98 fa e5 07 f9 80 15 ae 84 a4 04 b9 f4 b7 b8 7b ea 07 fe 2b f5 d4 32 e6 41 96 a1 3f 33 f0 70 f2 a9 99 9c b1 50 71 57 0a 99 59 ad a3 50 13 01 69 79 56 1d 53 50 69 89 31 b4 da cc 6a ab aa 24 03 85 a6 09 6c ad c8 c8 5b ad 52 96 40 9e 25 2f 99 60 36 1b cf 5a 3d 69 c2 b9 64 c9 33 ab 36 0c f6 0e 62 5c 6d 53 13 c5 77 4c ae 1d 3c 3a cd 71 20 2c 37 96 aa 65 26 da 61 86 87 e0 23 4b 8a 40 c6 9a 9a 3e 01 a1 29 5c 53 c3 9f 01 2f 8a 62 a8 7f 34 73 4e 37 96 7d b5 74 f5 5c f2 b8 b6 71 9d 02 d6 28 70 1a 22 cf 69 aa 96 ae 74 03 a4 81 13 Data Ascii: Cnl55+KK9{1d:vDc'\|{+2A?3pPqWYPiyVSPi1j$l[R@%/`6Z=id36b\mSwL<:q ,7e&a#K@>)\S/b4sN7}t\q(p"it

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49891	74.125.133.156	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:37 UTC	934	OUT	POST /g/collect?v=2&tid=G-7179S89KQB&cid=1564115657.1736526094&gtm=45je5190v890033544z876386024za200zb76386024&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101925629~102067555~102067808~102081485~102123608~102198178 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.infarmbureau.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 16:21:37 UTC	851	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.infarmbureau.com Date: Fri, 10 Jan 2025 16:21:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49898	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:37 UTC	1819	OUT	GET /images/homepage-hero-images/hero-banner/indiana-farm-bureau-background_125207343-0852-4dc5-bedc-4a47705856ea.png?sfvrsn=683a33ba_1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:37 UTC	724	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/png Expires: Thu, 10 Apr 2025 15:21:37 GMT Last-Modified: Wed, 17 May 2023 02:16:09 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=indiana-farm-bureau-background_125207343-0852-4dc5-bedc-4a47705856ea.png X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="0", dtRpid;desc="1175235595" Date: Fri, 10 Jan 2025 16:21:24 GMT Connection: close Content-Length: 197512
2025-01-10 16:21:37 UTC	15557	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0c 0c 0c 0c 0d 0c 0e 10 10 0e 14 15 13 15 14 1d 1b 18 18 1b 1d 2c 1f 22 1f 22 1f 2c 42 29 30 29 29 30 29 42 3b 47 3a 36 3a 47 3b 69 53 49 49 53 69 7a 66 61 66 7a 93 84 84 93 ba b0 ba f3 f3 ff 01 0c 0c 0c 0c 0d 0c 0e 10 10 0e 14 15 13 15 14 1d 1b 18 18 1b 1d 2c 1f 22 1f 22 1f 2c 42 29 30 29 29 30 29 42 3b 47 3a 36 3a 47 3b 69 53 49 49 53 69 7a 66 61 66 7a 93 84 84 93 ba b0 ba f3 f3 ff ff c2 00 11 08 04 4c 0b 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 fd 88 b0 0d 42 81 51 14 a9 6c 2a 58 a5 28 2d a8 02 58 40 89 00 54 12 a5 b0 82 d5 b0 b7 31 22 a0 59 56 da a2 59 2b 46 89 4a 69 Data Ascii: JFIF,"",B)0))0)B;G:6:G;iSIISizfafz,"",B)0))0)B;G:6:G;iSIISizfafzL@"BQl*X(-X@T1"YVY+FJi
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: af 07 77 9f 97 3f 47 6f 5f 9f cd e9 e5 e1 e9 bd 7a 73 ef e1 b4 f5 6b bf da fd 47 bb 7c be 77 e2 1c 7f 65 fc fb 5e 97 83 e7 7a 6f 7d 63 e9 fa bc 59 ef c2 7d 6f 27 1f 2e 3e 97 4e de 6f 4b cf b9 cb d3 cb 9f ed be a6 33 8f 2f e3 fa fe 47 c7 39 7d 1e 9e 6d fa 7a 79 7e 9f af c7 c7 3e 0f 2f d6 e9 e7 f9 dc 7d 3d 3e 8e 38 ef 96 e7 0e 5b e3 7a 67 8e 7d dc 21 be de 9c f9 3b f8 f9 bb 7a f7 e4 ef 3c dd b9 f3 e3 73 d6 67 1d 75 eb d7 8f af 0c 24 fa 5a f8 f7 d3 d3 1d b7 c3 ee fe c7 b5 63 76 75 b9 fe 5c 5e 7c 7d 1f 4b d2 fc ff 00 b3 93 b6 67 4f 9b bf bb 71 f1 fc d9 ef c6 f5 ed f5 3e 8f e3 fe c7 93 d7 e8 39 78 bb 7c ff 00 47 5e f8 e7 af a9 c5 df 7c 35 db 7e 7d 71 ed bf 2b cb ea e0 72 f2 f9 fe 8f d3 f1 b9 f6 ef 3c 5f 37 b7 29 d3 cf 27 7c f5 ce 3c db f4 70 9b ed d3 ad d7 1f Data Ascii: w?Go_zskG\|we^zo}cY}o'.>NoK3/G9}mzy~>/}=>8[zg}!;z<sgu$Zcvu\^\|}KgOq>9x\|G^\|5~}q+r<_7)'\|<p
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 69 d1 59 78 6f 9b fd a3 5b 7f 9e 25 f3 90 bf b6 fc 3f d4 fd a3 ff 00 3c 4b e7 21 65 79 5e 56 59 79 59 65 96 59 65 f2 bf db df 25 e7 7c 96 5f f4 3f 0f f5 7f 65 3d a2 c8 5a 1f f9 e2 5f 29 fb 2f 3e dc 8b 99 fb 0b 37 fd 6f 03 ea fe c9 ba 16 e3 ed fe 78 97 ca 5c f6 58 ff 00 b0 1f ec ac c0 fa ab f6 3b 0b 27 d5 7f 9e 25 f2 9f be bd 87 fd 80 f9 70 7e ac 7f 69 dd 7f 9e 25 f2 97 f6 e6 0f d5 87 ed 3b e7 1b 7a 8d 26 96 53 28 b2 d7 f9 bd fc a5 fb 57 fd 80 f2 7c b8 5f 52 1f b4 fb b2 93 a8 b3 0b e0 b9 5b b6 c7 9d b1 7f 9a df ca 5f db 98 7f 52 1f b4 fb 9e 58 8d 2a b8 e2 46 11 df 8f 82 4b 11 6c 96 4b 96 3f e6 b9 7c a5 fd 31 fb ab f7 cf 96 1f 38 7e d1 5e b9 65 8d d4 95 6c cd 31 11 c2 ae 9f aa ba 47 a7 2c 7f cd 6f ac bf b5 df 2c 3e 70 fd a2 ea f2 c4 f9 13 b1 2b cf 55 75 87 Data Ascii: iYxo[%?<K!ey^VYyYeYe%\|_?e=Z_)/>7ox\X;'%p~i%;z&S(W\|_R[_RX*FKlK?\|18~^el1G,o,>p+Uu
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: b0 89 38 33 5e 19 c4 c2 38 98 67 12 08 e2 23 8f e2 2b 67 e2 b1 84 fc 5c 8d 3e 2c e1 78 96 79 7c 72 5e 1b 15 45 b3 0f c3 62 4d 7a bc 91 c2 5c 7e 19 e4 f0 89 f8 48 da d3 2f 0d 0b db 85 80 68 c1 3f 45 11 86 0c 24 d9 2e 14 96 eb 4c 55 2d 67 57 a8 b6 59 6c f5 9e a3 71 59 a4 d2 28 a3 4c 4d 31 e4 a2 99 4c ac bd 28 f1 52 8b c2 55 19 e1 69 89 c5 c2 38 f8 67 1e 27 19 9c 59 9c 4c 63 56 39 78 c7 eb 15 8a 68 99 c3 25 86 2c 34 3c 28 0b 0e 27 0e 27 0e 06 88 d9 c2 81 c1 81 c1 44 70 ff 00 f2 28 71 92 4f 4e bc 73 8b 33 8c 8e 34 0e 26 1b 2e 39 6e 6e 69 4c e1 61 0f c3 60 9e 59 76 7e 1f 15 74 e1 f8 81 f1 a3 d7 88 fb f1 62 71 22 6a 2c d4 27 b9 27 b1 8d 89 0d 91 1d 0f a6 98 1c 38 18 90 8a 8e d0 84 5c 51 89 1a 6a 9e 1f a2 26 26 16 d6 61 e1 b9 59 c2 62 83 7b 93 8b 4c 8c 5b 66 89 Data Ascii: 83^8g#+g\>,xy\|r^EbMz\~H/h?E$.LU-gWYlqY(LM1L(RUi8g'YLcV9xh%,4<(''Dp(qONs34&.9nniLa`Yv~tbq"j,''8\Qj&&aYb{L[f
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: 7b 07 a1 ec 1f 81 d6 12 5e 44 8b 2c 53 37 5e 74 f8 58 f8 3e 0f 83 e0 8e 91 ec 47 48 8e 91 0b 82 17 04 2e 04 e1 e8 75 3f c2 d7 c1 ac 6f 12 10 c8 30 32 c1 4d a5 08 af d8 8a 69 1a ff 00 f5 09 12 30 90 c5 9d 1e 2d fa 2e e4 0f 78 11 85 ee ff 00 a3 8f c0 7a c7 f7 1c 39 26 2d 66 e4 49 d0 4f 16 9b f9 19 ed 1b 50 d3 f6 17 de ec c9 c9 bd 85 3e 98 a6 17 f6 df dc 12 36 10 99 36 27 64 d9 26 48 78 1f 78 95 24 2f 43 b8 8c ec 58 f0 d0 4e 13 81 31 c4 31 69 eb 6d 5e 08 20 81 da 5b 44 3d 39 10 88 27 e2 b2 30 c2 8a 11 02 12 40 81 aa b3 c1 11 93 74 b9 23 b6 46 d5 60 b3 54 87 c8 be 43 9e 44 bf 71 1d 95 59 0f 62 51 8c d1 f6 80 92 4a 16 10 9b 47 2c 96 70 b5 88 49 10 b2 23 61 f8 23 ad 24 72 45 6a d1 04 68 81 1b bd 12 bf a1 45 3d ff 00 c2 e7 9e 47 6b c9 41 7a 96 6e 16 46 28 bf 51 Data Ascii: {^D,S7^tX>GH.u?o02Mi0-.xz9&-fIOP>66'd&Hxx$/CXN11im^ [D=9'0@t#F`TCDqYbQJG,pI#a#$rEjhE=GkAznF(Q
2025-01-10 16:21:37 UTC	16384	IN	Data Raw: c4 4f 81 53 24 da 1b 75 86 5d a0 12 43 51 3d 8a 2d a8 53 36 ee 78 e0 99 c3 1f 62 17 76 50 94 13 13 44 0b 2d b9 0d 6e 28 3a 21 e0 95 90 d4 a8 b2 31 d9 6d e1 f0 6f 91 bb 64 74 21 51 61 c9 c1 55 42 22 0c 11 8d 27 4c 1b 94 1d e0 15 62 3d cf 78 73 60 a8 92 76 09 e4 91 d8 51 b2 12 d7 07 53 16 43 b5 4e c5 42 12 f8 31 04 9b 73 08 72 ab 03 70 24 8f 81 d9 10 f2 18 24 89 94 e4 d9 c9 49 a3 c6 88 11 b4 81 0f 24 9d 0a 84 ed 10 90 9d 98 9d 2b c6 c5 55 f0 64 0c d5 92 e9 ad d8 48 39 79 1d af 21 c4 91 9a b8 27 b3 25 b4 92 62 09 5e 83 32 af 81 d6 cd 0e 98 57 6d 19 12 2c ce c4 49 14 b8 26 7f a8 ad 64 cb 24 92 05 61 16 12 50 74 54 fc 92 99 f6 32 dc b2 e4 c5 46 94 96 3e 03 59 10 bb 1b b9 29 8f 49 64 35 8c b1 38 24 43 34 24 0f 64 59 4b 7b 10 85 2e 43 76 91 b2 27 dc 28 dc 95 38 Data Ascii: OS$u]CQ=-S6xbvPD-n(:!1modt!QaUB"'Lb=xs`vQSCNB1srp$$I$+UdH9y!'%b^2Wm,I&d$aPtT2F>Y)Id58$C4$dYK{.Cv'(8
2025-01-10 16:21:38 UTC	16384	IN	Data Raw: 52 49 24 4f 72 49 64 e9 7f 37 4e 2d 81 3f 26 04 23 f8 3f 83 f8 23 e3 27 f2 7f 27 f3 e8 c9 24 92 4d f5 b4 de 49 34 e0 94 55 a9 83 a8 51 4d 6a a4 3c 73 b8 f1 ce e8 c5 52 15 55 0a a2 53 2a aa a4 c5 53 e0 97 84 9d 11 3f 95 b1 55 57 9b 3b ac 89 0b 2b c9 02 56 aa eb 7c 92 33 c8 b7 22 15 f9 2b 75 47 e5 a5 ff 00 e8 9a 9e f4 bb c6 b2 34 61 45 3a 3b 31 2f 4a 2d c1 09 23 42 47 e0 63 18 ca 6f e5 15 0b 71 88 63 17 91 88 fe 6f 1a 8c f2 b3 3d 87 ee 14 3a 59 4f 92 9d 6a 5f ec ae 8a 69 7a 0b c8 ed 4e ec 96 6b 84 d4 a6 64 aa d0 6a a4 86 43 66 1d cd aa 3f b6 c9 36 61 66 17 a9 81 98 3e 4c 3a 09 0d 10 ad 87 e0 c3 f0 47 c1 a9 a9 24 df 5f a5 8c d1 6d 72 4d b0 d3 c1 db a7 83 b5 4f 23 e9 c1 46 88 aa 8c 48 8a d1 f9 b0 21 2f ca b5 22 16 e6 1f 93 c6 e4 11 f2 41 04 2b 41 1a 09 47 91 Data Ascii: RI$OrId7N-?&#?#''$MI4UQMj<sRUS*S?UW;+V\|3"+uG4aE:;1/J-#BGcoqco=:YOj_izNkdjCf?6af>L:G$_mrMO#FH!/"A+AG
2025-01-10 16:21:38 UTC	16384	IN	Data Raw: c0 b7 7b 86 6d c2 e7 30 b1 cc 2c 65 2d 93 51 4a c8 d4 f1 9e a3 d7 1e 71 d4 56 1b a4 6e a6 d7 c4 75 a8 0a d7 52 8c 62 03 c7 71 22 14 65 9a 32 c0 d6 fb 81 02 36 d6 0d c3 ec 6e 26 b1 dc a3 a6 5d 55 5e e3 5e dd ca d7 ff 00 b8 f5 51 2b da 00 12 9e 6b a9 56 71 50 37 2a 55 70 a2 57 91 44 b9 44 2b 41 51 87 8d dc 7a e0 f8 23 14 d2 e6 57 62 9a 83 55 40 56 a1 4f 8e 3c ca 95 28 20 7b ca 95 9d 4a 88 c4 2a 24 a9 52 b9 63 cb e8 27 89 99 7c 5f 07 a7 11 8b 30 73 58 fe 4f d7 17 c5 fa 6e 5f 17 06 0c b4 18 ca b2 da dc 22 da f4 0e 5c cb c9 2d c4 cc a9 7c f9 94 56 e1 c3 c0 4d 1c 25 b1 c4 29 e5 03 83 37 c1 e8 f1 1f 98 24 16 55 93 3e 80 a3 53 13 2f 07 a8 9d 4c fa 4f 4d 4e f8 d7 e2 19 7c 54 ae 47 d0 fa 2e 1f 95 65 cb fc 55 2b d1 52 bf 8a e9 86 d2 df fe b0 30 65 81 97 31 0b 6f 50 Data Ascii: {m0,e-QJqVnuRbq"e26n&]U^^Q+kVqP7UpWDD+AQz#WbU@VO<( {J$Rc'\|_0sXOn_"\-\|VM%)7$U>S/LOMN\|TG.eU+R0e1oP
2025-01-10 16:21:38 UTC	16384	IN	Data Raw: 4a 6a 08 a4 82 98 52 b1 00 75 d4 05 c2 e0 e7 50 77 1e e6 33 93 65 b5 ac c0 21 6e be 18 91 1f b0 4c 52 6a 0b c6 fa bc c3 d4 ae 21 40 63 2c 01 7b 41 86 2a c3 42 e8 b6 d2 3d 46 97 88 02 0b 22 e1 d1 6c 87 f6 44 f0 4b d4 31 cb f3 35 37 50 58 a2 0c fe 23 c6 67 ca e2 a2 45 97 4f 54 1b 16 0f fa 25 58 6e 0d 75 14 75 c6 d2 58 d0 11 81 07 53 07 95 95 ef 30 15 98 66 d2 c7 70 8d ed 16 a5 94 2e 1c 6c b0 a3 a8 5d 6f aa f5 02 d2 3f 82 04 75 7a 08 d3 81 14 76 40 b4 f9 89 bd f6 c3 60 aa 6e 78 c4 3e 7c 31 d0 0d 37 16 83 c9 60 ee b7 2b 36 7f c4 46 17 fe e1 58 96 47 46 ee 00 66 64 dd c0 43 2f 88 97 86 2f 15 9e 6f d3 5e 94 01 e5 25 26 5d 21 90 b9 45 c5 0c a4 9d 98 89 50 7c e5 29 03 a4 97 4c b2 a2 9e 66 1c 7f 72 a9 a9 65 df 71 47 72 90 22 71 04 77 0c 3a 95 83 04 af 08 81 58 8e Data Ascii: JjRuPw3e!nLRj!@c,{A*B=F"lDK157PX#gEOT%XnuuXS0fp.l]o?uzv@`nx>\|17`+6FXGFfdC//o^%&]!EP\|)LfreqGr"qw:X
2025-01-10 16:21:38 UTC	16384	IN	Data Raw: 20 45 ea b5 ab 82 b2 ea ff 00 52 bb 1d 99 80 65 ce 8a ee 1b 82 e3 66 c6 da 6f 50 79 69 3f 78 1a c5 ac 37 fd c2 e5 51 9c 45 c3 9a c2 b1 05 ec 01 67 b4 64 0c ae a2 0f 4a e2 20 97 aa a8 17 53 85 4a e2 da 8a d8 63 cd dc c6 d0 fe c2 20 bb 9d 0c 11 15 a2 19 5c 1b 94 db 09 9b e0 d4 15 70 d4 c1 30 6a 0d e0 45 5a 8a 85 9e cd c0 a5 e5 15 f3 8b 8d e3 03 c2 8c e0 af ed 60 99 f4 82 51 6d a5 09 6b c3 15 a2 57 19 ea 1a 86 6c 4f 29 76 06 c0 cc 95 6b 6a 77 04 4b 15 1f be f5 16 f8 c7 ed 1a dd 94 19 54 d4 74 98 34 05 55 4e 3e a5 f7 c1 80 ca 52 50 b8 88 33 79 ab 50 67 62 a1 2e 66 31 13 54 79 62 96 19 2b 47 71 a1 72 1a 0d 54 c7 50 43 0a 06 1e 12 ae 8e 09 7e b4 d4 7b 02 f0 cc 58 53 7b 8b 52 62 15 c1 2c b2 25 3c b3 72 3a dc 9d c6 21 57 88 40 6e 0c 08 cd 00 2d 3d e1 93 55 ed 2f Data Ascii: ERefoPyi?x7QEgdJ SJc \p0jEZ`QmkWlO)vkjwKTt4UN>RP3yPgb.f1Tyb+GqrTPC~{XS{Rb,%<r:!W@n-=U/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49896	18.66.102.51	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:37 UTC	363	OUT	GET /c/hotjar-31017.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:37 UTC	640	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 10 Jan 2025 16:21:34 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/9543b86d219219ca0e7b8c68c54b55dc Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 44b457512f742b4e48fc7f0c87d8ed92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: KUHHzoxoJoywwlcFFWibVKVsJUfpTDflGVmTkdQsVDnF-fNm-6RYVA== Age: 3
2025-01-10 16:21:37 UTC	12794	IN	Data Raw: 33 31 66 32 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 33 31 30 31 37 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 6d 61 6e 75 61 6c 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 61 6e 6f 6e 79 6d Data Ascii: 31f2window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":31017,"rec_value":0.0,"state_change_listen_mode":"manual","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonym
2025-01-10 16:21:37 UTC	325	IN	Data Raw: 31 33 65 0d 0a 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 64 2e 61 73 79 6e 63 3d 31 2c 64 2e 73 72 63 3d 68 6a 2e 73 63 72 69 70 74 44 6f 6d 61 69 6e 2b 74 2c 64 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 75 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 63 2e 72 65 76 69 73 69 6f 6e 3d 22 35 66 66 34 36 63 39 22 2c 77 69 6e 64 6f 77 2e 68 6a 42 6f 6f 74 73 74 72 61 70 3d 63 7d 2c 77 69 6e 64 6f 77 2e 68 6a 42 6f 6f 74 73 74 72 61 70 28 22 68 74 74 70 73 3a 2f 2f 73 63 72 69 70 74 2e 68 6f 74 6a 61 72 2e 63 6f 6d 2f 22 2c 22 6d 6f 64 75 6c 65 73 2e 36 30 30 33 31 61 66 62 66 35 31 66 62 33 65 38 38 61 35 62 2e 6a 73 22 2c 22 33 31 30 31 37 22 29 2c 68 6a 2e 6d 65 74 72 69 63 73 2e 74 69 6d 65 45 6e 64 28 22 72 65 73 6f 75 72 63 65 Data Ascii: 13eeElement("script");d.async=1,d.src=hj.scriptDomain+t,d.charset="utf-8",u.appendChild(d),c.revision="5ff46c9",window.hjBootstrap=c},window.hjBootstrap("https://script.hotjar.com/","modules.60031afbf51fb3e88a5b.js","31017"),hj.metrics.timeEnd("resource
2025-01-10 16:21:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49830	216.58.212.150	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:37 UTC	701	OUT	GET /vi_webp/MZTWt2RchgA/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:37 UTC	631	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 22580 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:21:37 GMT Expires: Fri, 10 Jan 2025 18:21:37 GMT Cache-Control: public, max-age=7200 ETag: "1697640460" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:37 UTC	759	IN	Data Raw: 52 49 46 46 2c 58 00 00 57 45 42 50 56 50 38 20 20 58 00 00 30 1a 02 9d 01 2a 80 02 e0 01 3e 6d 32 95 48 24 22 a4 a5 a3 11 db f0 b0 0d 89 67 6e 55 72 7e 00 ca fd 4a 4f 30 b2 92 03 c0 16 c0 b9 26 70 df 3f 8e fc c1 c0 a8 f5 cf d6 29 a8 f1 e7 d2 d7 28 ae 97 7d af ab 4c 25 d7 c1 fc 60 59 e9 cd 37 31 f8 c0 4e 8c 88 c5 cf 31 ff 9b 5a 52 3c 37 84 3f d8 b7 e7 96 48 97 ac f6 d9 ec 55 be b1 7d b6 7b 15 6f ac 5f 6d 9e c5 5b eb 17 db 67 b1 56 fa c5 f6 d9 ec 55 be b1 7d b6 7b 15 6f ac 5f 6d 9e c5 5b eb 17 db 67 b1 56 fa c5 f6 d9 ec 55 be b1 7d b6 7b 15 6f ac 5f 6d 94 0c df 63 69 ac 32 77 3a 0f 2a fd 43 fe 19 ac 8b 08 38 f5 a1 9f b5 5f 28 a9 5f 0a de 98 26 08 75 50 b0 45 1f fa 48 cc cc c5 09 92 e7 65 d2 ec 1d 05 28 61 8f e8 74 de 8b eb 56 5d 72 d3 ed b7 b7 42 1b 38 09 Data Ascii: RIFF,XWEBPVP8 X0>m2H$"gnUr~JO0&p?)(}L%`Y71N1ZR<7?HU}{o_m[gVU}{o_m[gVU}{o_mci2w:C8_(_&uPEHe(atV]rB8
2025-01-10 16:21:37 UTC	1390	IN	Data Raw: ac 62 1b 6a 68 70 69 7f 31 72 42 e6 1f 6f c7 d3 f4 32 2b 11 25 c4 a0 5a 7d 43 b1 64 bf a6 1a 31 3b 52 4a ae 07 99 a6 da 2a bb 16 8a 96 a8 a6 ff b5 cf 63 fa fa d4 ca 03 ef 1f b7 27 da c0 24 85 cd ff ec 09 44 92 a4 e1 f0 56 40 6c 1b 7f 3b 70 b7 ed cc dc 19 fa 08 44 d5 49 6a f5 bb a0 9e 60 f7 af 3f bf 3c 3e 38 b6 05 d1 e2 90 f7 e8 92 81 1b 3a 45 cd ac d8 62 25 46 47 54 78 2e c4 5b 06 d3 fd 19 a2 85 68 2a e1 53 f2 07 fa 2d c2 b7 36 26 79 53 73 73 00 23 55 b7 9a f1 5f 0e f2 c1 8d a8 0d 8e 65 9e 86 b5 e5 93 3b 4b c0 85 90 9a d0 73 c3 ab 26 17 b3 fc 12 bc d2 df 9a b4 13 36 4d f1 8f 7c 85 79 48 fa 23 db 3e 4b eb e2 bf f4 cf a6 c6 69 af 9b d7 bc 62 e9 f6 05 f6 7a 23 6e 75 57 ce 63 35 72 08 27 86 c0 0c 66 88 c4 7e 38 7c ce 48 6a 63 44 68 b0 98 04 24 c8 cf 4d ee 31 Data Ascii: bjhpi1rBo2+%Z}Cd1;RJc'$DV@l;pDIj`?<>8:Eb%FGTx.[hS-6&ySss#U_e;Ks&6M\|yH#>Kibz#nuWc5r'f~8\|HjcDh$M1
2025-01-10 16:21:37 UTC	1390	IN	Data Raw: 85 ef 3b 90 ee fb 38 aa b2 a2 94 8a c6 b5 70 03 66 f2 e8 9c 8c 4b 1b fd dd f2 d2 e6 f5 7c fa 8e be 0c 08 e9 7a dc fe 00 8e f1 0e 00 f0 42 db ec 65 55 d0 5c 7c 19 78 c1 1d ac 09 6c 39 c0 5f e5 38 42 05 a0 a1 34 91 2f e6 a9 7e a5 de ff 2a 23 51 83 f7 25 7f 97 53 a6 04 f7 d7 8d 55 d9 2a 05 dc b0 0b a3 c8 08 15 fd 2e cc c9 be ca ff 8a ee a4 e5 cb d6 31 1c ab fa 1e ec cd 47 49 e8 60 e1 64 66 4d df c4 58 e8 87 de fd f9 fd 39 e9 ff 8b 22 b7 e2 cc 3b 22 64 14 61 74 66 e3 2e 09 78 fa be 7a be d4 a8 08 1d 28 33 3a 9f 21 a5 3f 77 1a 25 4e da 77 c3 a9 62 be 14 e9 f5 79 73 47 b7 ef e1 27 cb a4 24 7e 7b c3 59 a5 81 f1 68 77 ca 37 db 59 70 c3 05 80 2c 90 f5 f8 aa 23 50 20 20 3a 55 20 c1 6e 95 fe f5 7c aa e0 b0 52 56 f6 22 81 c7 34 10 28 65 f1 05 dd 79 5c 4e d7 8b d4 4e Data Ascii: ;8pfK\|zBeU\\|xl9_8B4/~#Q%SU.1GI`dfMX9";"datf.xz(3:!?w%NwbysG'$~{Yhw7Yp,#P :U n\|RV"4(ey\NN
2025-01-10 16:21:37 UTC	1390	IN	Data Raw: 4f 38 cb ad 27 3c 3d 16 fd 0f 1a 75 30 9f 09 a7 41 a2 4c 5b 25 72 74 69 de 06 2c b2 4e c6 d0 a2 13 b0 b5 4e 69 4f 91 02 9f 98 b8 21 8d 93 de cf fa 78 9a 27 1f f2 3b f8 c4 f3 e9 a6 b0 e7 a8 61 27 a3 ec b2 a7 1e d3 0e 18 c4 78 1d 8a dd b8 c2 aa 42 88 1e 7d e5 9c 2f b2 d5 9a 26 56 74 5a 3b dd 17 c7 c6 c7 fd b6 1d 29 86 2c 9f c1 bf b6 cc 05 4d d3 fd 30 ad 06 5d 90 9e 1b a3 e7 42 22 6c 0a 75 6e d0 7b 9f 65 9c 03 d3 e8 4c d2 c9 d2 ed bc ce 64 d7 10 d7 32 59 86 4d 00 10 3b b3 55 56 0a f4 c8 89 4b 10 1d 0e c2 f7 d6 0f 97 4f f0 7c f4 0e 34 ac 88 34 5c 82 aa 3c 0f 59 c4 d4 50 53 5a e4 46 3b b3 29 33 50 d2 e2 81 9f 06 bf 32 d2 b3 8d 2a b3 af 51 49 fc de 49 90 35 60 ab a0 b4 0c a2 85 8e 7e a7 85 47 2a 8a c3 4e 36 6e b7 53 ca d7 7d 5f 21 9d ac fd b2 6f 4d 60 72 9a 7e Data Ascii: O8'<=u0AL[%rti,NNiO!x';a'xB}/&VtZ;),M0]B"lun{eLd2YM;UVKO\|44\<YPSZF;)3P2QII5`~GN6nS}_!oM`r~
2025-01-10 16:21:37 UTC	1390	IN	Data Raw: 23 f0 1f 09 50 cf a4 25 19 0c f5 6c 63 93 82 0f 16 b8 af b6 b1 49 c6 a8 b4 a8 7c 9d 24 4a a3 aa cc a3 be a6 61 01 be af 73 f5 32 ad 6e df af 0a ff 86 90 e1 cc 8a 6c 1f c2 7b dd 39 88 f8 16 87 f4 63 d7 c8 d3 29 9b 01 7e 07 22 e2 74 c5 24 4e 64 66 28 a8 88 3b 8c 57 3c 7b b8 04 fe 23 d3 8f 11 45 f8 a5 2a b6 98 2c 44 20 14 7a 86 83 71 4f e1 7b 91 53 2d 3a 5a 19 0a ed ef 50 3f 31 4b dd f6 8d b8 48 be 3f 9c 73 ae 49 93 72 7c 1e 8b 52 20 57 c4 ae e3 59 e1 f7 aa 11 eb 94 f3 0b 1c 0c 85 4e 78 ab eb ac df 15 c4 6a d6 86 e2 84 37 a8 ff e0 f6 dd 2f f1 3b 7d 7e 23 49 27 cc 3e 55 a7 0f e5 37 ee 28 ef 8e 31 8b 8d 19 0b 03 88 d6 07 a7 6e 47 32 fa 87 37 ec 87 09 b1 1d f4 80 74 b5 45 89 90 89 47 89 e8 9b 86 a5 eb f3 ca d2 8b 04 9a 4e 42 b7 2e ca 01 4e 9b 3c de 5b d1 22 84 Data Ascii: #P%lcI\|$Jas2nl{9c)~"t$Ndf(;W<{#E*,D zqO{S-:ZP?1KH?sIr\|R WYNxj7/;}~#I'>U7(1nG27tEGNB.N<["
