Edit tour

Windows Analysis Report
http://yourexcellency.activehosted.com

Overview

General Information

Sample URL:	http://yourexcellency.activehosted.com
Analysis ID:	1591024
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2844 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1996,i,306823133635020388,6881046364661103510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3240 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://yourexcellency.activehosted.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin

Joe Sandbox AI: Score: 7 Reasons: The brand 'ActiveCampaign' is known and associated with the domain 'activecampaign.com'., The URL 'yourexcellency.activehosted.com' uses a subdomain of 'activehosted.com', which is not the primary domain of ActiveCampaign., The domain 'activehosted.com' could be a legitimate service or hosting provider used by ActiveCampaign, but it is not the main domain., The presence of input fields for 'Username / Email' and 'Password' on a non-primary domain raises suspicion., The URL does not contain obvious misspellings or unusual characters, but the use of a subdomain could be a tactic to mislead users. DOM: 2.12.pages.csv

Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: Number of links: 0
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Number of links: 0

Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin

HTTP Parser: Base64 decoded: UQUWRXUS

Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Form action: login.php

Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=2&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=2&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=2&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=1&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=1&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=1&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=1&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=2&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=2&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=2&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=1&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=1&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=1&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=2&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: Iframe src: https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js&async=true&id=forethought-widget-embed-script&emit-tracking-events=true&data-api-key=2310ff96-9b16-4a77-9601-827429c9507c&data-ft-workflow-tag=login&data-ft-originatingdomain=yourexcellency.activehosted.com&data-ft-randomizer=2&config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language&data-ft-embed-script-language=en-US

Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: <input type="password" .../> found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: <input type="password" .../> found

Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No favicon
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No favicon
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No favicon
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No favicon

Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="author".. found

Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found
Source: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.8:49871 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ
Source: global traffic	HTTP traffic detected: GET /admin/css/camp-colors.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/css/skin.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/css/animations.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/css/header.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yourexcellency.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-migrate/3.5.2/jquery-migrate.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yourexcellency.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jqueryui/1.13.2/jquery-ui.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yourexcellency.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/footer.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/css/skin2.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /ajax/libs/css-vars-ponyfill/2.4.9/css-vars-ponyfill.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yourexcellency.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/logo.png HTTP/1.1Host: d3rxaij56vjege.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/content.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-migrate/3.5.2/jquery-migrate.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/css-vars-ponyfill/2.4.9/css-vars-ponyfill.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ac_global/fontello/css/ac-icons.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/style.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jqueryui/1.13.2/jquery-ui.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/default.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /node_modules/@activecampaign/camp-core-css/dist/build.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /media/logo.png HTTP/1.1Host: d3rxaij56vjege.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/css_camp.min.css?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/csrf_protection.js HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/csrf_protection.js HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/EHawkTalon6.js HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v1027121471506941 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/ac-pendo.js HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/EHawkTalon6.js HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/js/ac-pendo.js HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /ac-frontend/maestro/assets/zendesk-widget.js HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo.js HTTP/1.1Host: cdn.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dh5u5fb9y_funnel.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bvkaul0w_wavehand.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vxd0ariod_gift.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ckke9g3gf_browserwindowapp.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gpcxgatc_buttonctaclick.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jhynp592_idcard.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ekr/snippet.js?key=dcd5b484-abf6-47e3-adad-bc7b7da716c4 HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo.js HTTP/1.1Host: cdn.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ac-frontend/maestro/assets/zendesk-widget.js HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dh5u5fb9y_funnel.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bvkaul0w_wavehand.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vxd0ariod_gift.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ckke9g3gf_browserwindowapp.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jhynp592_idcard.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gpcxgatc_buttonctaclick.png HTTP/1.1Host: d226aj4ao1t61q.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/dcd5b484-abf6-47e3-adad-bc7b7da716c4 HTTP/1.1Host: ekr.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ekr/snippet.js?key=dcd5b484-abf6-47e3-adad-bc7b7da716c4 HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-main-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/dcd5b484-abf6-47e3-adad-bc7b7da716c4 HTTP/1.1Host: ekr.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?v=2 HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-9606-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-7437-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-3190-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-8173-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-2229-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-main-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.64e6aab4.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-8173-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-7437-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-3190-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-2229-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/messaging/custom_ticket_fields HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/messenger/latest/web-widget-9606-b6408d4.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/messaging/custom_ticket_fields HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /static/js/polyfill-with-resolvers.42c0e97c.chunk.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.64e6aab4.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; __cf_bm=tamrwo5Eq.3InBVnF0QuLP9vWPNbbHzmKvQsLXvdbek-1736868040-1.0.1.1-6n_pNJwX0wr5ST5qi8PV1Kz7NN.F1f1A59XxyTpk.tZXLsMv88ZB_UZtVeIqJRR2bziLxulCPA4STyDiBlhAlQ; _cfuvid=0AiPqD1wZQmJm_5H5tZ3g0A0r3owFlAq2BOlaJg9Ylo-1736868040729-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /static/js/polyfill-with-resolvers.42c0e97c.chunk.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/647.38ef54d4.chunk.css HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/621.d916e3cb.chunk.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/647.f82da89b.chunk.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/647.f82da89b.chunk.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj8FKAzEQQP9lznWTrLbi3gR7sAcV1HoMQzK0gd3Jkp0sltJ_byKlJ9FbCPPevDlCTj10sBcZp06pQ8yJvh31PbE7NOgkzLSPk5BvXBwU-iGwggUMJOhRELojzGEKElN9Bl9k9m398vRqP-x2XsfN18P9aisF6ZF3GXdUJojt5zucFoDOxcxyRY3R-tYsb8YUfS7LIxeQcajQP21VN2IilsertHyVyAqbO6WNanW7LMKZ0lTVHbRNu9KNsXVfFVxOef7jjEvyz8gvuaczJGNvtQ&ct=1736868042046&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFjjFPwzAQhf_LzW1sB1pENiQ6wABIQBitk31qLTl25JwjKpT_XpshLAg26_y9974vmN3kOKYHCx3ol8PT_bN-0_18iI8ftzf7nmEDaEzMgb8RpaS8UrvtmKLNhl0MBcjJl68T8zh1QpxjTvRpyHsK5txgoWY6xYnJNiYOAu3ggiix6G3_sx6y9xsYiNEiI3SrWn26P_Q8hmPGIxWCgn5_hWVVXqO_agccaugf31o3YqLAd2tpORXJGlbXQirRynZXCmdKU63uoG3avWyUrnuwLBe3O3b2&v=2.260.1_prod&ct=1736868042051 HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1736868042054&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/621.d916e3cb.chunk.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/favicon.ico HTTP/1.1Host: d3rxaij56vjege.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868042801&jzb=eJzNUstu2zAQ_BeeXYkP2ZZ8a-HAdVC0Aeqkh6IgGJKxCUikQlJ25MD_nmXiqClQuD0ESHSSNDuzs7P78x7FvtVohozSNpqbHo3QtXe7oD2PpgGETNmknJS4oJhNR2hrgonOc6OAxC_Ovs6_8RW_2p658x_VdHIVQUBI6Tobn2oIwZiR8YfWO9XJaJyFis7XAG1ibMMsz3vXeX0ndV1rK_tMQNVWb1yIWmXSNblQjbE50ECjDWh2j1yt-P84SXUv3diurl9nhgO4ER4yW4nr5aAcnz7QrpnvFvvL1aJfLvr5LQPBGy8a_QgS5_erJfs8XrP2S_WpADDo2w5mh7gx5N9HDVMWmB1Gw34aHcWp3RRAfB-7ObpIr6eM1MKuO7FOs2nLL7-nRI_mBupf_VnIEbB_GPu9oI-DKPxSIiYyKXJMcorpGAS32ockPUM0oxOcEZ76vfqGQ2ryCM8LeRE3Moi7lp57L_84ADIcwBjjFwdQO6FOHgB9LweQnD77Y2U1zWj1_JTlG6UK4RxTZbQ6_HoAhnSdxg HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1Host: o185886.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1736868042054&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj8FKAzEQQP9lznWTrLbi3gR7sAcV1HoMQzK0gd3Jkp0sltJ_byKlJ9FbCPPevDlCTj10sBcZp06pQ8yJvh31PbE7NOgkzLSPk5BvXBwU-iGwggUMJOhRELojzGEKElN9Bl9k9m398vRqP-x2XsfN18P9aisF6ZF3GXdUJojt5zucFoDOxcxyRY3R-tYsb8YUfS7LIxeQcajQP21VN2IilsertHyVyAqbO6WNanW7LMKZ0lTVHbRNu9KNsXVfFVxOef7jjEvyz8gvuaczJGNvtQ&ct=1736868042046&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFjjFPwzAQhf_LzW1sB1pENiQ6wABIQBitk31qLTl25JwjKpT_XpshLAg26_y9974vmN3kOKYHCx3ol8PT_bN-0_18iI8ftzf7nmEDaEzMgb8RpaS8UrvtmKLNhl0MBcjJl68T8zh1QpxjTvRpyHsK5txgoWY6xYnJNiYOAu3ggiix6G3_sx6y9xsYiNEiI3SrWn26P_Q8hmPGIxWCgn5_hWVVXqO_agccaugf31o3YqLAd2tpORXJGlbXQirRynZXCmdKU63uoG3avWyUrnuwLBe3O3b2&v=2.260.1_prod&ct=1736868042051 HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/favicon.ico HTTP/1.1Host: d3rxaij56vjege.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/rec/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJxdkN1S8jAQhu8lx5W2lt-eiUWsMsLYiAeO0wlpgI5pUvIDX2C4d7bg8DmcpbtPd599D8i4mqEYKUalKkqxQh7alro0UqUF1PPZ6C2Z5jifb0fy5XPQ684NIIRSaYU5I2EYBFHYuauVLCw1pRQALJTcaaZwWcH0sBd1-91-0L7vB6GHfph7UqRpLAnXzEOcaPN6LQbef5vzAi4bq2stY1rDkj8tqzi818bUOvZ9J61i_yjjnAnqWgSUtmwttWFFi8rKJ0VVCh9-03aBL9ffbJgRxyWB-V_fQLGNhUE3Yr_IY5PCuQPX1xrFB0CIhghiNE-zFE_f8yTNHoaTUYKOQBHFhMFk0dgLy7mHzOUD7apkN95_4LFLxy7ZRCC0bAK5ZCzVHqfRc2cV1ZPBsI2OJ9ookpI&ct=1736868042802&v=2.260.1_prod&recordingId=log HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868042801&jzb=eJzNUstu2zAQ_BeeXYkP2ZZ8a-HAdVC0Aeqkh6IgGJKxCUikQlJ25MD_nmXiqClQuD0ESHSSNDuzs7P78x7FvtVohozSNpqbHo3QtXe7oD2PpgGETNmknJS4oJhNR2hrgonOc6OAxC_Ovs6_8RW_2p658x_VdHIVQUBI6Tobn2oIwZiR8YfWO9XJaJyFis7XAG1ibMMsz3vXeX0ndV1rK_tMQNVWb1yIWmXSNblQjbE50ECjDWh2j1yt-P84SXUv3diurl9nhgO4ER4yW4nr5aAcnz7QrpnvFvvL1aJfLvr5LQPBGy8a_QgS5_erJfs8XrP2S_WpADDo2w5mh7gx5N9HDVMWmB1Gw34aHcWp3RRAfB-7ObpIr6eM1MKuO7FOs2nLL7-nRI_mBupf_VnIEbB_GPu9oI-DKPxSIiYyKXJMcorpGAS32ockPUM0oxOcEZ76vfqGQ2ryCM8LeRE3Moi7lp57L_84ADIcwBjjFwdQO6FOHgB9LweQnD77Y2U1zWj1_JTlG6UK4RxTZbQ6_HoAhnSdxg HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /workflow/widget-config HTTP/1.1Host: solve-api.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /08f2ced6-ee5d-45e3-a248-5828d7d63950.png HTTP/1.1Host: d3tnn7lar6ozas.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://solve-widget.forethought.ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /08f2ced6-ee5d-45e3-a248-5828d7d63950.png HTTP/1.1Host: d3tnn7lar6ozas.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/index.php?error_mesg=invalidlogin HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://yourexcellency.activehosted.com/admin/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
Source: global traffic	HTTP traffic detected: GET /admin/css/camp-colors.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/css/skin.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/css/animations.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/css/header.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/css/footer.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/css/skin2.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868047249&jzb=eJztlGtP4zwQhf9KlM8NbZrQFr6shApsES8gVFitWBQ5jpNa60twJm3Cqv-dSQIl3Fa8CARa1VIv9ox9zvjyXPyxoUyZvW3HmuaZ3bFDoxcZMwFwicPu0BuMBqOeP-gNhx17zjMO2gQ8whnBye7R-DiYBufzXX3wY2s4OAdcgFCqcwVNjuv2ep676aRGRzkFrhVm5EZgaAaQZtvdbqlzwwrKhGCKlhsEs-ZspjNg0QbVsksiyVUXp-EaaWZvo2NiEgbNvwRXmhydnE0xoVbEXyowDX0EYQ6gldX8BKKaZhEBrhUbnszAUlriGK88AQeB9apcCCwBwDRKzd5keSh5VduciLwaONS3s0jIVcQKHPLtZceW5aTpeuhixkV023UxtUDHlbuUGKZgVzB5X8F4cv6cf1HJOEIvmLFo_JLLtu7WQ13_ebm949P_7vRQI8jxwFe6r5HBq9CWwWr_b1VBqIvXKOHOtZV6b1PCj4nqGt9fsBGhWgHhqrWPD_Tb4Y_d3ViwwqFaWDE3GVjNFUqJYlaYOJoy8uJtf7dtry0gRixJCmfGbp-aszAkfT_tnePxzyfidbWv0eg_ep_LVbtTm5Jwgms3S-A7rzr2Qo4X-9dn0_1ysl-OrzyUig2RrA662lxPJ973zcRLD7d2fAxmLMuQeXV47NMTmNGMFGn_wBhah69yhB46xTMOS2Bo0_Xd4bKzQg8VnP7-G5ZHWMoay2ssr7G8xvI_i2XErCAJZl_YgsVgX34Wp_Hlrjjt-S1Or1j0MqhHXxXUH8CdBqu_lIWt_f24_3i0anvaJBq-PU17Lvlp75RJJkNEsyytqhKF515nvAHyaxyucfglcfgZ7Nu8Z19_0F9e3gD21zjn HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "b6ffcf9edf281e009b6d8a4f00545f6a"If-Modified-Since: Tue, 09 Aug 2022 18:56:35 GMT
Source: global traffic	HTTP traffic detected: GET /admin/css/content.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /ac_global/fontello/css/ac-icons.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1Host: o185886.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/style.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/css/default.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /node_modules/@activecampaign/camp-core-css/dist/build.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/css/css_camp.min.css?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/csrf_protection.js HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "1132611470"If-Modified-Since: Mon, 13 Jan 2025 21:19:34 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v102712424104756 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /ac-frontend/maestro/assets/zendesk-widget.js HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "d585776b166fe428bbe3201bb1138a61"If-Modified-Since: Thu, 09 Jan 2025 18:09:36 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo.js HTTP/1.1Host: cdn.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"e37ed4ad65fb15ce38322a0172d73f51"If-Modified-Since: Mon, 13 Jan 2025 22:12:24 GMT
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /ac_global/fontello/font/ac-icons.woff2?9608958 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yourexcellency.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v102712424104756Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; __cf_bm=tamrwo5Eq.3InBVnF0QuLP9vWPNbbHzmKvQsLXvdbek-1736868040-1.0.1.1-6n_pNJwX0wr5ST5qi8PV1Kz7NN.F1f1A59XxyTpk.tZXLsMv88ZB_UZtVeIqJRR2bziLxulCPA4STyDiBlhAlQ; _cfuvid=0AiPqD1wZQmJm_5H5tZ3g0A0r3owFlAq2BOlaJg9Ylo-1736868040729-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /?v=2 HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "7e6bfae3cfedc1972297e3b418672be0"
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868054879&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868054881 HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1Host: o185886.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868055584&jzb=eJw1kF9v4jAQxL-Ln2kSE_IHpKovQQge7qgOqKrqFBl7S6xz7GA7CSniu7MNV795f7PjGX9ciR8aIAuiDBNkQo7W9A5s6WWNU5rFaZ7mUTLLs2RCOumkN7aUAhfK7fJX8bvclYduaTZv8yw9eDRgnJtW-4eG0iiKafLUWCNa7qXRqGitQlR537hFGA6mtXDhoBRoPgQMVR1UxnkQATd1yEQtdSi1gEvQVM0LWIsJanCnZ6k7pqRQ5iS_ffGRxpHFdazyv0CWJ3Ewnf-cPL-hjlnQfseOa4yoW6UmxD8upK-LfvW1362G9WoozjG6flpWwwjj17Tv_sz27_9ER2mWIHTgHJYacTHjW19xxy7NdGMtH_G5xVaYI8KfHTxgvDilt793MTJ7rA HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868054879&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868054881 HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /workflow/widget-config HTTP/1.1Host: solve-api.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/rec/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJxdkGHvkzAQxr9LX-OAMNgkMUZlLqjxP4XNGGNIR29bs9KytsBw2Xffwcw0ewf3_HL363Mhtq-BxERDqTTjck8c0nLDrdIpw3mxWnxNXoq82LQL9enH61m0sYjQslSNtCPi-54X-OGrWivWlJYricBWq86AznmF2_1ZEM2juReG4XzqkCP0HzUdgh0VBhwiqLGfH0PP-WczHhBqsHrMMjAGj_wXNVrg98Ha2sSu26tGw7kEIUCW_YSiUgsHZSywSakql7KKS5dLBudJfajfgtZKFxWY_RsuWyo4w618eIRptvm9nieFFe2Foijw6zdScGrw0pP5X-TDUNOYYD21IfEFEWqwo5hs0izNX74XSZq9e_9lkZArUlSDtDndDs-TjRAOsfcf0lVJt_yzzpd9uuyTU4BCu6GxMQy-RV2bTdc_j6z1_VlIrjeCYZ_u&ct=1736868055585&v=2.260.1_prod&recordingId=log HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868055584&jzb=eJw1kF9v4jAQxL-Ln2kSE_IHpKovQQge7qgOqKrqFBl7S6xz7GA7CSniu7MNV795f7PjGX9ciR8aIAuiDBNkQo7W9A5s6WWNU5rFaZ7mUTLLs2RCOumkN7aUAhfK7fJX8bvclYduaTZv8yw9eDRgnJtW-4eG0iiKafLUWCNa7qXRqGitQlR537hFGA6mtXDhoBRoPgQMVR1UxnkQATd1yEQtdSi1gEvQVM0LWIsJanCnZ6k7pqRQ5iS_ffGRxpHFdazyv0CWJ3Ewnf-cPL-hjlnQfseOa4yoW6UmxD8upK-LfvW1362G9WoozjG6flpWwwjj17Tv_sz27_9ER2mWIHTgHJYacTHjW19xxy7NdGMtH_G5xVaYI8KfHTxgvDilt793MTJ7rA HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/index.php?error_mesg=invalidlogin HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
Source: global traffic	HTTP traffic detected: GET /core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "b6ffcf9edf281e009b6d8a4f00545f6a"If-Modified-Since: Tue, 09 Aug 2022 18:56:35 GMT
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868065977&jzb=eJztlf1P2zwQx_8VKz_3LfQVpAlpKqCiDXhY4RFiKHIcN7Vw7GBfmmRT_3cuCe1aXjaGQGxaI7WpfZf7fu-SfHr53YE85s6OM9EssU7N8Y1OLTceiAi33X67N-gNWr1Ovz-oOTNhBWjjiQCv8E72jobH3tg7n-3pw_-3-71zwAKUMZ0oqHJct9Vqu916bHSQMBBaYUZiJIamALHdaTZznRieMS4lVyxvUMya8am2wIMG01GTBpFQTaECnjXiabzLjUEHEbfhB6FmVIpA6lAUdVEkts4OtkRNyKH6FaLU6OjkbIwJpSU8M4lpaNTzEwCtSHXyZHEZoRJcMjEinAJROsK9sjgIkDgQlUiJPQKYSqkank38SBTNo5-k2Ph0ZwmoXzrHrY4zrzlRPqqWbXQxFTK4W7qYmqHjwl1MDVewJ3n0o4Ph6Pwx_2XndalTbgibPOVyVddtrQt3H9fbPz79vBBEES_BR2Ip_Byd_roMtvu7bXm-zp7V0boS9vcSJfyYoOzx9QUrEaYVUKFW5rimvxp-2-lOJM_qTEsyEcYCqZ6hmCpO_LCuGadPPu6vNvbSAoKGRDSrT_ndu1ZPDY1fT_vj8fDigfiCFb_U2Lr3gs6Xx0JtTP0R1q5K4IteLJw0GqYH387GB_noIB_etFFqYmjEy2D7v146-9I5u7gOZq7b72LQcmuRimV42GEnMGWWZvHWoTGsDN8kiMWCxIjmHDjadDtdd15bsodJwa5_Bu4BzmcD7g24N-DegPsfBjeCWNIQsy8dySfgXL0XydHgkuS9wQrJlzB6GuU4wL8U5W8Apgq8o8oAKQoqvD9EGxJTa1PkQoPsaxNqIEWDy91dcsotByLgqyJ4rH7fX9_fLY6q5u6DtBf8BWxYuWHlH8nK9wAj3uEFGLe23fnVLTheaFU HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/camp-colors.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/css/skin.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/css/animations.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/css/header.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/css/footer.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/css/skin2.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/css/content.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /ac_global/fontello/css/ac-icons.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/css/style.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/css/default.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /node_modules/@activecampaign/camp-core-css/dist/build.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/css/css_camp.min.css?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v102712283221662 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868050933%2C%22d%22%3A%226723b2e8a902575c45e3a737935628a3%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /ac-frontend/maestro/assets/zendesk-widget.js HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "d585776b166fe428bbe3201bb1138a61"If-Modified-Since: Thu, 09 Jan 2025 18:09:36 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 14 Jan 2025 15:19:39 GMT
Source: global traffic	HTTP traffic detected: GET /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; __cf_bm=tamrwo5Eq.3InBVnF0QuLP9vWPNbbHzmKvQsLXvdbek-1736868040-1.0.1.1-6n_pNJwX0wr5ST5qi8PV1Kz7NN.F1f1A59XxyTpk.tZXLsMv88ZB_UZtVeIqJRR2bziLxulCPA4STyDiBlhAlQ; _cfuvid=0AiPqD1wZQmJm_5H5tZ3g0A0r3owFlAq2BOlaJg9Ylo-1736868040729-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; __cf_bm=tamrwo5Eq.3InBVnF0QuLP9vWPNbbHzmKvQsLXvdbek-1736868040-1.0.1.1-6n_pNJwX0wr5ST5qi8PV1Kz7NN.F1f1A59XxyTpk.tZXLsMv88ZB_UZtVeIqJRR2bziLxulCPA4STyDiBlhAlQ; _cfuvid=0AiPqD1wZQmJm_5H5tZ3g0A0r3owFlAq2BOlaJg9Ylo-1736868040729-0.0.1.1-604800000If-Modified-Since: Tue, 14 Jan 2025 15:19:39 GMT
Source: global traffic	HTTP traffic detected: GET /?v=2 HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "7e6bfae3cfedc1972297e3b418672be0"
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /nr-spa-1.278.2.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yourexcellency.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868074017 HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868074013&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1Host: o185886.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868074013&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868074654&jzb=eJwtkN-O4iAUxt-Fa9e2ttpqMplsUsfoJDvGOM7FZtMgHC2GAgKtMsZ392ydS_h9fH_4eyM-GCAzIjXlZED2Vl8c2MqLBm-TPJ0UkyLOszieDkgnnPDaVoLjg2o9_1N-VNtq18316muaT3YeDShjulX-qUmSOE6T8S9jNW-ZF1qhorUSUe29cbMoCrq1cGUgJSgWhhRVHdTaeeBDppuI8kaoSCgO16GpzStYiw0acMcXoToqBZf6KP77YohxZHbrp_wMKLLR6I6IWlB-S_dLbKVaKQfEPw_k0pSXxffndhGWi1CeUzQ6WNpAD9VJJ5swP20Oef32e_yO0IFzuKPHZcbWvmaOXs1oZS3r8bnFIRgd42cGD9gozYr7vwfAc3kx HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868074017 HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /workflow/widget-config HTTP/1.1Host: solve-api.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-spa-1.278.2.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/rec/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJxdkFHPmjAUhv9Lr5lAVHAky-IGGuYyjTJ3sSykwlHqSsvXFrQz_vfvwLe4xTs475Nznr43YmwDJCIKCqlKJk7EIR3TzEiVljjPN8m3eJ1n-b5L5Jcf78NgbxChRSFbYQbE9z1v7E_fNUqWbWGYFAgclLxoUBmrcbsfjoNZMPPCSTCdOOQ32IWifXCkXINDONVm9Rh6zj-b4QCXvdVjtgOt8ch_Uas4flfGNDpyXStbBdcCOAdR2BFFpQ4qqQ2Uo0LWLi1rJlwmSriOmqr5CEpJldegTx-Y6ChnJW5l_SN0e8je6nlS2FDLJUWBn7-QgpcWLz2Z_0U-9zUNCdbTaBLdEKEaO4rIPt2l2Xqbx-lu_ulrEpM7UlSBMBk99M8TLecOMW8_5FLHl-Wf79nSpksbv4xR6Ng3NoTiLP2tTc7bY1gt5tMVub8ChrWgTg&ct=1736868074655&v=2.260.1_prod&recordingId=log HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868074654&jzb=eJwtkN-O4iAUxt-Fa9e2ttpqMplsUsfoJDvGOM7FZtMgHC2GAgKtMsZ392ydS_h9fH_4eyM-GCAzIjXlZED2Vl8c2MqLBm-TPJ0UkyLOszieDkgnnPDaVoLjg2o9_1N-VNtq18316muaT3YeDShjulX-qUmSOE6T8S9jNW-ZF1qhorUSUe29cbMoCrq1cGUgJSgWhhRVHdTaeeBDppuI8kaoSCgO16GpzStYiw0acMcXoToqBZf6KP77YohxZHbrp_wMKLLR6I6IWlB-S_dLbKVaKQfEPw_k0pSXxffndhGWi1CeUzQ6WNpAD9VJJ5swP20Oef32e_yO0IFzuKPHZcbWvmaOXs1oZS3r8bnFIRgd42cGD9gozYr7vwfAc3kx HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYcUFCElcPGQVQCFoKGFtaVQNATEYMRF8%3D&rst=9972&ck=0&s=6f79e1b35c961fdd&ref=https://yourexcellency.activehosted.com/admin/index.php&ptid=b05afc6689f350b1&af=err,spa,xhr,stn,ins&ap=138&be=1111&fe=8097&dc=4238&at=HxVHFgsdRU4UBRZfSBlK&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1736868064787,%22n%22:0,%22u%22:1183,%22r%22:3,%22ue%22:1192,%22re%22:781,%22f%22:781,%22dn%22:781,%22dne%22:781,%22c%22:781,%22s%22:781,%22ce%22:781,%22rq%22:782,%22rp%22:1111,%22rpe%22:1408,%22di%22:4971,%22ds%22:5347,%22de%22:5349,%22dc%22:9203,%22l%22:9203,%22le%22:9208%7D,%22navigation%22:%7B%22rc%22:1%7D%7D&fp=4966&fcp=4966 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYcUFCElcPGQVQCFoKGFtaVQNATEYMRF8%3D&rst=10611&ck=0&s=6f79e1b35c961fdd&ref=https://yourexcellency.activehosted.com/admin/index.php&ptid=b05afc6689f350b1 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/index.php?error_mesg=invalidlogin HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=rtY3jmkMES7nqZHVmauQUuZhx6xHhLfNs5vGH789bf8
Source: global traffic	HTTP traffic detected: GET /core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "b6ffcf9edf281e009b6d8a4f00545f6a"If-Modified-Since: Tue, 09 Aug 2022 18:56:35 GMT
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868081495&jzb=eJztlXtP2zwUxr-Klb97C72CNKFNLahsA1QVpomhyHWcxMyxg33SNpv63TlJaNdy2RgC8U5vI7WpfU7O8xzH_vXipwNZwp09J9AstU7FmRg9s9x4IGKcdrvNTq_Ta_QazdZOxZkKK0AbT_j4hHc6OO6feGPvfDrQR192u51zwAKUMZ0qKHNct9Fouu1qYrSfMhBaYUZqJIYigMTu1euZTg2fMy4lVyyrUcya8khb4H6N6bhO_VioulA-n9eSKNnnxqCDmNvwnVBTKoUvdSjyuiiSWGcPW6Im5FD-ClFqeHx6NsaEwhLemcQ0NOpNUgCtSHnzZP4YoRJcEhgRRkCUjnGuKA4CJC6ISqXEHgFMqVQunk0nscibRz9pPvHp1hLQSeEcp1rOouLE2bAcNtFFJKR_O3QxdY6Oc3cJNVzBQPL4Vwf94flD_ovOq1LPuCEseMzluq7b2BRuP6x3cDL6vBREES_FLbESfopOd1MG2_3btryJnj-po00l7O85SvgxftHjywuWIkwroEKtreOG_nr4dVc3kHxeZVqSQBgLpNxDCVWcTMKqZpw-ut1fbNkLCwgaEtN5NeK3Z606MzR5Oe0PJ_2v98SXrPijBtJu44AuVtdSbUwnQ6xdlsCDng-cWdyfHf44Gx9mw8Osf91EqcDQmBdBdaXdUTa4GgXd6OB9-yMGLbcWqViE-y12ChGzdJ7sHBnDivB1iljMSYxozoCjTbfVdheVFXuYFOz7b8GNZ3wL7i24t-Degvt_DG4EsaQhZl84kgfgXL4VydHgiuSd3hrJVzB6HOW4f_5RlL8CmErwDksDJC-o8P0QbUhCrZ0hF2rkQJtQA8kbXM3ukxG3HIiAb4rgtf59d3x3Nr_Kmvv30p7xF7Bl5ZaV_0lWvgUY8Q0vwbiz6y4ubwBaJGlg HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/camp-colors.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/css/skin.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/css/animations.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/css/header.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/css/footer.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/css/skin2.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1Host: o185886.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/content.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /ac_global/fontello/css/ac-icons.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/css/style.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/css/default.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /node_modules/@activecampaign/camp-core-css/dist/build.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/css/css_camp.min.css?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v1027121384670010 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868069862%2C%22d%22%3A%22d748ddab1ed01b5c143fd993d5a2a09d%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /ac-frontend/maestro/assets/zendesk-widget.js HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "d585776b166fe428bbe3201bb1138a61"If-Modified-Since: Thu, 09 Jan 2025 18:09:36 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "c75041def02eb73f83ad86da82a94d67"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; __cf_bm=tamrwo5Eq.3InBVnF0QuLP9vWPNbbHzmKvQsLXvdbek-1736868040-1.0.1.1-6n_pNJwX0wr5ST5qi8PV1Kz7NN.F1f1A59XxyTpk.tZXLsMv88ZB_UZtVeIqJRR2bziLxulCPA4STyDiBlhAlQ; _cfuvid=0AiPqD1wZQmJm_5H5tZ3g0A0r3owFlAq2BOlaJg9Ylo-1736868040729-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /?v=2 HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "7e6bfae3cfedc1972297e3b418672be0"
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868089127&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868089129 HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1Host: o185886.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868089739&jzb=eJw9kEtv6jAQhf-L19w8COSBVHUTSmFRUJXSxVUVGXsuseRHsJ1AivjvTMNVvfN8Z47P8d8r8UMLZEGkoZxMyMGaswNbe6FwGmdJmqd5lBfxdD4hvXDCG1sLjgv1bvlWbuuq3vdLs_kssnTv0YAyZjrtH5o4jqIknv9preEd88JoVHRWImq8b90iDAfTWbgwkBI0GwKKqh4a4zzwgBkVUq6EDoXmcAnapn0GazGBAnd8ErqnUnBpjuLHFx9pHVlcxyr_C2T5PA6S4vfMbqijFrSv6GGNEXUn5YT4x4WcVXlefX9Uq2G9GspTgq7_LFUwwixVr6Zxs0S_FFX6vkXowDksNeJyxna-YY5e2unGWjbiU4etMEeEPzt4wHhJGt--7igJe6A HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868089127&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868089129 HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /workflow/widget-config HTTP/1.1Host: solve-api.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/rec/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJxdkGGPmkAQhv_LfuYEwh0IyaVpD7W0l9MotR8uDVlhlE2XXdxdUM743x2wsRe_wbxPZp59T8R0NZCIKMilKpjYEYu0TDMjVVLgPFtM3uJ5lmbrdiJ__A4Df20QoXkuG2EGxHUdx3OfHmoliyY3TAoENkoeNKiUVbjdDTx_7I-dcRh4oUX-QjdVtA-2lGuwCKfa_LwNHeu_zXCAy97qNluB1njkU9Qojt-lMbWObLuTjYJjDpyDyLsRRaUWSqkNFKNcVjYtKiZsJgo4juqy_gJKSZVVoHfPTLSUswK3sv4Rutmk13ruFBa045KiwPsfpGDf4KU783_IS1_TkGA9tSbRCRGqsaOIrJNVks6XWZysvn57ncTkjBRVIExKN_3zRMO5Rcz1hxyq-DD7-JXOumTWxXsPhbZ9Y0MY-NV3WepHT0zD1F_OyfkCjjaf8w&ct=1736868089740&v=2.260.1_prod&recordingId=log HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868089739&jzb=eJw9kEtv6jAQhf-L19w8COSBVHUTSmFRUJXSxVUVGXsuseRHsJ1AivjvTMNVvfN8Z47P8d8r8UMLZEGkoZxMyMGaswNbe6FwGmdJmqd5lBfxdD4hvXDCG1sLjgv1bvlWbuuq3vdLs_kssnTv0YAyZjrtH5o4jqIknv9preEd88JoVHRWImq8b90iDAfTWbgwkBI0GwKKqh4a4zzwgBkVUq6EDoXmcAnapn0GazGBAnd8ErqnUnBpjuLHFx9pHVlcxyr_C2T5PA6S4vfMbqijFrSv6GGNEXUn5YT4x4WcVXlefX9Uq2G9GspTgq7_LFUwwixVr6Zxs0S_FFX6vkXowDksNeJyxna-YY5e2unGWjbiU4etMEeEPzt4wHhJGt--7igJe6A HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/index.php?error_mesg=invalidlogin HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=83I1hSmt2Kw69huOZgOlFfONY-6lISCEQZ6tTg9kW2U
Source: global traffic	HTTP traffic detected: GET /core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "b6ffcf9edf281e009b6d8a4f00545f6a"If-Modified-Since: Tue, 09 Aug 2022 18:56:35 GMT
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868097036&jzb=eJztlftP2zAQx_8VKz_3lb4eSBPSVGBFG0WoME0MRa7jJtYcO9iXNtnU_51LQruWx8YQiE1rpDa173Lf7zn2p5c_HMhi7uw5M80S61ScqdELy40HIsJpt9fq9rv9xqDTbbYqzlxYAdp4wscnvNODk-HYm3gX8wN9_HnQ614AFqCM6URBmeO6jUbL7VRjo_2EgdAKMxIjMRQCxHavXs90YnjKuJRcsaxGMWvOQ22B-zWmozr1I6HqQvk8rcVhvM-NQQcRt8E7oeZUCl_qQOR1USS2zh62RE3AofwVoNTo5PR8ggmFJbwziWlo1JsmAFqR8ubJ_DFCJbhkZkQQAlE6wrmiOAiQuCAqkRJ7BDClUrl4NplGIm8e_ST5xMdbS0CnhXOcajvLihNlo3KIi8lCIf3boYupKTrO3cXUcAUHkkc_OxiOLh7yX3RelXrBDWGzx1xu6rqNbeHOw3qH47NPK0EU8RLcEmvhp-j0tmWw3T9ty5vq9EkdbSthf89Rwo_xix5fXrAUYVoBFWpjHbf0N8Ovu7ozydMq05LMhLFAyj0UU8XJNKhqxumj2_3Flr2wgKAhEU2rIb89a9WFofHLab8fD7_cE1-x4rcazTsHdLm-VmoTOh1h7bIEHvR84Cyi4eLo-_nkKBsdZcPrFkrNDI14Eex1ow86tO2WOhxMumdjDFpuLVKxCA_b7BRCZmkaN4-NYUX4OkEs5iRGNGfA0abb7rjLypo9TAr27ZfgxjO-A_cO3Dtw78D9H4MbQSxpgNmXjuQzcK7eiuRocE3ybn-D5GsYPY7y_j-L8lcAUwneUWmA5AUVvh-iDYmptQvkQo0cahNoIHmD69l9csYtByLgqyJ4bX7fHd-dza-y5v69tGf8BexYuWPlX8nKtwAjvuEVGJsDd3l1A6jxaEg HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/camp-colors.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/css/skin.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/css/animations.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/css/header.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/css/footer.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/css/skin2.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1Host: o185886.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/css/content.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /ac_global/fontello/css/ac-icons.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/css/style.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/css/default.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /node_modules/@activecampaign/camp-core-css/dist/build.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/css/css_camp.min.css?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/jsc/ac.js?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/mainjs.php?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/js/functions.js?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /admin/js/jq/notification.js?v=v1027121389246675 HTTP/1.1Host: yourexcellency.activehosted.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868085182%2C%22d%22%3A%22f387fff6dc041f687c9802409c6ff562%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=e0HOf3TxF-aNSWBRVd0WXaJGAJarkJZKxIXO3kbrniI
Source: global traffic	HTTP traffic detected: GET /ac-frontend/maestro/assets/zendesk-widget.js HTTP/1.1Host: platform-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "d585776b166fe428bbe3201bb1138a61"If-Modified-Since: Thu, 09 Jan 2025 18:09:36 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; __cf_bm=tamrwo5Eq.3InBVnF0QuLP9vWPNbbHzmKvQsLXvdbek-1736868040-1.0.1.1-6n_pNJwX0wr5ST5qi8PV1Kz7NN.F1f1A59XxyTpk.tZXLsMv88ZB_UZtVeIqJRR2bziLxulCPA4STyDiBlhAlQ; _cfuvid=0AiPqD1wZQmJm_5H5tZ3g0A0r3owFlAq2BOlaJg9Ylo-1736868040729-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /?v=2 HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "7e6bfae3cfedc1972297e3b418672be0"
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://solve-widget.forethought.ai/?v=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868104772&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868104775 HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed.js HTTP/1.1Host: solve-widget.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c75041def02eb73f83ad86da82a94d67"
Source: global traffic	HTTP traffic detected: GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1Host: o185886.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868105427&jzb=eJw9kNtu8jAQhN_F1zSHJoSDVFWVgvhBtKUSTS-qKjL2llhybGM7CfkR7842VPWd95sdz_jzTHxvgMyJ1JSTEdlb3TmwpRc1TuNJkk2zaRylk2w2Iq1wwmtbCo4L5Xbxkr-Wu7JoF3r9MZtkhUcDyphulL9p4jiKknh8Z6zmDfNCK1Q0ViKqvDduHoa9biycGEgJivUBRVULlXYeeMB0HVJeCxUKxeEUmMo8grWYoAZ3eBCqpVJwqQ_ixxcfMY7Mz0OV3wLTKB0HyezvpBfUUQvK7-h-hRFVI-WI-NuFdHXeLf-_75b9atnnxwRdvy2tYYBss_hXdObZ92_xUyE2CB04h6UGnKds6yvm6Mncr61lAz422ApzRPizvQeMl2Tx5esKT398NA HTTP/1.1Host: data.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yourexcellency.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868104772&v=2.260.1_prod HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYcUFCElcPGQVQCFoKGFtaVQNATEYMRF8%3D&rst=9181&ck=0&s=6f79e1b35c961fdd&ref=https://yourexcellency.activehosted.com/admin/index.php&ptid=5d24878bcc69f0a1&af=err,spa,xhr,stn,ins&ap=126&be=1394&fe=7732&dc=4583&at=HxVHFgsdRU4UBRZfSBlK&fsh=0&perf=%7B%22timing%22:%7B%22of%22:1736868095633,%22n%22:0,%22u%22:1400,%22r%22:4,%22ue%22:1404,%22re%22:1078,%22f%22:1078,%22dn%22:1078,%22dne%22:1078,%22c%22:1078,%22s%22:1078,%22ce%22:1078,%22rq%22:1080,%22rp%22:1395,%22rpe%22:1572,%22di%22:5309,%22ds%22:5975,%22de%22:5977,%22dc%22:9123,%22l%22:9123,%22le%22:9126%7D,%22navigation%22:%7B%22rc%22:1%7D%7D&fp=5317&fcp=5317&timestamp=1736868106402 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868104775 HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /workflow/widget-config HTTP/1.1Host: solve-api.forethought.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/rec/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJxdkF_PkzAUxr9Lr3GAc38kMWYKTnS-mw7xwhjSlbOtsbS8bYHVZd99B2am2R2c55dzfn3OxLoaSEQ0MKVLLg_EIy033CqdljgvNslTvC6yIm8T9enH69k0t4hQxlQj7YCEYRCMw8mLWquyYZYricBOq86AzniF28PZeDqfzsNg8urlzCO_wX3QtA_2VBjwiKDGfr4PA--fzXBAqN7qPtuCMXjkv6jRAr-P1tYm8n2nGg0nBkKAZG5EUamFozIWyhFTlU_LikufyxJOo_pYvwWtlS4qMIc3XLZU8BK38v4Rptllt3oeFDbUCUVR4OcvpOC5wUsP5n-R931NQ4L11IZEZ0SowY4ikqfbNFt_K-J0u3i3SmJyQYpqkDaju_55shHCI_b2Q7oq7pZ_vmdLly5d_DxGoX3f2BCyVfIx7-ov1n0NFzlfkcsVe_-geA&ct=1736868105428&v=2.260.1_prod&recordingId=log HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868105427&jzb=eJw9kNtu8jAQhN_F1zSHJoSDVFWVgvhBtKUSTS-qKjL2llhybGM7CfkR7842VPWd95sdz_jzTHxvgMyJ1JSTEdlb3TmwpRc1TuNJkk2zaRylk2w2Iq1wwmtbCo4L5Xbxkr-Wu7JoF3r9MZtkhUcDyphulL9p4jiKknh8Z6zmDfNCK1Q0ViKqvDduHoa9biycGEgJivUBRVULlXYeeMB0HVJeCxUKxeEUmMo8grWYoAZ3eBCqpVJwqQ_ixxcfMY7Mz0OV3wLTKB0HyezvpBfUUQvK7-h-hRFVI-WI-NuFdHXeLf-_75b9atnnxwRdvy2tYYBss_hXdObZ92_xUyE2CB04h6UGnKds6yvm6Mncr61lAz422ApzRPizvQeMl2Tx5esKT398NA HTTP/1.1Host: data.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYcUFCElcPGQVQCFoKGFtaVQNATEYMRF8%3D&rst=10444&ck=0&s=6f79e1b35c961fdd&ref=https://yourexcellency.activehosted.com/admin/index.php&ptid=5d24878bcc69f0a1 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: yourexcellency.activehosted.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: platform-cdn.app-us1.com
Source: global traffic	DNS traffic detected: DNS query: d3rxaij56vjege.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: d226aj4ao1t61q.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: cdn.pendo.io
Source: global traffic	DNS traffic detected: DNS query: static.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: ekr.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: solve-widget.forethought.ai
Source: global traffic	DNS traffic detected: DNS query: solve-api.forethought.ai
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: prodhostedtest.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: o185886.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: data.pendo.io
Source: global traffic	DNS traffic detected: DNS query: d3tnn7lar6ozas.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net