2025-01-10 16:21:37 UTC	1390	IN	Data Raw: 84 7d 25 78 ce fc cf 1a 93 19 14 03 6e 25 bb ef 9f 41 05 92 cb 3b db e7 5b 61 35 b8 14 73 b2 b5 40 38 14 e5 32 fb 8f 9c c4 b0 8c 0e 1d ae 31 00 3c c4 01 c9 94 5b f7 8b 27 1d ec bd 18 4b 49 38 cb 08 e0 c2 4e 74 4d e3 05 87 38 a6 f7 a7 6c ea 22 f2 3e 0a a4 04 75 4f b5 bc 54 e4 dc d9 45 4f 33 e1 83 39 94 38 8e ad d9 a2 da d5 d2 10 8b 9d b2 e5 70 1e c4 5d e2 a4 c3 14 78 48 e3 7c f2 a3 72 1f f6 14 93 03 bd c5 fe 1a c3 37 cd 53 78 c8 b6 eb 3c 96 4e 04 b7 e9 ac 6d ea 60 c0 9e e3 f3 fa 56 01 38 ed bb 56 af 05 25 a4 0b b9 c1 e4 32 11 87 d3 48 68 46 7c 7f ea dc ab 01 5f 64 70 18 58 61 a6 ee 3c 60 d8 fd 47 ac 3b 5f 9c e4 56 5f 98 f8 ed 3a 01 6a 62 19 25 e5 8b 37 d4 98 9c 31 87 ad 5b 6a f9 d4 0b 74 e4 4e c5 0c 17 03 76 20 a9 04 da 63 41 1c 24 ce bc 42 5f 1a 55 71 f6 Data Ascii: }%xn%A;[a5s@821<['KI8NtM8l">uOTEO398p]xH\|r7Sx<Nm`V8V%2HhF\|_dpXa<`G;_V_:jb%71[jtNv cA$B_Uq
2025-01-10 16:21:37 UTC	1390	IN	Data Raw: 04 9d 30 ed bc f3 50 ce f5 37 cf 55 78 52 c7 a3 d9 a6 cd d7 df c7 8d a4 a2 be 24 d2 08 d0 ef 94 f9 3b 76 c6 dd 71 c9 a2 c6 81 d9 b9 17 18 cf 20 20 2a fe ee 53 3c 9d f0 70 bc 57 4d 8d 13 c2 91 43 31 b5 da af 27 6b 4d 6b e8 90 23 3a 43 f2 26 4d 92 a1 e1 aa 31 c4 a3 dc 49 ee 54 50 35 2f f1 62 90 b1 e0 0e 63 b4 ea 8c 17 27 df f6 52 d4 d8 04 96 5e a5 3a 7c 03 0e 84 c6 7a 2b 72 75 70 93 48 aa 74 71 83 86 95 73 39 5f 09 6e cd 0b 8a b6 e4 ef 96 bd 26 f6 92 33 bf 2b 7d dd df 36 fc 46 36 44 9b b7 6a 7b 34 f0 39 c4 a8 65 f5 e3 df 42 57 0d 55 3c 7b 14 1a 57 17 d1 3f 53 d7 d5 1f 90 7f 59 de 4c dc 89 15 41 59 1a 39 8f 2a e6 83 da c7 85 a4 69 a3 92 3f b4 d5 2b 2c 29 e7 a0 bd 68 42 6c bb d7 50 6f 3b 07 7d ed 46 2c bc 30 e3 97 0a 2d 1e 48 22 28 82 73 19 f4 66 59 03 e5 2f Data Ascii: 0P7UxR$;vq S<pWMC1'kMk#:C&M1ITP5/bc'R^:\|z+rupHtqs9_n&3+}6F6Dj{49eBWU<{W?SYLAY9i?+,)hBlPo;}F,0-H"(sfY/
2025-01-10 16:21:37 UTC	1390	IN	Data Raw: b7 02 75 c7 dc 9f bb 46 85 bb 42 ed d1 03 18 6e f5 d5 96 78 12 10 7a 3d 7e c6 0e e7 14 0a ed 58 49 16 b4 37 dc 7d ff 8b b9 98 4c ff 19 5b 6b fe fa 35 09 c2 18 5d 7b 5a bc 88 d0 c5 ce d1 ff 20 62 c9 0e 7c ec 5a a5 6d fe e6 17 81 ad d0 1f 48 b4 49 ee 99 8f 2e f2 26 f0 5c 5d 93 f9 24 ec 87 81 c5 7b fb bc 98 d3 aa 76 9f 9e 59 71 11 2d a5 43 fc d2 61 a9 eb f3 c2 e3 ff 88 a7 6e df b1 43 24 e7 46 da 3b 9f d1 bd d0 7b 25 a0 c0 98 ab 2b 5f 25 9e e7 56 05 76 51 77 94 4d b6 ab 46 92 1d 8f e8 63 28 aa 57 85 57 38 1f ab e5 a6 17 b6 d9 5b 8f f4 ae 3a 37 78 07 70 86 25 74 89 83 0b 1c 60 d6 89 4f f5 54 a7 5f 70 ac 39 c6 20 57 55 28 0a de 5b 3e 36 2e dd c7 c5 9b a9 09 73 03 8b 06 1a b0 0f 4e 7b 67 93 ac 06 77 7e 98 2d 0b 21 89 a4 f0 22 84 b9 ed bf b9 3c 61 5d f4 db 80 22 Data Ascii: uFBnxz=~XI7}L[k5]{Z b\|ZmHI.&\]${vYq-CanC$F;{%+_%VvQwMFc(WW8[:7xp%t`OT_p9 WU([>6.sN{gw~-!"<a]"
2025-01-10 16:21:37 UTC	1390	IN	Data Raw: a5 3b 0d 10 d9 4d 04 23 d1 10 c9 8e 7e 49 f9 ed 30 3d 76 87 cb d2 65 41 c4 27 be 1f 75 b5 4a 65 b4 e3 0e 6c 5b 09 7b 7e 02 cb ac eb 4c 97 73 c2 f3 d3 67 1e 7c b2 1c 4b e5 07 fa e7 12 58 53 63 54 55 e8 c3 3c 82 e1 d6 22 c7 b4 27 7f 1b 8b 71 81 72 67 c1 10 8a 5e 1b aa 8f fe 54 4b 0c ac 4b 9a e7 62 6f e5 30 6b ec d1 d6 d2 7b 1a bc 5e f8 61 ca 3d 6a ca ac 70 d6 6f a7 4c f7 b2 ca e2 ea 02 e3 6f 11 b8 6d b4 16 8e 66 62 fb 87 fc d5 d5 10 8e 34 22 16 05 80 d8 67 1e 4b 77 ee 19 81 22 ca a9 38 83 76 0c 6d fc 5c eb 5d 8a 8f f9 8b 44 58 dd 47 d5 66 98 ee 18 38 02 1a 2d 7b 66 47 ef 9b 22 90 a9 fc a5 6e 20 c9 84 4a 28 d1 e6 ee 73 11 a6 33 6d c3 42 a6 6f 2e d9 bd 39 fd 33 db c6 6c 22 16 5a 26 04 b6 ae 66 a9 ec e6 b2 98 04 07 9c 08 70 b6 e4 72 4c bc 92 71 1a 5f 38 76 b5 Data Ascii: ;M#~I0=veA'uJel[{~Lsg\|KXScTU<"'qrg^TKKbo0k{^a=jpoLomfb4"gKw"8vm\]DXGf8-{fG"n J(s3mBo.93l"Z&fprLq_8v
2025-01-10 16:21:37 UTC	1390	IN	Data Raw: 4c 53 58 05 65 01 74 8a d1 8a 95 ef 60 e0 11 62 68 80 f8 7f b7 ea fc 70 8c d9 6e f5 88 4a 1d 11 e2 0c bb a3 1a 63 1b f0 cd 46 f4 1d 54 1d 69 a2 4e 07 ca e7 52 ba f5 9c f3 6e f0 ae d3 d3 c1 9d 15 dc c9 a3 cb bf ac cc ab fc e8 12 5e 31 64 0d 7e 3e ab 99 3b 7b 33 0c fe 02 db b9 cd 1b 46 80 b6 eb 20 5b 9a 71 52 68 12 73 72 0e e3 56 a0 67 48 5a 28 0a 14 34 51 86 53 84 e5 73 01 03 a2 9d 09 c5 de 1a d0 ab b7 22 c1 99 05 01 e9 67 a4 66 f9 44 81 9c 25 51 7d ce 08 75 3f 34 24 2a 2c 14 c3 ec 6e 8a 0c f8 68 34 df 9a 79 2b c6 62 40 55 e4 18 8d 77 25 af 8d 88 e1 a9 3b 66 73 cd c3 d2 cd 2e c8 18 3f b8 8e 84 cc a2 7e 18 80 b2 b7 ae 9b c6 c9 13 5f 84 58 9d e0 d6 53 61 15 42 36 1b f0 47 8b f1 6f ab 37 5d be 16 f5 b2 3b 15 25 b7 dc 49 4a a4 c4 e7 a6 65 fd 72 55 51 2a b0 39 Data Ascii: LSXet`bhpnJcFTiNRn^1d~>;{3F [qRhsrVgHZ(4QSs"gfD%Q}u?4$,nh4y+b@Uw%;fs.?~_XSaB6Go7];%IJerUQ9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49901	142.250.185.206	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	897	OUT	GET /s/player/3ede36f2/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=amQr2hY_VW4; VISITOR_INFO1_LIVE=8nTEpSF1n0s; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgVQ%3D%3D; __Secure-ROLLOUT_TOKEN=CPnK4_Xl7IqKeBCg7fLnx-uKAxig7fLnx-uKAw%3D%3D
2025-01-10 16:21:38 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 121453 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 15:41:07 GMT Expires: Sat, 10 Jan 2026 15:41:07 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 2431 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:38 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 6c 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 67 2e 44 71 28 70 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 5e 67 2e 51 4c 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 70 7d 2c 43 6c 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 43 2c 56 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 56 29 7c 7c 28 56 3d 5b 53 74 72 69 6e 67 28 56 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var pl=function(p){g.Dq(p,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.QL()).toString(36));return p},Cl=function(p,C,V){Array.isArray(V)\|\|(V=[String(V)]);
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 48 3d 67 2e 71 38 2e 70 72 6f 74 6f 74 79 70 65 2e 43 2e 63 61 6c 6c 28 74 68 69 73 2c 4e 2c 21 30 29 7d 63 61 74 63 68 28 58 29 7b 69 66 28 58 3d 3d 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 58 3b 7d 48 3d 3d 3d 76 6f 69 64 20 30 3f 56 2e 70 75 73 68 28 4e 29 3a 67 2e 72 55 39 28 48 29 26 26 56 2e 70 75 73 68 28 4e 29 7d 2c 70 29 3b 0a 72 65 74 75 72 6e 20 56 7d 2c 52 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 43 29 7b 7a 6f 79 28 70 2c 43 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 56 29 7b 67 2e 71 38 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 74 68 69 73 2c 56 29 7d 2c 70 29 7d 2c 6e 46 72 3d 66 Data Ascii: H=g.q8.prototype.C.call(this,N,!0)}catch(X){if(X=="Storage: Invalid value was encountered")return;throw X;}H===void 0?V.push(N):g.rU9(H)&&V.push(N)},p);return V},Ror=function(p,C){zoy(p,C).forEach(function(V){g.q8.prototype.remove.call(this,V)},p)},nFr=f
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 2c 4e 3d 30 3b 4e 3c 56 3b 4e 2b 2b 29 43 2e 70 75 73 68 28 70 5b 4e 5d 29 3b 72 65 74 75 72 6e 20 43 7d 72 65 74 75 72 6e 20 67 2e 75 63 28 70 29 7d 2c 67 46 76 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 69 66 28 70 2e 68 39 26 26 74 79 70 65 6f 66 20 70 2e 68 39 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 20 70 2e 68 39 28 29 3b 0a 69 66 28 21 70 2e 6d 6d 7c 7c 74 79 70 65 6f 66 20 70 2e 6d 6d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 69 66 28 74 79 70 65 6f 66 20 4d 61 70 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 70 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 70 2e 6b 65 79 73 28 29 29 3b 69 66 28 21 28 74 79 70 65 6f 66 20 53 65 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 Data Ascii: ,N=0;N<V;N++)C.push(p[N]);return C}return g.uc(p)},gFv=function(p){if(p.h9&&typeof p.h9=="function")return p.h9();if(!p.mm\|\|typeof p.mm!="function"){if(typeof Map!=="undefined"&&p instanceof Map)return Array.from(p.keys());if(!(typeof Set!=="undefined"&&
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 62 72 6f 77 73 65 72 5f 63 68 61 6e 6e 65 6c 2f 75 6e 64 65 6c 69 76 65 72 65 64 5f 6d 61 70 73 22 29 7d 2c 56 37 72 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 43 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 67 2e 56 32 28 70 2c 43 29 7d 2c 4e 43 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 43 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 70 2c 43 29 7d 2c 4e 66 66 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 43 29 7b 72 65 74 75 72 6e 20 70 3d 3d 3d 43 7d 2c 48 74 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 43 29 7b 74 68 69 73 2e 43 3d 7b 7d 3b 0a 74 68 69 73 2e 54 3d 5b 5d 3b 74 68 69 73 2e 62 76 3d 74 68 Data Ascii: streamz/youtube/living_room/mdx/browser_channel/undelivered_maps")},V7r=function(p,C){return new g.V2(p,C)},NC=function(p,C){return Object.prototype.hasOwnProperty.call(p,C)},Nff=function(p,C){return p===C},Ht=function(p,C){this.C={};this.T=[];this.bv=th
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 73 2e 61 76 61 74 61 72 3d 70 2e 75 73 65 72 41 76 61 74 61 72 55 72 69 7c 7c 22 22 2c 74 68 69 73 2e 6f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 3d 70 2e 6f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 7c 7c 22 22 2c 74 68 69 73 2e 6f 77 6e 65 72 4f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 3d 70 2e 6f 77 6e 65 72 4f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 7c 7c 22 22 2c 74 68 69 73 2e 74 68 65 6d 65 3d 70 2e 74 68 65 6d 65 7c 7c 22 75 22 2c 48 64 50 28 74 68 69 73 2c 70 2e 63 61 70 61 62 69 6c 69 74 69 65 73 7c 7c 22 22 29 2c 58 36 45 28 74 68 69 73 2c 70 2e 63 6f 6d 70 61 74 69 62 6c 65 53 65 6e 64 65 72 54 68 65 6d 65 73 7c 7c 22 22 29 2c 64 76 63 28 74 68 69 73 2c 70 2e 65 78 70 65 72 69 6d 65 6e 74 73 7c 7c 22 22 29 2c 74 68 69 73 2e 62 Data Ascii: s.avatar=p.userAvatarUri\|\|"",this.obfuscatedGaiaId=p.obfuscatedGaiaId\|\|"",this.ownerObfuscatedGaiaId=p.ownerObfuscatedGaiaId\|\|"",this.theme=p.theme\|\|"u",HdP(this,p.capabilities\|\|""),X6E(this,p.compatibleSenderThemes\|\|""),dvc(this,p.experiments\|\|""),this.b
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 70 2e 6e 61 6d 65 2c 0a 73 63 72 65 65 6e 49 64 3a 70 2e 69 64 2c 6c 6f 75 6e 67 65 54 6f 6b 65 6e 3a 70 2e 74 6f 6b 65 6e 2c 64 69 61 6c 49 64 3a 70 2e 75 75 69 64 2c 73 63 72 65 65 6e 49 64 54 79 70 65 3a 70 2e 69 64 54 79 70 65 7d 7d 2c 61 44 79 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 69 43 28 70 29 7d 2c 45 51 45 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 70 29 3f 67 2e 66 68 28 70 2c 61 44 79 29 3a 5b 5d 7d 2c 73 78 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 70 3f 27 7b 6e 61 6d 65 3a 22 27 2b 70 2e 6e 61 6d 65 2b 27 22 2c 69 64 3a 27 2b 70 2e 69 64 2e 73 75 62 73 74 72 28 30 2c 36 Data Ascii: ction(p){return{name:p.name,screenId:p.id,loungeToken:p.token,dialId:p.uuid,screenIdType:p.idType}},aDy=function(p){return new iC(p)},EQE=function(p){return Array.isArray(p)?g.fh(p,aDy):[]},sx=function(p){return p?'{name:"'+p.name+'",id:'+p.id.substr(0,6
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 61 72 20 70 3d 45 78 28 29 2c 43 3d 6c 43 28 29 3b 0a 67 2e 6b 6c 28 29 26 26 67 2e 45 76 28 70 2c 43 29 3b 70 3d 4a 70 79 28 70 29 3b 69 66 28 70 2e 6c 65 6e 67 74 68 3d 3d 30 29 74 72 79 7b 67 2e 59 44 28 22 72 65 6d 6f 74 65 5f 73 69 64 22 29 7d 63 61 74 63 68 28 56 29 7b 7d 65 6c 73 65 20 74 72 79 7b 67 2e 6b 44 28 22 72 65 6d 6f 74 65 5f 73 69 64 22 2c 70 2e 6a 6f 69 6e 28 22 2c 22 29 2c 2d 31 29 7d 63 61 74 63 68 28 56 29 7b 7d 7d 2c 53 67 32 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 41 6d 28 22 79 74 2d 72 65 6d 6f 74 65 2d 73 65 73 73 69 6f 6e 2d 62 72 6f 77 73 65 72 2d 63 68 61 6e 6e 65 6c 22 29 7d 2c 4b 32 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 41 6d 28 22 79 74 2d 72 65 6d 6f 74 65 2d 6c 6f 63 61 Data Ascii: ar p=Ex(),C=lC();g.kl()&&g.Ev(p,C);p=Jpy(p);if(p.length==0)try{g.YD("remote_sid")}catch(V){}else try{g.kD("remote_sid",p.join(","),-1)}catch(V){}},Sg2=function(){return g.Am("yt-remote-session-browser-channel")},K2y=function(){return g.Am("yt-remote-loca
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 5f 6f 6e 47 43 61 73 74 41 70 69 41 76 61 69 6c 61 62 6c 65 3a 6e 75 6c 6c 7d 2c 4a 5a 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 2e 6c 65 6e 67 74 68 3f 49 44 47 28 70 2e 73 68 69 66 74 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4a 5a 28 70 29 7d 29 3a 62 64 38 28 29 7d 2c 41 70 38 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 22 63 68 72 6f 6d 65 2d 65 78 74 65 6e 73 69 6f 6e 3a 2f 2f 22 2b 70 2b 22 2f 63 61 73 74 5f 73 65 6e 64 65 72 2e 6a 73 22 7d 2c 49 44 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 43 2c 56 29 7b 76 61 72 20 4e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 4e 2e 6f 6e 65 72 72 6f 72 3d 43 3b 56 26 26 28 4e 2e 6f 6e 6c 6f 61 64 3d 56 29 3b 67 2e 4c 48 28 4e 2c 67 2e 75 61 Data Ascii: _onGCastApiAvailable:null},JZ=function(p){p.length?IDG(p.shift(),function(){JZ(p)}):bd8()},Ap8=function(p){return"chrome-extension://"+p+"/cast_sender.js"},IDG=function(p,C,V){var N=document.createElement("script");N.onerror=C;V&&(N.onload=V);g.LH(N,g.ua
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 7a 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 22 70 22 29 7d 2c 50 61 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 7a 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 22 6f 22 29 7d 2c 24 76 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 36 30 3d 77 36 30 7c 7c 6e 65 77 20 67 2e 56 55 7d 2c 4c 32 45 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 67 2e 7a 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 22 73 65 72 76 65 72 72 65 61 63 68 61 62 69 6c 69 74 79 22 2c 70 29 7d 2c 53 41 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 76 61 72 20 43 3d 24 76 76 28 29 3b 0a 43 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 4c 32 45 28 43 2c 70 29 29 7d 2c 67 51 31 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 67 2e 7a 4f 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: function(){g.zO.call(this,"p")},PaP=function(){g.zO.call(this,"o")},$vv=function(){return w60=w60\|\|new g.VU},L2E=function(p){g.zO.call(this,"serverreachability",p)},SA=function(p){var C=$vv();C.dispatchEvent(new L2E(C,p))},gQ1=function(p){g.zO.call(this,
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 6e 3d 22 47 45 54 22 2c 70 2e 54 2e 73 65 6e 64 28 70 2e 6c 5f 2c 70 2e 56 6e 2c 6e 75 6c 6c 2c 43 29 29 3b 53 41 28 31 29 7d 2c 43 31 35 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 69 66 28 21 70 64 31 28 70 29 29 72 65 74 75 72 6e 20 67 2e 6a 45 28 70 2e 54 29 3b 0a 76 61 72 20 43 3d 67 2e 56 4f 28 70 2e 54 29 3b 69 66 28 43 3d 3d 3d 22 22 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 56 3d 22 22 2c 4e 3d 43 2e 6c 65 6e 67 74 68 2c 48 3d 67 2e 70 4e 28 70 2e 54 29 3d 3d 34 3b 69 66 28 21 70 2e 43 2e 56 29 7b 69 66 28 74 79 70 65 6f 66 20 54 65 78 74 44 65 63 6f 64 65 72 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 20 66 6c 28 70 29 2c 4f 78 28 70 29 2c 22 22 3b 70 2e 43 2e 56 3d 6e 65 77 20 67 2e 78 48 2e 54 65 78 74 44 65 63 6f 64 65 72 7d 66 Data Ascii: n="GET",p.T.send(p.l_,p.Vn,null,C));SA(1)},C15=function(p){if(!pd1(p))return g.jE(p.T);var C=g.VO(p.T);if(C==="")return"";var V="",N=C.length,H=g.pN(p.T)==4;if(!p.C.V){if(typeof TextDecoder==="undefined")return fl(p),Ox(p),"";p.C.V=new g.xH.TextDecoder}f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49902	142.250.184.226	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	701	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 16:21:38 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Fri, 10 Jan 2025 16:21:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49903	216.58.206.38	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	679	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 16:21:38 UTC	743	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:21:18 GMT Expires: Fri, 10 Jan 2025 16:36:18 GMT Cache-Control: public, max-age=900 Age: 20 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:38 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49905	142.250.185.196	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	662	OUT	GET /js/th/8p-ZUt2O_r6IumY5TzUY2RZ4QvEtVfvf_MYYDjqPK3M.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:38 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 54903 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 00:03:54 GMT Expires: Sat, 10 Jan 2026 00:03:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 58664 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:38 UTC	579	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 57 3a 33 31 3a 74 3d 3d 77 26 26 28 4a 2e 63 6f 6e 73 6f 6c 65 5b 7a 5d 28 51 2e 6d 65 73 73 61 67 65 29 2c 74 3d 6c 29 7d 7d 7d 63 61 74 63 68 28 45 29 7b 69 66 28 55 3d 3d 31 32 29 74 68 72 6f 77 20 45 3b 55 3d 3d 33 33 26 26 28 51 3d 45 2c 74 3d 31 31 29 7d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 77 29 7b 72 65 74 75 72 6e 20 58 2e 63 61 6c 6c 28 74 68 69 73 2c 77 29 7d 2c 4a 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 77 2c 6c 29 7b 72 65 74 75 72 6e 28 6c 3d 44 28 32 39 2c 32 34 2c 34 31 2c 32 35 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 77 2e 65 76 61 6c 28 6c 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 22 31 22 29 29 3d 3d 3d 31 3f 66 75 Data Ascii: Y.createPolicy?W:31:t==w&&(J.console[z](Q.message),t=l)}}}catch(E){if(U==12)throw E;U==33&&(Q=E,t=11)}},k=function(w){return X.call(this,w)},J=this\|\|self;(0,eval)(function(w,l){return(l=D(29,24,41,25,"error","ad",null))&&w.eval(l.createScript("1"))===1?fu
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 62 3d 3d 39 33 3f 62 3d 28 6c 7c 32 34 29 3d 3d 6c 3f 35 34 3a 36 30 3a 62 3d 3d 37 32 3f 28 58 3d 74 79 70 65 6f 66 20 59 2c 63 3d 58 21 3d 74 3f 58 3a 59 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 59 29 3f 22 61 72 72 61 79 22 3a 58 3a 22 6e 75 6c 6c 22 2c 44 3d 63 3d 3d 55 7c 7c 63 3d 3d 74 26 26 74 79 70 65 6f 66 20 59 2e 6c 65 6e 67 74 68 3d 3d 77 2c 62 3d 32 39 29 3a 62 3d 3d 32 32 3f 62 3d 31 36 3a 62 3d 3d 32 39 3f 62 3d 28 6c 26 39 30 29 3d 3d 6c 3f 34 37 3a 38 3a 62 3d 3d 31 36 3f 62 3d 28 28 6c 5e 32 31 29 26 32 35 29 3d 3d 31 3f 33 3a 39 33 3a 62 3d 3d 39 3f 62 3d 28 6c 3e 3e 32 26 37 29 3d 3d 33 3f 37 32 3a 32 39 3a 62 3d 3d 34 37 3f 28 44 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 Data Ascii: b==93?b=(l\|24)==l?54:60:b==72?(X=typeof Y,c=X!=t?X:Y?Array.isArray(Y)?"array":X:"null",D=c==U\|\|c==t&&typeof Y.length==w,b=29):b==22?b=16:b==29?b=(l&90)==l?47:8:b==16?b=((l^21)&25)==1?3:93:b==9?b=(l>>2&7)==3?72:29:b==47?(D=Object.prototype.hasOwnProperty.c
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 29 7b 61 3a 7b 66 6f 72 28 63 20 69 6e 20 55 29 69 66 28 59 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 55 5b 63 5d 2c 63 2c 55 29 29 7b 51 3d 74 3b 62 72 65 61 6b 20 61 7d 51 3d 77 7d 45 3d 38 37 7d 65 6c 73 65 7b 69 66 28 45 3d 3d 32 34 29 72 65 74 75 72 6e 20 51 3b 45 3d 3d 39 3f 45 3d 28 6c 5e 32 30 29 3e 3e 33 3d 3d 31 3f 37 37 3a 38 38 3a 45 3d 3d 32 30 3f 45 3d 28 6c 2b 37 26 37 31 29 3e 3d 6c 26 26 28 6c 2b 33 26 34 36 29 3c 6c 3f 37 3a 32 34 3a 45 3d 3d 37 37 3f 28 74 68 69 73 2e 67 3d 74 68 69 73 2e 67 2c 74 68 69 73 2e 68 34 3d 74 68 69 73 2e 68 34 2c 45 3d 38 38 29 3a 45 3d 3d 39 30 3f 28 59 2b 3d 59 3c 3c 33 2c 59 5e 3d 59 3e 3e 31 31 2c 57 3d 59 2b 28 59 3c 3c 31 35 29 3e 3e 3e 30 2c 63 3d 6e 65 77 20 4e 75 6d 62 65 72 28 57 26 28 31 3c 3c 74 29 Data Ascii: ){a:{for(c in U)if(Y.call(void 0,U[c],c,U)){Q=t;break a}Q=w}E=87}else{if(E==24)return Q;E==9?E=(l^20)>>3==1?77:88:E==20?E=(l+7&71)>=l&&(l+3&46)<l?7:24:E==77?(this.g=this.g,this.h4=this.h4,E=88):E==90?(Y+=Y<<3,Y^=Y>>11,W=Y+(Y<<15)>>>0,c=new Number(W&(1<<t)
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 2c 51 2c 7a 29 7b 66 6f 72 28 7a 3d 31 32 3b 7a 21 3d 37 34 3b 29 69 66 28 7a 3d 3d 31 32 29 7a 3d 37 39 3b 65 6c 73 65 20 69 66 28 7a 3d 3d 6c 29 74 79 70 65 6f 66 20 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 3d 59 3f 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 55 3a 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 55 29 2c 7a 3d 36 32 3b 65 6c 73 65 7b 69 66 28 7a 3d 3d 36 32 29 72 65 74 75 72 6e 20 51 3b 7a 3d 3d 33 31 3f 28 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 57 3d 76 6f 69 64 20 30 2c 63 3d 44 67 28 59 2c 66 75 6e 63 74 69 6f 6e 28 4a 2c 6b 29 7b 66 6f 72 28 6b 3d 37 36 3b 6b 21 3d 33 39 3b 29 6b 3d 3d 37 36 3f 6b 3d 45 3f 32 30 3a 33 39 3a Data Ascii: ,w,t,U,Y,c,X,W,E,Q,z){for(z=12;z!=74;)if(z==12)z=79;else if(z==l)typeof t.className==Y?t.className=U:t.setAttribute&&t.setAttribute("class",U),z=62;else{if(z==62)return Q;z==31?(E=function(){},W=void 0,c=Dg(Y,function(J,k){for(k=76;k!=39;)k==76?k=E?20:39:
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 33 32 29 29 7c 7c 28 57 5b 58 51 5d 3d 51 3d 6e 65 77 20 4a 6f 28 57 29 29 2c 7a 3d 51 2e 61 64 64 28 63 2c 59 2c 58 2c 4a 2c 55 29 2c 72 3d 33 31 3b 65 6c 73 65 7b 69 66 28 72 3d 3d 37 35 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 61 6e 64 20 61 74 74 61 63 68 45 76 65 6e 74 20 61 72 65 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 22 29 3b 72 3d 3d 33 32 3f 72 3d 57 2e 61 74 74 61 63 68 45 76 65 6e 74 3f 31 37 3a 38 36 3a 72 3d 3d 35 38 26 26 28 72 3d 63 3f 32 3a 32 30 29 7d 7d 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 29 7b 66 6f 72 28 58 3d 32 37 3b 58 21 3d 38 35 3b 29 69 66 28 58 3d 3d 38 34 29 58 3d 74 3e 3e 32 3c 31 31 26 26 28 74 5e 31 31 29 3e 3d 37 3f Data Ascii: 32))\|\|(W[XQ]=Q=new Jo(W)),z=Q.add(c,Y,X,J,U),r=31;else{if(r==75)throw Error("addEventListener and attachEvent are unavailable.");r==32?r=W.attachEvent?17:86:r==58&&(r=c?2:20)}}}},n=function(l,w,t,U,Y,c,X,W,E){for(X=27;X!=85;)if(X==84)X=t>>2<11&&(t^11)>=7?
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 7c 7c 77 2c 63 3d 36 39 3b 65 6c 73 65 20 69 66 28 63 3d 3d 33 29 63 3d 74 2b 39 3e 3e 31 3c 74 26 26 28 74 2b 6c 5e 34 29 3e 3d 74 3f 38 32 3a 36 39 3b 65 6c 73 65 7b 69 66 28 63 3d 3d 34 30 29 72 65 74 75 72 6e 20 58 3b 63 3d 3d 36 39 3f 63 3d 28 74 3e 3e 31 26 38 29 3c 37 26 26 28 28 74 7c 34 29 26 37 29 3e 3d 30 3f 38 35 3a 34 30 3a 63 3d 3d 35 34 3f 63 3d 33 3a 63 3d 3d 38 35 26 26 28 58 3d 77 20 69 6e 20 6e 69 3f 6e 69 5b 77 5d 3a 6e 69 5b 77 5d 3d 55 2b 77 2c 63 3d 34 30 29 7d 7d 2c 70 69 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 2c 51 2c 7a 2c 4a 29 7b 66 6f 72 28 7a 3d 37 31 3b 7a 21 3d 39 34 3b 29 69 66 28 7a 3d 3d 37 35 29 7b 66 6f 72 28 58 20 69 6e 20 63 3d 28 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: \|\|w,c=69;else if(c==3)c=t+9>>1<t&&(t+l^4)>=t?82:69;else{if(c==40)return X;c==69?c=(t>>1&8)<7&&((t\|4)&7)>=0?85:40:c==54?c=3:c==85&&(X=w in ni?ni[w]:ni[w]=U+w,c=40)}},pi=function(l,w,t,U,Y,c,X,W,E,Q,z,J){for(z=71;z!=94;)if(z==75){for(X in c=((Array.prototyp
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 3d 28 55 3d 41 72 72 61 79 28 63 29 2c 74 29 3b 59 3c 63 3b 59 2b 2b 29 55 5b 59 5d 3d 77 5b 59 5d 3b 7a 3d 55 7d 65 6c 73 65 20 7a 3d 5b 5d 3b 51 3d 34 30 7d 65 6c 73 65 20 69 66 28 51 3d 3d 31 31 29 6e 28 77 2c 55 2c 35 2c 57 2e 4f 29 2c 51 3d 37 35 3b 65 6c 73 65 7b 69 66 28 51 3d 3d 37 35 29 72 65 74 75 72 6e 20 7a 3b 69 66 28 51 3d 3d 32 37 29 51 3d 57 26 26 57 5b 5a 67 5d 3f 31 31 3a 34 38 3b 65 6c 73 65 20 69 66 28 51 3d 3d 31 39 29 51 3d 6c 2d 36 3c 31 31 26 26 6c 2b 36 3e 3d 31 3f 33 33 3a 34 3b 65 6c 73 65 20 69 66 28 51 3d 3d 34 31 29 57 3d 55 2e 73 72 63 2c 51 3d 32 37 3b 65 6c 73 65 20 69 66 28 51 3d 3d 38 29 74 68 69 73 2e 6e 2b 2b 2c 51 3d 39 36 3b 65 6c 73 65 20 69 66 28 51 3d 3d 31 34 29 7b 69 66 28 77 2e 47 2e 6c 65 6e 67 74 68 29 7b 28 Data Ascii: =(U=Array(c),t);Y<c;Y++)U[Y]=w[Y];z=U}else z=[];Q=40}else if(Q==11)n(w,U,5,W.O),Q=75;else{if(Q==75)return z;if(Q==27)Q=W&&W[Zg]?11:48;else if(Q==19)Q=l-6<11&&l+6>=1?33:4;else if(Q==41)W=U.src,Q=27;else if(Q==8)this.n++,Q=96;else if(Q==14){if(w.G.length){(
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 29 3a 57 3d 3d 34 34 3f 28 45 3d 63 2c 57 3d 39 32 29 3a 57 3d 3d 36 39 3f 28 63 3d 74 72 75 65 2c 57 3d 34 34 29 3a 57 3d 3d 31 3f 57 3d 33 34 3a 57 3d 3d 35 32 3f 28 58 3d 6e 65 77 20 56 42 28 77 2c 74 68 69 73 29 2c 59 3d 74 2e 47 24 7c 7c 74 2e 73 72 63 2c 6c 3d 74 2e 6c 69 73 74 65 6e 65 72 2c 74 2e 59 34 26 26 4b 28 32 38 2c 30 2c 22 6f 6e 22 2c 74 29 2c 63 3d 6c 2e 63 61 6c 6c 28 59 2c 58 29 2c 57 3d 34 34 29 3a 57 3d 3d 34 35 3f 57 3d 74 2e 48 73 3f 36 39 3a 35 32 3a 57 3d 3d 39 32 26 26 28 57 3d 28 55 2b 39 26 38 29 3c 33 26 26 28 55 3c 3c 31 26 33 29 3e 3d 30 3f 33 35 3a 32 30 29 7d 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 2c 51 2c 7a 29 7b 69 66 28 28 6c 2b 38 5e 33 32 29 3e 3d 28 28 6c 5e 38 39 Data Ascii: ):W==44?(E=c,W=92):W==69?(c=true,W=44):W==1?W=34:W==52?(X=new VB(w,this),Y=t.G$\|\|t.src,l=t.listener,t.Y4&&K(28,0,"on",t),c=l.call(Y,X),W=44):W==45?W=t.Hs?69:52:W==92&&(W=(U+9&8)<3&&(U<<1&3)>=0?35:20)}},a=function(l,w,t,U,Y,c,X,W,E,Q,z){if((l+8^32)>=((l^89
2025-01-10 16:21:38 UTC	1390	IN	Data Raw: 3a 33 38 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 38 37 29 4a 3d 38 39 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 37 33 29 74 68 69 73 5b 74 68 69 73 2b 22 22 5d 3d 74 68 69 73 2c 7a 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2c 4a 3d 33 33 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 33 33 29 4a 3d 28 77 5e 33 39 29 3c 31 34 26 26 77 2b 32 3e 3e 34 3e 3d 31 3f 38 32 3a 39 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 38 32 29 7a 3d 74 68 69 73 2e 6e 3d 3d 3d 30 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 53 6a 2f 74 68 69 73 2e 6e 29 2c 4a 3d 39 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 37 35 29 4f 77 28 35 37 2c 38 30 2c 74 72 75 65 2c 6e 75 6c 6c 2c 59 5b 51 5d 2c 63 2c 58 2c 57 2c 45 29 2c 4a 3d 34 30 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 35 34 29 51 3d 30 2c 4a 3d 38 Data Ascii: :38;else if(J==87)J=89;else if(J==73)this[this+""]=this,z=Promise.resolve(),J=33;else if(J==33)J=(w^39)<14&&w+2>>4>=1?82:9;else if(J==82)z=this.n===0?0:Math.sqrt(this.Sj/this.n),J=9;else if(J==75)Ow(57,80,true,null,Y[Q],c,X,W,E),J=40;else if(J==54)Q=0,J=8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49907	142.250.185.225	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	750	OUT	GET /ytc/AIdro_mTqeaJMXAz6DHPPU8ICZM6fP3tmkBqOPGBxeBi3sGiVqU=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:39 UTC	567	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Cross-Origin-Resource-Policy: cross-origin Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v174" Expires: Sat, 11 Jan 2025 16:21:38 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Date: Fri, 10 Jan 2025 16:21:38 GMT Server: fife Content-Length: 1588 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:39 UTC	823	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 ff db 00 84 00 03 02 02 0e 0c 09 0a 0f 0b 0d 0b 08 09 08 0f 0a 08 08 08 06 0a 0a 09 08 09 08 0d 08 08 08 0d 0a 09 08 0d 08 09 08 0b 0d 09 09 08 08 08 16 08 08 08 0d 15 0a 0a 08 08 10 0e 16 08 0d 08 14 0a 0a 01 03 04 04 06 05 05 08 06 06 0a 08 08 0a 08 08 08 08 08 08 10 08 08 08 0b 0a 08 08 08 08 08 08 13 08 14 09 08 0d 08 08 08 08 08 08 0e 08 14 08 0f 08 08 08 10 08 14 14 08 08 08 08 08 08 08 08 14 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 07 09 05 06 08 02 04 ff c4 00 35 10 00 02 02 01 Data Ascii: JFIFExifII1PicasaDD5
2025-01-10 16:21:39 UTC	765	IN	Data Raw: 84 ee 11 c1 7f 51 97 ed bd 4f bb 34 aa d3 ea da 8a d7 2c af 34 51 14 44 ac b3 2b 2b 46 d6 24 90 1d d5 c3 32 43 32 a7 21 3d 48 fc ad b1 55 5c a7 2e 91 4d bf 45 92 e1 a1 d1 d9 ad d5 d3 a5 a7 1c f7 59 0a a3 db 33 92 8a cf 64 b3 9c f6 26 eb 1c 61 d8 91 5f 4f d1 a8 41 df a7 5a 1d 26 9c bc 8b bf 6e 79 a4 89 de 47 db 60 65 3b 73 b0 27 65 df 61 81 cf 8d 6a 65 2c c5 c6 2b c9 72 e7 ef d5 fc f6 fe 11 d4 ba 6f 76 dc 12 9a a3 0b 63 75 f2 4b c5 63 ba 55 f3 3f 3e 55 04 94 62 de ea 39 93 4b 67 29 3d cc af 10 3c 40 49 53 c9 e4 91 6b 69 46 ce ad 7b ec eb 14 da 4d 3e 84 da 7d 2a dd 76 95 ab 24 71 ac 86 1b f3 c0 ab 24 bc dd 27 27 97 95 9f 9b 32 7e 15 a8 b7 51 4b 9d af 3e 26 a3 b2 5b 24 b3 d3 e7 b1 a5 3d bc e1 3a 0e 15 c4 6a d2 e8 22 e1 8a 23 65 b9 b2 76 3e 79 ca 7c ab c4 f6 Data Ascii: QO4,4QD++F$2C2!=HU\.MEY3d&a_OAZ&nyG`e;s'eaje,+rovcuKcU?>Ub9Kg)=<@ISkiF{M>}*v$q$''2~QK>&[$=:j"#ev>y\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49908	142.250.185.166	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 143 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:38 UTC	143	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 66 61 72 6d 62 75 72 65 61 75 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 31 39 32 32 32 35 38 31 36 32 35 31 39 39 34 32 30 31 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://infarmbureau.com","trigger_debug_key":"8192225816251994201"},"type":"trigger-no-matching-source"}]
2025-01-10 16:21:38 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 10 Jan 2025 16:21:38 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49906	172.217.23.102	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 143 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:38 UTC	143	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 66 61 72 6d 62 75 72 65 61 75 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 34 37 39 33 38 32 39 37 30 31 33 34 31 30 31 30 38 32 30 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://infarmbureau.com","trigger_debug_key":"4793829701341010820"},"type":"trigger-no-matching-source"}]
2025-01-10 16:21:38 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 10 Jan 2025 16:21:38 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49912	157.240.0.35	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	940	OUT	GET /tr/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Fwww.infarmbureau.com&rl=&if=false&ts=1736526096546&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=f5642d&ler=empty&cdl=API_unavailable&it=1736526093610&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:38 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 10 Jan 2025 16:21:38 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49920	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	1817	OUT	GET /images/icons/key.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:38 UTC	657	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:38 GMT Last-Modified: Wed, 11 Aug 2021 02:36:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=key.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:26 GMT Connection: close Content-Length: 1926
2025-01-10 16:21:38 UTC	1926	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 39 70 78 22 20 68 65 69 67 68 74 3d 22 34 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 20 34 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 33 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="39px" height="40px" viewBox="0 0 39 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 3</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49911	157.240.0.35	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	1055	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1686000021639755&ev=PageView&dl=https%3A%2F%2Fwww.infarmbureau.com&rl=&if=false&ts=1736526096546&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736526096543.207889938827811595&pm=1&hrl=f5642d&ler=empty&cdl=API_unavailable&it=1736526093610&coo=false&cs_cc=1&cas=25626318733633117%2C6775042175848930%2C5062751907180619%2C4868316926528341&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:38 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7458322800877511146", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7458322800877511146"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2025-01-10 16:21:38 UTC	1834	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 77 61 73 6d 2d 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.go
2025-01-10 16:21:38 UTC	1673	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2025-01-10 16:21:38 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49913	216.58.212.130	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	1916	OUT	GET /pagead/viewthroughconversion/573981699/?random=1580731553&cv=11&fst=1736526093885&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBOAFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&eitems=ChAIgKeDvAYQ-a2xw5DL2PRpEh0An2rBfwFh5JTywaJ8Niz-93la7XHu19p_av7vNQ&pscrd=CIa27ZLK2JWhHyITCK3nr-nH64oDFYWO_QcdmQEq4TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjodaHR0cHM6Ly93d3cuaW5mYXJtYnVyZWF1LmNvb [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
2025-01-10 16:21:38 UTC	1839	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/573981699/?random=1580731553&cv=11&fst=1736526093885&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBOAFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIa27ZLK2JWhHyITCK3nr-nH64oDFYWO_QcdmQEq4TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjodaHR0cHM6Ly93d3cuaW5mYXJtYnVyZWF1LmNvbS9CVkNoQUlnS2VEdkFZUXBQMjVxb2IzcnF4Y0Vpd0FrMV9mdU5rRzh [TRUNCATED] Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49915	157.240.252.13	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:38 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-tbttcYIl' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-10 16:21:38 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-10 16:21:38 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-01-10 16:21:38 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-01-10 16:21:38 UTC	16384	IN	Data Raw: 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e Data Ascii: \|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefin
2025-01-10 16:21:38 UTC	16384	IN	Data Raw: 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f Data Ascii: urn j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enfo
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 Data Ascii: odules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefi
2025-01-10 16:21:39 UTC	1703	IN	Data Raw: 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c Data Ascii: b.getProtocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).l
2025-01-10 16:21:39 UTC	14681	IN	Data Raw: 6c 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 61 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 Data Ascii: l&&(this.moduleEncodings=a)}},{key:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 Data Ascii: lsFBEventsLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET");f.getFbeventsModule