Source: unknown

HTTP traffic detected: POST /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: prodhostedtest.zendesk.comConnection: keep-aliveContent-Length: 548sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://yourexcellency.activehosted.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 14 Jan 2025 15:20:44 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 14 Jan 2025 15:20:49 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 14 Jan 2025 15:20:57 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 14 Jan 2025 15:21:16 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 14 Jan 2025 15:21:24 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 14 Jan 2025 15:21:31 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 14 Jan 2025 15:21:39 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 14 Jan 2025 15:21:47 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_243.2.dr, chromecache_329.2.dr, chromecache_380.2.dr, chromecache_273.2.dr, chromecache_242.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_287.2.dr, chromecache_326.2.dr	String found in binary or memory: http://hildenbiddle.com
Source: chromecache_316.2.dr, chromecache_348.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_240.2.dr, chromecache_317.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net)
Source: chromecache_240.2.dr, chromecache_317.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net/techblog/article/javascript_equivalent_for_phps_array_keys/
Source: chromecache_240.2.dr, chromecache_317.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net/techblog/article/javascript_equivalent_for_phps_array_values/
Source: chromecache_240.2.dr, chromecache_317.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net/techblog/article/javascript_equivalent_for_phps_preg_quote/
Source: chromecache_240.2.dr, chromecache_317.2.dr	String found in binary or memory: http://magnetiq.com)
Source: chromecache_240.2.dr, chromecache_317.2.dr	String found in binary or memory: http://mathiasbynens.be/demo/url-regex
Source: chromecache_286.2.dr, chromecache_222.2.dr, chromecache_347.2.dr, chromecache_279.2.dr, chromecache_241.2.dr, chromecache_312.2.dr, chromecache_324.2.dr, chromecache_306.2.dr, chromecache_208.2.dr, chromecache_263.2.dr	String found in binary or memory: http://momentjs.com/docs/#/displaying/format/
Source: chromecache_243.2.dr, chromecache_329.2.dr, chromecache_380.2.dr, chromecache_273.2.dr, chromecache_242.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_286.2.dr, chromecache_222.2.dr, chromecache_347.2.dr, chromecache_279.2.dr, chromecache_241.2.dr, chromecache_312.2.dr, chromecache_324.2.dr, chromecache_306.2.dr, chromecache_208.2.dr, chromecache_263.2.dr	String found in binary or memory: http://php.net/manual/en/function.strftime.php
Source: chromecache_342.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_342.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_342.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_342.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_240.2.dr, chromecache_317.2.dr	String found in binary or memory: http://www.iport.it)
Source: chromecache_240.2.dr, chromecache_317.2.dr	String found in binary or memory: http://www.scottklarr.com/topic/425/how-to-insert-text-into-a-textarea-where-the-cursor-is/
Source: chromecache_240.2.dr, chromecache_317.2.dr	String found in binary or memory: http://www.webtoolkit.info/
Source: chromecache_367.2.dr, chromecache_212.2.dr, chromecache_196.2.dr, chromecache_202.2.dr, chromecache_327.2.dr	String found in binary or memory: https://accessible360.com/accessible360-blog/use-aria-label-screen-reader-text/
Source: chromecache_259.2.dr, chromecache_225.2.dr	String found in binary or memory: https://agent.pendo.io/licenses
Source: chromecache_255.2.dr, chromecache_291.2.dr	String found in binary or memory: https://cdn.pendo.io/agent/static/
Source: chromecache_340.2.dr	String found in binary or memory: https://cloudflareinsights.com
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/0dqacnbvt_deal_task_stage_completed.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/1wbp227ts_ecom_widget_bigcommerce.gif
Source: chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/5we4nswko_sso-login.png
Source: chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/6bvfo6yte_align_c.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/6gi3zyew_setup-leads.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/6h4ypui49_api-webhooks.png
Source: chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/6qa3wwjn9_lock-and-key.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/7caox61x3_api-wrapper.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/8xd9k8oyn_loader-white.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/ahsy3cbyf_score_row_edit.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/gmukkz38x_image_resizable_handler.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/gqj1lfhhb_setup-pipelines.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/gvxbrrcoh_etsy.gif
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/hh9ujqgv5_aclogo_li.png
Source: chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/j5rdou4q_mindbody.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/jftq2c8s_aclogo_dk.png
Source: chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/jmdiie8a5_align_l.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/negrhfka1_align-left.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/npy3hbtyq_apps-block-event-track.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/nxhmk8myp_close-option.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/p0pkvuia_setup-process.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/purnl7ljk_align-center.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/rozq2siaa_deal_task_stage_current.png
Source: chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/sm6m7uxqb_otp-globe.png
Source: chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/u57v8te29_align_r.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/vb8qvk7gt_api-info.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/w9mqrrow_sidebar-pattern.png
Source: chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/wbc7rtvkj_google-oidc-logo.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/wqjihb3v1_align-right.png
Source: chromecache_367.2.dr, chromecache_337.2.dr, chromecache_212.2.dr, chromecache_206.2.dr, chromecache_196.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr, chromecache_202.2.dr, chromecache_327.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/y0k71lyoi_learning_content_lightbulb.svg
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/y7m8e6hkf_apps-block-facebook.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/yq2z36nxw_apps-block-twitter.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/yvm9kmshk_score_row_save.png
Source: chromecache_367.2.dr, chromecache_212.2.dr, chromecache_196.2.dr, chromecache_202.2.dr, chromecache_327.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/zlj2s7gvs_icon-search-grey.png
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/zq6835y4f_apps-block-site-track.png
Source: chromecache_358.2.dr, chromecache_333.2.dr, chromecache_266.2.dr, chromecache_211.2.dr, chromecache_349.2.dr, chromecache_363.2.dr, chromecache_318.2.dr, chromecache_301.2.dr, chromecache_320.2.dr, chromecache_215.2.dr	String found in binary or memory: https://d3rxaij56vjege.cloudfront.net/media/geomarker.png
Source: chromecache_355.2.dr, chromecache_248.2.dr, chromecache_219.2.dr, chromecache_226.2.dr	String found in binary or memory: https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal
Source: chromecache_278.2.dr, chromecache_258.2.dr	String found in binary or memory: https://ekr.zendesk.com/compose_product/web_widget/b6408d4833f9bc1811ef5112a5e08fef07367495?features
Source: chromecache_340.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Comfortaa:wght
Source: chromecache_367.2.dr, chromecache_212.2.dr, chromecache_196.2.dr, chromecache_202.2.dr, chromecache_327.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=IBM
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/comfortaa/v45/1Ptsg8LJRfWJmhDAuUs4Q4FqPfE.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/comfortaa/v45/1Ptsg8LJRfWJmhDAuUs4QIFqPfE.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/comfortaa/v45/1Ptsg8LJRfWJmhDAuUs4QoFqPfE.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/comfortaa/v45/1Ptsg8LJRfWJmhDAuUs4SYFqPfE.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/comfortaa/v45/1Ptsg8LJRfWJmhDAuUs4TYFq.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/comfortaa/v45/1Ptsg8LJRfWJmhDAuUs4ToFqPfE.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AI5sdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AI9sdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIFsdA.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIJsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIVsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIxsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjR7_AI5sdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjR7_AI9sdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjR7_AIFsdA.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjR7_AIJsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjR7_AIVsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjR7_AIxsdO_q.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjSL9AI5sdO_q.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjSL9AI9sdO_q.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjSL9AIFsdA.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjSL9AIJsdO_q.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjSL9AIVsdO_q.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjSL9AIxsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjWr7AI5sdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjWr7AI9sdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjWr7AIFsdA.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjWr7AIJsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjWr7AIVsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjWr7AIxsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AI5sdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AI9sdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIFsdA.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIJsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIVsdO_q.woff2)
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjXr8AIxsdO_q.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhd7eFb5N.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdHeFQ.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdLeFb5N.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdXeFb5N.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhd_eFb5N.woff2)
Source: chromecache_352.2.dr, chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdzeFb5N.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCm3FwrK3iLTcvnUwAT9nA2.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCm3FwrK3iLTcvnUwQT9g.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCm3FwrK3iLTcvnUwcT9nA2.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCm3FwrK3iLTcvnUwgT9nA2.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCm3FwrK3iLTcvnUwkT9nA2.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCm3FwrK3iLTcvnUwoT9nA2.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCm3FwrK3iLTcvnUwsT9nA2.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCo3FwrK3iLTcvhYwYL8g.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCo3FwrK3iLTcviYwY.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCo3FwrK3iLTcvmYwYL8g.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCo3FwrK3iLTcvsYwYL8g.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCo3FwrK3iLTcvtYwYL8g.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCo3FwrK3iLTcvuYwYL8g.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCo3FwrK3iLTcvvYwYL8g.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-cSZMZ-Y.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-ciZMZ-Y.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-cyZMZ-Y.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-eCZMZ-Y.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf1jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf2jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf3jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf4jvw.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf8jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf1jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf2jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf3jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf4jvw.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7NWPf8jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff1jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff2jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff3jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff4jvw.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR7lXff8jvzRPA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZAf-LHrw.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZBf-LHrw.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZDf-LHrw.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZKf-LHrw.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eRZOf-I.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZV8f6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZVcf6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZVsf6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZWMf6.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l521wRZXMf6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZV8f6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZVcf6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZVsf6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZXMf6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZV8f6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZVcf6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZVsf6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZXMf6lvg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFkD-vYSZviVYUb_rj3ij__anPXDTnohkk72xU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFkD-vYSZviVYUb_rj3ij__anPXDTnojEk72xU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFkD-vYSZviVYUb_rj3ij__anPXDTnojUk72xU.woff2)
Source: chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_221.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBXkaWzU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCHkaWzU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCXkaWzU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkaHkaWzU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkenkaWzU.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x5DF4xlVMF-BfR8bXMIjhEq3-OXg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x5DF4xlVMF-BfR8bXMIjhFq3-OXg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x5DF4xlVMF-BfR8bXMIjhGq3-OXg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x5DF4xlVMF-BfR8bXMIjhIq3-OXg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x5DF4xlVMF-BfR8bXMIjhLq38.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x5DF4xlVMF-BfR8bXMIjhPq3-OXg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x7DF4xlVMF-BfR8bXMIjhOm32WWg.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x7DF4xlVMF-BfR8bXMIjhOm36WWoKC.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x7DF4xlVMF-BfR8bXMIjhOm3CWWoKC.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x7DF4xlVMF-BfR8bXMIjhOm3KWWoKC.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x7DF4xlVMF-BfR8bXMIjhOm3OWWoKC.woff2)
Source: chromecache_247.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0x7DF4xlVMF-BfR8bXMIjhOm3mWWoKC.woff2)
Source: chromecache_243.2.dr, chromecache_329.2.dr, chromecache_380.2.dr, chromecache_273.2.dr, chromecache_242.2.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: chromecache_314.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_314.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	String found in binary or memory: https://img-us1.com/tmpbuilder_imgfiller_180x150.gif
Source: chromecache_287.2.dr, chromecache_326.2.dr	String found in binary or memory: https://jhildenbiddle.github.io/css-vars-ponyfill/
Source: chromecache_259.2.dr, chromecache_225.2.dr	String found in binary or memory: https://pendo-io-static.storage.googleapis.com/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pen
Source: chromecache_259.2.dr, chromecache_225.2.dr	String found in binary or memory: https://pendo-static-5646107534426112.storage.googleapis.com
Source: chromecache_362.2.dr, chromecache_351.2.dr, chromecache_278.2.dr, chromecache_258.2.dr	String found in binary or memory: https://prodhostedtest.zendesk.com/embeddable/avatars/10718314379804
Source: chromecache_362.2.dr, chromecache_351.2.dr, chromecache_278.2.dr, chromecache_258.2.dr	String found in binary or memory: https://prodhostedtest.zendesk.com/sc/sdk
Source: chromecache_340.2.dr	String found in binary or memory: https://solve-api.forethought.ai/
Source: chromecache_340.2.dr	String found in binary or memory: https://static.cloudflareinsights.com
Source: chromecache_340.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js
Source: chromecache_278.2.dr, chromecache_258.2.dr	String found in binary or memory: https://static.zdassets.com/web_widget/messenger/latest/web-widget-main-b6408d4.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896