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 6e 75 6d 62 65 72 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d Data Ascii: nction p(){return function(a){if(typeof a!=="string")throw new g();return a}}function q(){return function(a){if(typeof a!=="string"&&typeof a!=="number")throw new g();return a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49918	52.252.156.53	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	451	OUT	GET /collect/v2/data-centers/b9914fdb-2e6f-d6bb-b0aa-8ae951f29484/datasources/IFBI_MFSF_To_DevDEC/interactions HTTP/1.1 Host: api.dec.sitefinity.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:38 UTC	1478	IN	HTTP/1.1 404 Not Found Date: Fri, 10 Jan 2025 16:21:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 244 Connection: close Access-Control-Allow-Headers: Content-Type, Content-Length, X-Requested-With, Authorization, x-dataintelligence-accountkey, x-dataintelligence-datacenterkey, x-dataintelligence-datasource, x-dataintelligence-sort, x-dataintelligence-skip, x-dataintelligence-take, x-dataintelligence-fields, x-dataintelligence-count, x-dataintelligence-filterby, x-dataintelligence-filter, x-dataintelligence-contains, x-dataintelligence-nextrowkey, x-dataintelligence-flush, x-dataintelligence-fromdate, x-dataintelligence-todate, x-dataintelligence-period, x-dataintelligence-scale, x-dataintelligence-predicate, x-dataintelligence-subject, x-dataintelligence-ids, x-dataintelligence-datasources, x-dataintelligence-imagecrop, x-dataintelligence-contacts, x-forwarded-for, x-dataintelligence-sdk-version, Referer, Origin, x-dataintelligence-clientid, x-dataintelligence-campaignids, x-dataintelligence-userid, x-dataintelligence-errorid, x-dataintelligence-correlationid, cf-connecting-ip, x-forwarded-for, http_x_forwarded_for, x-forwarde [TRUNCATED] Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS Access-Control-Allow-Origin: * request-context: appId=cid-v1:a33f2e3a-ec15-4d53-8ac6-897af884626b Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2025-01-10 16:21:38 UTC	244	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 63 6f 6c 6c 65 63 74 2f 76 32 2f 64 61 74 61 2d 63 65 6e 74 65 72 73 2f 62 39 39 31 34 66 64 62 2d 32 65 36 66 2d 64 36 62 62 2d 62 30 61 61 2d 38 61 65 39 35 31 66 32 39 34 38 34 2f 64 61 74 61 73 6f 75 72 63 65 73 2f 49 46 42 49 5f 4d 46 53 46 5f 54 6f 5f 44 65 76 44 45 43 2f 69 6e 74 65 72 61 63 74 69 6f 6e 73 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /collect/v2/data-centers/b9914fdb-2e6f-d6bb-b0aa-8ae951f29484/datasources/IFBI_MFSF_To_DevDEC/interactions</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49922	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	1818	OUT	GET /images/icons/home.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:38 UTC	658	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:38 GMT Last-Modified: Wed, 11 Aug 2021 02:36:10 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=home.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:26 GMT Connection: close Content-Length: 2677
2025-01-10 16:21:38 UTC	2677	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 70 78 22 20 68 65 69 67 68 74 3d 22 35 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 32 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56px" height="54px" viewBox="0 0 56 54" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 2</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49927	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	1862	OUT	GET /ResourcePackages/IFBIRedesign/assets/dist/images/inside-story.svg HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:38 UTC	587	IN	HTTP/1.1 200 OK Cache-Control: max-age=2678400 Content-Type: image/svg+xml Last-Modified: Wed, 30 Oct 2024 20:06:52 GMT Accept-Ranges: bytes ETag: "0569e4272bdb1:0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:26 GMT Connection: close Content-Length: 9211
2025-01-10 16:21:38 UTC	9211	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 34 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 31 37 20 30 2e 39 34 43 30 2e 31 37 20 30 2e 38 32 20 30 2e 32 33 20 30 2e 37 36 20 30 2e 33 35 20 30 2e 37 36 48 32 2e 36 33 36 43 32 2e 37 35 36 20 30 2e 37 36 20 32 2e 38 31 36 20 30 2e 38 32 20 32 2e 38 31 36 20 30 2e 39 34 56 31 32 2e 38 32 43 32 2e 38 31 36 20 31 32 2e 39 34 20 32 2e 37 35 36 20 31 33 20 32 2e 36 33 36 20 31 33 48 30 2e 33 35 43 30 2e 32 33 20 31 33 20 30 2e 31 37 20 31 32 2e 39 34 20 30 2e 31 37 20 31 32 Data Ascii: <svg width="104" height="14" viewBox="0 0 104 14" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.17 0.94C0.17 0.82 0.23 0.76 0.35 0.76H2.636C2.756 0.76 2.816 0.82 2.816 0.94V12.82C2.816 12.94 2.756 13 2.636 13H0.35C0.23 13 0.17 12.94 0.17 12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49925	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	1989	OUT	GET /images/default-album/men-in-blue-jeans-jacket-and-glasses-reclining-on-chair-happily-after-bundling-his-insurance-and-get-discounted-rates15dd5c5e32056b8a9f2eff03000bf66e.jpg?sfvrsn=d8d837ba_0 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:38 UTC	801	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/jpeg Expires: Thu, 10 Apr 2025 15:21:38 GMT Last-Modified: Wed, 06 Dec 2023 13:31:53 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=men-in-blue-jeans-jacket-and-glasses-reclining-on-chair-happily-after-bundling-his-insurance-and-get-discounted-rates15dd5c5e32056b8a9f2eff03000bf66e.jpg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:26 GMT Connection: close Content-Length: 98981
2025-01-10 16:21:38 UTC	15480	IN	Data Raw: ff d8 ff e1 19 a0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 03 68 00 00 01 01 00 03 00 00 00 01 02 94 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 33 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 31 32 3a 30 36 20 30 38 3a 32 39 3a 34 34 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*h(1!2i$''Adobe Photoshop 24.3 (Macintosh)2023:12:06 08:29:44
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 Data Ascii: obe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 19 18 54 66 9c 8e da f3 d1 e8 5c 3a 3f 15 c8 96 a5 45 9d 41 8b 53 8d 83 9e 89 55 48 05 16 12 80 16 00 50 04 86 dd 24 82 1a 16 83 64 67 4e 7c b7 6e 3c bf d9 f9 bc 47 d8 f8 f0 7b 7c c9 be 52 cd 77 1f 27 ea fa 9f e6 ff 00 48 e4 06 24 2b 38 43 41 12 91 40 29 7c fe ed 85 16 55 1c 25 3b a7 3d 2e fc ef f4 4f 24 52 32 e9 b9 b1 e5 1c ac 57 d9 6b 79 b7 64 da a6 b2 64 34 22 50 82 a0 a3 53 2e b9 fd e6 8e b3 7e 4d 3c d8 f3 98 ec ac 90 5c d3 b6 1b 33 f4 cf b2 bd c5 6b 98 96 1b 62 d1 92 c7 77 4e ca c2 21 0b 9d fa 16 7b 7b 47 9f 6b 2b 51 8b 0f 3d d2 e5 a8 39 e9 99 ab 2a d8 51 04 2d 28 90 a0 3a 50 25 00 04 b5 24 49 01 35 41 21 19 15 b6 33 53 2f df e3 e3 7e df cc e5 fe 9f ce 7e 67 b5 fe 5b f5 6f c1 08 d1 8b 38 90 82 a3 28 50 19 a5 f3 fd 29 00 92 b8 7d 3a a6 ed cf 4b af 2b Data Ascii: Tf\:?EASUHP$dgN\|n<G{\|Rw'H$+8CA@)\|U%;=.O$R2Wkydd4"PS.~M<\3kbwN!{{Gk+Q=9*Q-(:P%$I5A!3S/~~g[o8(P)}:K+
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 88 fd 9e a7 ff 00 36 bf b4 fb 75 fe 43 db 50 8a 1d 45 64 d1 f7 6f ee bc ee 5d ec 88 4f 6f 62 d0 54 38 5c 7c 53 18 58 14 91 13 3f 88 2f 18 56 13 36 08 f4 ff 00 f2 fa 64 f7 b9 6d 59 6f fd bd b7 f3 0e ca f7 f9 9c 8f b2 70 ed 37 ec b2 fd f1 9e df 90 52 fb e6 07 fd 3c 78 ff 00 a7 a5 57 24 e5 78 dc 2c 5c 93 ee 5e 43 7b 73 8d e5 9c f6 76 e0 fe e4 cb 59 cb 87 e4 18 dc ac 1a d5 57 a0 a2 2a b6 b7 68 86 32 0d bb 1a 8b 64 a7 8e 55 39 7c 63 75 45 ef f2 06 ad aa 89 8d 24 bb b5 ae 23 f6 74 51 51 53 a2 ba 38 51 96 be c7 52 68 87 75 4d 7f 21 d0 17 e6 02 a2 a2 3d 19 2e f2 14 cf dd 77 fb c8 a8 2c 5b 7b 3c 2d 94 44 2a 10 69 fd 60 3f 4f 64 4e b4 ff 00 b1 d0 7d 9f fb a7 fd 96 e3 fa 16 df cc 55 ef f3 39 1f 64 e5 3f ec b3 fd f1 7b 7e 43 da 4f 7c c7 f6 b6 5f da e9 55 9b e2 b8 dc Data Ascii: 6uCPEdo]OobT8\\|SX?/V6dmYop7R<xW$x,\^C{svYWh2dU9\|cuE$#tQQS8QRhuM!=.w,[{<-Di`?OdN}U9d?{~CO\|_U
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: ef 9d 8e b4 8e 66 5f 36 c6 19 24 86 d8 b1 b7 17 17 86 27 63 e4 6c 77 56 97 2c b8 c3 9f 77 1e cc 47 d9 47 43 76 4d 74 77 66 b4 76 47 59 18 1c 76 86 a9 99 1c 8d b8 81 cc 65 dc 31 cd 17 22 c0 06 ac 1f 23 c9 e1 6e 78 27 3b b5 cb 5a df 8f 1c f7 a7 99 58 72 0b 69 df 71 6f 75 62 48 7b dd 0b 84 4e 99 9e 1b d2 e6 db 64 25 6c f8 0b 97 98 78 f5 f3 1b 1f 14 6b 8b 78 95 a2 87 0d 6f 03 4e 23 12 5e cb 2c 7b 1e 64 00 1b 86 93 e6 6a f2 f6 7d c4 4d 6c 99 ac 6c 4d b9 e6 7c 6e 05 7f f6 ff 00 0b b2 37 bf ec 17 12 89 5d 7f b1 b0 01 73 f7 ef 27 b9 92 c7 ed 3e 59 77 11 e4 bc e6 f6 5c 24 5c 8a 53 8f 64 a0 35 c4 2d eb 75 74 6d 09 6d 94 af 50 d8 31 ab e3 43 47 58 c4 e4 fc 7f 67 da cf 18 20 84 7d ab 52 74 3e 88 20 00 9b 3c 8c 2d bc aa f9 0c 08 5d 43 20 74 2f 62 13 19 1c cb 51 bf 7d Data Ascii: f_6$'clwV,wGGCvMtwfvGYve1"#nx';ZXriqoubH{Nd%lxkxoN#^,{dj}MllM\|n7]s'>Yw\$\Sd5-utmmP1CGXg }Rt> <-]C t/bQ}
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 50 94 b8 87 00 23 5f dd 92 31 91 ee c8 e0 dd 4a cb 62 5a 46 c8 46 3c f4 9f 10 54 d4 7f e5 46 53 93 64 4c b1 0a 51 25 e7 a9 fb 16 28 df 3c 87 84 75 94 48 1a ac 99 c0 0e b5 0d f5 f5 88 fa 86 fa 11 36 49 b1 8c 06 22 25 9f bd 8a c0 bf 24 63 2f bb 8f ce ca 72 e7 97 bb a5 d0 58 94 27 7d 82 b8 83 81 2f 9f b9 d6 ea 54 dc 27 dd c0 07 c1 db 9b 2d b5 40 b4 a5 2d 72 ec 89 66 f9 fe 5c f4 15 47 3d 41 44 f5 04 7e 54 a3 ed 46 10 e3 99 58 62 79 fb 04 9f 82 91 e6 54 ab 28 9f ba 78 f4 cf d5 b6 15 be f7 6e 09 be 31 ce 71 00 c9 01 31 a6 70 2d 28 9c c1 18 32 8c 04 9a 07 bf fc d1 f0 84 61 a9 e9 be 22 62 5c c9 0e 42 15 b1 78 c8 31 fe 65 b2 9c 7c 42 4e 5f b4 2d bd 6e e2 c0 35 75 60 14 2f 9d 86 34 96 32 8f 30 b4 d5 4c 61 18 36 99 3e 25 91 89 93 c8 9c 94 89 e1 8a 84 69 c7 54 46 a6 Data Ascii: P#_1JbZFF<TFSdLQ%(<uH6I"%$c/rX'}/T'-@-rf\G=AD~TFXbyT(xn1q1p-(2a"b\Bx1e\|BN_-n5u`/420La6>%iTF
2025-01-10 16:21:39 UTC	1581	IN	Data Raw: f1 1e e5 e3 5e 35 e3 1f 3f d8 bc 45 08 f9 9a 64 72 7f ec 13 c2 62 43 a8 fc ae 1f 3f 46 18 2c 7e 44 c6 71 12 07 30 51 8e eb 6b 08 c8 e3 ae 20 09 38 56 c3 69 73 ed 4d b2 b4 52 47 38 b7 16 e4 a7 2b 76 f2 9d 40 96 9c 78 fb 9c a9 09 44 c6 4f f7 83 27 97 1e 1d 0d 22 c8 81 8f 22 b1 51 20 b3 1c f9 2a b7 51 3a e3 33 a2 51 c8 82 70 07 15 5d d1 93 cb 08 18 7d 6a 2f 3d 66 04 48 06 cb e2 ae b8 d6 64 08 20 17 e0 a3 a7 ef 16 1d 4e b6 e1 de 55 c0 42 67 ac 7b 05 48 f3 91 e9 87 59 fd 7f 2f 12 dd be c1 e9 3f 22 c0 3a c2 39 71 2b be 71 e4 b2 7e 6b 0c 16 2b 3e 8e f4 80 74 5e 61 78 81 ea e8 c0 3a c2 04 fb 96 31 65 84 56 4b 08 80 38 3a fb ab 82 73 2e dc 53 42 ce e8 e4 b1 b0 a0 67 61 2d 90 2b 19 2c df b5 63 00 bc 01 18 91 a5 f8 8c d1 99 9c f7 be 93 7c 98 ea c4 c4 7b db 9a 85 f4 Data Ascii: ^5?EdrbC?F,~Dq0Qk 8VisMRG8+v@xDO'""Q *Q:3Qp]}j/=fHd NUBg{HY/?":9q+q~k+>t^ax:1eVK8:s.SBga-+,c\|{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49924	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	1841	OUT	GET /images/footer/facebook.svg?sfvrsn=2b7424ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:38 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:38 GMT Last-Modified: Fri, 20 Mar 2020 04:44:48 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=facebook.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:26 GMT Connection: close Content-Length: 584
2025-01-10 16:21:38 UTC	584	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 5b 5d 3e 0d 0a 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 35 31 32 20 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 70 78 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 77 69 64 74 68 3d 22 35 31 32 70 78 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 Data Ascii: <?xml version="1.0"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"[]><svg enable-background="new 0 0 512 512" height="512px" id="Layer_1" version="1.1" viewBox="0 0 512 512" width="512px" xml:space="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49928	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	1851	OUT	GET /images/footer/xlogo-twitter-logo.svg?sfvrsn=948136ba_1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:38 UTC	671	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:38 GMT Last-Modified: Mon, 04 Mar 2024 16:43:09 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=xlogo-twitter-logo.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:26 GMT Connection: close Content-Length: 649
2025-01-10 16:21:38 UTC	649	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 31 36 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 30 30 22 20 68 65 69 67 68 74 3d 22 31 32 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 30 20 31 32 32 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 35 31 5f 32 29 22 3e 0d 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 31 34 2e 31 36 33 20 35 31 39 2e 32 38 34 4c 31 31 36 30 2e 38 39 20 30 48 31 30 35 35 2e 30 33 4c 36 36 37 2e 31 33 37 20 34 35 30 2e 38 38 37 4c 33 35 37 2e 33 32 38 20 Data Ascii: <?xml version="1.0" encoding="utf-16"?><svg width="1200" height="1227" viewBox="0 0 1200 1227" fill="none" xmlns="http://www.w3.org/2000/svg"> <g clip-path="url(#clip0_251_2)"> <path d="M714.163 519.284L1160.89 0H1055.03L667.137 450.887L357.328

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49923	142.250.186.110	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	657	OUT	GET /s/player/3ede36f2/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
2025-01-10 16:21:39 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 33718 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 05:07:59 GMT Expires: Sat, 10 Jan 2026 05:07:59 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 40419 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:39 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 24 71 79 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 2e 6d 75 74 65 64 41 75 74 6f 70 6c 61 79 3d 21 31 3b 70 2e 65 6e 64 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 70 2e 6c 69 6d 69 74 65 64 50 6c 61 79 62 61 63 6b 44 75 72 61 74 69 6f 6e 49 6e 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 67 2e 6b 42 28 70 29 7d 2c 4c 53 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 4c 3a 22 73 76 67 22 2c 0a 58 3a 7b 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 31 30 20 32 36 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 6a 3a 5b 7b 4c 3a 22 70 61 74 68 22 Data Ascii: (function(g){var window=this;'use strict';var $qy=function(p){p.mutedAutoplay=!1;p.endSeconds=NaN;p.limitedPlaybackDurationInSeconds=NaN;g.kB(p)},LSv=function(){return{L:"svg",X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},j:[{L:"path"
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 30 39 2c 30 20 63 20 2e 33 2c 2e 35 20 2e 37 31 2c 2e 38 38 20 31 2e 32 31 2c 31 2e 31 38 20 2e 35 2c 2e 33 20 31 2e 30 38 2c 2e 34 30 20 31 2e 36 38 2c 2e 34 30 20 31 2e 31 2c 30 20 31 2e 39 39 2c 2d 30 2e 34 39 20 32 2e 34 39 2c 2d 31 2e 35 39 20 2e 35 2c 2d 31 2e 31 20 2e 38 31 2c 2d 32 2e 37 30 20 2e 38 31 2c 2d 34 2e 39 30 20 6c 20 30 2c 2d 32 2e 34 30 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 31 2c 2d 32 2e 39 30 20 2d 30 2e 33 31 2c 2d 33 2e 39 30 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 35 2c 2d 31 2e 35 39 20 2d 31 2c 2d 32 2e 30 39 20 2d 30 2e 35 2c 2d 30 2e 34 20 2d 31 2e 31 30 2c 2d 30 2e 35 39 20 2d 31 2e 39 30 2c 2d 30 2e 35 39 20 2d 30 2e 35 39 2c 30 20 2d 31 2e 31 38 2c 2e 31 39 20 2d 31 2e 36 38 2c 2e 34 39 20 2d 30 2e 34 39 2c 2e 33 Data Ascii: 09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 32 2c 2d 32 2e 38 37 20 2d 30 2e 34 39 2c 2d 33 2e 38 37 20 2d 30 2e 33 2c 2d 30 2e 38 39 20 2d 30 2e 38 2c 2d 31 2e 36 32 20 2d 31 2e 34 39 2c 2d 32 2e 31 32 20 2d 30 2e 37 2c 2d 30 2e 35 20 2d 31 2e 35 38 2c 2d 30 2e 36 38 20 2d 32 2e 36 38 2c 2d 30 2e 36 38 20 7a 20 6d 20 31 32 2e 31 38 2c 2e 30 39 20 30 2c 31 31 2e 39 30 20 63 20 2d 30 2e 31 2c 2e 33 20 2d 30 2e 32 39 2c 2e 34 38 20 2d 30 2e 35 39 2c 2e 36 38 20 2d 30 2e 32 2c 2e 32 20 2d 30 2e 35 31 2c 2e 33 31 20 2d 30 2e 38 31 2c 2e 33 31 20 2d 30 2e 33 2c 30 20 2d 30 2e 35 38 2c 2d 30 2e 31 30 20 2d 30 2e 36 38 2c 2d 30 2e 34 30 20 2d 30 2e 31 2c 2d 30 2e 33 20 2d 30 2e 31 38 2c 2d 30 2e 37 30 20 2d 30 2e 31 38 2c 2d 31 2e 34 30 20 6c 20 30 2c 2d 31 30 2e 39 39 Data Ascii: c 0,-1.6 -0.2,-2.87 -0.49,-3.87 -0.3,-0.89 -0.8,-1.62 -1.49,-2.12 -0.7,-0.5 -1.58,-0.68 -2.68,-0.68 z m 12.18,.09 0,11.90 c -0.1,.3 -0.29,.48 -0.59,.68 -0.2,.2 -0.51,.31 -0.81,.31 -0.3,0 -0.58,-0.10 -0.68,-0.40 -0.1,-0.3 -0.18,-0.70 -0.18,-1.40 l 0,-10.99
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 39 20 2d 30 2e 35 39 2c 2d 30 2e 35 39 20 6c 20 30 2c 2d 38 2e 35 20 63 20 2e 31 2c 2d 30 2e 34 20 2e 32 39 2c 2d 30 2e 37 20 2e 35 39 2c 2d 31 20 2e 33 2c 2d 30 2e 33 20 2e 36 30 2c 2d 30 2e 34 30 20 2e 39 30 2c 2d 30 2e 34 30 20 7a 22 7d 7d 5d 7d 7d 2c 0a 67 71 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 4c 3a 22 73 76 67 22 2c 0a 58 3a 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 34 33 20 35 31 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 6a 3a 5b 7b 4c 3a 22 70 61 74 68 22 2c 58 3a 7b 64 3a 22 4d 35 38 2e 33 37 20 34 31 2e 33 39 48 36 32 2e 37 39 56 32 37 2e 32 33 43 36 32 2e 37 39 20 32 33 2e 30 33 20 36 32 2e 36 39 20 31 38 2e 36 39 20 36 32 2e 34 33 20 Data Ascii: 9 -0.59,-0.59 l 0,-8.5 c .1,-0.4 .29,-0.7 .59,-1 .3,-0.3 .60,-0.40 .90,-0.40 z"}}]}},gq5=function(){return{L:"svg",X:{fill:"none",height:"100%",viewBox:"0 0 143 51",width:"100%"},j:[{L:"path",X:{d:"M58.37 41.39H62.79V27.23C62.79 23.03 62.69 18.69 62.43
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 31 32 34 2e 31 36 20 38 2e 36 35 20 31 32 32 2e 35 20 38 2e 36 35 43 31 32 30 2e 38 34 20 38 2e 36 35 20 31 31 39 2e 39 34 20 39 2e 32 37 20 31 31 39 2e 39 34 20 31 31 2e 35 39 43 31 31 39 2e 39 34 20 31 33 2e 39 39 20 31 32 30 2e 38 32 20 31 34 2e 35 39 20 31 32 32 2e 35 20 31 34 2e 35 39 5a 4d 31 32 30 2e 32 20 34 31 2e 33 39 48 31 32 35 56 31 37 2e 37 33 48 31 32 30 2e 32 56 34 31 2e 33 39 5a 22 2c 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 7d 2c 7b 4c 3a 22 70 61 74 68 22 2c 58 3a 7b 64 3a 22 4d 31 33 34 2e 39 35 20 34 31 2e 37 39 43 31 33 37 2e 33 31 20 34 31 2e 37 39 20 31 33 38 2e 36 33 20 34 31 2e 34 39 20 31 33 39 2e 37 31 20 34 30 2e 34 37 43 31 34 31 2e 33 31 20 33 39 2e 30 31 20 31 34 31 2e 39 37 20 33 36 2e 36 33 20 31 34 31 2e 38 35 20 33 33 2e Data Ascii: 124.16 8.65 122.5 8.65C120.84 8.65 119.94 9.27 119.94 11.59C119.94 13.99 120.82 14.59 122.5 14.59ZM120.2 41.39H125V17.73H120.2V41.39Z",fill:"white"}},{L:"path",X:{d:"M134.95 41.79C137.31 41.79 138.63 41.49 139.71 40.47C141.31 39.01 141.97 36.63 141.85 33.
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 34 20 31 36 2e 30 37 20 31 36 2e 30 37 43 31 38 2e 34 33 20 31 33 2e 37 30 20 32 31 2e 36 34 20 31 32 2e 33 37 20 32 34 2e 39 39 20 31 32 2e 33 36 5a 4d 32 34 2e 39 39 20 31 30 2e 34 33 43 32 32 2e 31 31 20 31 30 2e 34 33 20 31 39 2e 32 39 20 31 31 2e 32 38 20 31 36 2e 38 39 20 31 32 2e 38 38 43 31 34 2e 35 30 20 31 34 2e 34 38 20 31 32 2e 36 33 20 31 36 2e 37 36 20 31 31 2e 35 33 20 31 39 2e 34 32 43 31 30 2e 34 32 20 32 32 2e 30 39 20 31 30 2e 31 33 20 32 35 2e 30 32 20 31 30 2e 37 30 20 32 37 2e 38 35 43 31 31 2e 32 36 20 33 30 2e 36 37 20 31 32 2e 36 35 20 33 33 2e 32 37 20 31 34 2e 36 39 20 33 35 2e 33 31 43 31 36 2e 37 33 20 33 37 2e 33 35 20 31 39 2e 33 32 20 33 38 2e 37 33 20 32 32 2e 31 35 20 33 39 2e 33 30 43 32 34 2e 39 38 20 33 39 2e 38 36 20 Data Ascii: 4 16.07 16.07C18.43 13.70 21.64 12.37 24.99 12.36ZM24.99 10.43C22.11 10.43 19.29 11.28 16.89 12.88C14.50 14.48 12.63 16.76 11.53 19.42C10.42 22.09 10.13 25.02 10.70 27.85C11.26 30.67 12.65 33.27 14.69 35.31C16.73 37.35 19.32 38.73 22.15 39.30C24.98 39.86
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 65 6e 74 29 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 3d 6e 65 77 20 67 2e 77 28 7b 4c 3a 22 64 69 76 22 2c 42 3a 22 79 74 70 2d 73 75 67 67 65 73 74 69 6f 6e 73 22 7d 29 3b 67 2e 52 28 74 68 69 73 2c 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 29 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 2e 75 5f 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 67 2e 52 28 74 68 69 73 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 29 3b 74 68 69 73 2e 70 72 65 76 69 6f 75 73 2e 75 5f 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 0a 74 68 69 73 2e 70 72 65 76 69 6f 75 73 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 56 30 2c 74 68 69 73 29 3b 67 2e 52 28 74 68 69 73 2c 74 68 69 73 2e 5a 29 3b 66 6f 72 28 76 61 72 20 56 3d 7b 55 57 3a 30 7d 3b Data Ascii: ent);this.suggestions=new g.w({L:"div",B:"ytp-suggestions"});g.R(this,this.suggestions);this.suggestions.u_(this.element);g.R(this,this.previous);this.previous.u_(this.element);this.previous.listen("click",this.V0,this);g.R(this,this.Z);for(var V={UW:0};
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 61 70 69 2e 4b 28 29 2e 47 28 22 77 65 62 5f 70 6c 61 79 65 72 5f 6c 6f 67 5f 63 6c 69 63 6b 5f 62 65 66 6f 72 65 5f 67 65 6e 65 72 61 74 69 6e 67 5f 76 65 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 70 61 72 61 6d 73 22 29 29 66 6f 72 28 76 61 72 20 56 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 2d 70 2e 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 2f 28 70 2e 56 2b 70 2e 43 29 29 2c 4e 3d 4d 61 74 68 2e 6d 69 6e 28 56 2b 70 2e 63 6f 6c 75 6d 6e 73 2c 70 2e 73 75 67 67 65 73 74 69 6f 6e 44 61 74 61 2e 6c 65 6e 67 74 68 29 2d 31 3b 56 3c 3d 4e 3b 56 2b 2b 29 70 2e 61 70 69 2e 6c 6f 67 56 69 73 69 62 69 6c 69 74 79 28 70 2e 54 5b 56 5d 2e 65 6c 65 6d 65 6e 74 2c 43 29 7d 2c 72 32 50 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 2e 6e 65 78 74 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 Data Ascii: api.K().G("web_player_log_click_before_generating_ve_conversion_params"))for(var V=Math.floor(-p.scrollPosition/(p.V+p.C)),N=Math.min(V+p.columns,p.suggestionData.length)-1;V<=N;V++)p.api.logVisibility(p.T[V].element,C)},r2P=function(p){p.next.element.sty
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 6e 44 61 74 61 29 26 26 56 2e 69 74 63 74 29 26 26 70 2e 61 70 69 2e 73 65 74 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 28 4e 2e 65 6c 65 6d 65 6e 74 2c 56 29 29 7d 66 6f 72 28 3b 43 3c 70 2e 54 2e 6c 65 6e 67 74 68 3b 43 2b 2b 29 70 2e 54 5b 43 5d 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 72 32 50 28 70 29 7d 2c 72 35 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 67 2e 47 62 2e 63 61 6c 6c 28 74 68 69 73 2c 70 29 3b 0a 76 61 72 20 43 3d 74 68 69 73 3b 74 68 69 73 2e 54 3d 6e 75 6c 6c 3b 76 61 72 20 56 3d 70 2e 4b 28 29 2c 4e 3d 7b 74 61 72 67 65 74 3a 56 2e 5a 7d 2c 48 3d 5b 22 79 74 70 2d 73 6d 61 6c 6c 2d 72 65 64 69 72 65 63 74 22 5d 3b 56 2e 56 3f 48 2e 70 75 73 68 28 22 6e 6f 2d 6c 69 6e 6b 22 29 3a 28 56 3d Data Ascii: nData)&&V.itct)&&p.api.setTrackingParams(N.element,V))}for(;C<p.T.length;C++)p.T[C].element.style.display="none";r2P(p)},r5=function(p){g.Gb.call(this,p);var C=this;this.T=null;var V=p.K(),N={target:V.Z},H=["ytp-small-redirect"];V.V?H.push("no-link"):(V=
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 73 69 7a 65 28 43 2c 43 2e 68 65 69 67 68 74 2d 4e 29 3b 56 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 54 6f 70 3d 28 43 2e 68 65 69 67 68 74 2d 28 70 2e 54 3f 70 2e 54 2e 65 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3a 30 29 29 2f 32 2d 4e 2f 32 2b 22 70 78 22 7d 2c 56 53 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 43 29 7b 76 61 72 20 56 3d 70 2e 61 70 69 2e 4b 28 29 2c 4e 3b 0a 43 2e 72 65 61 73 6f 6e 26 26 28 43 6d 63 28 43 2e 72 65 61 73 6f 6e 29 3f 4e 3d 67 2e 4d 79 28 43 2e 72 65 61 73 6f 6e 29 3a 4e 3d 67 2e 70 5a 28 67 2e 54 42 28 43 2e 72 65 61 73 6f 6e 29 29 2c 70 2e 4a 63 28 4e 2c 22 63 6f 6e 74 65 6e 74 22 29 29 3b 76 61 72 20 48 3b 43 2e 73 75 62 72 65 61 73 6f 6e 26 26 28 43 6d 63 28 43 2e 73 75 62 72 65 61 73 6f 6e 29 3f 48 3d 67 Data Ascii: size(C,C.height-N);V.style.paddingTop=(C.height-(p.T?p.T.element.clientHeight:0))/2-N/2+"px"},VSG=function(p,C){var V=p.api.K(),N;C.reason&&(Cmc(C.reason)?N=g.My(C.reason):N=g.pZ(g.TB(C.reason)),p.Jc(N,"content"));var H;C.subreason&&(Cmc(C.subreason)?H=g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49926	142.250.186.110	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	668	OUT	GET /s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
2025-01-10 16:21:39 UTC	685	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 339582 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:21:09 GMT Expires: Sat, 10 Jan 2026 16:21:09 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 29 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:39 UTC	705	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 73 63 Data Ascii: a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=f;ba(this,"desc
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 2e 63 61 6c 6c 28 63 2c 65 2c 64 29 7c 7c 65 7d 7d 28 29 2c 6c 61 3b 0a 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6c 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 70 61 3d 7b 7d 3b 74 72 79 7b 70 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 70 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6c 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 Data Ascii: Object.prototype);return Function.prototype.apply.call(c,e,d)\|\|e}}(),la;if(typeof Object.setPrototypeOf=="function")la=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},pa={};try{pa.__proto__=na;ma=pa.a;break a}catch(a){}ma=!1}la=ma?function(a,b){a.__pr
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 75 3d 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 50 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 69 66 28 61 2e 42 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 42 3d 21 30 7d 0a 77 61 2e 70 72 6f 74 6f 74 79 70 65 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 6d 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 6f 7c 7c 61 2e 75 7d 0a 77 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 Data Ascii: 0;this.h=1;this.u=this.o=0;this.P=this.j=null}function xa(a){if(a.B)throw new TypeError("Generator is already running");a.B=!0}wa.prototype.G=function(a){this.i=a};function ya(a,b){a.j={exception:b,md:!0};a.h=a.o\|\|a.u}wa.prototype.return=function(a){t
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 74 2c 62 2c 61 2e 68 2e 47 29 3a 28 61 2e 68 2e 47 28 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 61 28 61 2e 68 29 3b 61 2e 68 2e 48 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 48 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 47 29 3a 28 79 61 28 61 2e 68 2c 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 44 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 Data Ascii: t,b,a.h.G):(a.h.G(b),b=Fa(a));return b};this.throw=function(b){xa(a.h);a.h.H?b=Ea(a,a.h.H["throw"],b,a.h.G):(ya(a.h,b),b=Fa(a));return b};this.return=function(b){return Da(a,b)};this[Symbol.iterator]=function(){return this}}function Ha(a){function b(d
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 59 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 75 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 59 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 75 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 Data Ascii: .j(function(){throw g;})};b.prototype.o=function(){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:g(this.Y),reject:g(this.u)}};b.prototype.Y=function(g){if(g===this)this.u(new TypeError("A Promise cannot resolve
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 69 73 2e 69 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 69 28 74 68 69 73 2e 69 5b 67 5d 29 3b 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6f 28 29 3b 67 2e 59 62 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6f 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 Data Ascii: is.i.length;++g)f.i(this.i[g]);this.i=null}};var f=new c;b.prototype.ia=function(g){var h=this.o();g.Yb(h.resolve,h.reject)};b.prototype.oa=function(g,h){var k=this.o();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 75 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e Data Ascii: done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!ua(k,g)){var l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instan
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 75 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 6e 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 65 6e 74 72 79 3a 6e 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 65 6e 74 72 79 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 Data Ascii: f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&ua(h[0],l))for(h=0;h<m.length;h++){var n=m[h];if(k!==k&&n.key!==n.key\|\|k===n.key)return{id:l,list:m,index:h,entry:n}}return{id:l,list:m,index:-1,entry:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h)
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 3d 30 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 2e 76 61 6c 75 65 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 Data Ascii: =0};e.prototype.has=function(h){return!!d(this,h).entry};e.prototype.get=function(h){return(h=d(this,h).entry)&&h.value};e.prototype.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49931	3.130.114.26	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	367	OUT	GET /tv2track.js HTTP/1.1 Host: collector-44978.us.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:39 UTC	333	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=600 Content-Type: application/javascript Date: Fri, 10 Jan 2025 16:21:38 GMT ETag: "65cf3449-5152" Expires: Fri, 10 Jan 2025 16:31:38 GMT Last-Modified: Fri, 16 Feb 2024 10:09:13 GMT Server: nginx X-Robots-Tag: noindex Content-Length: 20818 Connection: Close
2025-01-10 16:21:39 UTC	16051	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 69 77 69 6b 20 2d 20 57 65 62 20 41 6e 61 6c 79 74 69 63 73 0a 20 2a 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 74 72 61 63 6b 69 6e 67 20 63 6c 69 65 6e 74 0a 20 2a 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 0a 20 2a 20 40 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 70 69 77 69 6b 2f 70 69 77 69 6b 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6a 73 2f 70 69 77 69 6b 2e 6a 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 2f 66 72 65 65 2d 73 6f 66 74 77 61 72 65 2f 62 73 64 2f 20 53 69 6d 70 6c 69 66 69 65 64 20 42 53 44 20 28 61 6c 73 6f 20 69 6e 20 6a 73 2f 4c 49 43 45 4e 53 45 2e 74 78 74 29 0a 20 2a 2f 0a 69 66 28 74 79 70 Data Ascii: /! Piwik - Web Analytics * * JavaScript tracking client * * @link http://piwik.org * @source https://github.com/piwik/piwik/blob/master/js/piwik.js * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt) */if(typ
2025-01-10 16:21:39 UTC	4767	IN	Data Raw: 6e 20 62 66 28 29 7b 76 61 72 20 62 6e 2c 62 6f 2c 62 70 3d 7b 70 64 66 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 70 64 66 22 2c 71 74 3a 22 76 69 64 65 6f 2f 71 75 69 63 6b 74 69 6d 65 22 2c 72 65 61 6c 70 3a 22 61 75 64 69 6f 2f 78 2d 70 6e 2d 72 65 61 6c 61 75 64 69 6f 2d 70 6c 75 67 69 6e 22 2c 77 6d 61 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 70 6c 61 79 65 72 32 22 2c 64 69 72 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 64 69 72 65 63 74 6f 72 22 2c 66 6c 61 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 2c 6a 61 76 61 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 2d 76 6d 22 2c 67 65 61 72 73 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 67 6f 6f 67 6c 65 67 65 61 72 73 Data Ascii: n bf(){var bn,bo,bp={pdf:"application/pdf",qt:"video/quicktime",realp:"audio/x-pn-realaudio-plugin",wma:"application/x-mplayer2",dir:"application/x-director",fla:"application/x-shockwave-flash",java:"application/x-java-vm",gears:"application/x-googlegears

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49932	3.161.82.19	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:38 UTC	366	OUT	GET /bob_002.gif?bob_bk=1&eid=4312 HTTP/1.1 Host: bob.dmpxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:39 UTC	457	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Mon, 03 Feb 2020 23:36:22 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 04:26:44 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 5d59ec457bae9e2b9df45a357eeeffd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: c0NN4VhuGTIInG9h9yS4B-ail6KBd54k94_zLea5NKBMnTVgPLlHfA== Age: 42896
2025-01-10 16:21:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49935	13.107.246.45	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	422	OUT	GET /s/0.7.59/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=d0b76cf50d6948c988aa2100a70bfd50.20250110.20260110
2025-01-10 16:21:39 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:21:39 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 68544 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 08 Jan 2025 11:37:03 GMT ETag: "0x8DD2FD8C5BBA94B" x-ms-request-id: 6af69a2e-c01e-0066-7aee-6161fb000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20250110T162139Z-156796c549b549hthC1EWRcuu40000001cyg000000009dep Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 79034942 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-01-10 16:21:39 UTC	15834	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 35 39 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 62 72 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 79 72 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 77 72 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 68 72 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.59: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return br},get start(){return yr},get stop(){return wr},get track(){return hr}}),e=Object.freeze({__pro
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 2c 63 68 69 6c 64 72 65 6e 3a 5b 5d 2c 64 61 74 61 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 6e 75 6c 6c 2c 68 61 73 68 3a 6e 75 6c 6c 2c 72 65 67 69 6f 6e 3a 73 2c 6d 65 74 61 64 61 74 61 3a 7b 61 63 74 69 76 65 3a 21 30 2c 73 75 73 70 65 6e 64 3a 21 31 2c 70 72 69 76 61 63 79 3a 64 2c 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 66 72 61 75 64 3a 6c 2c 73 69 7a 65 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 2c 72 3d 65 2e 64 61 74 61 2c 69 3d 65 2e 6d 65 74 61 64 61 74 61 2c 6f 3d 69 2e 70 72 69 76 61 63 79 2c 75 3d 72 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 63 3d 72 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 48 74 2e 69 6e 64 65 78 4f 66 28 63 29 3e Data Ascii: ,children:[],data:n,selector:null,hash:null,region:s,metadata:{active:!0,suspend:!1,privacy:d,position:null,fraud:l,size:null}},function(t,e,n){var a,r=e.data,i=e.metadata,o=i.privacy,u=r.attributes\|\|{},c=r.tag.toUpperCase();switch(!0){case Ht.indexOf(c)>
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3c 30 26 26 46 6e 2e 70 75 73 68 28 74 29 2c 56 6e 26 26 59 28 56 6e 29 2c 56 6e 3d 58 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 65 3d 46 6e 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 29 7b 76 61 72 20 61 3d 6e 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 46 52 41 47 4d 45 4e 54 5f 4e 4f 44 45 3b 69 66 28 61 26 26 61 65 28 6e 29 29 63 6f 6e 74 69 6e 75 65 3b 61 61 28 6e 2c 61 3f 22 63 68 69 6c 64 4c 69 73 74 22 3a 22 63 68 61 72 61 63 74 65 72 44 61 74 61 22 29 7d 7d 46 6e 3d 5b 5d 7d 28 29 7d 29 2c 33 33 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 61 28 74 2c 65 29 7b Data Ascii: n.indexOf(t)<0&&Fn.push(t),Vn&&Y(Vn),Vn=X((function(){!function(){for(var t=0,e=Fn;t<e.length;t++){var n=e[t];if(n){var a=n.nodeType===Node.DOCUMENT_FRAGMENT_NODE;if(a&&ae(n))continue;aa(n,a?"childList":"characterData")}}Fn=[]}()}),33),t}function aa(t,e){
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 74 65 6d 70 74 73 3a 6e 2e 61 74 74 65 6d 70 74 73 2c 73 74 61 74 75 73 3a 74 2e 73 74 61 74 75 73 7d 2c 6e 2e 61 74 74 65 6d 70 74 73 3e 31 26 26 47 72 28 32 29 2c 32 30 30 3d 3d 3d 74 2e 73 74 61 74 75 73 26 26 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 74 2e 73 70 6c 69 74 28 22 5c 6e 22 29 3a 5b 5d 2c 6e 3d 30 2c 61 3d 65 3b 6e 3c 61 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 61 5b 6e 5d 2c 69 3d 72 26 26 72 2e 6c 65 6e 67 74 68 3e 30 3f 72 2e 73 70 6c 69 74 28 2f 20 28 2e 2a 29 2f 29 3a 5b 22 22 5d 3b 73 77 69 74 63 68 28 69 5b 30 5d 29 7b 63 61 73 65 22 45 4e 44 22 3a 51 72 28 36 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 55 50 Data Ascii: tempts:n.attempts,status:t.status},n.attempts>1&&Gr(2),200===t.status&&t.responseText&&function(t){for(var e=t&&t.length>0?t.split("\n"):[],n=0,a=e;n<a.length;n++){var r=a[n],i=r&&r.length>0?r.split(/ (.*)/):[""];switch(i[0]){case"END":Qr(6);break;case"UP