Source: classification engine

Classification label: mal48.phis.win@22/318@96/31

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1996,i,306823133635020388,6881046364661103510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://yourexcellency.activehosted.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1996,i,306823133635020388,6881046364661103510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://yourexcellency.activehosted.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://yourexcellency.activehosted.com/ac_global/fontello/font/ac-icons.woff2?9608958	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/default.css?v=v1027121384670010	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/default.css?v=v1027121471506941	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/header.css?v=v102712283221662	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/jsc/ac.js?v=v1027121389246675	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/w9mqrrow_sidebar-pattern.png	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/7caox61x3_api-wrapper.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/jsc/ac.js?v=v102712424104756	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/gvxbrrcoh_etsy.gif	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/js/ac-pendo.js	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/js/functions.js?v=v1027121389246675	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/skin2.css?v=v1027121471506941	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/css_camp.min.css?v=v1027121389246675	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/mainjs.php?v=v1027121389246675	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/1wbp227ts_ecom_widget_bigcommerce.gif	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v102712424104756	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/nxhmk8myp_close-option.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v1027121389246675	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/wbc7rtvkj_google-oidc-logo.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/header.css?v=v1027121384670010	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/6h4ypui49_api-webhooks.png	0%	Avira URL Cloud	safe
http://magnetiq.com)	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/npy3hbtyq_apps-block-event-track.png	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/j5rdou4q_mindbody.png	0%	Avira URL Cloud	safe
http://hildenbiddle.com	0%	Avira URL Cloud	safe
https://d3rxaij56vjege.cloudfront.net/media/logo.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v1027121384670010	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/footer.css?v=v1027121389246675	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/6qa3wwjn9_lock-and-key.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/skin.css?v=v102712283221662	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v1027121471506941	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v102712424104756	0%	Avira URL Cloud	safe
https://d3rxaij56vjege.cloudfront.net/media/geomarker.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/default.css?v=v102712424104756	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/ahsy3cbyf_score_row_edit.png	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/negrhfka1_align-left.png	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/vxd0ariod_gift.png	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/jhynp592_idcard.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/content.css?v=v1027121471506941	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/style.css?v=v102712424104756	0%	Avira URL Cloud	safe
https://accessible360.com/accessible360-blog/use-aria-label-screen-reader-text/	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/y7m8e6hkf_apps-block-facebook.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v102712283221662	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v1027121389246675	0%	Avira URL Cloud	safe
http://www.iport.it)	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/js/functions.js?v=v102712424104756	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v102712424104756	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/mainjs.php?v=v1027121471506941	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/6gi3zyew_setup-leads.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v102712283221662	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/8xd9k8oyn_loader-white.png	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/gqj1lfhhb_setup-pipelines.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/skin.css?v=v1027121471506941	0%	Avira URL Cloud	safe
http://kevin.vanzonneveld.net/techblog/article/javascript_equivalent_for_phps_preg_quote/	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/5we4nswko_sso-login.png	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/jftq2c8s_aclogo_dk.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/js/EHawkTalon6.js	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/js/jq/notification.js?v=v102712424104756	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/header.css?v=v1027121471506941	0%	Avira URL Cloud	safe
https://jhildenbiddle.github.io/css-vars-ponyfill/	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/yvm9kmshk_score_row_save.png	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/js/jq/csrf_protection.js	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/yq2z36nxw_apps-block-twitter.png	0%	Avira URL Cloud	safe
http://mathiasbynens.be/demo/url-regex	0%	Avira URL Cloud	safe
https://d3rxaij56vjege.cloudfront.net/media/favicon.ico	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/css_camp.min.css?v=v1027121471506941	0%	Avira URL Cloud	safe
https://prodhostedtest.zendesk.com/embeddable/avatars/10718314379804	0%	Avira URL Cloud	safe
https://yourexcellency.activehosted.com/admin/css/content.css?v=v102712424104756	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
solve-ui.pages.dev	188.114.96.3	true	false	high
prodhostedtest.zendesk.com	216.198.53.1	true	false	high
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	high
cloudflareinsights.com	104.16.80.73	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
static.cloudflareinsights.com	104.16.79.73	true	false	high
yourexcellency.activehosted.com	104.17.206.31	true	true	unknown
js-agent.newrelic.com	162.247.243.39	true	false	high
d3rxaij56vjege.cloudfront.net	18.245.45.143	true	false	high
o185886.ingest.sentry.io	34.120.195.249	true	false	high
d226aj4ao1t61q.cloudfront.net	65.9.7.19	true	false	high
static.zdassets.com	216.198.54.3	true	false	high
cdn.pendo.io	34.36.213.229	true	false	high
data.pendo.io	34.107.204.85	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
solve-api.forethought.ai	104.17.255.3	true	false	high
ekr.zdassets.com	216.198.53.3	true	false	high
www.google.com	142.250.185.228	true	false	high
d3r4ionp7m7mlj.cloudfront.net	143.204.215.3	true	false	high
d3tnn7lar6ozas.cloudfront.net	52.222.250.40	true	false	high
solve-widget.forethought.ai	unknown	unknown	false	high
bam.nr-data.net	unknown	unknown	false	high
platform-cdn.app-us1.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://bam.nr-data.net/events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYcUFCElcPGQVQCFoKGFtaVQNATEYMRF8%3D&rst=10444&ck=0&s=6f79e1b35c961fdd&ref=https://yourexcellency.activehosted.com/admin/index.php&ptid=5d24878bcc69f0a1	false		high
https://yourexcellency.activehosted.com/admin/css/default.css?v=v1027121471506941	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/ac_global/fontello/font/ac-icons.woff2?9608958	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/default.css?v=v1027121384670010	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/jsc/ac.js?v=v102712424104756	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/header.css?v=v102712283221662	false	Avira URL Cloud: safe	unknown
https://solve-widget.forethought.ai/static/js/main.64e6aab4.js	false		high
https://data.pendo.io/data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868074017	false		high
https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/jsc/ac.js?v=v1027121389246675	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/mainjs.php?v=v1027121389246675	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/js/ac-pendo.js	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/css_camp.min.css?v=v1027121389246675	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/skin2.css?v=v1027121471506941	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/js/functions.js?v=v1027121389246675	false	Avira URL Cloud: safe	unknown
https://static.zdassets.com/web_widget/messenger/latest/web-widget-3190-b6408d4.js	false		high
https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v102712424104756	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v1027121389246675	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/header.css?v=v1027121384670010	false	Avira URL Cloud: safe	unknown
https://data.pendo.io/data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868074654&jzb=eJwtkN-O4iAUxt-Fa9e2ttpqMplsUsfoJDvGOM7FZtMgHC2GAgKtMsZ392ydS_h9fH_4eyM-GCAzIjXlZED2Vl8c2MqLBm-TPJ0UkyLOszieDkgnnPDaVoLjg2o9_1N-VNtq18316muaT3YeDShjulX-qUmSOE6T8S9jNW-ZF1qhorUSUe29cbMoCrq1cGUgJSgWhhRVHdTaeeBDppuI8kaoSCgO16GpzStYiw0acMcXoToqBZf6KP77YohxZHbrp_wMKLLR6I6IWlB-S_dLbKVaKQfEPw_k0pSXxffndhGWi1CeUzQ6WNpAD9VJJ5swP20Oef32e_yO0IFzuKPHZcbWvmaOXs1oZS3r8bnFIRgd42cGD9gozYr7vwfAc3kx	false		high
https://yourexcellency.activehosted.com/admin/css/footer.css?v=v1027121389246675	false	Avira URL Cloud: safe	unknown
https://static.zdassets.com/ekr/snippet.js?key=dcd5b484-abf6-47e3-adad-bc7b7da716c4	false		high
https://data.pendo.io/data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFj0FLxDAQhf9LzmvTVHfFgojgHvSggroew5AMbSCdKWlSdpH-90081IvoLSTvffnel5jd5CKHRytaoV_3zw8v-l0f5j0_fd5c7w5RbAQYw4nid0Spur5U24sxsE0mOqYcSMHnpz7GcWqlPHEKeDToPZI5VZBTM_Y8RbSV4UGCHRxJRxaP1diPdxgCBz3g1N06msE767lzhcveHn70KHm_EQNGsBBBtKt7Obo__D1Ql6DDnEDSH29iWTet1V93EQyl9M-gghshIMX7FZqvsmQpqytZK9nUzTYDZwxTQbeiqZpdXSld_hPLcgY6j4Q1&v=2.260.1_prod&ct=1736868104775	false		high
https://d3rxaij56vjege.cloudfront.net/media/logo.png	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v1027121384670010	false	Avira URL Cloud: safe	unknown
https://data.pendo.io/data/guide.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1736868042054&v=2.260.1_prod	false		high
https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v102712424104756	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/skin.css?v=v102712283221662	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v1027121471506941	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/default.css?v=v102712424104756	false	Avira URL Cloud: safe	unknown
https://data.pendo.io/data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868105427&jzb=eJw9kNtu8jAQhN_F1zSHJoSDVFWVgvhBtKUSTS-qKjL2llhybGM7CfkR7842VPWd95sdz_jzTHxvgMyJ1JSTEdlb3TmwpRc1TuNJkk2zaRylk2w2Iq1wwmtbCo4L5Xbxkr-Wu7JoF3r9MZtkhUcDyphulL9p4jiKknh8Z6zmDfNCK1Q0ViKqvDduHoa9biycGEgJivUBRVULlXYeeMB0HVJeCxUKxeEUmMo8grWYoAZ3eBCqpVJwqQ_ixxcfMY7Mz0OV3wLTKB0HyezvpBfUUQvK7-h-hRFVI-WI-NuFdHXeLf-_75b9atnnxwRdvy2tYYBss_hXdObZ92_xUyE2CB04h6UGnKds6yvm6Mncr61lAz422ApzRPizvQeMl2Tx5esKT398NA	false		high
https://d226aj4ao1t61q.cloudfront.net/vxd0ariod_gift.png	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/content.css?v=v1027121471506941	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/jhynp592_idcard.png	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/style.css?v=v102712424104756	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/js/functions.js?v=v102712424104756	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v102712283221662	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin	true		unknown
https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v102712283221662	false	Avira URL Cloud: safe	unknown
https://data.pendo.io/data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868089127&v=2.260.1_prod	false		high
https://bam.nr-data.net/jserrors/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYcUFCElcPGQVQCFoKGFtaVQNATEYMRF8%3D&rst=16704&ck=0&s=6f79e1b35c961fdd&ref=https://yourexcellency.activehosted.com/admin/index.php&ptid=b05afc6689f350b1	false		high
https://yourexcellency.activehosted.com/admin/mainjs.php?v=v1027121471506941	false	Avira URL Cloud: safe	unknown
https://static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-b6408d4.js	false		high
https://platform-cdn.app-us1.com/core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css	false		high
https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v1027121389246675	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v102712424104756	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/skin.css?v=v1027121471506941	false	Avira URL Cloud: safe	unknown
https://solve-widget.forethought.ai/static/css/647.38ef54d4.chunk.css	false		high
https://bam.nr-data.net/jserrors/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYcUFCElcPGQVQCFoKGFtaVQNATEYMRF8%3D&rst=16702&ck=0&s=6f79e1b35c961fdd&ref=https://yourexcellency.activehosted.com/admin/index.php&ptid=b05afc6689f350b1	false		high
https://yourexcellency.activehosted.com/admin/js/EHawkTalon6.js	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/js/jq/notification.js?v=v102712424104756	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYcUFCElcPGQVQCFoKGFtaVQNATEYMRF8%3D&rst=9181&ck=0&s=6f79e1b35c961fdd&ref=https://yourexcellency.activehosted.com/admin/index.php&ptid=5d24878bcc69f0a1&af=err,spa,xhr,stn,ins&ap=126&be=1394&fe=7732&dc=4583&at=HxVHFgsdRU4UBRZfSBlK&fsh=0&perf=%7B%22timing%22:%7B%22of%22:1736868095633,%22n%22:0,%22u%22:1400,%22r%22:4,%22ue%22:1404,%22re%22:1078,%22f%22:1078,%22dn%22:1078,%22dne%22:1078,%22c%22:1078,%22s%22:1078,%22ce%22:1078,%22rq%22:1080,%22rp%22:1395,%22rpe%22:1572,%22di%22:5309,%22ds%22:5975,%22de%22:5977,%22dc%22:9123,%22l%22:9123,%22le%22:9126%7D,%22navigation%22:%7B%22rc%22:1%7D%7D&fp=5317&fcp=5317&timestamp=1736868106402	false		high
https://yourexcellency.activehosted.com/admin/css/header.css?v=v1027121471506941	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYcUFCElcPGQVQCFoKGFtaVQNATEYMRF8%3D&rst=16701&ck=0&s=6f79e1b35c961fdd&ref=https://yourexcellency.activehosted.com/admin/index.php&ptid=b05afc6689f350b1	false		high
https://yourexcellency.activehosted.com/admin/js/jq/csrf_protection.js	false	Avira URL Cloud: safe	unknown
https://data.pendo.io/data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj0FLAzEQhf_LnOtms9qKCyKCPehBBbUew5AM20B2Zslml5bS_95ESk-itxDe-943B5higBa2KQ1jq9Repkg7SyEQ232FNvmZtjImcpWVXqHrPSvPjnbVsB0eKEaJpqexu_c8Y_AuSOcZFtBTQocJoT3A7EefJJand3nNvK9fn97Mp9nMa3n5vrtdbVKuBORuwo5ygth8fcBxAWitTJwuVa3r-lovr4Yobsp2UrYY-1L6R77gBozE6fECzV9ZspT1jaq1aupmmYEzxbGgW2iqZlVX2pS9Ajif8vzHGWfln8gvuscTXr589A&ct=1736868074013&v=2.260.1_prod	false		high
https://static.cloudflareinsights.com/beacon.min.js	false		high
https://yourexcellency.activehosted.com/admin/css/css_camp.min.css?v=v1027121471506941	false	Avira URL Cloud: safe	unknown
https://d3rxaij56vjege.cloudfront.net/media/favicon.ico	false	Avira URL Cloud: safe	unknown
https://yourexcellency.activehosted.com/admin/css/content.css?v=v102712424104756	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://d226aj4ao1t61q.cloudfront.net/w9mqrrow_sidebar-pattern.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/gvxbrrcoh_etsy.gif	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js	chromecache_314.2.dr, chromecache_253.2.dr	false		high
https://solve-api.forethought.ai/	chromecache_340.2.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_342.2.dr	false		high
https://d226aj4ao1t61q.cloudfront.net/7caox61x3_api-wrapper.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/1wbp227ts_ecom_widget_bigcommerce.gif	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://static.cloudflareinsights.com	chromecache_340.2.dr	false		high
https://d226aj4ao1t61q.cloudfront.net/wbc7rtvkj_google-oidc-logo.png	chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	false	Avira URL Cloud: safe	unknown
https://agent.pendo.io/licenses	chromecache_259.2.dr, chromecache_225.2.dr	false		high
https://d226aj4ao1t61q.cloudfront.net/nxhmk8myp_close-option.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
http://hildenbiddle.com	chromecache_287.2.dr, chromecache_326.2.dr	false	Avira URL Cloud: safe	unknown
http://magnetiq.com)	chromecache_240.2.dr, chromecache_317.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_342.2.dr	false		high
https://d226aj4ao1t61q.cloudfront.net/6h4ypui49_api-webhooks.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/npy3hbtyq_apps-block-event-track.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/j5rdou4q_mindbody.png	chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/6qa3wwjn9_lock-and-key.png	chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	false	Avira URL Cloud: safe	unknown
https://d3rxaij56vjege.cloudfront.net/media/geomarker.png	chromecache_358.2.dr, chromecache_333.2.dr, chromecache_266.2.dr, chromecache_211.2.dr, chromecache_349.2.dr, chromecache_363.2.dr, chromecache_318.2.dr, chromecache_301.2.dr, chromecache_320.2.dr, chromecache_215.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/negrhfka1_align-left.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/ahsy3cbyf_score_row_edit.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/y7m8e6hkf_apps-block-facebook.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://accessible360.com/accessible360-blog/use-aria-label-screen-reader-text/	chromecache_367.2.dr, chromecache_212.2.dr, chromecache_196.2.dr, chromecache_202.2.dr, chromecache_327.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/6gi3zyew_setup-leads.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
http://www.iport.it)	chromecache_240.2.dr, chromecache_317.2.dr	false	Avira URL Cloud: safe	unknown
http://daneden.me/animate	chromecache_243.2.dr, chromecache_329.2.dr, chromecache_380.2.dr, chromecache_273.2.dr, chromecache_242.2.dr	false		high
https://d226aj4ao1t61q.cloudfront.net/gqj1lfhhb_setup-pipelines.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/8xd9k8oyn_loader-white.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
http://kevin.vanzonneveld.net/techblog/article/javascript_equivalent_for_phps_preg_quote/	chromecache_240.2.dr, chromecache_317.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_342.2.dr	false		high
https://d226aj4ao1t61q.cloudfront.net/jftq2c8s_aclogo_dk.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/5we4nswko_sso-login.png	chromecache_337.2.dr, chromecache_206.2.dr, chromecache_232.2.dr, chromecache_305.2.dr, chromecache_346.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/yvm9kmshk_score_row_save.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
https://jhildenbiddle.github.io/css-vars-ponyfill/	chromecache_287.2.dr, chromecache_326.2.dr	false	Avira URL Cloud: safe	unknown
https://d226aj4ao1t61q.cloudfront.net/yq2z36nxw_apps-block-twitter.png	chromecache_207.2.dr, chromecache_281.2.dr, chromecache_251.2.dr, chromecache_235.2.dr, chromecache_204.2.dr	false	Avira URL Cloud: safe	unknown
http://mathiasbynens.be/demo/url-regex	chromecache_240.2.dr, chromecache_317.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.pendo.io/agent/static/	chromecache_255.2.dr, chromecache_291.2.dr	false		high
https://prodhostedtest.zendesk.com/embeddable/avatars/10718314379804	chromecache_362.2.dr, chromecache_351.2.dr, chromecache_278.2.dr, chromecache_258.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal	chromecache_355.2.dr, chromecache_248.2.dr, chromecache_219.2.dr, chromecache_226.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
18.245.45.143	d3rxaij56vjege.cloudfront.net	United States	16509	AMAZON-02US	false
143.204.215.19	unknown	United States	16509	AMAZON-02US	false
34.36.213.229	cdn.pendo.io	United States	2686	ATGS-MMD-ASUS	false
104.16.80.73	cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
52.222.250.117	unknown	United States	16509	AMAZON-02US	false
104.17.202.31	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
34.107.204.85	data.pendo.io	United States	15169	GOOGLEUS	false
52.222.250.40	d3tnn7lar6ozas.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.255.3	solve-api.forethought.ai	United States	13335	CLOUDFLARENETUS	false
65.9.7.19	d226aj4ao1t61q.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.1.4	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
104.17.205.31	unknown	United States	13335	CLOUDFLARENETUS	false
216.198.54.3	static.zdassets.com	United States	7321	LNET-ASNUS	false
216.198.53.3	ekr.zdassets.com	United States	7321	LNET-ASNUS	false
188.114.96.3	solve-ui.pages.dev	European Union	13335	CLOUDFLARENETUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
143.204.215.3	d3r4ionp7m7mlj.cloudfront.net	United States	16509	AMAZON-02US	false
216.198.53.1	prodhostedtest.zendesk.com	United States	7321	LNET-ASNUS	false
34.120.195.249	o185886.ingest.sentry.io	United States	15169	GOOGLEUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
143.204.215.65	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.8
192.168.2.17
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591024
Start date and time:	2025-01-14 16:19:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://yourexcellency.activehosted.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@22/318@96/31
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.184.206, 142.250.110.84, 172.217.16.206, 142.250.185.206, 142.250.185.74, 142.250.184.227, 216.58.206.42, 142.250.186.106, 142.250.185.234, 216.58.212.170, 216.58.212.138, 142.250.185.170, 142.250.74.202, 142.250.186.74, 142.250.185.138, 142.250.186.42, 142.250.185.202, 142.250.184.234, 216.58.206.74, 142.250.186.170, 142.250.181.234, 217.20.57.20, 2.17.190.73, 172.217.18.106, 216.58.212.174, 216.58.206.78, 172.217.18.123, 142.250.186.59, 142.250.186.91, 142.250.74.219, 216.58.212.155, 142.250.185.187, 142.250.185.219, 142.250.185.251, 142.250.186.187, 142.250.186.123, 142.250.181.251, 216.58.206.59, 142.250.184.219, 142.250.186.155, 172.217.23.123, 172.217.18.27, 172.217.16.219, 142.250.184.251, 142.250.185.91, 216.58.206.91, 142.250.185.155, 216.58.212.187, 142.250.186.78, 216.58.206.46, 142.250.186.46, 2.23.242.162, 52.149.20.212, 23.206.229.226, 13.107.246.45
Excluded domains from analysis (whitelisted): www.bing.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, pendo-static-5646107534426112.storage.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://yourexcellency.activehosted.com

Input	Output
URL: http://yourexcellency.activehosted.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: http://yourexcellency.activehosted.com
URL: https://yourexcellency.activehosted.com/admin/js/j... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a monkey-patch for jQuery that automatically adds a CSRF token to AJAX requests and form submissions. While this is a common security practice, the implementation has some moderate-risk indicators that warrant further review." }
/** * Monkey patch jQuery so that for each AJAX request, it grabs the CSRF token * directly from the cookie and sets it as a header. This way, it will always * send the newest token. / (function(allTheJQueries) { function validateUrl(url) { if (typeof url !== 'string') { return false; } // If the URL does not begin with 'http' then it is a relative path, // so it is okay if (url.indexOf('http') !== 0) { return true; } // If it is a fully qualified URL, then it MUST be to the current host var upperCaseUrl = url.toUpperCase(); var upperCaseDocumentLocationOrigin = document.location.origin.toUpperCase(); return upperCaseUrl.indexOf(upperCaseDocumentLocationOrigin) === 0; } /* * This is called every AJAX request, and adds our CSRF token header * to the request / function setHeader(options) { var csrfResponseHeaderName = "X-XSRF-TOKEN"; if (!validateUrl(options.url)) { return; } options.headers = typeof options.headers === 'object' ? options.headers : {}; options.headers[csrfResponseHeaderName] = getCSRFToken(); } /* * Modify the given version of jquery / function modifyPrefilter(jQuery) { if (typeof jQuery === "undefined"\|\| typeof jQuery.ajaxPrefilter !== "function" ) { return false; } // Sanity check. Did we already override beforeSend? if (jQuery.csrfProtection && jQuery.csrfProtection === "enabled") { return false; } jQuery.ajaxPrefilter(setHeader); jQuery.csrfProtection = "enabled"; return true; } /* * Reads a CSRF token cookie value and appends it to * * @param jQueryImpl * @returns {boolean} / function appendCSRFTokenOnFormSubmit(jQueryImpl) { if (typeof jQueryImpl === "undefined" ) { return false; } // Settings page has their own submit handler. We are handling // token injection there. if (window.location.href.indexOf('main.php?action=settings') !== -1) { return false; } try { jQueryImpl(document).on('submit', 'form', function() { appendCSRFToken(this); }); } catch (e) { return false; } return true; } // As there are several jQuery versions, just register on one var csrfFormInterceptorRegistered = false; // We need to do this to ALL of the given versions. // We use different versions at different times. allTheJQueries.forEach(function(jQueryImpl) { modifyPrefilter(jQueryImpl); if (!csrfFormInterceptorRegistered) { csrfFormInterceptorRegistered = appendCSRFTokenOnFormSubmit(jQueryImpl); } }); })([window.jQuery, window.$J, window.$]); /* * Extracts CSRF protection token from the carrier cookie * * @returns {string} / function getCSRFToken() { var csrfCookieName = 'XSRF-TOKEN'; var cookie = window.document.cookie // Break up all the cookies .split(';') // Filter out only cookies with right name .filter(function(cookiePart) { return cookiePart.indexOf(csrfCookieName) > -1; }) // Get the first instance of the CSRF cookiecsr // (In testing we only want the first one, not the last one.) .shift() ; if (typeof cookie === 'undefined') { return; } // Here we split the token cookie and grab just the token itself: // XSRF-TOKEN=sometoken => ["XSRF-TOKEN", "sometoken"] => 'sometoken' var token = cookie.trim().split('=').pop(); return token; } /* * Appends a CSRF protection token to html forms upon submit. Being defined in * global scope, can be manually added to onSubmit event for every form missed * by jQuery. * * @param interceptedForm / function appendCSRFToken(interceptedForm) { var form = interceptedForm; if (!form.elements) { form = interceptedForm.forms[0]; } var csrfInput = getCSRFInputField(form); if (!csrfInput) { csrfInput = attachNewCSRFInputFieldToForm(form); } csrfInput.setAttribute("value", getCSRFToken()); } /* * Retrieves a csrf validation input field from the form * * @param myForm * @returns {} / function getCSRFInputField(myForm) { return myForm.elements._csrf
URL: https://yourexcellency.activehosted.com/ac_global/... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet contains a few moderate-risk indicators, such as external data transmission and the use of legacy APIs. However, it does not exhibit any high-risk behaviors like dynamic code execution or data exfiltration. The script appears to be a custom AJAX implementation, which is a common practice in web development. While the code could be improved to use more modern and secure approaches, it does not seem to have a clear malicious intent. Further review may be necessary to determine the full context and purpose of this script." }
// ac.js // Loading... // ajax.js var ac_ajax_debug = true; function ac_ajax_request_object() { var hreq; try { hreq = new XMLHttpRequest(); } catch (e) { hreq = null; } return hreq; } function ac_ajax_call_url(url, post, cb) { var hreq = ac_ajax_request_object(); if (hreq !== null) { hreq.onreadystatechange = function() { try { ac_ajax_handle(hreq, cb); } catch (e) {} }; var method = ( post === null ? 'GET' : 'POST' ); var postType = typeof(post); if ( post !== null ) { if ( postType == 'array' \|\| postType == 'object' ) { var postArr = new Array(); for ( var i in post ) { var postType = typeof(post[i]); if ( postType == 'array' \|\| postType == 'object' ) { for ( var j in post[i] ) { if ( typeof(post[i][j]) != 'function' ) { postArr.push(i + '[' + ( j == 'undefined' ? '' : j ) + ']=' + encodeURIComponent(post[i][j])); } } } else if ( postType != 'function' ) { postArr.push(i + '=' + encodeURIComponent(post[i])); } } post = postArr.join('&'); } } hreq.open(method, url, true); hreq.setRequestHeader("X-XSRF-TOKEN", getCSRFToken()); if ( post !== null ) { hreq.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); } hreq.send(post); } } function ac_ajax_proxy_call_url(base, url, post, cb) { if (post !== null) ac_ajax_call_url(base + "/ac_global/functions/ajax_proxy.php?post=1&url=" + ac_b64_encode(url), post, cb); else ac_ajax_call_url(base + "/ac_global/functions/ajax_proxy.php?url=" + ac_b64_encode(url), post, cb); } function ac_ajax_proxy_call_cb(base, url, func, cb) { if (url.match(/\?/)) url = url + "&f=" + func; else url = url + "?f=" + func; url += "&rand=" + ac_b64_encode(Math.random().toString()); if (arguments.length > 3) { for (var i = 4; i < arguments.length; i++) url += "&p[]=" + encodeURIComponent(arguments[i]); } ac_ajax_proxy_call_url(base, url, null, cb); } function ac_ajax_call(url, func) { if (arguments.length < 3) ac_ajax_call_cb(ac_str_url(url), func, null); else { ac_ajax_call_cb(ac_str_url(url), func, null, ac_ary_last(arguments, 2)); } } function ac_ajax_call_cb(url, func, cb) { if (func) { if (url.match(/\?/)) url = url + "&f=" + func; else url = url + "?f=" + func; } url += "&rand=" + ac_b64_encode(Math.random().toString()); if (arguments.length > 3) { for (var i = 3; i < arguments.length; i++) url += "&p[]=" + encodeURIComponent(arguments[i]); } if ( cb === null ) cb = function(){}; ac_ajax_call_url(url, null, cb); } function ac_ajax_post_cb(url, func, cb, post) { if (func) { if (url.match(/\?/)) url = url + "&f=" + func; else url = url + "?f=" + func; } url += "&rand=" + ac_b64_encode(Math.random().toString()); if ( cb === null ) cb = function(){}; ac_ajax_call_url(url, post, cb); } function ac_ajax_handle(hreq, cb) { if (hreq !== null) { if (hreq.readyState == 4) { if (hreq.status == 200) { try { var xml = hreq.responseXML; if (xml !== null && xml.documentElement !== null) { if (cb === null) cb = eval("cb_" + xml.documentElement.nodeName); if (typeof cb == "function") cb(xml.documentElement, hreq.responseText); } else { if ( hreq.responseText != '' ) { if (typeof ac_ajax_handle_text == 'function') ac_ajax_handle_text(hreq.responseText); } } /* var rootNode = ( xml !== null ? xml.documentElement : null ); if (cb === null && rootNode) { cb = eval("cb_" + rootNode.nodeName);
URL: https://yourexcellency.activehosted.com/node_modul... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "This script exhibits several moderate-risk behaviors, including external data transmission, fallback domains, and aggressive DOM manipulation. While it does not contain any high-risk indicators like dynamic code execution or data exfiltration, the overall behavior is somewhat suspicious and requires further review." }
!function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var r=null!=arguments[n]?arguments[n]:{};n%2?t(Object(r),!0).forEach((function(t){s(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):t(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function n(t){return n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},n(t)}function r(t,e,n,r,o,i,a){try{var s=t[i](a),l=s.value}catch(t){return void n(t)}s.done?e(l):Promise.resolve(l).then(r,o)}function o(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function i(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function a(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),Object.defineProperty(t,"prototype",{writable:!1}),t}function s(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function l(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,"prototype",{writable:!1}),e&&u(t,e)}function c(t){return c=Object.setPrototypeOf?Object.getPrototypeOf:function(t){return t.__proto__\|\|Object.getPrototypeOf(t)},c(t)}function u(t,e){return u=Object.setPrototypeOf\|\|function(t,e){return t.__proto__=e,t},u(t,e)}function h(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(t){return!1}}function d(t,e,n){return d=h()?Reflect.construct:function(t,e,n){var r=[null];r.push.apply(r,e);var o=new(Function.bind.apply(t,r));return n&&u(o,n.prototype),o},d.apply(null,arguments)}function f(t){var e="function"==typeof Map?new Map:void 0;return f=function(t){if(null===t\|\|(n=t,-1===Function.toString.call(n).indexOf("[native code]")))return t;var n;if("function"!=typeof t)throw new TypeError("Super expression must either be null or a function");if(void 0!==e){if(e.has(t))return e.get(t);e.set(t,r)}function r(){return d(t,arguments,c(this).constructor)}return r.prototype=Object.create(t.prototype,{constructor:{value:r,enumerable:!1,writable:!0,configurable:!0}}),u(r,t)},f(t)}function p(t,e){if(e&&("object"==typeof e\|\|"function"==typeof e))return e;if(void 0!==e)throw new TypeError("Derived constructors may only return object or undefined");return function(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}(t)}function v(t){var e=h();return function(){var n,r=c(t);if(e){var o=c(this).constructor;n=Reflect.construct(r,arguments,o)}else n=r.apply(this,arguments);return p(this,n)}}function m(t,e){for(;!Object.prototype.hasOwnProperty.call(t,e)&&null!==(t=c(t)););return t}function y(){return y="undefined"!=typeof Reflect&&Reflect.get?Reflect.get:function(t,e,n){var r=m(t,e);if(r){var o=Object.getOwnPropertyDescriptor(r,e);return o.get?o.get.call(arguments.length<3?t:n):o.value}},y.apply(this,arguments)}function _(t,e){return e\|\|(e=t.slice(0)),Object.freeze(Object.defineProperties(t,{raw:{value:Object.freeze(e)}}))}function g(t){return function(t){if(Array.isArray(t))return w(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|b(t)\|\|function(){throw
URL: https://yourexcellency.activehosted.com/admin/... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript code appears to be a legitimate login and support functionality for a web application. It includes common practices such as fading the login container, appending the user's email to a forgotten password link, and opening a support page in a new window. There are no high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The code seems to be focused on improving the user experience and providing standard login and support features." }
function fade_login() { $J('#login_container').fadeTo(1000, 0.55); $J('#login_container').fadeTo(5000, 0.25); $J('#login_container').fadeTo(1000, 1.00); } function lookup_link_fix(e) { var url = $J(this).attr('href'); var usr = $J('#user').val(); if (ac_str_email(usr)) { $J(this).attr('href', url + '&email=' + usr); } } function contactSupport() { let url = 'https://help.activecampaign.com/hc/en-us/requests/new'; window.open(url, '_blank'); } $J(document).ready(function () { $J("a.forgotpass").click(lookup_link_fix); // if there is a hash, append it to links if (window.location.hash) { $J("form[name=log_user]").attr('action', $J("form[name=log_user]").attr('action') + window.location.hash); } });
URL: https://yourexcellency.activehosted.com/admin/js/f... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a collection of utility functions and does not contain any high-risk indicators. The functions are primarily focused on DOM manipulation, form handling, and editor management, which are common in web applications. While some of the practices, such as the use of legacy APIs like `XDomainRequest`, may be considered outdated, there is no evidence of malicious intent or data exfiltration. Overall, the risk score is low, and the code seems to be part of a legitimate web application." }
function console_log() { // attempt to send a message to the console try { for(var i =0; i < arguments.length; i++) { console.log(arguments[i]); } } catch(e) {} // fail gracefully if it does not exist } function form_branding_delete(plan, rsid, formid) { if (!plan && !rsid ) { alert(strFormUpgrade); } else { form_part_delete("branding",formid); } } function jump(url) { ac_loader_show(); window.location = url; } /* CLONER FUNCTIONS / function clone_1st_element(node, elem, clearInputs) { return ac_dom_clone_node(node, elem, 0, clearInputs); } function clone_1st_div(node) { return clone_1st_element(node, 'div', true); } function clone_1st_tr(node) { return clone_1st_element(node, 'tr', false); } function clear_inputs(node) { $J('input', node).each(function(i) { var o = $J(this); var t = o.attr('type'); if (t == 'text' \|\| t == 'file') o.val(''); }); } function clear_selects(node) { $J('select', node).each(function(i) { this.selectedIndex = -1; }); } function clear_areas(node) { $J('textarea', node).html(''); } function remove_element(node) { var me = $J(node); var dad = me.parent(); if ( $J("> div", dad).length > 1 ) { me.remove(); } else { clear_inputs(node); clear_selects(node); clear_areas(node); } } / CLONER END / function preview_template(id, isBasic) { if ( !isBasic ) { var preview_url = plink + '/template/' + id + '/preview_dual'; } else { var preview_url = plink + '/admin/preview_dual.php?t=' + id; } window.open(preview_url ,'preview','height=812,width=1250,menubar=no,location=no,resizable=yes,scrollbars=no,status=yes'); } function toggleEditor(id, action, settings) { if ( action == ac_editor_is(id + 'Editor') ) return false; ac_editor_toggle(id + 'Editor', settings); $J('#' + id + 'EditorLinkOn').toggleClass("currenttab", action).toggleClass("othertab", !action); $J('#' + id + 'EditorLinkOff').toggleClass("currenttab", !action).toggleClass("othertab", action); $J('#' + id + 'EditorLinkDefault').toggle( action != ( ac_js_admin.htmleditor == 1 ) ); return false; } function setDefaultEditor(id) { var isEditor = ac_editor_is(id + 'Editor'); if ( isEditor == ( ac_js_admin.htmleditor == 1 ) ) return false; // send save command // save new admin limit remotelly ac.get("user.user_update_value", ['htmleditor', ( isEditor ? 1 : 0 )]); $J('#' + id + 'EditorLinkDefault').toggle(); ac_js_admin.htmleditor = ( isEditor ? 1 : 0 ); return false; } function form_editor_personalization_push(nodes, id) { for (var i = 0; i < nodes.length; i++) $J('#' + id).append(nodes[i]); } function form_editor_insert(field, value) { // only today tag should be reset if ( value.match( /^%TODAY[+-]\d+%$/ ) ) { value = '%TODAY%'; } if ( value == '%TODAY%' ) { var entered = prompt(strEnterRange, '+1'); if ( !entered \|\| !entered.match( /^[-+]?\d+$/ ) ) { alert(strEnterRangeInvalid); return ''; } if ( !entered.match(/^[-+].$/) ) { entered = '+' + entered; } value = '%TODAY' + entered + '%'; } ac_form_insert_cursor(field, value); } function form_editor_defaults(prfx, format, sets) { $J('#' + prfx + 'textField').val(''); $J('#' + prfx + 'formatField').val(format); ac_form_value_set($J('#' + prfx + 'Editor').get(0), ''); // show appropriate editor ac_editor_mime_switch(prfx, $J('#' + prfx + 'formatField').val()); } function form_editor_update(prfx, ary, suffix) { if ( typeof suffix != 'string' ) suffix = 'PersTags'; if(ary.format) $J('#' + prfx + 'formatField').val(ary.format); $J('#' + prfx + 'textField').val(ary.text); ac_form_value_set($J('#' + prfx + 'Editor').get(0), ary.html); // show appropriate editor ac_editor_mime_switch(prfx, $J('#' + prfx + 'formatField').val()); } function export_link_build(context, ary) { var link = 'export.php?action=' + context; for ( var i in ary ) { link += '&' + i + '=' + ary[i]; } if ( typeof(ourflag) == 'undefined' \|\| prompt('Go to this export URL?', link) ) wi
URL: https://yourexcellency.activehosted.com/admin/js/j... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple notification plugin that displays success, error, warning, or notice messages on a web page. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code uses standard jQuery methods and DOM manipulation, which are considered low-risk practices. While the snippet uses some legacy APIs like `XDomainRequest`, these are not inherently malicious and are used in a transparent manner for displaying notifications. Overall, the script seems to be a legitimate utility with no clear signs of malicious intent." }
// // Notification // Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}) // // Docs: // // type: string (success, error, warning, notice) // text: string (alert text) // persist: boolean (should the alert remain on screen) // delay: int (time in milliseconds for the alert to disappear if persistant is set to true) (function($){ $.fn.notification = function( options ) { var _this = this; // Default options var settings = $.extend({ text: "Supply some text for your notification.", type: "success", persist: true, delay: 5000 }, options ); var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>'; var existing = $("> div.notify." + settings.type, _this); if ( existing.length ) { existing //.removeClass() //.addClass('notify') //.addClass(settings.type) .html(settings.text) ; var timeout = existing.data('notify-timeout'); if ( timeout ) { clearTimeout(timeout); timeout = false; } } else { existing = $(template); _this.prepend(existing); } if (settings.persist != true) { var timeout = setTimeout(function() { _this.find('.notify').animate({ opacity: 0}, 500, function() { _this.find('.notify').remove(); clearTimeout(timeout); }); }, settings.delay); existing.data('notify-timeout', timeout); } }; })(jQuery);
URL: https://yourexcellency.activehosted.com/admin/inde... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a configuration object for the New Relic web monitoring service. It sets up various options and configurations related to analytics, error reporting, and distributed tracing. While the script contains some potentially sensitive information like the license key and application ID, it does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or redirects to malicious domains. The script seems to be part of a legitimate web monitoring and analytics service, so the overall risk is relatively low." }
(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:true},ajax:{deny_list:["api.candu.ai","collect-us.app-us1.com","sockjs.pusher.com","www.google-analytics.com","js-agent.newrelic.com"]},session_trace:{sampling_rate:0.0,mode:"FIXED_RATE",enabled:true,error_sampling_rate:0.0},distributed_tracing:{enabled:true}};(window.NREUM\|\|(NREUM={})).loader_config={agentID:"456980009",accountID:"149034",trustKey:"149034",xpid:"VQIOUVVXGwcFUlhVDwgCUw==",licenseKey:"d3d5c809d5",applicationID:"456978955"};;/! For license information please see nr-loader-spa-1.278.2.min.js.LICENSE.txt / (()=>{var e,t,r={8122:(e,t,r)=>{"use strict";r.d(t,{a:()=>i});var n=r(944);function i(e,t){try{if(!e\|\|"object"!=typeof e)return(0,n.R)(3);if(!t\|\|"object"!=typeof t)return(0,n.R)(4);const r=Object.create(Object.getPrototypeOf(t),Object.getOwnPropertyDescriptors(t)),o=0===Object.keys(r).length?e:r;for(let a in o)if(void 0!==e[a])try{if(null===e[a]){r[a]=null;continue}Array.isArray(e[a])&&Array.isArray(t[a])?r[a]=Array.from(new Set([...e[a],...t[a]])):"object"==typeof e[a]&&"object"==typeof t[a]?r[a]=i(e[a],t[a]):r[a]=e[a]}catch(e){(0,n.R)(1,e)}return r}catch(e){(0,n.R)(2,e)}}},2555:(e,t,r)=>{"use strict";r.d(t,{Vp:()=>c,fn:()=>s,x1:()=>u});var n=r(384),i=r(8122);const o={beacon:n.NT.beacon,errorBeacon:n.NT.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},a={};function s(e){try{const t=c(e);return!!t.licenseKey&&!!t.errorBeacon&&!!t.applicationID}catch(e){return!1}}function c(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!a[e])throw new Error("Info for ".concat(e," was never set"));return a[e]}function u(e,t){if(!e)throw new Error("All info objects require an agent identifier!");a[e]=(0,i.a)(t,o);const r=(0,n.nY)(e);r&&(r.info=a[e])}},9417:(e,t,r)=>{"use strict";r.d(t,{D0:()=>p,gD:()=>m,xN:()=>g});var n=r(3333),i=r(993);const o=e=>{if(!e\|\|"string"!=typeof e)return!1;try{document.createDocumentFragment().querySelector(e)}catch{return!1}return!0};var a=r(2614),s=r(944),c=r(384),u=r(8122);const d="[data-nr-mask]",l=()=>{const e={feature_flags:[],experimental:{marks:!1,measures:!1,resources:!1},mask_selector:"*",block_selector:"[data-nr-block]",mask_input_options:{color:!1,date:!1,"datetime-local":!1,email:!1,month:!1,number:!1,range:!1,search:!1,tel:!1,text:!1,time:!1,url:!1,week:!1,textarea:!1,select:!1,password:!0}};return{ajax:{deny_list:void 0,block_internal:!0,enabled:!0,autoStart:!0},distributed_tracing:{enabled:void 0,exclude_newrelic_header:void 0,cors_use_newrelic_header:void 0,cors_use_tracecontext_headers:void 0,allowed_origins:void 0},get feature_flags(){return e.feature_flags},set feature_flags(t){e.feature_flags=t},generic_events:{enabled:!0,autoStart:!0},ha
URL: https://yourexcellency.activehosted.com/admin/inde... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript code appears to be primarily focused on handling login-related functionality, such as displaying error notifications, fixing links, and opening a support contact page. While it includes some dynamic behavior, such as fading the login container and appending the current URL hash to the login form action, the overall risk level is relatively low. The code does not exhibit any high-risk indicators like dynamic code execution, data exfiltration, or redirects to suspicious domains. The use of jQuery and common login-related functionality suggests this is likely a legitimate script, with some minor outdated practices (e.g., `fadeTo`) that could be improved." }
$J(document).ready(function () { $J("form").notification({text: "Invalid username or password. Forgot your password? <a href='?action=account_lookup'>Reset it</a>", type: "error"}); $J(".notify a").click(lookup_link_fix); }); function fade_login() { $J('#login_container').fadeTo(1000, 0.55); $J('#login_container').fadeTo(5000, 0.25); $J('#login_container').fadeTo(1000, 1.00); } function lookup_link_fix(e) { var url = $J(this).attr('href'); var usr = $J('#user').val(); if (ac_str_email(usr)) { $J(this).attr('href', url + '&email=' + usr); } } function contactSupport() { let url = 'https://help.activecampaign.com/hc/en-us/requests/new'; window.open(url, '_blank'); } $J(document).ready(function () { $J("a.forgotpass").click(lookup_link_fix); // if there is a hash, append it to links if (window.location.hash) { $J("form[name=log_user]").attr('action', $J("form[name=log_user]").attr('action') + window.location.hash); } });
URL: https://yourexcellency.activehosted.com/admin/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get more out of ActiveCampaign", "prominent_button_name": "Login", "text_input_field_labels": [ "Username / Email", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://yourexcellency.activehosted.com/admin/ Model: Joe Sandbox AI	{ "brands": [ "ActiveCampaign" ] }
	{ "brands": [ "ActiveCampaign" ] }
URL: https://yourexcellency.activehosted.com/admin/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get more out of ActiveCampaign", "prominent_button_name": "Login", "text_input_field_labels": [ "Username / Email", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://yourexcellency.activehosted.com/admin/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get more out of ActiveCampaign", "prominent_button_name": "Login", "text_input_field_labels": [ "Username / Email", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://yourexcellency.activehosted.com/admin/jsc/... Model: Joe Sandbox AI	```json { "risk_score": 4, "reasoning": "The script includes a redirect function that can redirect users to potentially untrusted domains, which is a high-risk indicator (+3 points). It also uses aggressive DOM manipulation with the clickToEdit function, which is a moderate-risk indicator (+2 points). However, there are no clear signs of malicious intent or data exfiltration, and the script does not interact with suspicious domains. The final score is adjusted to reflect the need for further review due to unclear behavior." }
var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+ Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d=$J(this); a.preventDefault();d.blur();c(d)}});$J(document).on("click",function(a){_.each($J(".click-to-edit."+e),function(a){a=$J(a);a.removeClass("click-to-edit "+e);c(a)})})},decodeBase64:function(a){return window.atob?decodeURIComponent(window.atob(a)):decodeURIComponent(ac._decodeBase64(a))},encodeBase64:function(a){return window.btoa?window.btoa(encodeURIComponent(a)):ac._encodeBase64(encodeURIComponent(a))},var:function(a,c){var d={};"string"==typeof a?d[a]=c:"object"==typeof a&&(d=a);$J.each(d,function(a, c){for(var e=$J("*[var='"+ac.str.escape(a)+"']"),f=0,l;f<e.length;f++){var k=$J(e[f]);l="function"==typeof c?c(a,d):c;if(k.is("select"))k.val(l);else if(k.is("input"))switch(k.prop("type")){case "radio":k.val()==l&&k.prop("checked",!0);break;case "checkbox":k.val()==l?k.prop("checked",!0):k.prop("checked",!1);break;default:k.val(l)}else k.html(l)}})},droparea:function(a,c,d,e){var f=e.init\|\|function(){},g=e.start\|\|function(){},h=e.complete\|\|function(a,c){};e=e.error\|\|function(a){};$J(a).attr({"data-post":"old-imageup-dnd.php", "data-width":c,"data-height":d,name:"dropfile"}).droparea({instructions:"",over:"",init:f,start:g,complete:h,error:e})},inherit:function(a){var c={};a&&(c.__proto__=a);return c},automodal:function(a,c){a.title\|\|(a.title="[Please use the title property to set a title for this modal]");a.body\|\|(a.body="");a.oklabel\|\|(a.oklabel=strOK);a.okclass\|\|(a.okclass="green");a.closelabel\|\|(a.closelabel=a.hideok?strClose:strCancel);a.classes\|\|(a.classes="");a.dont_blur\|\|$J(document.activeElement).blur();c=c\|\|function(){}; $J("#ac_automodal").remove();var d=""+('<div id="ac_automodal" class="modal '+(a.condor?"modal--condor ":"")+"show "+a.classes+'" style="display:none;">');d=d+'<div class="modal-dialog"><div class="modal-content"><div class="modal-header">'+('<a href="#" onclick="return false;" class="close_x" data-dismiss="modal">'+ac.icon("x",{pos:"middle",size:"medium"})+"</a>");d+=sprintf("<h3>%s</h3>",a.title);d=d+'</div><form><div class="modal-body">'+(a.condor?a.body:'<div class="body">'+a.body+"</div>");if(a.inputs)for(var e= 0;e<a.inputs.length;e++){var f=a.inputs[e];f.label=f.label\|\|"";f.type=f.type\|\|"text";f.name=f.name\|\|"name"+e;f.className=f.className\|\|"";f.default=f.default\|\|"";f.attrs=f.attrs\|\|"";f.placeholder=f.placeholder\|\|"";f.placeholder&&(f.placeholder=' placeholder="'+f.placeholder+'"');switch(f.type){case "select":case "select-multiple":f.options=f.options\|\|[];d+=sprintf('<fieldset class="select-options %s">',f.className);d+=sprintf("<label>%s</label>",f.label?f.label:"");d+=sprintf('<select name="%s" %s>', f.name,f.type,"select-multiple"==f.type?"multiple":"");for(e=0;e<f.options.length;e++)d+=sprintf('<option %s value="%s">%s</option>',f.options[e].value==f.default?"selected":"",f.options[e].value,f.options[e].label);d+="</select>";d+="</fieldset>";break;case "textarea":f.rows=f.rows\|\|8;f.cols=f.cols\|\|40;d+=sprintf('<fieldset class="input %s">',f.className);d+=sprintf("<label>%s</label>",f.label?f.label:"");
URL: https://yourexcellency.activehosted.com/admin/ Model: Joe Sandbox AI	{ "brands": [ "ActiveCampaign" ] }
	{ "brands": [ "ActiveCampaign" ] }
URL: https://yourexcellency.activehosted.com/admin/inde... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script includes a deny list for certain domains, which suggests an attempt to block data transmission to these domains. This indicates a moderate-risk behavior of external data transmission (+2 points). However, there are no high-risk indicators such as dynamic code execution or data exfiltration, and the script appears to be part of a legitimate monitoring or analytics setup, which could justify a reduction in risk score. However, without explicit transparency or trusted domain interactions, the score remains at 2." }
(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:true},ajax:{deny_list:["api.candu.ai","collect-us.app-us1.com","sockjs.pusher.com","www.google-analytics.com","js-agent.newrelic.com"]},session_trace:{sampling_rate:0.0,mode:"FIXED_RATE",enabled:true,error_sampling_rate:0.0},distributed_tracing:{enabled:true}};(window.NREUM\|\|(NREUM={})).loader_config={agentID:"456980009",accountID:"149034",trustKey:"149034",xpid:"VQIOUVVXGwcFUlhVDwgCUw==",licenseKey:"d3d5c809d5",applicationID:"456978955"};;/! For license information please see nr-loader-spa-1.278.2.min.js.LICENSE.txt / (()=>{var e,t,r={8122:(e,t,r)=>{"use strict";r.d(t,{a:()=>i});var n=r(944);function i(e,t){try{if(!e\|\|"object"!=typeof e)return(0,n.R)(3);if(!t\|\|"object"!=typeof t)return(0,n.R)(4);const r=Object.create(Object.getPrototypeOf(t),Object.getOwnPropertyDescriptors(t)),o=0===Object.keys(r).length?e:r;for(let a in o)if(void 0!==e[a])try{if(null===e[a]){r[a]=null;continue}Array.isArray(e[a])&&Array.isArray(t[a])?r[a]=Array.from(new Set([...e[a],...t[a]])):"object"==typeof e[a]&&"object"==typeof t[a]?r[a]=i(e[a],t[a]):r[a]=e[a]}catch(e){(0,n.R)(1,e)}return r}catch(e){(0,n.R)(2,e)}}},2555:(e,t,r)=>{"use strict";r.d(t,{Vp:()=>c,fn:()=>s,x1:()=>u});var n=r(384),i=r(8122);const o={beacon:n.NT.beacon,errorBeacon:n.NT.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},a={};function s(e){try{const t=c(e);return!!t.licenseKey&&!!t.errorBeacon&&!!t.applicationID}catch(e){return!1}}function c(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!a[e])throw new Error("Info for ".concat(e," was never set"));return a[e]}function u(e,t){if(!e)throw new Error("All info objects require an agent identifier!");a[e]=(0,i.a)(t,o);const r=(0,n.nY)(e);r&&(r.info=a[e])}},9417:(e,t,r)=>{"use strict";r.d(t,{D0:()=>p,gD:()=>m,xN:()=>g});var n=r(3333),i=r(993);const o=e=>{if(!e\|\|"string"!=typeof e)return!1;try{document.createDocumentFragment().querySelector(e)}catch{return!1}return!0};var a=r(2614),s=r(944),c=r(384),u=r(8122);const d="[data-nr-mask]",l=()=>{const e={feature_flags:[],experimental:{marks:!1,measures:!1,resources:!1},mask_selector:"*",block_selector:"[data-nr-block]",mask_input_options:{color:!1,date:!1,"datetime-local":!1,email:!1,month:!1,number:!1,range:!1,search:!1,tel:!1,text:!1,time:!1,url:!1,week:!1,textarea:!1,select:!1,password:!0}};return{ajax:{deny_list:void 0,block_internal:!0,enabled:!0,autoStart:!0},distributed_tracing:{enabled:void 0,exclude_newrelic_header:void 0,cors_use_newrelic_header:void 0,cors_use_tracecontext_headers:void 0,allowed_origins:void 0},get feature_flags(){return e.feature_flags},set feature_flags(t){e.feature_flags=t},generic_events:{enabled:!0,autoStart:!0},harvest:{interval:30},jserrors:{enabled:!0,autoStart:!0},logging:{enabled:!0,autoStart:!0,level:i.p_.INFO},metrics:{enabled:!0,autoStart:!0},obfuscate:void 0,page_action:{enabled:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,autoStart:!0},performance:{get capture_marks(){return e.feature_flags.includes(n.$v.MARKS)\|\|e.experimental.marks},set capture_marks(t){e.experimental.marks=t},get capture_measures(){return e.feature_flags.includes(n.$v.MEASURES)\|\|e.experimental.measures},set capture_measures(t){e.experimental.measures=t},resources:{get enabled(){return e.feature_flags.includes(n.$v.RESOURCES)\|\|e.experimental.resources},set enabled(t){e.experimental.resources=t},asset_types:[],first_party_domains:[],ignore_newrelic:!0}},privacy:{cookies_enabled:!0},proxy:{assets:void 0,beacon:void 0},session:{expiresMs:a.wk,inactiveMs:a.BB},session_replay:{autoStart:!0,enabled:!1,preload:!1,sampling_rate:10,error_sampling_rate:100,collect_fonts:!1,inline_images:!1,fix_stylesheets:!0,mask_all_inputs:!0,get mask_text_selector(){return e.mask_sele
URL: https://yourexcellency.activehosted.com/admin/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://yourexcellency.activehosted.com/admin/ Model: Joe Sandbox AI	```json{ "legit_domain": "activecampaign.com", "classification": "known", "reasons": [ "The brand 'ActiveCampaign' is a known brand associated with marketing automation and email marketing services.", "The URL 'yourexcellency.activehosted.com' uses a subdomain of 'activehosted.com', which is a domain often used by ActiveCampaign for hosting customer-specific content.", "The domain 'activehosted.com' is related to ActiveCampaign's services, indicating a legitimate association.", "The presence of input fields for 'Username / Email' and 'Password' is typical for login pages, which is consistent with a service like ActiveCampaign." ], "riskscore": 2}
URL: yourexcellency.activehosted.com Brands: ActiveCampaign Input Fields: Username / Email, Password
URL: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get more out of ActiveCampaign", "prominent_button_name": "Login", "text_input_field_labels": [ "Username / Email", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Model: Joe Sandbox AI	{ "brands": [ "ActiveCampaign" ] }
	{ "brands": [ "ActiveCampaign" ] }
URL: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get more out of ActiveCampaign", "prominent_button_name": "Login", "text_input_field_labels": [ "Username / Email", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Model: Joe Sandbox AI	{ "brands": [ "ActiveCampaign" ] }
	{ "brands": [ "ActiveCampaign" ] }
URL: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get more out of ActiveCampaign", "prominent_button_name": "Login", "text_input_field_labels": [ "Username / Email", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Model: Joe Sandbox AI	{ "brands": [ "ActiveCampaign" ] }
	{ "brands": [ "ActiveCampaign" ] }
URL: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Model: Joe Sandbox AI	```json{ "legit_domain": "activecampaign.com", "classification": "known", "reasons": [ "The brand 'ActiveCampaign' is a known brand associated with marketing automation and email marketing services.", "The URL 'yourexcellency.activehosted.com' uses a subdomain structure which is common for service providers offering custom domains for their clients.", "The main domain 'activehosted.com' is associated with ActiveCampaign's services, indicating it could be a legitimate subdomain used by a customer of ActiveCampaign.", "The presence of input fields for 'Username / Email' and 'Password' is typical for login pages, which is expected for a service like ActiveCampaign." ], "riskscore": 3}
URL: yourexcellency.activehosted.com Brands: ActiveCampaign Input Fields: Username / Email, Password
URL: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Model: Joe Sandbox AI	```json{ "legit_domain": "activecampaign.com", "classification": "known", "reasons": [ "The brand 'ActiveCampaign' is known and associated with the domain 'activecampaign.com'.", "The URL 'yourexcellency.activehosted.com' uses a subdomain of 'activehosted.com', which is not the primary domain of ActiveCampaign.", "The domain 'activehosted.com' could be a legitimate service or hosting provider used by ActiveCampaign, but it is not the main domain.", "The presence of input fields for 'Username / Email' and 'Password' on a non-primary domain raises suspicion.", "The URL does not contain obvious misspellings or unusual characters, but the use of a subdomain could be a tactic to mislead users." ], "riskscore": 7} Google indexed: False
URL: yourexcellency.activehosted.com Brands: ActiveCampaign Input Fields: Username / Email, Password