2025-01-10 16:21:39 UTC	3558	IN	Data Raw: 6f 72 28 28 67 6f 28 29 2d 68 6f 29 2f 35 30 29 29 3b 72 65 74 75 72 6e 20 70 6f 5b 74 5d 2e 6c 61 74 65 6e 63 79 7d 2c 79 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6f 3d 67 6f 28 29 2c 70 6f 2e 6c 65 6e 67 74 68 3d 30 2c 76 6f 2e 63 6c 65 61 72 28 29 7d 2c 62 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 26 26 21 28 74 2e 64 75 72 61 74 69 6f 6e 3c 34 30 29 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 22 69 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 3f 73 6f 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 3a 74 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 26 26 28 6c 6f 3d 4d 61 74 68 2e 6d 69 6e 28 6c 6f 2c 74 2e 69 6e 74 Data Ascii: or((go()-ho)/50));return po[t].latency},yo=function(){ho=go(),po.length=0,vo.clear()},bo=function(t){if(t.interactionId&&!(t.duration<40)){!function(t){"interactionCount"in performance?so=performance.interactionCount:t.interactionId&&(lo=Math.min(lo,t.int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49936	142.250.186.110	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	662	OUT	GET /s/player/3ede36f2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
2025-01-10 16:21:39 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 30890 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 15:52:57 GMT Expires: Sat, 10 Jan 2026 15:52:57 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 1722 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:39 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 71 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 Data Ascii: (function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 72 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6b 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 6b 7c 7c 22 22 29 2b 22 5f 22 2b 67 2b 2b 2c 6b 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 6b 2c 65 29 7b 74 68 69 73 2e 67 3d 6b 3b 72 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 Data Ascii: ;b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}function c(k,e){this.g=k;r(this,"descript
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6d 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 67 3d 31 3b 74 68 69 73 2e 41 3d 74 68 69 73 2e 6c 3d 30 3b 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 69 66 28 61 2e 6a 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 Data Ascii: n b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function y(){this.j=!1;this.h=null;this.m=void 0;this.g=1;this.A=this.l=0;this.i=null}function z(a){if(a.j)throw new TypeError("Genera
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 75 72 6e 20 6c 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f 77 28 64 29 7d 0a 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 65 2e 64 6f 6e 65 3f 64 28 65 2e 76 61 6c 75 65 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 2e 76 61 6c 75 65 29 2e 74 68 65 6e 28 62 2c 63 29 2e 74 68 65 6e 28 6b 2c 67 29 7d 0a 6b 28 61 Data Ascii: urn la(a,b)};this[Symbol.iterator]=function(){return this}}function na(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,g){function k(e){e.done?d(e.value):Promise.resolve(e.value).then(b,c).then(k,g)}k(a
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 79 7b 66 3d 65 2e 74 68 65 6e 7d 63 61 74 63 68 28 68 29 7b 74 68 69 73 2e 6c 28 68 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 4d 28 66 2c 65 29 3a 74 68 69 73 2e 6d 28 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 41 28 32 2c 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 41 28 31 2c 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 69 66 28 74 68 69 73 2e 68 21 3d 30 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 65 2b 22 2c 20 22 2b 66 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c Data Ascii: y{f=e.then}catch(h){this.l(h);return}typeof f=="function"?this.M(f,e):this.m(e)};b.prototype.l=function(e){this.A(2,e)};b.prototype.m=function(e){this.A(1,e)};b.prototype.A=function(e,f){if(this.h!=0)throw Error("Cannot settle("+e+", "+f+"): Promise al
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 65 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 66 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 3f 6b 2e 68 28 68 29 3a 74 68 69 73 2e 67 2e 70 75 73 68 28 68 29 3b 74 68 69 73 2e 73 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f Data Ascii: ;b.prototype.B=function(e,f){function h(){switch(l.h){case 1:e(l.i);break;case 2:f(l.i);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;this.g==null?k.h(h):this.g.push(h);this.s=!0};b.resolve=d;b.reject=function(e){return new b(functio
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 28 6d 29 26 26 67 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 6e 65 77 20 61 28 5b 5b 68 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 68 29 21 3d 32 7c 7c 6d 2e 67 65 74 28 6c 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6d 2e 64 65 6c 65 74 65 28 68 29 3b 6d 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6d 2e 68 61 73 28 68 29 26 26 6d 2e 67 65 74 28 6c 29 3d 3d 34 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b Data Ascii: (m)&&g(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var h=Object.seal({}),l=Object.seal({}),m=new a([[h,2],[l,3]]);if(m.get(h)!=2\|\|m.get(l)!=3)return!1;m.delete(h);m.set(l,4);return!m.has(h)&&m.get(l)==4}catch(n){return!1}}())return a;
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 66 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 68 3d 6e 65 77 20 61 28 78 28 5b 5b 66 2c 22 73 22 5d 5d 29 29 3b 69 66 28 68 2e 67 65 74 28 66 29 21 3d 22 73 22 7c 7c 68 2e 73 69 7a 65 21 3d 31 7c 7c 68 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 68 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 68 7c 7c 68 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 Data Ascii: is.set(h[0],h[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var f=Object.seal({x:4}),h=new a(x([[f,"s"]]));if(h.get(f)!="s"\|\|h.size!=1\|\|h.get({x:4})\|\|h.set({x:4},"t")!=h\|\|h.size!=2)retur
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 66 2e 63 61 6c 6c 28 68 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 0a 67 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 67 7d 29 3b 0a 75 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 63 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d 78 28 63 29 3b 66 6f 72 28 76 61 72 20 64 3b 21 28 64 3d Data Ascii: ype.forEach=function(f,h){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,f.call(h,m[1],m[0],this)};g.prototype[Symbol.iterator]=g.prototype.entries;var e=0;return g});u("Set",function(a){function b(c){this.g=new Map;if(c){c=x(c);for(var d;!(d=
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 64 2e 6c 65 6e 67 74 68 2c 6b 3d 30 3b 6b 3c 67 3b 6b 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 6b 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 65 2c 6b 2c 64 29 29 7b 62 3d 65 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 0a 75 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 7d 3b 0a 76 Data Ascii: a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var g=d.length,k=0;k<g;k++){var e=d[k];if(b.call(c,e,k,d)){b=e;break a}}b=void 0}return b}});u("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(f){return f};v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49942	157.240.252.13	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	1206	OUT	GET /signals/config/1686000021639755?v=2.9.179&r=stable&domain=www.infarmbureau.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:39 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-4xEGZxkJ' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-10 16:21:39 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2025-01-10 16:21:39 UTC	1491	IN	Data Raw: 7c 7c 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 3b 69 66 28 62 2e 63 6f 6e 76 65 72 73 69 6f 6e 42 69 74 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 2e 63 6f 6e 76 65 72 73 69 6f 6e 42 69 74 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 62 2e 70 72 69 6f 72 69 74 79 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 2e 70 72 69 6f 72 69 74 79 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 62 2e 65 74 6c 64 4f 6e 65 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 2e 65 74 6c 64 4f 6e 65 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 63 6f 6e 76 65 Data Ascii: \|\|typeof a!=="string")return null;else{var b=JSON.parse(a);if(b.conversionBit!=null&&typeof b.conversionBit==="number"&&b.priority!=null&&typeof b.priority==="number"&&b.etldOne!=null&&typeof b.etldOne==="string")return a;else return JSON.stringify({conve
2025-01-10 16:21:39 UTC	14893	IN	Data Raw: 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 61 62 70 63 6d 61 65 62 72 69 64 67 65 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 61 62 70 63 6d 61 65 62 72 69 64 67 65 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 61 62 70 63 6d 61 65 62 72 69 64 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 Data Ascii: });e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.iabpcmaebridge");f.registerPlugin&&f.registerPlugin("fbevents.plugins.iabpcmaebridge",e.exports);f.ensureModuleRegistered("fbevents.plugins.iabpcmaebridge",function(){return e.exports})})()})(wi
2025-01-10 16:21:39 UTC	1500	IN	Data Raw: 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 61 21 3d 3d 22 75 72 6c 22 29 72 65 74 75 72 6e 20 62 3b 61 3d 5b 22 68 74 74 70 3a 2f 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 22 2c 22 77 77 77 2e 22 5d 3b 76 61 72 20 64 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 63 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 73 74 61 72 74 73 57 69 74 68 28 61 29 26 26 28 64 3d 64 2e 73 6c 69 63 65 28 61 2e 6c 65 6e 67 74 68 29 29 7d 29 3b 72 65 74 75 72 6e 20 64 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2b 24 2f 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 63 5b 67 28 63 29 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2c 66 3d 67 28 63 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 63 3d 64 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d Data Ascii: on h(a,b){if(a!=="url")return b;a=["http://","https://","www."];var d=b.toLowerCase();c(a,function(a){d.startsWith(a)&&(d=d.slice(a.length))});return d.replace(/\/+$/,"")}function i(a,c,d){var e=c[g(c)].toString(),f=g(c).toLowerCase();c=d[a.toLowerCase()]
2025-01-10 16:21:39 UTC	14884	IN	Data Raw: 31 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 29 72 65 74 75 72 6e 20 62 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 66 2c 61 29 7d 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6c 28 65 2c 66 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 73 77 69 74 63 68 28 62 29 7b 63 61 73 65 22 69 6e 22 3a 63 61 73 65 22 69 73 5f 61 6e 79 22 3a 72 65 74 75 72 6e 20 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 29 2e 69 6e 63 6c 75 64 65 73 28 63 29 3b 63 61 73 65 22 69 5f 73 74 72 5f 69 6e 22 3a 63 61 73 65 22 69 5f 69 73 5f 61 6e 79 22 3a 72 65 74 75 72 6e 20 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: 1;if(Array.isArray(c))return b(c,function(a){return l(e,f,a)});else return l(e,f,c)}function l(a,b,c){switch(b){case"in":case"is_any":return a.map(function(a){return a.toString()}).includes(c);case"i_str_in":case"i_is_any":return a.map(function(a){return
2025-01-10 16:21:39 UTC	1500	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 63 3d 62 2e 67 65 74 43 75 73 74 6f 6d 50 61 72 61 6d 65 74 65 72 73 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 67 3d 66 2e 67 65 74 46 62 65 76 Data Ascii: function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("SignalsFBEventsEvents"),c=b.getCustomParameters;b=f.getFbeventsModules("SignalsFBEventsPlugin");var d=f.getFbeventsModules("SignalsParamList"),g=f.getFbev
2025-01-10 16:21:39 UTC	14884	IN	Data Raw: 61 62 6c 65 42 61 63 6b 75 70 54 69 6d 65 6f 75 74 3a 21 31 3b 21 62 26 26 73 3d 3d 3d 6e 75 6c 6c 26 26 28 73 3d 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2c 72 2c 70 29 7d 2c 63 29 29 7d 29 2c 69 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 71 29 7b 76 61 72 20 62 3d 61 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 3b 62 2e 67 65 74 28 6e 29 3d 3d 6e 75 6c 6c 26 26 62 2e 61 70 70 65 6e 64 28 6e 2c 72 29 3b 61 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 3d 62 3b 72 65 74 75 72 6e 21 31 7d 62 3d 61 2e 69 64 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 31 3b 70 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 29 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 Data Ascii: ableBackupTimeout:!1;!b&&s===null&&(s=a.setTimeout(function(){t(e,r,p)},c))}),i.listen(function(a){if(!q){var b=a.customParams\|\|new d();b.get(n)==null&&b.append(n,r);a.customParams=b;return!1}b=a.id;if(b==null)return!1;p.push(a);return!0}))})})();return e
2025-01-10 16:21:39 UTC	1491	IN	Data Raw: 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 22 3a 22 50 61 67 65 56 69 65 77 22 7d 7d 2c 7b 22 6f 72 22 3a 5b 7b 22 55 52 4c 22 3a 7b 22 65 71 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 69 6e 66 61 72 6d 62 75 72 65 61 75 2e 63 6f 6d 5c 2f 73 70 6f 6e 73 6f 72 73 5c 2f 70 65 72 69 6c 2d 70 72 6f 74 65 63 74 5c 2f 73 75 62 6d 69 73 73 69 6f 6e 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 7d 7d 5d 7d 5d 7d 7d 2c 7b 22 69 64 22 3a 22 39 35 30 38 35 32 38 34 36 31 38 33 31 30 32 22 2c 22 72 75 6c 65 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 22 3a 22 50 61 67 65 56 69 65 77 22 7d 7d 2c 7b 22 6f 72 22 3a 5b 7b 22 55 52 4c 22 3a 7b 22 69 5f 63 6f 6e 74 61 69 6e 73 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 Data Ascii: ":{"and":[{"event":{"eq":"PageView"}},{"or":[{"URL":{"eq":"https:\/\/www.infarmbureau.com\/sponsors\/peril-protect\/submission-confirmation"}}]}]}},{"id":"950852846183102","rule":{"and":[{"event":{"eq":"PageView"}},{"or":[{"URL":{"i_contains":"https:\/\/w
2025-01-10 16:21:39 UTC	14893	IN	Data Raw: 34 34 35 36 32 34 30 36 33 38 31 22 2c 22 72 75 6c 65 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 22 3a 22 50 61 67 65 56 69 65 77 22 7d 7d 2c 7b 22 6f 72 22 3a 5b 7b 22 55 52 4c 22 3a 7b 22 69 5f 63 6f 6e 74 61 69 6e 73 22 3a 22 61 75 74 6f 5c 2f 66 69 6e 61 6c 44 65 74 61 69 6c 73 22 7d 7d 2c 7b 22 55 52 4c 22 3a 7b 22 69 5f 63 6f 6e 74 61 69 6e 73 22 3a 22 71 75 6f 74 65 5c 2f 43 6f 6e 74 61 63 74 55 73 22 7d 7d 2c 7b 22 55 52 4c 22 3a 7b 22 69 5f 63 6f 6e 74 61 69 6e 73 22 3a 22 71 75 6f 74 65 5c 2f 68 6f 6d 65 5c 2f 43 6f 6e 74 61 63 74 55 73 22 7d 7d 5d 7d 5d 7d 7d 2c 7b 22 69 64 22 3a 22 32 39 34 36 35 35 34 34 30 38 39 30 33 34 37 36 22 2c 22 72 75 6c 65 22 3a 7b 22 61 6e 64 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 7b 22 65 71 Data Ascii: 44562406381","rule":{"and":[{"event":{"eq":"PageView"}},{"or":[{"URL":{"i_contains":"auto\/finalDetails"}},{"URL":{"i_contains":"quote\/ContactUs"}},{"URL":{"i_contains":"quote\/home\/ContactUs"}}]}]}},{"id":"2946554408903476","rule":{"and":[{"event":{"eq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49939	142.250.186.110	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	656	OUT	GET /s/player/3ede36f2/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FNmkoI3fSJo; VISITOR_INFO1_LIVE=9kK3clCl6Sg; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOA%3D%3D; __Secure-ROLLOUT_TOKEN=CObSsKir8oa9_AEQyO-b6cfrigMYyO-b6cfrigM%3D
2025-01-10 16:21:39 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2517525 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 15:34:47 GMT Expires: Sat, 10 Jan 2026 15:34:47 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 2812 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:39 UTC	702	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of th
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a Data Ascii: ge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 20 6d 75 73 74 20 6e 6f 74 0a 20 20 20 20 20 20 63 6c 61 69 6d 20 74 68 61 74 20 79 6f 75 20 77 72 6f 74 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 6f 66 74 77 61 72 65 2e 20 49 66 20 79 6f 75 20 75 Data Ascii: including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you must not claim that you wrote the original software. If you u
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 Data Ascii: t to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDI
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 42 2c 74 50 2c 74 6b 6a 2c 63 34 2c 63 42 73 2c 54 41 2c 54 6f 51 2c 4a 50 2c 4d 6d 2c 6d 4d 2c 76 34 2c 46 61 2c 53 71 2c 4b 79 2c 4d 6b 58 2c 6d 4c 48 2c 5a 6d 2c 76 54 76 2c 46 71 58 2c 55 6c 2c 66 79 2c 71 6d 2c 4b 71 31 2c 44 4c 56 2c 49 74 2c 66 56 58 2c 71 76 75 2c 75 76 58 2c 79 42 4c 2c 4f 36 39 2c 55 4c 48 2c 5a 36 4c 2c 49 56 53 2c 62 36 76 2c 62 42 2c 6b 56 2c 41 42 56 2c 6f 74 2c 59 56 2c 6b 74 61 2c 6e 79 2c 59 76 59 2c 65 71 2c 50 34 2c 77 43 2c 7a 36 53 2c 24 56 2c 52 36 39 2c 4c 79 2c 6e 54 53 2c 65 36 73 2c 67 43 2c 50 72 51 2c 57 34 2c 51 47 2c 42 34 2c 47 41 2c 24 4c 75 2c 6a 6c 2c 57 71 39 2c 77 79 65 2c 56 35 2c 48 6e 2c 58 48 2c 72 42 31 2c 64 56 2c 73 51 2c 42 6f 59 2c 70 54 65 2c 43 67 59 2c 61 63 2c 45 51 2c 0a 6c 30 2c 74 62 2c Data Ascii: B,tP,tkj,c4,cBs,TA,ToQ,JP,Mm,mM,v4,Fa,Sq,Ky,MkX,mLH,Zm,vTv,FqX,Ul,fy,qm,Kq1,DLV,It,fVX,qvu,uvX,yBL,O69,ULH,Z6L,IVS,b6v,bB,kV,ABV,ot,YV,kta,ny,YvY,eq,P4,wC,z6S,$V,R69,Ly,nTS,e6s,gC,PrQ,W4,QG,B4,GA,$Lu,jl,Wq9,wye,V5,Hn,XH,rB1,dV,sQ,BoY,pTe,CgY,ac,EQ,l0,tb,