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 14:20:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.983252797891645
Encrypted:	false
SSDEEP:	48:850dTTbjimHJAidAKZdA1oehwiZUklqehOy+3:85UTianVy
MD5:	6477ECF51626E2F6A6CD588082A7EE0B
SHA1:	DE88ADE9EDFA25342C40E66E7692BB7EDC530237
SHA-256:	A8D5FD6B947AE9C58FB0C22BDA83B42E90903F31A579BB25025439BEB0C6DB44
SHA-512:	44A8EC223178DF4BED5C8FB7451006E3D4ECCA33839C03DEA8002DF1C131E488CA47435F911CAAF9E4D02D5A0A8C518C87E89D7C4A31467C023578BABE2BE461
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....{..f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Z.z....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Z.z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Z.z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Z.z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Z.z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............l>.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 14:20:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.99733450508335
Encrypted:	false
SSDEEP:	48:8U20dTTbjimHJAidAKZdA1leh/iZUkAQkqehFy+2:8fUTiaN9QMy
MD5:	B9AE60176C10F8047839C1B5233A06EC
SHA1:	F3FB4D795184237ECD83F170607E72B9FEE544C3
SHA-256:	555C434C04A90BCDA94B8BE79A144C559EE56BFDAEA4F741A59C28921552F8E8
SHA-512:	088CE80214C798497079E04880C26C9767002BA79E5D578931D0761942B8BD9909B3D68B2551609F9C04E1E883C0ABD5E6A70D070AD75446ADF56CB6AD161034
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....h...f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Z.z....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Z.z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Z.z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Z.z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Z.z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............l>.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00815332804115
Encrypted:	false
SSDEEP:	48:8q0dTTbjbHJAidAKZdA14t5eh7sFiZUkmgqeh7sTy+BX:8qUTttnRy
MD5:	C4A1C46C6BFA915E213C9C984DF53736
SHA1:	DBCD34F7BAAFE2BC81193761C6EA7F1E7514CF8B
SHA-256:	DA67870B53E64C3F17A73512A0020150FD74993DF8C640B359377A53865A7ED7
SHA-512:	4F57A7CA318B06B12C91A89E16AA355D603ACF4E48545CFB9D503EF9EA03F2460F8D538B2D3DE15CBDFE62B104AECA0BF197A7844A7D1A50ACC9E4116D69F528
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Z.z....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Z.z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Z.z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Z.z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............l>.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 14:20:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9962848308942283
Encrypted:	false
SSDEEP:	48:8o0dTTbjimHJAidAKZdA16ehDiZUkwqeh5y+R:8oUTia+by
MD5:	7EA7FE114A5F8CD0A0C4244B0B6F553A
SHA1:	089A8474ADDD4E466F06161514676EC27490743C
SHA-256:	21243F8B2C5B16269DBA7309677C9D86932AFAFB4632DD5C31BA507A8B7021FE
SHA-512:	17F355D6C796EBC744FBD210A937219A235189F859C6AA428A2F11091A65CDC1908FCA833F9270C48DD82AF80E551A04714E041C64256C4766044ACFE45CE015
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....B..f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Z.z....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Z.z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Z.z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Z.z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Z.z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............l>.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 14:20:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.983893514145684
Encrypted:	false
SSDEEP:	48:8Y0dTTbjimHJAidAKZdA1UehBiZUk1W1qeh/y+C:8YUTiaO9fy
MD5:	8D379DD9EEEEA23D1CE6F1F9E0096537
SHA1:	2D152803072AFB356863E55A16083F8F85696BB9
SHA-256:	C6B3B5D3C63CAA49CF766EE96A62671B9F4EA6F8ACA3E72973335BD51EEB5069
SHA-512:	D8F672C97E6C36BEB51DCA6FCFC86A5AE64D39D49A560883512761E61FB27B6CB83877F0FCEA71206D05F06FC0D299310E7F0295015C5437EA98E33B7D86B74C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....T..f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Z.z....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Z.z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Z.z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Z.z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Z.z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............l>.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 14:20:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.995882059076095
Encrypted:	false
SSDEEP:	48:8M0dTTbjimHJAidAKZdA1duTrehOuTbbiZUk5OjqehOuTbRy+yT+:8MUTiaPTYTbxWOvTbRy7T
MD5:	AA565117C21BC23257CDE9C77ED701A9
SHA1:	B08DB051A5693918C0A4480A86939323456623A1
SHA-256:	AD3E951AC46BF6DD6401A79DD08CCE3F60E39BF32A1E09E960383957FAB05643
SHA-512:	DFDFFA759E263F6A4BB99E834A331CB5949CED8F867FA0E246B91E35CA9EEA5D2DBA565B5DE73106550E74049110B269C74EFE54EE8F30F4F2E1E7A0D3BB7DF2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....OV..f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Z.z....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Z.z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Z.z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Z.z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Z.z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............l>.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (944)
Category:	downloaded
Size (bytes):	153634
Entropy (8bit):	5.071540401076863
Encrypted:	false
SSDEEP:	1536:aNjsEFdaGU6u9k9s4nV1kw2sIcao0rII05RfvxwUEg5o0NG0lHGc/Rbie0XQ/1sm:BH9lwDRbi4PhBLZkQ46
MD5:	ED29493E4E2A6D3BAF5E44FF14E51AFC
SHA1:	B68D1BDE9C9DC80482A70B9A138818AC3E16FF07
SHA-256:	794185BB74A488CA7D2E91871E9CD7BDDDF0864EF083F5862D9332D9767B2B11
SHA-512:	E89C6510D8DAABF6210BB9A9D9BD92AA41F0E183E1A374556ACE7B6AB665EB2041227BEF1687794C040D5C3734108C6E7267C1AC3A557B906BA11941A235D7ED
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/style.css?v=v1027121389246675
Preview:	/* ---------------------------. WARNING: DEPRECATED - DO NOT ADD TO THIS FILE.-------------------------------/../. Global element styling./../ Import / Include fonts here /.@import url("https://fonts.googleapis.com/css?family=IBM+Plex+Sans:200,300,400,500,600,700");../-------------------------------------------------------------------------\. Colors.\------------------------------------------------------------------------/./ Primary palette /..ac-blue { background: #19467C;}..medium-blue { background: #23538C;}..highlight-blue { background: #3E70B5;}..light-blue { background: #EEF4FC;}..alt-green { background: #4DCBA9;}../ Backgrounds and borders /..dark-grey { background: var(--slate-500);}..border-grey { border: var(--slate-200) 1px solid;}..medium-grey { background: var(--slate-100);}..light-grey { background: var(--slate-150);}../ Status and label /..go-green { background: #60CB98;}..stop-red { background: #F37C7B;}..border-red { background: #F37C7B;}../ Text */.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2090
Entropy (8bit):	4.9960885285090875
Encrypted:	false
SSDEEP:	24:VJXImbnyoWYd7J0YcAkN8mx8ipMV3BWTxgb+E6hvgPZUsyHiBY1XcrY:VJXI8nyol7Mpn8AnSnRB4mUXIY
MD5:	F9E56AF70E256BFF067A1E33017E7923
SHA1:	470A964363983D15EBB12571AEC76741D4EAB4D8
SHA-256:	3CFA49D8A373C3A457ADE077505808A6304B5207249B1D5007E74AF100DB66F2
SHA-512:	66A70E45FDE34964D1B804ECD274F66D7014302E5F54DA7966EA42488753A98599C64666F5F183A1786216DC4057E5185D0999BC01B43555A1FCAE58ABB81B67
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/footer.css?v=v102712283221662
Preview:	/-------------------------------------------/./* Admin Global Footer Style ... / ./-------------------------------------------/..../------ Framework ------/.#page_footer {width:100%;height:64px;padding:24px 24px; background: #4e4e4e;text-align:left;box-sizing: border-box;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;}.#page_footer a, #page_footer a:visited { color:#c0c0c0;font-size:14px;text-decoration: none;margin-right:14px;}.#page_footer a:hover { color:#fff;}..#page_footer .twitter-icon:hover { color:#fff;}.#page_footer .facebook-icon:hover { color:#fff;}..#page_footer a.ac-icon { font-size:19px;}.../------ Support popup menu ------/../ Icon */..support-icon { position: fixed; right: 20px; bottom: 20px; width: 47px; height: 47px; background-color: #4DCBA9; border-radius: 100%; box-shadow: 0 1px 2px rgba(0, 0, 0, 0.2); cursor: pointer;z-index: 2000; }..support-icon:hover { background-color: #40c19e; }..support-icon span { width: 22px; height: 22px;font-size:2

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4871), with no line terminators
Category:	downloaded
Size (bytes):	4871
Entropy (8bit):	5.435829573726116
Encrypted:	false
SSDEEP:	96:YDUJwqC++6G5cA4hiabI/Ap5XnqU/imNJGeSMSkaeZswuGxGKS:YD4wl++6GohiabI/q5XnT/imOpkTsCxC
MD5:	D585776B166FE428BBE3201BB1138A61
SHA1:	3B4CB5151D9AAEA8224C9858CF08D79F80C6709C
SHA-256:	793250DEEBB0867A1DDDFA7C18860E4984E8CBD621EBDDC5B9495FC18349B1AB
SHA-512:	4DF53171820EB1528DE8B32FBAF033022411523836DDB0A477A66A9EA39FE557D033D785DE1BCBA5B3EF6B8779771E40E34FABE6445190F16C5BAE634354ADA9
Malicious:	false
Reputation:	low
URL:	https://platform-cdn.app-us1.com/ac-frontend/maestro/assets/zendesk-widget.js
Preview:	!function(){const e="ze-snippet",t="ca0b7420-83ee-40d7-917b-e5d48bb4ca16",n="dcd5b484-abf6-47e3-adad-bc7b7da716c4",a="31869287",o="isChatOpened",d={id:"custom-widget-bubble",offsetY:"20px",offsetX:"20px",exactPatterns:["/admin/index.php","/admin","/campaign/editor","/campaign/template"],pathPatterns:[{pattern:/^\/campaign\/\d+\/designer$/},{pattern:/^\/template\/\d+$/}],queryPatterns:[{path:"/admin/main.php",params:[{action:"campaign_new_text"},{action:"campaign_new_message"}]}],hashPatterns:[{path:"/admin/main.php",pattern:/^#form-\d+$/}]},i=()=>{const e=(e=>{const{pathname:t,search:n,hash:a}=e,o=t.replace(/\/+$/,"");if(d.exactPatterns.includes(o))return!0;if(d.pathPatterns.some((({pattern:e})=>e.test(o))))return!0;if(n){const e=new URLSearchParams(n);for(const{path:t,params:n}of d.queryPatterns)if(o===t&&n.some((t=>Object.entries(t).every((([t,n])=>e.get(t)===n)))))return!0}if(a)for(const{path:e,pattern:t}of d.hashPatterns)if(o===e&&t.test(a))return!0;return!1})(window.location);if(d

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386)
Category:	downloaded
Size (bytes):	55497
Entropy (8bit):	5.221657851036488
Encrypted:	false
SSDEEP:	1536:YFjoJ562ZFjhBsy1qry1qxy1q7y1qOyIqAZFKZFvjZrnbHysX2ysXgqyPsZ3qyPe:sjGLZFAy1qry1qxy1q7y1qOyIqAZFKZF
MD5:	144B224ED178586F2DFA9600C4D9B825
SHA1:	582D8C2B46E9C0BE2F04E699059EAA59D8B4C0F8
SHA-256:	F6F2D9995566D984A815B81BCE63BC1D1798BD63C4696574D7DA413100F12842
SHA-512:	34951AEC874857F98B8FC1AED37387D65AA331CD731E0100F780B74E736A7AEFE173F8C4A339FFB9D358FE043B1185AF8BC8089D70C261862766D6C09BE87EA9
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/default.css?v=v1027121384670010
Preview:	../* PAGE DEFAULTS /./ Setting the main body, font, color, and link defaults /............./ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /............body{ font-family: Arial, Helvetica, sans-serif; font-size:11px; color:#333333; margin:0; padding:0; }..input{ font-size:12px; font-weight:normal; font-family:Arial, Helvetica, sans-serif; }..a, a:visited{ color:#666666; }.a:hover{ color:#333333; }..hr{ background:#CCCCCC; color:#CCCCCC; height:1px; border:0; }../ Login Box For Index Page (usually the admin index) */..ac_login_container{ }..ac_login_head{..border-top-left-radius: 15px;..border-top-right-radius: 15px;..-moz-border-radius-topright: 15px;..-moz-border-radius-topleft: 15px;..background:#0E3E75;..padding-top:35px;..paddin

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (944)
Category:	downloaded
Size (bytes):	153634
Entropy (8bit):	5.071540401076863
Encrypted:	false
SSDEEP:	1536:aNjsEFdaGU6u9k9s4nV1kw2sIcao0rII05RfvxwUEg5o0NG0lHGc/Rbie0XQ/1sm:BH9lwDRbi4PhBLZkQ46
MD5:	ED29493E4E2A6D3BAF5E44FF14E51AFC
SHA1:	B68D1BDE9C9DC80482A70B9A138818AC3E16FF07
SHA-256:	794185BB74A488CA7D2E91871E9CD7BDDDF0864EF083F5862D9332D9767B2B11
SHA-512:	E89C6510D8DAABF6210BB9A9D9BD92AA41F0E183E1A374556ACE7B6AB665EB2041227BEF1687794C040D5C3734108C6E7267C1AC3A557B906BA11941A235D7ED
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/style.css?v=v1027121471506941
Preview:	/* ---------------------------. WARNING: DEPRECATED - DO NOT ADD TO THIS FILE.-------------------------------/../. Global element styling./../ Import / Include fonts here /.@import url("https://fonts.googleapis.com/css?family=IBM+Plex+Sans:200,300,400,500,600,700");../-------------------------------------------------------------------------\. Colors.\------------------------------------------------------------------------/./ Primary palette /..ac-blue { background: #19467C;}..medium-blue { background: #23538C;}..highlight-blue { background: #3E70B5;}..light-blue { background: #EEF4FC;}..alt-green { background: #4DCBA9;}../ Backgrounds and borders /..dark-grey { background: var(--slate-500);}..border-grey { border: var(--slate-200) 1px solid;}..medium-grey { background: var(--slate-100);}..light-grey { background: var(--slate-150);}../ Status and label /..go-green { background: #60CB98;}..stop-red { background: #F37C7B;}..border-red { background: #F37C7B;}../ Text */.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (488)
Category:	downloaded
Size (bytes):	13515
Entropy (8bit):	5.082581993641253
Encrypted:	false
SSDEEP:	384:dSuCKDujQMeDH1W60sYsTrBwrRXAQPWgg7L7feADl3PM1:yQ1W60sYsTrBaRXAQPWgg7L7fDDl301
MD5:	0E9AA12DD744EC41246AB1C292D7B8F9
SHA1:	DA650223A8C4E6F16A1E2A74EF1B8F8891C98756
SHA-256:	AE05BF66E25C9E25F93031CD5C196959FC91C812A5E3F29E2FD6F9FE398F0C98
SHA-512:	DBD0A2AAEEDA109CDD487755190C2A68CA87D4B5181826F23E5DFED4C3470C8D664A4A36247999D86843995524A658E53ABE6D39D9D6011EA564FA5D6AB7B79D
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v1027121471506941
Preview:	@font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.eot?9608958');. src: url('../font/ac-icons.eot?9608958#iefix') format('embedded-opentype'),. url('../font/ac-icons.woff2?9608958') format('woff2'),. url('../font/ac-icons.woff?9608958') format('woff'),. url('../font/ac-icons.ttf?9608958') format('truetype'),. url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. }.}./.. [class^="ac-icon-"]:before, [class=" ac-icon-"]:before {. font-family: "ac-icons";. font-style: normal;. font-weight: normal;. speak: none;.. display: inline-bl

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	502312
Entropy (8bit):	5.094002613213753
Encrypted:	false
SSDEEP:	6144:MriM0BcfC3cLJYDb4miGF7EBaE4wArTi0byVFFg:giM0efGF7EBaE4wArTi5Fg
MD5:	2219B9D85DAC8D8FB4F19D1006C52D5F
SHA1:	7EF0C307F76F632C740A86D6EF67B71A629C6C24
SHA-256:	7FC259D1AE8DC393BD8F747A4FCEBE7BE9D5477A77921DC351F1459955E4EB8A
SHA-512:	3DB6FFE3315A31B416AD92A1B79D6B0AABE4591F05C5FB059FBB53B79227C7931BBFD0F58168E6A38157696E4E8377F5014C518EA9A3091AB7536B2A72C9DA16
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin2.css?v=v102712283221662
Preview:	/* Sender Details Modal (basic editor) */.#template-setting .section .setting-section-container .from-input-wrap { width: 100% !important;position: relative;padding:0 5px 0 0 !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 1px solid var(--slate-200) !important;border-radius: 4px;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;margin-right: 10px; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input { position: relative;width: 90% !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 0px !important;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;height:32px;padding:4px 5px 4px 10px!important; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input.inactive { color: #c3c3c3 !important; }.#template-setting .section .setting-section-container .from-input-wra

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2090
Entropy (8bit):	4.9960885285090875
Encrypted:	false
SSDEEP:	24:VJXImbnyoWYd7J0YcAkN8mx8ipMV3BWTxgb+E6hvgPZUsyHiBY1XcrY:VJXI8nyol7Mpn8AnSnRB4mUXIY
MD5:	F9E56AF70E256BFF067A1E33017E7923
SHA1:	470A964363983D15EBB12571AEC76741D4EAB4D8
SHA-256:	3CFA49D8A373C3A457ADE077505808A6304B5207249B1D5007E74AF100DB66F2
SHA-512:	66A70E45FDE34964D1B804ECD274F66D7014302E5F54DA7966EA42488753A98599C64666F5F183A1786216DC4057E5185D0999BC01B43555A1FCAE58ABB81B67
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/footer.css?v=v1027121471506941
Preview:	/-------------------------------------------/./* Admin Global Footer Style ... / ./-------------------------------------------/..../------ Framework ------/.#page_footer {width:100%;height:64px;padding:24px 24px; background: #4e4e4e;text-align:left;box-sizing: border-box;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;}.#page_footer a, #page_footer a:visited { color:#c0c0c0;font-size:14px;text-decoration: none;margin-right:14px;}.#page_footer a:hover { color:#fff;}..#page_footer .twitter-icon:hover { color:#fff;}.#page_footer .facebook-icon:hover { color:#fff;}..#page_footer a.ac-icon { font-size:19px;}.../------ Support popup menu ------/../ Icon */..support-icon { position: fixed; right: 20px; bottom: 20px; width: 47px; height: 47px; background-color: #4DCBA9; border-radius: 100%; box-shadow: 0 1px 2px rgba(0, 0, 0, 0.2); cursor: pointer;z-index: 2000; }..support-icon:hover { background-color: #40c19e; }..support-icon span { width: 22px; height: 22px;font-size:2

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (721)
Category:	downloaded
Size (bytes):	430286
Entropy (8bit):	5.10702242018368
Encrypted:	false
SSDEEP:	6144:mRJEHslkkP0cFhzP+nSQSOmAv+n35aW2jO7cmD:s0cFxGI24cmD
MD5:	A44777845F43D4D9EEED8D89BBF6B837
SHA1:	2741F2BD238A632D7367E8480691E17B672DD647
SHA-256:	98BFD2F56B13FB952C683C4DD5007009FD80B9212CC0A1247C62D9BB19F885D6
SHA-512:	876906961B7B49C72956B9355632EB040C24A4DA37FC2E3762E1334C3AA4689C5FAD3A94D71755D3DB3CABFAAACC3F4DCFE5ABC34ABA4F5F4706D22D0021A5A8
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin.css?v=v102712283221662
Preview:	html { margin: 0;padding: 0;color: #000;height: 100%;min-height: 100%;font-family: 'IBM Plex Sans', helvetica, arial, serif; /* background-color: #343434; */ }.body, div, dl, dt, dd, ul, ol, li, h1, h2, h3, h4, h5, h6, pre, code, blockquote { margin: 0;padding: 0 }.table { border-collapse: collapse;border-spacing: 0 }.fieldset, img { border: 0 }.address, button, caption, cite, code, dfn, em, input, optgroup, option, select, strong, textarea, th, var { font: inherit }.i, em, td i, td em { font-style: italic }.del, ins { text-decoration: none }.li { list-style: none }.caption, th { text-align: left }.h1, h2, h3, h4, h5, h6 { font-weight: normal }.q:before, q:after { content: '' }.abbr, acronym { border: 0;font-variant: normal }.sup { vertical-align: baseline }.sub { vertical-align: baseline }.legend { color: #000 }.body { position: relative;margin: 0;padding: 0 0 0;font-family: "IBM Plex Sans", helvetica, arial, serif;min-width: 940px;height: 100%;display: flex;min-height: 100%;flex-dire

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	502312
Entropy (8bit):	5.094002613213753
Encrypted:	false
SSDEEP:	6144:MriM0BcfC3cLJYDb4miGF7EBaE4wArTi0byVFFg:giM0efGF7EBaE4wArTi5Fg
MD5:	2219B9D85DAC8D8FB4F19D1006C52D5F
SHA1:	7EF0C307F76F632C740A86D6EF67B71A629C6C24
SHA-256:	7FC259D1AE8DC393BD8F747A4FCEBE7BE9D5477A77921DC351F1459955E4EB8A
SHA-512:	3DB6FFE3315A31B416AD92A1B79D6B0AABE4591F05C5FB059FBB53B79227C7931BBFD0F58168E6A38157696E4E8377F5014C518EA9A3091AB7536B2A72C9DA16
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin2.css?v=v102712424104756
Preview:	/* Sender Details Modal (basic editor) */.#template-setting .section .setting-section-container .from-input-wrap { width: 100% !important;position: relative;padding:0 5px 0 0 !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 1px solid var(--slate-200) !important;border-radius: 4px;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;margin-right: 10px; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input { position: relative;width: 90% !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 0px !important;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;height:32px;padding:4px 5px 4px 10px!important; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input.inactive { color: #c3c3c3 !important; }.#template-setting .section .setting-section-container .from-input-wra

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	dropped
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	113889
Entropy (8bit):	5.254021734457043
Encrypted:	false
SSDEEP:	1536:CASDBvFn3nEjwiUCp4E5LQVeD0NLpe4vO94jhoTeNFHQ5dE7:CASH0jEEho1fjyi/cA
MD5:	1C1F4D86AF33DFBDE894FED8BE69496E
SHA1:	F70558267E35B333E926FA72B725F5E8785981EC
SHA-256:	853A2ECAC03D6311DC032989D9D3CA69ED9B77789C6885C8F634EBA9111C33F9
SHA-512:	2F226E3BD97A9C6BD2C48743007E70E0BDD1F819F8AFE518ADCA5E76D2E721CA5771932F244ED271853D464CDF03E24BCBD1ECB3761B35D2AE36CA3860E0DC15
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1.278.2.min.js
Preview:	/! For license information please see nr-spa-1.278.2.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.278.2.PROD"]=self["webpackChunk:NRBA-1.278.2.PROD"]\|\|[]).push([[478],{7699:(e,t,i)=>{i.d(t,{I:()=>s,N:()=>r});const r=64e3,s=1e6},2123:(e,t,i)=>{function r(e){return!!e&&e.self!==e.top}i.d(t,{v:()=>r})},5519:(e,t,i)=>{i.d(t,{AQ:()=>u,me:()=>o,sH:()=>c,uJ:()=>h});var r=i(3304),s=i(3371),n=Object.prototype.hasOwnProperty,a=64;function o(e,t,i){return e\|\|0===e\|\|""===e?t(e)+(i?",":""):"!"}function c(e,t){return t?Math.floor(e).toString(36):void 0===e\|\|0===e?"":Math.floor(e).toString(36)}function h(e){let t=0;const i=Object.prototype.hasOwnProperty.call(Object,"create")?Object.create(null):{},r=(0,s.f)(e).obfuscator;return function(e){if(void 0===e\|\|""===e)return"";return e=r.obfuscateString(String(e)),n.call(i,e)?c(i[e],!0):(i[e]=t++,function(e){return"'"+e.replace(d,"\\$1")}(e))}}function u(e,t){var i=[];return Object.entries(e\|\|{}).forEach((([e,s])=>{if(!(i.length>=a)){var

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1711
Entropy (8bit):	7.833837499458092
Encrypted:	false
SSDEEP:	48:b/6c3HeE1IXpDaz2yqbOE92hbgztKO2OuU58G9b7:bSwH1uBH392hbgJKO2JPGp
MD5:	51BFBF8467BD589040750AE903BCE99F
SHA1:	1F31BC103D6DA5EE7137376C874159B754D9B71F
SHA-256:	0A7A4B0529DE4C37201585D9F6E4720258895CEA58B7408F42B19BD878EC8B1A
SHA-512:	AAFC128B5F89F786F80C24C21E0A9DA8F1DB157406A2C0825B36B1AAA0412456A80AE824842ECD878905F0F73BF99F57A8057D3B972183BF1AB0BD4136FD4D8F
Malicious:	false
Reputation:	low
URL:	https://d3tnn7lar6ozas.cloudfront.net/08f2ced6-ee5d-45e3-a248-5828d7d63950.png
Preview:	.PNG........IHDR...d...e.......F.....sRGB...,.....pHYs................TIDATx..[lUE...L..JA...k."...(V.H.mA.M(..P..[.DC..D1..[....!.B\|...k.J...}@.b...RJ.......9.^.5kv.?.....Z..}...L.~^^^^^^^^^^^^^^^^......X"...XL,9.E....c.%]s......x..!~!b.z.......D..to...5.XN.%N.....%..H...I.1....3L!$...>.+.."#....C.. ...^..H{""j<.x. ....1F.#+.F...8.Dg.u. i..D........ju.....5t.......{...T.!....5q.....@..&.i.E.$.u.H.\|A......'...........w[.X.;...D..#...RTd.Q.a6.....yB.`tu..F.d...PQ..`.N. .....3. h...H.J:..D.LW...p....B..J.u...8D...d..F...aLT.P..=J<Q.....";$..t.q..{../..@....f...4....@..'X.f.@..0......f..qb.w .9.h......&....a(..g..S...e...U......X.(pu1.....~..g$.6<....Y.<.....)X..g...3..C....U..GN..[..<..bv.8W-......3..Y.........^.......8W..a.{...X...........U6.v.PV.d.d?G.)..M/.j.I..Qu..I.,....$.t.+..8at..6.....g..$.t .....J.......%7..d..@JL..1.8\|H...*..x %..)5Y`Ai.MG.mO.......t F.\..\|..@...d....n...mO.....Rn:.2..^2..=(m{\|1...L.2.p..E....5.aS..2.t ...>.h.M...:q.(Zl<.M..@n4]

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	dropped
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (944)
Category:	downloaded
Size (bytes):	153634
Entropy (8bit):	5.071540401076863
Encrypted:	false
SSDEEP:	1536:aNjsEFdaGU6u9k9s4nV1kw2sIcao0rII05RfvxwUEg5o0NG0lHGc/Rbie0XQ/1sm:BH9lwDRbi4PhBLZkQ46
MD5:	ED29493E4E2A6D3BAF5E44FF14E51AFC
SHA1:	B68D1BDE9C9DC80482A70B9A138818AC3E16FF07
SHA-256:	794185BB74A488CA7D2E91871E9CD7BDDDF0864EF083F5862D9332D9767B2B11
SHA-512:	E89C6510D8DAABF6210BB9A9D9BD92AA41F0E183E1A374556ACE7B6AB665EB2041227BEF1687794C040D5C3734108C6E7267C1AC3A557B906BA11941A235D7ED
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/style.css?v=v102712424104756
Preview:	/* ---------------------------. WARNING: DEPRECATED - DO NOT ADD TO THIS FILE.-------------------------------/../. Global element styling./../ Import / Include fonts here /.@import url("https://fonts.googleapis.com/css?family=IBM+Plex+Sans:200,300,400,500,600,700");../-------------------------------------------------------------------------\. Colors.\------------------------------------------------------------------------/./ Primary palette /..ac-blue { background: #19467C;}..medium-blue { background: #23538C;}..highlight-blue { background: #3E70B5;}..light-blue { background: #EEF4FC;}..alt-green { background: #4DCBA9;}../ Backgrounds and borders /..dark-grey { background: var(--slate-500);}..border-grey { border: var(--slate-200) 1px solid;}..medium-grey { background: var(--slate-100);}..light-grey { background: var(--slate-150);}../ Status and label /..go-green { background: #60CB98;}..stop-red { background: #F37C7B;}..border-red { background: #F37C7B;}../ Text */.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23542), with no line terminators
Category:	downloaded
Size (bytes):	23558
Entropy (8bit):	4.7068539819418955
Encrypted:	false
SSDEEP:	384:IAxByPkahyY8YicCKc6Rgo120TJZPq0K5u:IAZsyDYi0R9dXq0K5u
MD5:	0C279E1E04E4FA0F64F26C7EE021166D
SHA1:	39E7C1160F350C26FC911A7E03E2E320DB1EF01C
SHA-256:	E65B0A0098818B0B8383E06EEA1C7738FDFAB46FD0678F84F60A2F7DE172F53F
SHA-512:	D51A29F0F582A5CA3C37B28F8F9841CFF6CE1A5B553F62827C05F183BC16A7AC343A892A40CEE1D6A14F277C1E9D00DD910E3FFA0335C7170C3E3205BB525219
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-b6408d4.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[7250],{33034:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.messenger.carousel_message.action.accessible_text":"{{action}}: {{title}}","embeddable_framework.messenger.carousel_message.button.next":"Next item","embeddable_framework.messenger.carousel_message.button.previous":"Previous item","embeddable_framework.messenger.channel_link.instagram.disconnect_button_text":"Instagram connected.","embeddable_framework.messenger.channel_link.instagram.disconnect_link_text":"Disconnect","embeddable_framework.messenger.channel_link.link_error.button_error":"Link code couldn\'t be loaded","embeddable_framework.messenger.channel_link.link_error.qr_code_error":"QR code couldn\'t be loaded","embeddable_framework.messenger.channel_link.link_error.retry":"Click to retry","embeddable_framework.messenger.channel_link.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	872
Entropy (8bit):	7.447062220201434
Encrypted:	false
SSDEEP:	12:6v/7k9dzvypEPpR+h1qe+A2s6rU/INkHXWZsu40wdq5+h7jhwxTuSvo880EH:drmEPr+h1qeqrUwSHTu6qE9wxTboPBH
MD5:	3A2E925FD41F6B32A435DBA0B094DAA7
SHA1:	68FD4DC056391FC4D4228CFE68D43A620997CA08
SHA-256:	B3A65DB0E3F09AE0FAACF8E6B62E9852AB5137680B5BBBE13FA4D862C31FFF0E
SHA-512:	5CEF19EA101494EF7ED197C1DC578D68BD206F249DA0BC92FFAB4556633A0E436059C01FC7E6BD6E893F1C67BE51246553942ADDE827D30D76D73948FC007B46
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F......PLTE...6j.4j.7h.5j.@p.5h.4k.5j.4j.4h....0p....4i.4i....4i.............5e....3i....6j.......5j..........6j..................4j.............5j............5j..........Bs.................g........u..N\|.P.e....1tRNS.. .. ..@...p`....`00 P........`P@@0......p`...L... IDATh...n.`.F.b.^....i..K>.]L..._.Iq.y..Y.....s./..B:.......r.\.........p..r"F....!&.CQa..."!....E....8..x..p.L.../../.'.Ra...J......0>....G..>..K#. ...N.E^I......6...... ...[.._.y\...<.XH....E`..H.q.6{.10j<.j..U]x\|.L...n.g$.L+.i."......'.\......H......%....8...FI.9e.'......F....p...=V.qm....o..6.W....J..HR......wk.......1.oS..@.M.~.B..N..@.e.~.s.....).oS..@.M.~...6..m.....).oS..@.M.~...6..m..[......u5..;I..U..` Z...{9......q.#.'z...i....@...]....2.@..#.@.....:..]>.7?.<..D...*]o..9..ZC.x.....o.R.J.:.$\HG.....E..v......IEND.B`.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	dropped
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	6.971221767667918
Encrypted:	false
SSDEEP:	6:6v/lhPEt+fNdmBdgqBjrBREso9K9em7/cXhof1BziOHHObozEsv7feQLbp:6v/71/mBKqBjr1o9eDcX+jGOHDv7Wo
MD5:	FE8AA2BB56BDBF2FCC808F8FD32EB5A8
SHA1:	C213B37DA3C77B15F5099AB8D22DCEF39B789B6F
SHA-256:	9E03CF78462F89F5F13755ED11DAE20C5CB52EEB32A9749719D6FB7D8B60F28F
SHA-512:	8599424A77BE5860A8220E3AA5F0976C19BD6775C0598E3E3F07162ABD27218B6FE8835A624F8C972C66EBDFBE425BF665F97133CC0921DCB83BFC8921F3F467
Malicious:	false
Reputation:	low
URL:	https://d226aj4ao1t61q.cloudfront.net/ckke9g3gf_browserwindowapp.png
Preview:	.PNG........IHDR...`...`......F.....EPLTE...4j.4j.4i.5j.4i.5e.:k.......5j.......X.................Kz.......@^.....tRNS....p0..7EW....IDATh......0...R..J....T.i.F.h8H..W...2@R..;... [.T)...X.e. "..........1...."..2...."q..........C&..`.3.....M....0u.....#.... ...v#.....(.-".."U......[D`.-".../.....?...G;.X9.............$.....&.T...1.....c....uv....IEND.B`.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1711
Entropy (8bit):	7.833837499458092
Encrypted:	false
SSDEEP:	48:b/6c3HeE1IXpDaz2yqbOE92hbgztKO2OuU58G9b7:bSwH1uBH392hbgJKO2JPGp
MD5:	51BFBF8467BD589040750AE903BCE99F
SHA1:	1F31BC103D6DA5EE7137376C874159B754D9B71F
SHA-256:	0A7A4B0529DE4C37201585D9F6E4720258895CEA58B7408F42B19BD878EC8B1A
SHA-512:	AAFC128B5F89F786F80C24C21E0A9DA8F1DB157406A2C0825B36B1AAA0412456A80AE824842ECD878905F0F73BF99F57A8057D3B972183BF1AB0BD4136FD4D8F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...e.......F.....sRGB...,.....pHYs................TIDATx..[lUE...L..JA...k."...(V.H.mA.M(..P..[.DC..D1..[....!.B\|...k.J...}@.b...RJ.......9.^.5kv.?.....Z..}...L.~^^^^^^^^^^^^^^^^......X"...XL,9.E....c.%]s......x..!~!b.z.......D..to...5.XN.%N.....%..H...I.1....3L!$...>.+.."#....C.. ...^..H{""j<.x. ....1F.#+.F...8.Dg.u. i..D........ju.....5t.......{...T.!....5q.....@..&.i.E.$.u.H.\|A......'...........w[.X.;...D..#...RTd.Q.a6.....yB.`tu..F.d...PQ..`.N. .....3. h...H.J:..D.LW...p....B..J.u...8D...d..F...aLT.P..=J<Q.....";$..t.q..{../..@....f...4....@..'X.f.@..0......f..qb.w .9.h......&....a(..g..S...e...U......X.(pu1.....~..g$.6<....Y.<.....)X..g...3..C....U..GN..[..<..bv.8W-......3..Y.........^.......8W..a.{...X...........U6.v.PV.d.d?G.)..M/.j.I..Qu..I.,....$.t.+..8at..6.....g..$.t .....J.......%7..d..@JL..1.8\|H...*..x %..)5Y`Ai.MG.mO.......t F.\..\|..@...d....n...mO.....Rn:.2..^2..=(m{\|1...L.2.p..E....5.aS..2.t ...>.h.M...:q.(Zl<.M..@n4]

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	251
Entropy (8bit):	3.9141243326856108
Encrypted:	false
SSDEEP:	3:UCIIsmKA4F2XFFWNNGKK1I1sH2I1uUI8zIILIfflkEGc82nkcser4/tKRAYmH:U8sW4F2CdK1CsWCm8JIfGfwR6H
MD5:	F1DA0AADBF845CB0C4D5B31765836E41
SHA1:	8FB141B3EF2782EAA667E11EC7E263EF7E4B2EFB
SHA-256:	1ADFAFBBFC90BF463E79BAC61F069BEF70247D04E7EB9CB82DFE1ADB2279F8F8
SHA-512:	7C12B90B5AD2361B041E82D19F23BEDA3523770A33B514489EE3C24C8D35286354B0EE352F544989CEB716EAC46160693AFA86E73C9D42B7D0F395EF99B8BAAE
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/content.css?v=v102712283221662
Preview:	/-------------------------------------------/./* Admin Global Content Style ...... / ./-------------------------------------------/...../------ Framework ------*/..ac-content_wrap { padding: 0 23px 23px 23px;width:100%;box-sizing:border-box;}

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	458718
Entropy (8bit):	5.438375613696595
Encrypted:	false
SSDEEP:	6144:+WDT7vOhfzq+e1fnuMBvQD9UhSh11Hl/QHfjIPvlodf5KhkIQ0BrKiAqx:bT7vezq+e1fnuMB+7hnlDvlodfkJKiAQ
MD5:	3A75D4E1E7A171202302F5F4CA53F5F3
SHA1:	5B4B1179EA409B08776DD3B2A4FF7416EC49FD9D
SHA-256:	DF26DC3742F19F047438D98B587A51356B89BDC673D7BF53E1AC9E80456E9F82
SHA-512:	4A6C100DCE5C491DBF738AE77D7BC6317FB452E7E4C18BD7B1BC7004F640EA36DBF4933656F882B52C7A7D789F88516B9C977FF3B2E42246E289889EDBEB4591
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/messenger/latest/web-widget-main-b6408d4.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(()=>{var e,t,n,r,o={26436:(e,t,n)=>{"use strict";n.d(t,{Ci:()=>g,D9:()=>r.D9,Ez:()=>p,G1:()=>a,Kr:()=>c,NH:()=>_,RD:()=>d,Rj:()=>b,Ut:()=>v,ZY:()=>y,_k:()=>i,af:()=>j,az:()=>s,cK:()=>S,go:()=>x,pJ:()=>l,pK:()=>o,rN:()=>f,wG:()=>m,x5:()=>u,x7:()=>r.x7,xm:()=>h,yb:()=>r.yb,z7:()=>w});var r=n(70069);const o=700,s=380,i=64,a=16,c=20,l=16,u=Number(r.CK),d="0px 20px 30px rgba(23, 73, 77, 0.15)",f="cubic-bezier(0.66, 0, 0.12, 1)",p="16px",h="14px",g=25,v="widgetOpen",m="soundNotificationDisabledKey",y={bottom:e=>e+i-c+4,right:e=>e-4,rightZoomedIn:l-4,leftZoomedIn:i-c,left:e=>i+(e-l)},b={fullScreenHeight:926,fullScreenWidth:540,verticallySmallHeight:670},w="https://www.zendesk.com/service/messaging/?utm_source=webwidgetmessagingweb&utm_medium=webwidgetmessaging&utm_ca