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 63 31 2c 79 68 2c 71 5f 2c 49 73 2c 77 47 6a 2c 62 70 2c 41 45 2c 6f 73 2c 6b 33 2c 24 24 48 2c 59 33 2c 7a 69 2c 52 73 2c 4c 39 39 2c 67 35 65 2c 6e 45 2c 57 39 76 2c 47 68 73 2c 42 49 4c 2c 70 65 61 2c 43 4b 61 2c 6a 4e 4c 2c 51 61 39 2c 4e 57 65 2c 65 5a 2c 50 32 2c 77 68 2c 48 65 61 2c 4c 45 2c 24 33 2c 58 65 4c 2c 64 71 59 2c 69 65 73 2c 72 68 2c 68 43 39 2c 42 32 2c 47 69 2c 73 4e 76 2c 70 68 2c 45 71 65 2c 43 68 2c 61 7a 75 2c 6c 7a 56 2c 74 75 6a 2c 63 32 61 2c 6a 31 2c 56 41 2c 4e 6b 2c 48 73 2c 58 4c 2c 64 54 2c 69 5a 2c 54 57 48 2c 68 55 2c 73 68 2c 61 6f 2c 4d 75 75 2c 6d 71 48 2c 76 71 59 2c 6c 5a 2c 63 73 2c 74 55 2c 4d 6b 2c 4a 55 2c 6d 67 2c 53 6f 79 2c 4b 53 6a 2c 76 73 2c 46 4c 2c 53 31 2c 75 51 65 2c 5a 65 53 2c 4f 65 73 2c 55 71 51 2c Data Ascii: c1,yh,q_,Is,wGj,bp,AE,os,k3,$$H,Y3,zi,Rs,L99,g5e,nE,W9v,Ghs,BIL,pea,CKa,jNL,Qa9,NWe,eZ,P2,wh,Hea,LE,$3,XeL,dqY,ies,rh,hC9,B2,Gi,sNv,ph,Eqe,Ch,azu,lzV,tuj,c2a,j1,VA,Nk,Hs,XL,dT,iZ,TWH,hU,sh,ao,Muu,mqH,vqY,lZ,cs,tU,Mk,JU,mg,Soy,KSj,vs,FL,S1,uQe,ZeS,Oes,UqQ,
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 48 2c 6f 63 61 2c 52 75 59 2c 6b 79 61 2c 4a 6b 2c 6d 6c 2c 76 46 2c 53 4a 2c 4b 67 2c 24 6b 56 2c 44 4a 2c 75 49 2c 5a 4a 2c 67 63 59 2c 4f 64 2c 57 67 48 2c 51 6f 58 2c 79 32 2c 42 54 59 2c 49 4c 2c 62 49 2c 41 6b 2c 6f 4c 2c 47 79 59 2c 6b 46 2c 59 46 2c 7a 7a 2c 52 4c 2c 6e 67 2c 70 66 75 2c 50 46 2c 77 30 2c 24 46 2c 4c 67 2c 67 30 2c 57 46 2c 43 34 53 2c 6a 39 75 2c 56 68 61 2c 4e 39 75 2c 48 32 31 2c 58 66 79 2c 51 32 2c 64 4b 56 2c 56 4a 2c 69 32 65 2c 68 55 73 2c 73 39 75 2c 4e 76 2c 58 43 2c 64 66 2c 69 61 2c 61 36 2c 45 67 2c 6c 61 2c 45 6f 73 2c 54 48 2c 4d 76 2c 4a 70 2c 6c 6f 4c 2c 74 68 58 2c 6d 32 2c 63 78 58 2c 54 39 53 2c 46 43 2c 44 4b 4c 2c 75 6a 39 2c 5a 32 53 2c 53 37 2c 55 4b 39 2c 66 6f 51 2c 71 45 39 2c 44 44 2c 62 32 51 2c 49 6f Data Ascii: H,oca,RuY,kya,Jk,ml,vF,SJ,Kg,$kV,DJ,uI,ZJ,gcY,Od,WgH,QoX,y2,BTY,IL,bI,Ak,oL,GyY,kF,YF,zz,RL,ng,pfu,PF,w0,$F,Lg,g0,WF,C4S,j9u,Vha,N9u,H21,Xfy,Q2,dKV,VJ,i2e,hUs,s9u,Nv,XC,df,ia,a6,Eg,la,Eos,TH,Mv,Jp,loL,thX,m2,cxX,T9S,FC,DKL,uj9,Z2S,S7,UK9,foQ,qE9,DD,b2Q,Io
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 6b 48 31 2c 65 46 2c 50 6c 2c 77 24 2c 59 67 4c 2c 24 4a 2c 4c 31 2c 7a 69 75 2c 57 6c 2c 42 6c 2c 72 24 2c 51 71 2c 47 37 2c 70 6d 2c 65 69 59 2c 57 32 53 2c 72 70 59 2c 67 51 53 2c 4c 32 58 2c 51 36 79 2c 56 6d 2c 58 49 2c 43 31 76 2c 42 66 48 2c 47 48 59 2c 70 64 53 2c 6e 51 53 2c 73 4b 51 2c 54 6a 2c 0a 68 72 48 2c 6c 72 48 2c 69 4f 6a 2c 6a 47 2c 4d 59 2c 73 4b 2c 74 47 2c 61 72 39 2c 69 7a 2c 77 36 59 2c 50 61 39 2c 24 76 6a 2c 48 51 2c 64 55 31 2c 46 49 2c 6d 55 53 2c 53 47 2c 46 31 53 2c 53 6b 59 2c 4b 31 61 2c 44 45 2c 44 55 51 2c 75 35 59 2c 5a 4f 6a 2c 66 72 75 2c 4f 4f 59 2c 55 4b 2c 71 6b 31 2c 66 6d 2c 49 72 56 2c 62 4f 75 2c 6f 44 56 2c 6b 51 53 2c 79 6d 2c 78 55 4c 2c 7a 72 65 2c 71 59 2c 52 72 51 2c 49 57 2c 62 7a 2c 69 4e 2c 24 55 58 2c Data Ascii: kH1,eF,Pl,w$,YgL,$J,L1,ziu,Wl,Bl,r$,Qq,G7,pm,eiY,W2S,rpY,gQS,L2X,Q6y,Vm,XI,C1v,BfH,GHY,pdS,nQS,sKQ,Tj,hrH,lrH,iOj,jG,MY,sK,tG,ar9,iz,w6Y,Pa9,$vj,HQ,dU1,FI,mUS,SG,F1S,SkY,K1a,DE,DUQ,u5Y,ZOj,fru,OOY,UK,qk1,fm,IrV,bOu,oDV,kQS,ym,xUL,zre,qY,RrQ,IW,bz,iN,$UX,
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 67 2c 69 36 2c 68 61 2c 73 72 2c 61 77 2c 45 72 2c 6c 36 2c 74 61 2c 63 56 2c 54 63 2c 4d 47 2c 4a 61 2c 6d 74 2c 76 56 2c 46 77 2c 53 54 2c 4b 46 2c 44 53 2c 75 36 2c 5a 53 2c 55 72 2c 66 46 2c 4f 72 2c 79 79 2c 71 47 2c 49 77 2c 62 36 2c 41 61 2c 6f 77 2c 6b 5f 2c 78 5f 2c 59 5f 2c 7a 63 2c 52 77 2c 6e 46 2c 65 54 2c 50 56 2c 77 67 2c 24 5f 2c 4c 46 2c 67 67 2c 57 56 2c 51 79 2c 72 67 2c 42 56 2c 70 50 2c 43 50 2c 74 46 39 2c 6a 55 2c 42 2c 56 56 2c 47 63 2c 4e 7a 2c 48 55 2c 58 4a 2c 54 24 56 2c 69 48 2c 4a 33 51 2c 64 74 2c 6d 4d 51 2c 73 66 2c 76 4a 75 2c 45 66 2c 68 34 2c 6c 48 2c 74 34 2c 63 55 2c 4d 7a 2c 53 49 76 2c 4b 64 48 2c 44 4d 31 2c 75 33 39 2c 0a 5a 63 2c 55 66 2c 53 55 2c 66 50 2c 55 4d 53 2c 66 39 51 2c 4f 31 51 2c 79 33 31 2c 46 64 76 Data Ascii: g,i6,ha,sr,aw,Er,l6,ta,cV,Tc,MG,Ja,mt,vV,Fw,ST,KF,DS,u6,ZS,Ur,fF,Or,yy,qG,Iw,b6,Aa,ow,k_,x_,Y_,zc,Rw,nF,eT,PV,wg,$_,LF,gg,WV,Qy,rg,BV,pP,CP,tF9,jU,B,VV,Gc,Nz,HU,XJ,T$V,iH,J3Q,dt,mMQ,sf,vJu,Ef,h4,lH,t4,cU,Mz,SIv,KdH,DM1,u39,Zc,Uf,SU,fP,UMS,f9Q,O1Q,y31,Fdv
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 51 2c 63 53 2c 54 54 2c 4a 56 2c 71 75 4c 2c 6d 4c 2c 76 53 2c 46 63 2c 49 37 48 2c 53 49 2c 62 74 79 2c 4b 72 2c 41 37 39 2c 44 51 2c 6f 55 4c 2c 6b 36 53 2c 75 62 2c 78 4e 59 2c 59 75 65 2c 7a 53 48 2c 5a 51 2c 55 47 2c 66 72 2c 4f 47 2c 79 34 2c 52 53 75 2c 6e 55 53 2c 71 56 2c 49 6c 2c 62 62 2c 65 53 4c 2c 41 56 2c 6f 6c 2c 6b 50 2c 78 50 2c 59 50 2c 50 24 75 2c 77 45 58 2c 7a 54 2c 52 6c 2c 24 4e 4c 2c 6e 72 2c 65 49 2c 50 53 2c 77 46 2c 6e 4a 51 2c 4c 41 76 2c 67 55 31 2c 24 50 2c 57 41 56 2c 51 30 79 2c 72 37 65 2c 4c 72 2c 67 46 2c 57 53 2c 51 34 2c 72 46 2c 42 53 2c 47 54 2c 70 6a 2c 43 6a 2c 6a 42 2c 56 39 2c 42 6b 53 2c 47 36 48 2c 61 64 2c 45 54 2c 70 68 59 2c 6c 6e 2c 76 50 2c 63 50 2c 58 68 79 2c 61 61 39 2c 64 51 76 2c 45 69 76 2c 74 69 79 Data Ascii: Q,cS,TT,JV,quL,mL,vS,Fc,I7H,SI,bty,Kr,A79,DQ,oUL,k6S,ub,xNY,Yue,zSH,ZQ,UG,fr,OG,y4,RSu,nUS,qV,Il,bb,eSL,AV,ol,kP,xP,YP,P$u,wEX,zT,Rl,$NL,nr,eI,PS,wF,nJQ,LAv,gU1,$P,WAV,Q0y,r7e,Lr,gF,WS,Q4,rF,BS,GT,pj,Cj,jB,V9,BkS,G6H,ad,ET,phY,ln,vP,cP,Xhy,aa9,dQv,Eiv,tiy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49945	142.250.184.226	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	760	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
2025-01-10 16:21:39 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 10 Jan 2025 16:21:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:21:39 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 4e 6a 54 52 77 38 4c 64 6d 6c 6b 64 66 6d 49 34 69 4e 72 43 64 52 61 4f 6f 55 53 36 6c 35 33 45 36 57 61 44 66 2d 51 72 53 64 6b 68 44 58 61 47 4f 70 4d 70 47 68 39 48 72 76 41 75 5a 44 45 4f 31 2d 4c 5a 50 53 45 63 66 30 71 74 6d 68 75 46 36 30 37 65 41 6e 42 48 30 6f 51 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKrNjTRw8LdmlkdfmI4iNrCdRaOoUS6l53E6WaDf-QrSdkhDXaGOpMpGh9HrvAuZDEO1-LZPSEcf0qtmhuF607eAnBH0oQ"}
2025-01-10 16:21:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49943	172.217.23.102	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	1038	OUT	GET /activity;register_conversion=1;src=8339572;type=homep00;cat=homep0;ord=4882635700889;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1192831351;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
2025-01-10 16:21:39 UTC	2190	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"3447713391463953071"}],"aggregatable_trigger_data":[{"filters":[{"14":["9320362"]}],"key_piece":"0xe5ce05c888e0a557","source_keys":["12","13","14","15","16","17","18","19","20","21","27840256","27840257","27840258","27840259","644880588","644880589","644880590","644880591"]},{"key_piece":"0xc94108ef345fb8ff","not_filters":{"14":["9320362"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","27840256","27840257","27840258","27840259","644880588","644880589","644880590","644880591"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"27840256":65,"27840257":65,"27840258":65,"27840259":6356,"644880588":65,"644880589":65,"644880590":65,"644880591":6356},"debug_key":"4793829701341010820","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"3447713391463953071","filters":[{"14":["9320362"],"source_type":["event"]}],"priority":"10", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 09-Feb-2025 16:21:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49944	172.217.23.102	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	1043	OUT	GET /activity;register_conversion=1;src=8339572;type=homep0;cat=homep0;ord=1;num=3810265139891;npa=0;auiddc=1093896691.1736526094;ps=1;pcor=1431604859;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9188113517z876386024za201zb76386024;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Fwww.infarmbureau.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnEZdk9wF4BU6P2PpFXjpHdBEWWvQ1sQi24M0hoKlU33ixTWeBmaEUt8Jfc
2025-01-10 16:21:39 UTC	2190	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"4581461479018616670"}],"aggregatable_trigger_data":[{"filters":[{"14":["9305035"]}],"key_piece":"0x57abdba08d21a60e","source_keys":["12","13","14","15","16","17","18","19","20","21","27840256","27840257","27840258","27840259","644880588","644880589","644880590","644880591"]},{"key_piece":"0xa1d05b07a9dc4bab","not_filters":{"14":["9305035"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","27840256","27840257","27840258","27840259","644880588","644880589","644880590","644880591"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"27840256":65,"27840257":65,"27840258":65,"27840259":6356,"644880588":65,"644880589":65,"644880590":65,"644880591":6356},"debug_key":"8192225816251994201","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"4581461479018616670","filters":[{"14":["9305035"],"source_type":["event"]}],"priority":"10", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 09-Feb-2025 16:21:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49949	142.250.186.86	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	466	OUT	GET /vi_webp/MZTWt2RchgA/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:39 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 22580 Date: Fri, 10 Jan 2025 16:21:39 GMT Expires: Fri, 10 Jan 2025 18:21:39 GMT Cache-Control: public, max-age=7200 ETag: "1697640460" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:39 UTC	767	IN	Data Raw: 52 49 46 46 2c 58 00 00 57 45 42 50 56 50 38 20 20 58 00 00 30 1a 02 9d 01 2a 80 02 e0 01 3e 6d 32 95 48 24 22 a4 a5 a3 11 db f0 b0 0d 89 67 6e 55 72 7e 00 ca fd 4a 4f 30 b2 92 03 c0 16 c0 b9 26 70 df 3f 8e fc c1 c0 a8 f5 cf d6 29 a8 f1 e7 d2 d7 28 ae 97 7d af ab 4c 25 d7 c1 fc 60 59 e9 cd 37 31 f8 c0 4e 8c 88 c5 cf 31 ff 9b 5a 52 3c 37 84 3f d8 b7 e7 96 48 97 ac f6 d9 ec 55 be b1 7d b6 7b 15 6f ac 5f 6d 9e c5 5b eb 17 db 67 b1 56 fa c5 f6 d9 ec 55 be b1 7d b6 7b 15 6f ac 5f 6d 9e c5 5b eb 17 db 67 b1 56 fa c5 f6 d9 ec 55 be b1 7d b6 7b 15 6f ac 5f 6d 94 0c df 63 69 ac 32 77 3a 0f 2a fd 43 fe 19 ac 8b 08 38 f5 a1 9f b5 5f 28 a9 5f 0a de 98 26 08 75 50 b0 45 1f fa 48 cc cc c5 09 92 e7 65 d2 ec 1d 05 28 61 8f e8 74 de 8b eb 56 5d 72 d3 ed b7 b7 42 1b 38 09 Data Ascii: RIFF,XWEBPVP8 X0>m2H$"gnUr~JO0&p?)(}L%`Y71N1ZR<7?HU}{o_m[gVU}{o_m[gVU}{o_mci2w:C8_(_&uPEHe(atV]rB8
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 31 72 42 e6 1f 6f c7 d3 f4 32 2b 11 25 c4 a0 5a 7d 43 b1 64 bf a6 1a 31 3b 52 4a ae 07 99 a6 da 2a bb 16 8a 96 a8 a6 ff b5 cf 63 fa fa d4 ca 03 ef 1f b7 27 da c0 24 85 cd ff ec 09 44 92 a4 e1 f0 56 40 6c 1b 7f 3b 70 b7 ed cc dc 19 fa 08 44 d5 49 6a f5 bb a0 9e 60 f7 af 3f bf 3c 3e 38 b6 05 d1 e2 90 f7 e8 92 81 1b 3a 45 cd ac d8 62 25 46 47 54 78 2e c4 5b 06 d3 fd 19 a2 85 68 2a e1 53 f2 07 fa 2d c2 b7 36 26 79 53 73 73 00 23 55 b7 9a f1 5f 0e f2 c1 8d a8 0d 8e 65 9e 86 b5 e5 93 3b 4b c0 85 90 9a d0 73 c3 ab 26 17 b3 fc 12 bc d2 df 9a b4 13 36 4d f1 8f 7c 85 79 48 fa 23 db 3e 4b eb e2 bf f4 cf a6 c6 69 af 9b d7 bc 62 e9 f6 05 f6 7a 23 6e 75 57 ce 63 35 72 08 27 86 c0 0c 66 88 c4 7e 38 7c ce 48 6a 63 44 68 b0 98 04 24 c8 cf 4d ee 31 11 6d 16 07 d0 ba 6e b5 Data Ascii: 1rBo2+%Z}Cd1;RJc'$DV@l;pDIj`?<>8:Eb%FGTx.[hS-6&ySss#U_e;Ks&6M\|yH#>Kibz#nuWc5r'f~8\|HjcDh$M1mn
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: b2 a2 94 8a c6 b5 70 03 66 f2 e8 9c 8c 4b 1b fd dd f2 d2 e6 f5 7c fa 8e be 0c 08 e9 7a dc fe 00 8e f1 0e 00 f0 42 db ec 65 55 d0 5c 7c 19 78 c1 1d ac 09 6c 39 c0 5f e5 38 42 05 a0 a1 34 91 2f e6 a9 7e a5 de ff 2a 23 51 83 f7 25 7f 97 53 a6 04 f7 d7 8d 55 d9 2a 05 dc b0 0b a3 c8 08 15 fd 2e cc c9 be ca ff 8a ee a4 e5 cb d6 31 1c ab fa 1e ec cd 47 49 e8 60 e1 64 66 4d df c4 58 e8 87 de fd f9 fd 39 e9 ff 8b 22 b7 e2 cc 3b 22 64 14 61 74 66 e3 2e 09 78 fa be 7a be d4 a8 08 1d 28 33 3a 9f 21 a5 3f 77 1a 25 4e da 77 c3 a9 62 be 14 e9 f5 79 73 47 b7 ef e1 27 cb a4 24 7e 7b c3 59 a5 81 f1 68 77 ca 37 db 59 70 c3 05 80 2c 90 f5 f8 aa 23 50 20 20 3a 55 20 c1 6e 95 fe f5 7c aa e0 b0 52 56 f6 22 81 c7 34 10 28 65 f1 05 dd 79 5c 4e d7 8b d4 4e 49 e8 f0 8f 31 71 76 14 Data Ascii: pfK\|zBeU\\|xl9_8B4/~#Q%SU.1GI`dfMX9";"datf.xz(3:!?w%NwbysG'$~{Yhw7Yp,#P :U n\|RV"4(ey\NNI1qv
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: fd 0f 1a 75 30 9f 09 a7 41 a2 4c 5b 25 72 74 69 de 06 2c b2 4e c6 d0 a2 13 b0 b5 4e 69 4f 91 02 9f 98 b8 21 8d 93 de cf fa 78 9a 27 1f f2 3b f8 c4 f3 e9 a6 b0 e7 a8 61 27 a3 ec b2 a7 1e d3 0e 18 c4 78 1d 8a dd b8 c2 aa 42 88 1e 7d e5 9c 2f b2 d5 9a 26 56 74 5a 3b dd 17 c7 c6 c7 fd b6 1d 29 86 2c 9f c1 bf b6 cc 05 4d d3 fd 30 ad 06 5d 90 9e 1b a3 e7 42 22 6c 0a 75 6e d0 7b 9f 65 9c 03 d3 e8 4c d2 c9 d2 ed bc ce 64 d7 10 d7 32 59 86 4d 00 10 3b b3 55 56 0a f4 c8 89 4b 10 1d 0e c2 f7 d6 0f 97 4f f0 7c f4 0e 34 ac 88 34 5c 82 aa 3c 0f 59 c4 d4 50 53 5a e4 46 3b b3 29 33 50 d2 e2 81 9f 06 bf 32 d2 b3 8d 2a b3 af 51 49 fc de 49 90 35 60 ab a0 b4 0c a2 85 8e 7e a7 85 47 2a 8a c3 4e 36 6e b7 53 ca d7 7d 5f 21 9d ac fd b2 6f 4d 60 72 9a 7e cd e9 e6 1b d4 4e c1 61 Data Ascii: u0AL[%rti,NNiO!x';a'xB}/&VtZ;),M0]B"lun{eLd2YM;UVKO\|44\<YPSZF;)3P2QII5`~GN6nS}_!oM`r~Na
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 19 0c f5 6c 63 93 82 0f 16 b8 af b6 b1 49 c6 a8 b4 a8 7c 9d 24 4a a3 aa cc a3 be a6 61 01 be af 73 f5 32 ad 6e df af 0a ff 86 90 e1 cc 8a 6c 1f c2 7b dd 39 88 f8 16 87 f4 63 d7 c8 d3 29 9b 01 7e 07 22 e2 74 c5 24 4e 64 66 28 a8 88 3b 8c 57 3c 7b b8 04 fe 23 d3 8f 11 45 f8 a5 2a b6 98 2c 44 20 14 7a 86 83 71 4f e1 7b 91 53 2d 3a 5a 19 0a ed ef 50 3f 31 4b dd f6 8d b8 48 be 3f 9c 73 ae 49 93 72 7c 1e 8b 52 20 57 c4 ae e3 59 e1 f7 aa 11 eb 94 f3 0b 1c 0c 85 4e 78 ab eb ac df 15 c4 6a d6 86 e2 84 37 a8 ff e0 f6 dd 2f f1 3b 7d 7e 23 49 27 cc 3e 55 a7 0f e5 37 ee 28 ef 8e 31 8b 8d 19 0b 03 88 d6 07 a7 6e 47 32 fa 87 37 ec 87 09 b1 1d f4 80 74 b5 45 89 90 89 47 89 e8 9b 86 a5 eb f3 ca d2 8b 04 9a 4e 42 b7 2e ca 01 4e 9b 3c de 5b d1 22 84 9e 17 c9 98 6e 5e 8d 8b Data Ascii: lcI\|$Jas2nl{9c)~"t$Ndf(;W<{#E*,D zqO{S-:ZP?1KH?sIr\|R WYNxj7/;}~#I'>U7(1nG27tEGNB.N<["n^
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 93 19 14 03 6e 25 bb ef 9f 41 05 92 cb 3b db e7 5b 61 35 b8 14 73 b2 b5 40 38 14 e5 32 fb 8f 9c c4 b0 8c 0e 1d ae 31 00 3c c4 01 c9 94 5b f7 8b 27 1d ec bd 18 4b 49 38 cb 08 e0 c2 4e 74 4d e3 05 87 38 a6 f7 a7 6c ea 22 f2 3e 0a a4 04 75 4f b5 bc 54 e4 dc d9 45 4f 33 e1 83 39 94 38 8e ad d9 a2 da d5 d2 10 8b 9d b2 e5 70 1e c4 5d e2 a4 c3 14 78 48 e3 7c f2 a3 72 1f f6 14 93 03 bd c5 fe 1a c3 37 cd 53 78 c8 b6 eb 3c 96 4e 04 b7 e9 ac 6d ea 60 c0 9e e3 f3 fa 56 01 38 ed bb 56 af 05 25 a4 0b b9 c1 e4 32 11 87 d3 48 68 46 7c 7f ea dc ab 01 5f 64 70 18 58 61 a6 ee 3c 60 d8 fd 47 ac 3b 5f 9c e4 56 5f 98 f8 ed 3a 01 6a 62 19 25 e5 8b 37 d4 98 9c 31 87 ad 5b 6a f9 d4 0b 74 e4 4e c5 0c 17 03 76 20 a9 04 da 63 41 1c 24 ce bc 42 5f 1a 55 71 f6 c9 f3 6a e5 64 d2 9d dd Data Ascii: n%A;[a5s@821<['KI8NtM8l">uOTEO398p]xH\|r7Sx<Nm`V8V%2HhF\|_dpXa<`G;_V_:jb%71[jtNv cA$B_Uqjd
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: f5 37 cf 55 78 52 c7 a3 d9 a6 cd d7 df c7 8d a4 a2 be 24 d2 08 d0 ef 94 f9 3b 76 c6 dd 71 c9 a2 c6 81 d9 b9 17 18 cf 20 20 2a fe ee 53 3c 9d f0 70 bc 57 4d 8d 13 c2 91 43 31 b5 da af 27 6b 4d 6b e8 90 23 3a 43 f2 26 4d 92 a1 e1 aa 31 c4 a3 dc 49 ee 54 50 35 2f f1 62 90 b1 e0 0e 63 b4 ea 8c 17 27 df f6 52 d4 d8 04 96 5e a5 3a 7c 03 0e 84 c6 7a 2b 72 75 70 93 48 aa 74 71 83 86 95 73 39 5f 09 6e cd 0b 8a b6 e4 ef 96 bd 26 f6 92 33 bf 2b 7d dd df 36 fc 46 36 44 9b b7 6a 7b 34 f0 39 c4 a8 65 f5 e3 df 42 57 0d 55 3c 7b 14 1a 57 17 d1 3f 53 d7 d5 1f 90 7f 59 de 4c dc 89 15 41 59 1a 39 8f 2a e6 83 da c7 85 a4 69 a3 92 3f b4 d5 2b 2c 29 e7 a0 bd 68 42 6c bb d7 50 6f 3b 07 7d ed 46 2c bc 30 e3 97 0a 2d 1e 48 22 28 82 73 19 f4 66 59 03 e5 2f 2e c5 ff 1c 52 e2 c9 38 Data Ascii: 7UxR$;vq S<pWMC1'kMk#:C&M1ITP5/bc'R^:\|z+rupHtqs9_n&3+}6F6Dj{49eBWU<{W?SYLAY9i?+,)hBlPo;}F,0-H"(sfY/.R8
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: 85 bb 42 ed d1 03 18 6e f5 d5 96 78 12 10 7a 3d 7e c6 0e e7 14 0a ed 58 49 16 b4 37 dc 7d ff 8b b9 98 4c ff 19 5b 6b fe fa 35 09 c2 18 5d 7b 5a bc 88 d0 c5 ce d1 ff 20 62 c9 0e 7c ec 5a a5 6d fe e6 17 81 ad d0 1f 48 b4 49 ee 99 8f 2e f2 26 f0 5c 5d 93 f9 24 ec 87 81 c5 7b fb bc 98 d3 aa 76 9f 9e 59 71 11 2d a5 43 fc d2 61 a9 eb f3 c2 e3 ff 88 a7 6e df b1 43 24 e7 46 da 3b 9f d1 bd d0 7b 25 a0 c0 98 ab 2b 5f 25 9e e7 56 05 76 51 77 94 4d b6 ab 46 92 1d 8f e8 63 28 aa 57 85 57 38 1f ab e5 a6 17 b6 d9 5b 8f f4 ae 3a 37 78 07 70 86 25 74 89 83 0b 1c 60 d6 89 4f f5 54 a7 5f 70 ac 39 c6 20 57 55 28 0a de 5b 3e 36 2e dd c7 c5 9b a9 09 73 03 8b 06 1a b0 0f 4e 7b 67 93 ac 06 77 7e 98 2d 0b 21 89 a4 f0 22 84 b9 ed bf b9 3c 61 5d f4 db 80 22 04 f5 ae 19 b6 c2 3d ae Data Ascii: Bnxz=~XI7}L[k5]{Z b\|ZmHI.&\]${vYq-CanC$F;{%+_%VvQwMFc(WW8[:7xp%t`OT_p9 WU([>6.sN{gw~-!"<a]"=
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: d1 10 c9 8e 7e 49 f9 ed 30 3d 76 87 cb d2 65 41 c4 27 be 1f 75 b5 4a 65 b4 e3 0e 6c 5b 09 7b 7e 02 cb ac eb 4c 97 73 c2 f3 d3 67 1e 7c b2 1c 4b e5 07 fa e7 12 58 53 63 54 55 e8 c3 3c 82 e1 d6 22 c7 b4 27 7f 1b 8b 71 81 72 67 c1 10 8a 5e 1b aa 8f fe 54 4b 0c ac 4b 9a e7 62 6f e5 30 6b ec d1 d6 d2 7b 1a bc 5e f8 61 ca 3d 6a ca ac 70 d6 6f a7 4c f7 b2 ca e2 ea 02 e3 6f 11 b8 6d b4 16 8e 66 62 fb 87 fc d5 d5 10 8e 34 22 16 05 80 d8 67 1e 4b 77 ee 19 81 22 ca a9 38 83 76 0c 6d fc 5c eb 5d 8a 8f f9 8b 44 58 dd 47 d5 66 98 ee 18 38 02 1a 2d 7b 66 47 ef 9b 22 90 a9 fc a5 6e 20 c9 84 4a 28 d1 e6 ee 73 11 a6 33 6d c3 42 a6 6f 2e d9 bd 39 fd 33 db c6 6c 22 16 5a 26 04 b6 ae 66 a9 ec e6 b2 98 04 07 9c 08 70 b6 e4 72 4c bc 92 71 1a 5f 38 76 b5 00 54 6d e2 eb f1 e3 07 Data Ascii: ~I0=veA'uJel[{~Lsg\|KXScTU<"'qrg^TKKbo0k{^a=jpoLomfb4"gKw"8vm\]DXGf8-{fG"n J(s3mBo.93l"Z&fprLq_8vTm
2025-01-10 16:21:39 UTC	1390	IN	Data Raw: d1 8a 95 ef 60 e0 11 62 68 80 f8 7f b7 ea fc 70 8c d9 6e f5 88 4a 1d 11 e2 0c bb a3 1a 63 1b f0 cd 46 f4 1d 54 1d 69 a2 4e 07 ca e7 52 ba f5 9c f3 6e f0 ae d3 d3 c1 9d 15 dc c9 a3 cb bf ac cc ab fc e8 12 5e 31 64 0d 7e 3e ab 99 3b 7b 33 0c fe 02 db b9 cd 1b 46 80 b6 eb 20 5b 9a 71 52 68 12 73 72 0e e3 56 a0 67 48 5a 28 0a 14 34 51 86 53 84 e5 73 01 03 a2 9d 09 c5 de 1a d0 ab b7 22 c1 99 05 01 e9 67 a4 66 f9 44 81 9c 25 51 7d ce 08 75 3f 34 24 2a 2c 14 c3 ec 6e 8a 0c f8 68 34 df 9a 79 2b c6 62 40 55 e4 18 8d 77 25 af 8d 88 e1 a9 3b 66 73 cd c3 d2 cd 2e c8 18 3f b8 8e 84 cc a2 7e 18 80 b2 b7 ae 9b c6 c9 13 5f 84 58 9d e0 d6 53 61 15 42 36 1b f0 47 8b f1 6f ab 37 5d be 16 f5 b2 3b 15 25 b7 dc 49 4a a4 c4 e7 a6 65 fd 72 55 51 2a b0 39 24 86 25 98 5c 6a b0 21 Data Ascii: `bhpnJcFTiNRn^1d~>;{3F [qRhsrVgHZ(4QSs"gfD%Q}u?4$,nh4y+b@Uw%;fs.?~_XSaB6Go7];%IJerUQ9$%\j!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49941	3.130.114.26	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	663	OUT	GET /tv2track.php?action_name=Indiana%20Farm%20Bureau%20Insurance&idsite=TV-5454092718-1&rec=1&r=168345&h=11&m=21&s=34&url=https%3A%2F%2Fwww.infarmbureau.com%2F&_id=fe57b8effe7e4586&_idts=1736526094&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=912 HTTP/1.1 Host: collector-44978.us.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:39 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 10 Jan 2025 16:21:39 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 7dc4bf68-14f0-44f1-8abb-d34c643d7dae Server: nginx Content-Length: 42 Connection: Close
2025-01-10 16:21:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49950	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	2165	OUT	GET /rb_bf40802pra?type=js3&sn=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0&svrid=14&flavor=post&vi=CCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0&modifiedSince=1736364532155&rf=https%3A%2F%2Fwww.infarmbureau.com%2F&bp=3&app=9a75f8cfaaed44c6&crc=839905937&en=g7j0dusa&end=1 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:39 UTC	368	IN	HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Date: Fri, 10 Jan 2025 16:21:26 GMT Connection: close Content-Length: 6
2025-01-10 16:21:39 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49951	142.250.185.68	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	1897	OUT	GET /pagead/1p-conversion/573981699/?random=1580731553&cv=11&fst=1736526093885&bg=ffffff&guid=ON&async=1&gtm=45be5190v9195654284z876386024za201zb76386024&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.infarmbureau.com%2F&label=vlIuCIuctOIBEIOI2ZEC&hn=www.googleadservices.com&frm=0&tiba=Indiana%20Farm%20Bureau%20Insurance&value=0&npa=0&pscdl=noapi&auid=1093896691.1736526094&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBOAFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIa27ZLK2JWhHyITCK3nr-nH64oDFYWO_QcdmQEq4TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjodaHR0cHM6Ly93d3cuaW5mYXJtYnVyZWF1LmNvbS9CVkNoQUlnS2VEdkFZUXBQMjVxb2IzcnF4Y0Vpd0FrMV9mdU5rRzhtcHFoTWVNOERQel9mUXF1SGFSamZ [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.infarmbureau.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:39 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:21:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49955	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	1840	OUT	GET /images/footer/youtube.svg?sfvrsn=2a7424ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:39 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:39 GMT Last-Modified: Fri, 20 Mar 2020 04:44:46 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=youtube.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:26 GMT Connection: close Content-Length: 1204
2025-01-10 16:21:39 UTC	1204	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49956	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	1842	OUT	GET /images/footer/instagram.svg?sfvrsn=a47124ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:39 UTC	663	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:39 GMT Last-Modified: Fri, 20 Mar 2020 04:52:16 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=instagram.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:26 GMT Connection: close Content-Length: 1200
2025-01-10 16:21:39 UTC	1200	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49958	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	1847	OUT	GET /images/default-album/careers.jpg?sfvrsn=3e9d3dba_0 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:39 UTC	660	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/jpeg Expires: Thu, 10 Apr 2025 15:21:39 GMT Last-Modified: Wed, 05 Oct 2022 06:42:51 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=careers.jpg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:27 GMT Connection: close Content-Length: 151062
2025-01-10 16:21:39 UTC	15724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 22 6f 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0e 00 00 01 03 00 01 00 00 00 40 1a 00 00 01 01 03 00 01 00 00 00 80 11 00 00 02 01 03 00 03 00 00 00 b6 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0f 01 02 00 06 00 00 00 bc 00 00 00 10 01 02 00 15 00 00 00 c2 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 d7 00 00 00 1b 01 05 00 01 00 00 00 df 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 24 00 00 00 e7 00 00 00 32 01 02 00 14 00 00 00 0b 01 00 00 69 87 04 00 01 00 00 00 20 01 00 00 80 03 00 00 08 00 08 00 08 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 35 44 20 4d 61 72 6b 20 49 56 00 48 00 00 00 01 00 00 00 48 00 Data Ascii: JFIF,,"oExifII*@(1$2i CanonCanon EOS 5D Mark IVHH
2025-01-10 16:21:39 UTC	660	IN	Data Raw: cd 6b a3 77 d0 ea 86 bd a9 b8 2b 36 9a 0c 18 f9 23 dd 82 3f 1c e3 1c f6 02 bd 17 0c 35 1a 51 8d 3d fc b4 4b f0 3b 30 75 73 7a f8 ea af 13 4e 30 a4 9d a3 ad e7 2b 3f 8b 49 35 67 ae 96 4d 69 be e5 ef 09 da df ea 76 3a 86 ae 15 21 8b 4e 80 ca d0 c8 4b 19 39 e0 0f 4c f3 58 d4 c6 e0 30 aa 9c 2b 26 e7 52 5c aa dd 34 bd df cf 43 a6 b5 2c c2 78 85 ec 5a 50 4a ee ea fc de f5 9a f2 d3 5f 9f 52 93 eb 77 b3 6a 30 79 ad 15 ad b0 60 27 92 59 09 c0 cf 5a ca ad 68 d2 83 94 b4 3b 7f 75 1d 64 ec 8e 7f c4 5a 1d 97 88 6f 9b 52 68 89 62 0a a8 13 15 0e b9 e3 b1 c5 7a f9 7e 75 88 c2 d0 b5 25 74 fa 9f 39 9b f0 c6 59 9e 62 21 5a ac 9b e5 e9 b2 7a ff 00 5e a3 6e 97 76 96 34 8d 43 c3 36 53 da e3 6f 95 21 dc 3f 1c 8e 6b 82 b5 59 d7 94 a5 3d 5b dc f7 68 61 68 61 a9 46 9d 38 a4 a3 6b Data Ascii: kw+6#?5Q=K;0uszN0+?I5gMiv:!NK9LX0+&R\4C,xZPJ_Rwj0y`'YZh;udZoRhbz~u%t9Yb!Zz^nv4C6So!?kY=[hahaF8k
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: 6d 3c 49 7b 3f d9 e1 80 c8 2d e3 98 af 9e 73 80 be c3 b9 fa 62 bc 3e 20 cc aa 65 98 17 52 9e ed ef 6b 9a d2 a4 a7 35 7f 97 e2 7b 1a f8 07 c2 f6 1e 45 9e 8d a3 c3 6e b0 0e 63 8c 74 18 ff 00 3c d7 8d c2 b9 ae 63 98 ce a4 6b 37 28 2d 9b 2f 17 08 c2 d6 dc b9 1d 9c 3a 44 07 32 c2 b1 37 25 b7 60 a9 3f a5 7b 99 86 1a b3 c3 54 a8 9b 94 d2 7c ab a2 d3 b1 8d 39 c1 c9 5b 6e a5 77 b7 bf bc 98 69 ba 74 ff 00 be ba 3f bb e3 77 e2 07 7e d5 f8 8f 85 98 ee 27 a9 c4 58 88 e3 5c 9c 25 7d 1f 4b 3f c3 b1 ee e6 d0 c2 ac 3c 79 2d 72 c6 95 e0 eb 3f 07 4d 71 f6 a7 b8 b8 bd 50 0b 49 30 cc b9 3f dd 1f c2 31 e9 5f d0 6d ab 6a 7c f3 76 95 ad 63 40 e8 d7 6d 0c d2 cb 7a 62 47 8f f7 4b 1f 0c 99 1c e5 bb 9f 7f 6a 1a 95 89 8c a2 9f 2f f5 fd 79 92 69 d7 16 ff 00 61 8a d2 d2 22 f2 47 18 dd Data Ascii: m<I{?-sb> eRk5{Enct<ck7(-/:D27%`?{T\|9[nwit?w~'X\%}K?<y-r?MqPI0?1_mj\|vc@mzbGKj/yia"G
2025-01-10 16:21:39 UTC	15621	IN	Data Raw: 3b 24 37 97 d3 2f 9b 30 52 4b 95 50 a3 9f 60 06 05 6b 53 11 5a ad 28 53 9c af 18 7c 2b a2 bb bb ff 00 82 f7 3c fc 1e 4d 96 60 71 d8 8c 6e 1e 92 8d 5c 43 4e a4 f5 72 97 2c 54 62 9b 6d d9 46 2a ca 2a d1 5a b4 ae db 7a 6d 62 43 33 33 6c 5c 67 6a 9e 4e 3a 56 5a 23 d0 bd d8 dd 44 6a 51 e9 c9 73 a7 58 b3 3e 08 75 3d 40 f5 02 be 47 3a e1 ba 39 86 21 62 5b 6e db a2 de 26 b5 28 5a 0b 53 8d d4 3c 79 a2 f8 57 c4 16 9e 15 f1 2f 8a b4 fb 2d 5b 5b 2e ba 2e 9b 7d 7a 89 2d dc aa 8c db 23 46 39 66 da ac 40 1c 90 a7 15 f2 5c 4f 82 cc 2b d3 a1 84 a1 75 17 ae fd 17 5b 5c f5 72 0c bf 17 59 4f 13 38 be 44 d2 6f a2 d5 6e ff 00 03 e7 49 7c 59 04 57 77 3f 06 3c 4d e1 89 9e 6b d3 79 72 75 3b 78 d4 5b c8 e1 fc c0 65 19 dc 25 6d f2 21 6d a4 3a a4 79 20 af cd e8 27 46 38 58 d0 51 e5 Data Ascii: ;$7/0RKP`kSZ(S\|+<M`qn\CNr,TbmF**ZzmbC33l\gjN:VZ#DjQsX>u=@G:9!b[n&(ZS<yW/-[[..}z-#F9f@\O+u[\rYO8DonI\|YWw?<Mkyru;x[e%m!m:y 'F8XQ
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: e9 df 08 74 58 fe 19 78 a6 0b eb 6b dd 1a 21 6d 22 c9 69 24 80 84 67 41 b6 4c 36 ef bb 8e bc 7b d7 9f 88 a3 5b 11 53 da d3 b3 e6 d5 dd f2 bb fd da 93 4f 19 47 2d a4 b0 f5 2e b9 74 d3 6f 2e b7 da c7 eb b5 ad c1 fe c6 d6 ce 7e ec b8 e0 75 f9 cd 7e cf f6 8f c3 3e c2 3d 7b e1 bc 37 37 5f 0f 74 a3 0a 2b ff 00 a2 29 20 8a b8 6d 63 66 9b 89 f0 97 fc 15 8f fe 09 b4 9f 11 ad 2f bf 68 7f 84 7a 14 77 3a 9d 8d ab 49 ad f8 63 c8 2d 1d eb 7c a0 ca 8a a3 39 65 1b 64 0b f3 15 76 61 f3 01 51 2a 49 be 68 2d 7a f9 f4 fb d7 f5 d6 fb d3 ad 78 7b 2a 9b 24 ed ad bc ec f7 d1 ea 93 b7 5f 4b 7e 64 7c 34 fd af ff 00 69 8f d8 27 4a 9a cf e1 a2 69 9e 25 f8 7f 6f 7d 25 ea f8 77 c4 f6 f2 3b 58 33 10 26 4b 7b 88 8a 49 01 63 8d db 4b 46 48 dd b4 9d c0 72 d5 ca f0 39 9b 4e b4 5a 9a d2 e9 Data Ascii: tXxk!m"i$gAL6{[SOG-.to.~u~>={77_t+) mcf/hzw:Ic-\|9edvaQIh-zx{$_K~d\|4i'Ji%o}%w;X3&K{IcKFHr9NZ
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: e0 71 2d bc 65 7c d6 5c 86 7c 03 bc 57 81 2c be ac 70 b5 ea 53 8f b9 16 bc fa db f0 5f f0 4f 62 8e 3a 97 b7 a3 0a 8f df 92 6b ef d5 7e 47 d9 ba 57 8a 5d ec a5 d3 af 2d 97 cc 84 15 04 63 24 01 5c f4 2b 4a 5a 34 7a 55 e8 c5 4a f7 dc f8 ff 00 f6 c4 7f 13 ea de 09 f1 35 96 83 a7 eb 52 59 99 de 5b ed 3b 4e 59 4a 5c 6d 3b 8b 32 47 c1 00 01 d7 d3 da ba 29 bc 4b 52 50 ba 8b fb bf e0 fc ce ba 9e c5 46 32 95 9c ad bf 5b 76 fe bf 13 e1 29 35 07 f0 47 c2 ed 4f c6 7e 22 92 3d 16 1b 18 83 da 3d e4 66 22 42 36 51 80 6c 70 5f a7 af 15 32 85 5a d8 a8 42 92 bc 9d ac b7 7b 9c aa a5 29 60 a7 39 49 28 59 dd df 6e e7 e8 4f ec 3f ff 00 05 99 fd 97 3f 6f 0f 8b 3a b7 c3 9f 05 5b 6a fa 1e bf a5 da 0b 8d 1b 4c f1 12 c5 19 d6 22 31 a9 b9 96 df 6c 8d b9 e3 7d c3 cb 38 7f 2f e7 19 05 Data Ascii: q-e\|\\|W,pS_Ob:k~GW]-c$\+JZ4zUJ5RY[;NYJ\m;2G)KRPF2[v)5GO~"==f"B6Qlp_2ZB{)`9I(YnO??o:[jL"1l}8/
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: ec 46 40 de 62 08 26 0a d9 57 86 40 c8 eb bd 1d 58 13 5f 55 80 ce b1 ff 00 54 6e a5 47 52 9c be 28 49 b9 26 96 eb 5b d9 f6 6a cd 3d 53 3c 3c c3 2e c3 43 12 a9 c2 1c 92 8e aa 4b 46 9d b4 7a 68 d7 74 ef 73 e3 bf 8e 7a c6 b7 a2 7c 4c d2 3e 24 69 f1 49 6f 61 e3 df 0c cb 3d d6 9c 98 2b 67 ad 5b 3a 59 ea 10 0c f2 36 3c 70 82 33 f7 95 cf 73 5f 37 9c e0 fe af 89 74 d6 b6 7a 3e eb 74 d7 ac 6c fe 67 d3 60 b1 ef 17 95 51 aa f4 94 5c a3 2f fd 29 27 77 d2 7e d1 7c be 47 e8 5f fc 13 8f 5c f1 d7 c6 af 84 1a 27 c6 df 8c 5a 1e 99 75 3f 86 e2 7d 17 c0 da c3 da 11 7d 24 29 1a c1 77 3b 49 bb 69 04 af 90 0a aa 92 63 9b 39 dd 9a e4 e1 2e 19 c2 65 b8 ba f8 fa 6e 4b da 68 a2 fe 15 ad dc 92 b5 ef af 2a d7 45 74 7c e7 11 62 f9 5c 70 b1 7e 72 d6 fa db 45 fa bf 91 f0 87 fc 15 cf f6 Data Ascii: F@b&W@X_UTnGR(I&[j=S<<.CKFzhtsz\|L>$iIoa=+g[:Y6<p3s_7tz>tlg`Q\/)'w~\|G_\'Zu?}}$)w;Iic9.enKh*Et\|b\p~rE
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: ea ee b7 b3 62 2d d3 fe 7a 4a 78 07 dc 2f 27 eb b7 d2 ae 29 a5 a1 7c d6 8b 45 86 46 b7 d3 23 8b 6e 19 db 7e 00 07 d3 fa 52 7a c9 91 1b ab 19 ad 6f 1a b1 f3 0b f2 73 8d a3 8e 07 a8 a0 d5 34 be 2b 9f 41 f8 af c0 9a 76 8b e0 f9 a6 d2 6c 09 7b 7c 48 c9 08 f9 dc 74 38 27 a9 e7 3f 85 71 c6 29 6d a0 4a 36 8d cf 26 f1 9e 83 ac eb 9a 2d ee 9d a7 78 92 e2 c2 67 b7 65 b7 bd 8f 83 13 81 f2 37 20 e7 91 c8 c7 4a d6 12 8c 66 9c 95 cc ac 60 f8 ab 5e d1 f4 5b fd 2d 75 14 75 8b 58 d5 c6 9d 61 b0 70 b2 98 66 94 17 39 e0 11 13 0f a9 1e f5 a5 3a 73 9c 65 6f b2 ae fe f4 bf 52 65 35 17 15 d6 5f a2 6f f4 2d a4 04 ca a9 1a 82 e5 f8 5e ca 3f c7 34 95 83 a5 ce 07 e3 b6 b3 a2 7c 24 f0 15 d6 8b e1 d6 30 de f8 93 57 69 2e 65 f3 b2 ef 34 ee 03 be 4f 38 03 00 0e ca a0 0c 62 9d 57 3a f6 Data Ascii: b-zJx/')\|EF#n~Rzos4+Avl{\|Ht8'?q)mJ6&-xge7 Jf`^[-uuXapf9:seoRe5_o-^?4\|$0Wi.e4O8bW:
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: d8 f8 8b 55 d5 5e 2b 9b 0b 8b 26 02 e6 38 11 b7 28 25 93 e4 91 8a 30 3b 37 6e 2c 40 07 f8 7e 62 8c 65 4e 9c a8 ab cb fb cf 7d 2d ab 7d 64 fa f9 dc fd 4e 18 da 39 ae 1e 38 c8 c1 41 a7 f0 a5 a5 db bb 51 4b 68 24 f4 f2 39 af 83 1f f0 4f bf db 3f f6 80 f1 46 a5 a7 a7 81 b5 7d 13 43 d4 a6 8f ed 33 9b 09 f4 fb 29 37 02 19 65 91 87 9d 32 2a e3 28 32 9c 1f 93 26 a9 e1 f1 34 69 29 ca 1e ce 3d 5b ba 7f 86 bf 72 b9 c7 5b 19 81 a7 39 73 d5 4d df 64 d7 fc 17 e9 76 8f dc 3f d9 27 f6 70 f0 cf ec 89 fb 35 78 6b e0 c7 85 66 5b ab 7f 0e e9 03 ed 9a 8a 42 50 de dc 95 dd 34 e5 4e 48 05 b8 00 e4 aa 2a 8f e1 af a9 9e 2e 86 5d 93 4b 11 47 de 8c 21 29 27 de c9 b6 fe 7b 9f 9a e3 eb d5 cd 73 47 3a 8a dc cd 24 b7 b2 d9 2f f3 f3 6c e1 bc 1a cf 2c 32 ea 78 c1 d9 e5 c4 ed d7 d5 8f e7 Data Ascii: U^+&8(%0;7n,@~beN}-}dN98AQKh$9O?F}C3)7e2(2&4i)=[r[9sMdv?'p5xkf[BP4NH.]KG!)'{sG:$/l,2x
2025-01-10 16:21:39 UTC	16384	IN	Data Raw: a2 d4 a1 d4 9b 4f 13 25 9e af a4 4b 65 71 0c 70 dc 79 12 87 8e 55 56 4c 3b a9 19 e1 81 52 09 1c 8c aa 50 97 32 e6 69 f2 b4 f4 b3 57 d7 f3 f2 23 db 46 71 f7 7a ae ba 3e cf 4d d3 bf 46 7d 13 f0 c0 5c cd e3 ed 24 f8 47 54 b4 8a e3 54 92 16 d2 26 f2 4c a8 f3 b0 58 cd cc 9b 4e 1a 20 a6 dd 47 23 23 23 3c 8a e8 ab ed 3d 84 b9 7e 25 7b 5f 6b f4 fc 6f 73 89 38 3a b6 7a a7 db aa eb af a6 88 fb 61 7e 0f f8 2d a2 48 ef 20 b9 9e 55 40 24 98 5d 32 6f 6c 72 70 0e 06 4f 61 59 a9 49 2b 5c c1 d2 83 63 26 f8 3f f0 f6 18 9a 77 d3 2e 58 22 93 c5 ec 9f e3 54 a5 21 3a 51 4a e7 9f fc 6d f8 5f 36 81 e0 d9 a7 f0 0d ed dd 96 a4 22 79 5e 73 38 95 61 0c 36 a0 da e0 82 03 91 fa d7 26 3e be 22 95 0e 6a 7b ad fd 3f e1 ce ac 05 0a 13 c4 72 d5 d5 3f 96 bf 2f 99 f3 cf 8c be 3e ea bf 0c ff Data Ascii: O%KeqpyUVL;RP2iW#Fqz>MF}\$GTT&LXN G###<=~%{_kos8:za~-H U@$]2olrpOaYI+\c&?w.X"T!:QJm_6"y^s8a6&>"j{?r?/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49957	198.179.10.12	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	1857	OUT	GET /images/life-insurance-matters/business.svg?sfvrsn=56e924ba_2 HTTP/1.1 Host: www.infarmbureau.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS015719ff=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; TS011ab345=01d11574818dfc6e8e0a882e5b8aa9bfd707ba6b09186d6a1eeaddfabefbc49f15f1373e751d1046d92fdf34b32d1d3d508a555125; dtCookie=v_4_srv_14_sn_ADDCA28A497E0D0EEAF7B9B1445A417E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_app-3A9a75f8cfaaed44c6_1_app-3A942c88b88c5d9d9b_1_rcs-3Acss_0; TS013a8a7c=01d1157481fd300a7db587a84ce63c9e4d6bdf75d0ef60ead141d5e07b90ffdd5d3dd78263b9e2b1be87af8f4f4733dc5eb233cf7dce58ab823bf659f1a43f31331fbcc53e; rxVisitor=1736526087891QQKRDVJAOBMBIKTMESFKPGH9NR57RG87; dtPC=14$126087888_342h1vCCHJMVPMKDKOAQIGSJDKFPAVAEJPHRQQ-0e0; dtSa=-; rxvt=1736527887901\|1736526087892; sf-data-intell-subject=1736526089616-d9b1359c-11c6-423f-929b-308ef1ccc273; sf-ins-ssid=1736526089653-98fa592e-328f-48e2-8e2d-0575b0c1101e; sf-ins-pv-id=cadf628e-f9c7-407d-a58f-a63453e124a8; sf-prs-ss=638721228914060000; sf-prs-lu=https://www.infarmbureau.com/; _gcl_au=1.1.1093896691.1736526094; _ga [TRUNCATED]
2025-01-10 16:21:39 UTC	640	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000 Content-Type: image/svg+xml Expires: Thu, 10 Apr 2025 15:21:39 GMT Last-Modified: Fri, 02 Aug 2019 01:53:38 GMT X-Frame-Options: SAMEORIGIN Content-Disposition: inline; filename=business.svg X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin Expect-CT: max-age=86400, enforce Server-Timing: dtSInfo;desc="1" Date: Fri, 10 Jan 2025 16:21:27 GMT Connection: close Content-Length: 2251
2025-01-10 16:21:39 UTC	2251	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 70 78 22 20 68 65 69 67 68 74 3d 22 35 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 43 54 41 2f 49 74 65 6d 20 43 6f 70 79 20 35 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 64 65 73 63 3e 43 72 65 61 74 65 64 20 77 69 74 68 20 53 6b 65 74 63 68 2e 3c 2f 64 65 73 63 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56px" height="50px" viewBox="0 0 56 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>CTA/Item Copy 5</title> <desc>Created with Sketch.</desc>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49952	142.250.184.238	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:21:39 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 10 Jan 2025 16:21:39 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49953	142.250.185.206	443	3912	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:21:39 UTC	925	OUT	GET /generate_204?ZWhcnQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/MZTWt2RchgA?si=HKINckeaxQd72d0U&enablejsapi=1&version=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=amQr2hY_VW4; VISITOR_INFO1_LIVE=8nTEpSF1n0s; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgVQ%3D%3D; __Secure-ROLLOUT_TOKEN=CPnK4_Xl7IqKeBCg7fLnx-uKAxig7fLnx-uKAw%3D%3D
2025-01-10 16:21:39 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 16:21:39 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	11:21:14
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:21:16
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:21:23
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://infarmbureau.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:21:37
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3264 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	11:21:37
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4304 --field-trial-handle=2024,i,14275824576735172849,9539710877787033283,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x800000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://infarmbureau.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Windows Analysis Report
http://infarmbureau.com