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	305171
Entropy (8bit):	5.39167381586239
Encrypted:	false
SSDEEP:	3072:fFiUV5Ewol1YO7/n85NRCl0Uvh3AkdTmsksf9jJ2DHi1mHVY:fxMPZ7/n85NRClBhwkdaVIm2
MD5:	39231E102F7314A1619964FD27929CEE
SHA1:	EFC790F494F1C417C77184977F1B6988B25159AE
SHA-256:	79659DE908A983B1D2014DF92552E044D19E76043090EC9A815DA972D3B42E06
SHA-512:	0256ECE45BDAA31B7131D8448E26FDB7D7EE312A311FFFF6713C5FDC5E576D68916C5478412CD59914C4889CCC1E592C815AD4EDFBEE7AD883CFC13A3ED6B126
Malicious:	false
Reputation:	low
Preview:	!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="d3de62ff-62b9-4a4f-a4bd-4d3f2a8e3f03",e._sentryDebugIdIdentifier="sentry-dbid-d3de62ff-62b9-4a4f-a4bd-4d3f2a8e3f03")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[647],{5944:(e,t,n)=>{n.r(t);var o=n(5043),i=n(2965),a=n(3868),s=n(8344),r=n(3249),l=n(5585),d=n(3923);const c="clear/imageViewer",u="closeWidget",p="navigate/back",g="navigate/to",m="openWidget",f="reset/widget",v="set/imageViewer",h="set/setIsMobile",x="main/setIsWidgetVisible",_="set/selected_answer_index",w="set/visualViewportOffset",b="set/start",y=(0,s.VP)(f),k=(0,s.VP)(b),C=(0,s.VP)(g),A=(0,s.VP)(p),I=(0,s.V

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5066
Entropy (8bit):	5.555346116044468
Encrypted:	false
SSDEEP:	96:aOLJ3qOLJKgFZhOLJb3/OLJOOLJNJc+ubOLJ5NLOgJxqOgJTFZhOgJd3/OgJQOgu:fJ3PJeJb36J7JlpJFJxkJDJd3dJqJv2h
MD5:	B3A7E70D1BCE34B179A3F3A49CE77CCC
SHA1:	2CB857ECA4CB1659E387E358513E2E91E99E77C2
SHA-256:	19A9939DBFD6112635A5F3B59A1403211AC362431DF2D83151306F730496C6FE
SHA-512:	476E16E731E9858AF9002A61EDE3D3B0EF660E301B8FB2B6A55782CC8D2E564D2F64DAB2ACD5FD95DC8278BFF08E016EE55022301FD2E3C261491B71DCDD22C3
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=IBM+Plex+Sans:400,500\|Poppins:700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdzeFb5N.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdXeFb5N.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdLeFb5N.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight:

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	dropped
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13558), with no line terminators
Category:	downloaded
Size (bytes):	13558
Entropy (8bit):	5.4710596464616685
Encrypted:	false
SSDEEP:	384:SzMYJF6jh47DwiX0VQ3KLz67zUXBDQPTuvz0ny+r9VTNBFSURX1WP:SoYJG47DdEVQEO7zUXBDQPTuvzezYUpq
MD5:	BB8CBFD720C605961AAE1C3D74C181EE
SHA1:	4E7AF46B7F94C0BD45A5C39F75DE71BF3B8EDDB9
SHA-256:	47D2E14459A3D61C1DB079AAC737BDFE9D57BECF439E33C6DA279484DBA40BA6
SHA-512:	B6D2F9B3EA01DF0CD7CFEEA5A38DE3E4D23D3B554392686F73D414B5860D043A37F248111517AC51B4BFAA70CE7365A56CC095B8FA3D0596E42FF2AC21B05E46
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/messenger/latest/web-widget-2229-b6408d4.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[2229],{50915:(e,n,t)=>{t.r(n),t.d(n,{default:()=>Ye});var r=t(48559),s=t(20912),i=t(88910),a=t(24726),o=t.n(a),d=t(70069),l=t(54899),c=t(43229),p=t(10948),h=t(94998);const m=p.Ay.div.withConfig({componentId:"sc-1q9fwvy-0"})(["position:absolute;left:0px;display:flex;align-items:center;justify-content:center;height:100%;width:100%;transition:top ","s ",";",""],.5,h.rN,(e=>"entering"===e.state\|\|"entered"===e.state?(0,p.AH)(["top:0;"]):(0,p.AH)(["top:",";"],e.hiddenPosition)));var u=t(86222);const g=({isVisible:e,hiddenPosition:n,children:t})=>(0,u.jsx)(c.Ay,{in:e,timeout:500,children:e=>(0,u.jsx)(m,{state:e,hiddenPosition:n,"aria-hidden":"exited"===e,children:t})});g.propTypes={isVisible:o().bool,hiddenPosition:o().string,children:o().node};const x=g;var f=function(e){return(0,u.jsx)("svg",{...e,children:(0,u.jsx)("path",{fillRule:"evenodd",clipRule:"evenodd"

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65310)
Category:	dropped
Size (bytes):	613492
Entropy (8bit):	5.4074442759880466
Encrypted:	false
SSDEEP:	12288:t4wD1I8PId/qQ/Pu7NYg1U1wYQykePIyJ3LPKa:t4ARPAq+G7NYg1U1CePIEf
MD5:	2D9AD81AAF14574D10A93E4DADD05083
SHA1:	7A5C592B1052E08241C0CF86DD0F8911D1886C14
SHA-256:	3E160A41535B089EB11765540EA3AFB076A00EFF41455188AB23AF97133B16BD
SHA-512:	9F68493F128E696948B04AE09F5B19AB346F1F0B6C86D7571AE51EA6144501B8D6504C5118A0BCC5879AA6AF81FC2002224D7BB9DB2FE67DA291C03F1EFF51FA
Malicious:	false
Reputation:	low
Preview:	// Pendo Agent Wrapper.// Copyright 2025 Pendo.io, Inc..// Environment: production.// Agent Version: 2.260.1.// Installed: 2025-01-13T22:12:23Z.(function (PendoConfig) {./.@license https://agent.pendo.io/licenses./.!function(Ew,xw,Cw){!function(){var d=Array.prototype.slice;try{d.call(xw.documentElement)}catch(Gt){Array.prototype.slice=function(e,t){if(t=void 0!==t?t:this.length,"[object Array]"===Object.prototype.toString.call(this))return d.call(this,e,t);var n,i=[],r=this.length,o=e\|\|0,a=(t<0?r+t:t\|\|r)-(o=0<=o?o:r+o);if(0<a)if(i=new Array(a),this.charAt)for(n=0;n<a;n++)i[n]=this.charAt(o+n);else for(n=0;n<a;n++)i[n]=this[o+n];return i}}String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")});var T=function(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".split("");return{uint8ToBase64:function(e){var t,n,i,r=e.length%3,o="";for(t=0,i=e.length-r;t<i;t+=3)n=(e[t]<<16)+(e[t+1]<<8)+e[t+2]

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	dropped
Size (bytes):	137736
Entropy (8bit):	5.281481519639307
Encrypted:	false
SSDEEP:	1536:+n2vnRCxq51NzuciMwSEll2IHbELM4ve2Xcmr/WfcnJoAPN:+n2fEsLv9cHYBG2Xci/W0mo
MD5:	4C37342DB5AD594D06EBBD1C0BA47D13
SHA1:	6AA54C53816D9B4A658643372B53D65A4D454ECD
SHA-256:	6C079922F22A5B0F90A5DBF336ACA62D0EC1A50A720CAE96F0B746D0B3BD3B45
SHA-512:	80985293F0233375B61FAD1B717A9EE049A4AACD2A285374D9C20D60632605730FAB8E01A6D7EECC15A74DE621D78B2B6550789B164C9B1E4DC4D49953D7DE20
Malicious:	false
Reputation:	low
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[9606],{3261:(e,n,t)=>{(n=t(3256)(!1)).push([e.id,'/!\n Copyright Zendesk, Inc.\n \n Use of this source code is governed under the Apache License, Version 2.0\n * found at http://www.apache.org/licenses/LICENSE-2.0.\n */\n\nhtml{\n line-height:1.15;\n -webkit-text-size-adjust:100%;\n}\n\nbody{\n margin:0;\n}\n\nmain{\n display:block;\n}\n\nh1{\n font-size:2em;\n margin:.67em 0;\n}\n\nhr{\n box-sizing:content-box;\n height:0;\n overflow:visible;\n}\n\npre{\n font-family:monospace,monospace;\n font-size:1em;\n}\n\na{\n background-color:transparent;\n}\n\nabbr[title]{\n border-bottom:none;\n text-decoration:underline;\n -webkit

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1856241
Entropy (8bit):	5.08809466828566
Encrypted:	false
SSDEEP:	49152:dNmEvSVlsi1KtMxnF/DMB+13kUZyV9maZKmTKLxg4haTR+NTEwBSdh28xe9HkE5R:4
MD5:	20702285B0C5A918CB57D15B735321FE
SHA1:	3F75A40DF21B39BB79AA79A03A9D0218C2B00BB3
SHA-256:	010F01F8A34B7CE0A388499EC3D3B310BAAD3B298C4ABCF1A909CDDAE65BEA22
SHA-512:	9422A614474263D502E9F622DA93B1CAEFB0AAD0AC764DC0B332FD4E8BE6EEDF886B10E614FB3D9FFCD1EFF08C1BFC60238F3521EE24C0F53204ADF873C7FD28
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v1027121389246675
Preview:	:root{--b-0:0;--b-100:1px;--b-200:2px;--b-300:4px;--b-none:none;--b-dashed:dashed;--b-solid:solid;--radii-0:0;--radii-100:4px;--radii-200:8px;--radii-rounded:99rem;--radii-circle:100%;--shadow-50:0 1px 4px rgba(31,33,41,0.3);--shadow-100:0 4px 8px -2px rgba(31,33,41,0.3);--shadow-200:0 4px 12px 0 rgba(31,33,41,0.08);--shadow-300:0 14px 22px 0 rgba(31,33,41,0.1);--shadow-400:0 26px 32px 0 rgba(31,33,41,0.3);--banana-100:#fff9e6;--banana-200:#fdecb2;--banana-300:#fce28b;--banana-400:#fbd965;--banana-500:#facf3f;--banana-600:#deaa00;--black:#000;--creamsicle-100:#fff8f2;--creamsicle-200:#ffe1cb;--creamsicle-300:#ffbf90;--creamsicle-400:#ffa869;--creamsicle-500:#ff8730;--creamsicle-600:#e66000;--lavender-100:#f7f2ff;--lavender-200:#eae0fe;--lavender-300:#c3a7fc;--lavender-400:#aa81fc;--lavender-500:#9159fc;--lavender-600:#73f;--mint-100:#ebfffa;--mint-200:#b6f2e4;--mint-300:#6ae6c9;--mint-400:#1bddb1;--mint-500:#19cca3;--mint-600:#11866f;--network-android:#3ddc84;--network-apple:#1f2129;--

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.280128763145388
Encrypted:	false
SSDEEP:	12:6v/71UrhTnzFfCusv30Sl0ledZT6yEMHB3hzXQysnSgg7:iWTZCuIlOI6IgQ7
MD5:	5BB4BF932BD8470DEDADC94B24F860FA
SHA1:	0BDA2AFB55195C97879FD8A30DD27B8EC9389A87
SHA-256:	D6CAA1F86FE756A65595155EFF8B65E22F633D83FCD28BC44BED215F1EF9F357
SHA-512:	B3612D53C2A6F280FA6FF3109EE1086DAE05F385FEECDB9DAE4D333B201717F61DF8C797DE9F503432A673F1F77AE1FD616F2A2EB30E3849A97A6FCC56A3B586
Malicious:	false
Reputation:	low
URL:	https://d226aj4ao1t61q.cloudfront.net/vxd0ariod_gift.png
Preview:	.PNG........IHDR...`...`......F.....HPLTE...4j.5j.5j.3p.5h.5j.4j.4h.4e.4i.5i.0h.4j.4j.3i.5j.5j.5i.5i.5j.......`..<......tRNS.... ..@0p` .P............IDATh....0.E.o..t.'........f.C..,............fbZ.t....O..I..D.y..".$=<...q.........S...M....).;....xY.X.&..H.qYmd.U......C.[........A.j....z...b.Zi"A8.3.2.j..."o.#y.`..(.8....^5..X..1P.....V....T..I3.xX)h...S.H;v..1......(.H...(.......'..e..2....i....c..z.j.....N......m8/...9.$.E.....U.f.B....e..}....p.....q...2..r.\.I?u.k....p...w...=;..... ...C....)..j.P...y................<......[q[.z..<5/g-m.b.>..P..X........IEND.B`.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (581)
Category:	downloaded
Size (bytes):	39824
Entropy (8bit):	5.045873983753402
Encrypted:	false
SSDEEP:	768:GgESIAx1V4LKH/7iiv6RnocbDJe9xhzWCTOwSWIFk5j8aT4wyw:GgESIAx1SLKza4xhXT4wyw
MD5:	28A95E36CEA25EAA2230E9E63E06BC22
SHA1:	29E45B17A2C6C4C59B4A2F8EAFD64741BD44AF10
SHA-256:	906CFBDA5764425918166E43023816EA52E998EC45C720E815083A78807DC925
SHA-512:	C7C3E02FC2AE0A65817AC4716BB42420D858864B93566611E1CE6BD88A3E7FB5A0E0067D0F80A9CDA64DA5C50FFCD5AEE40A6BE2BBE27EC217C16BC1FF3EEA7A
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/header.css?v=v102712283221662
Preview:	/..Global admin header. /.../------------------------------------\. Framework.\------------------------------------/.#page_header {position:fixed; top:0; width:100%; margin:0; padding:0; background:#274C7C; height:64px; zoom:1; z-index:990;}.#page_header:after {position:relative; content:''; display:table; clear:both; zoom:1;}.#page_header .hdrwrap {position:relative; display:table; top:0; margin:0; padding:0; height:58px; width:100%; min-width:1024px; left:0!important; right:0!important;}.#page_header .hdrwrap .logo {position:absolute; display:table-cell; top:0; left:0; margin:0; padding:14px 14px 13px 14px; width:40px; height:36px; background: #508CD6;color:#fff;font-size: 29px;cursor:pointer;line-height:37px;text-decoration:none; z-index:100;}.#page_header .hdrwrap .logo.custom-logo { padding:0;background:none;}.#page_header .hdrwrap .logo:hover {background:#3F77BC;}.#page_header .hdrwrap .logo.custom-logo:hover {background:none;}../------------------------------------\.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1796
Entropy (8bit):	7.796686451713596
Encrypted:	false
SSDEEP:	48:wmNJ8PbyDrWHa9kGaP9ZckzAhO+CCcBUYcOz4:9NOz9Ha9ta7ckzAI+I6YcOz4
MD5:	208168D40490072301FFCC83606CCE03
SHA1:	BF34747530983FA53309BC1A125E31A4A5E14D24
SHA-256:	9A1B866DCF322016E5A0017716B1D820912B8C9F02105525CFF184FC25FC70A6
SHA-512:	FCF09DBF72C7AC606224634F5A855EA56C9B2BA9FD7EFE7E51AB3AFF31C71E230F113780251661254A99B207B2CE82EB545A736D0EA9A906D6B4C6515785DC1A
Malicious:	false
Reputation:	low
URL:	https://d226aj4ao1t61q.cloudfront.net/bvkaul0w_wavehand.png
Preview:	.PNG........IHDR...`...`......F......PLTE...5j.3h.4j.4j.......4p......5j.4i.4h.4j....5i..........5f.4j.5i.5j....5j.5j....3i......4i.....................4i.4j.6h.5j...0e.......5j.............N}.Bs.........Z...............t..g...h........Bt.....U%....-tRNS.. ...`. @.`@......0.p....P0.p..P..p.00...a....IDATh..Yw..0.....+.JF.t.....ZR:..W....+........N...d..8.....Qw..M.....x..g....#D.....k...\|......3...o...."\8pOb.P...h.w...).8...m.."....SkE../E.\=e.!t....iQ...L...0..kgr4.`...,.o_..P.......{.?e".."\S/.M~.....1.......z....."X.....{W.[...M.o.XQ..ra-_#..Y....6.....+.s..../.\|I....DH...........`...$Z.O.&..H.<.......}...>G....d....<.?....AUx.$.........B..H...!..@3.EB..2e.....mc1..._...'e.d...?Nl...x.5..K.R..v..5....-..eZG..T.IiW...{\o.......t..m.%..2,...KW...bv...q......5..?...."c......\6...!..^.B....@..1\|z..3.U8I...........4\J......g..V......;:.%[..`].....X.~].,.3.zz...>....*2..X.....ei.+..'.....G.Z..hKT.\|.....d..l.4.....m....@.v.U.&.#..u7.D.. .A.GDl....

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1796
Entropy (8bit):	7.796686451713596
Encrypted:	false
SSDEEP:	48:wmNJ8PbyDrWHa9kGaP9ZckzAhO+CCcBUYcOz4:9NOz9Ha9ta7ckzAI+I6YcOz4
MD5:	208168D40490072301FFCC83606CCE03
SHA1:	BF34747530983FA53309BC1A125E31A4A5E14D24
SHA-256:	9A1B866DCF322016E5A0017716B1D820912B8C9F02105525CFF184FC25FC70A6
SHA-512:	FCF09DBF72C7AC606224634F5A855EA56C9B2BA9FD7EFE7E51AB3AFF31C71E230F113780251661254A99B207B2CE82EB545A736D0EA9A906D6B4C6515785DC1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F......PLTE...5j.3h.4j.4j.......4p......5j.4i.4h.4j....5i..........5f.4j.5i.5j....5j.5j....3i......4i.....................4i.4j.6h.5j...0e.......5j.............N}.Bs.........Z...............t..g...h........Bt.....U%....-tRNS.. ...`. @.`@......0.p....P0.p..P..p.00...a....IDATh..Yw..0.....+.JF.t.....ZR:..W....+........N...d..8.....Qw..M.....x..g....#D.....k...\|......3...o...."\8pOb.P...h.w...).8...m.."....SkE../E.\=e.!t....iQ...L...0..kgr4.`...,.o_..P.......{.?e".."\S/.M~.....1.......z....."X.....{W.[...M.o.XQ..ra-_#..Y....6.....+.s..../.\|I....DH...........`...$Z.O.&..H.<.......}...>G....d....<.?....AUx.$.........B..H...!..@3.EB..2e.....mc1..._...'e.d...?Nl...x.5..K.R..v..5....-..eZG..T.IiW...{\o.......t..m.%..2,...KW...bv...q......5..?...."c......\6...!..^.B....@..1\|z..3.U8I...........4\J......g..V......;:.%[..`].....X.~].,.3.zz...>....*2..X.....ei.+..'.....G.Z..hKT.\|.....d..l.4.....m....@.v.U.&.#..u7.D.. .A.GDl....

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (721)
Category:	downloaded
Size (bytes):	430286
Entropy (8bit):	5.10702242018368
Encrypted:	false
SSDEEP:	6144:mRJEHslkkP0cFhzP+nSQSOmAv+n35aW2jO7cmD:s0cFxGI24cmD
MD5:	A44777845F43D4D9EEED8D89BBF6B837
SHA1:	2741F2BD238A632D7367E8480691E17B672DD647
SHA-256:	98BFD2F56B13FB952C683C4DD5007009FD80B9212CC0A1247C62D9BB19F885D6
SHA-512:	876906961B7B49C72956B9355632EB040C24A4DA37FC2E3762E1334C3AA4689C5FAD3A94D71755D3DB3CABFAAACC3F4DCFE5ABC34ABA4F5F4706D22D0021A5A8
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin.css?v=v102712424104756
Preview:	html { margin: 0;padding: 0;color: #000;height: 100%;min-height: 100%;font-family: 'IBM Plex Sans', helvetica, arial, serif; /* background-color: #343434; */ }.body, div, dl, dt, dd, ul, ol, li, h1, h2, h3, h4, h5, h6, pre, code, blockquote { margin: 0;padding: 0 }.table { border-collapse: collapse;border-spacing: 0 }.fieldset, img { border: 0 }.address, button, caption, cite, code, dfn, em, input, optgroup, option, select, strong, textarea, th, var { font: inherit }.i, em, td i, td em { font-style: italic }.del, ins { text-decoration: none }.li { list-style: none }.caption, th { text-align: left }.h1, h2, h3, h4, h5, h6 { font-weight: normal }.q:before, q:after { content: '' }.abbr, acronym { border: 0;font-variant: normal }.sup { vertical-align: baseline }.sub { vertical-align: baseline }.legend { color: #000 }.body { position: relative;margin: 0;padding: 0 0 0;font-family: "IBM Plex Sans", helvetica, arial, serif;min-width: 940px;height: 100%;display: flex;min-height: 100%;flex-dire

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13851)
Category:	downloaded
Size (bytes):	13992
Entropy (8bit):	5.281231488978167
Encrypted:	false
SSDEEP:	192:XAprDN+s0g6YfKIUfmI9vP1lg+vm9kdg6iLJJaCJQ+h4MlcjbRe:XAprx0kfKIi7P1lrvmAiLJo+h4M2j0
MD5:	FAD78486D895A1CB63D4D7259DDCBEF8
SHA1:	F0F21780B00985D01AA185AE09F6B5BC0FFFCC35
SHA-256:	FABC1309FD87F5C5276434F78EA50D8BEBBD2B78608A07BAE68464C411F4177B
SHA-512:	073BE0604A075EEA615FE83B07F95A7A624660576BAB87D3284A3E0773EEAD2C6CB4C66DC2EDBC14790F297BBA752042CDB516AB3FEB32FEF9E67530863432A7
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery-migrate/3.5.2/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.5.2 \| (c) OpenJS Foundation and other contributors \| jquery.com/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.5.2";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26791), with no line terminators
Category:	dropped
Size (bytes):	26792
Entropy (8bit):	4.895914894770049
Encrypted:	false
SSDEEP:	192:3NtDAFAFAFAFAFAFAFAFAFAFAHBlFf76jN0M64SgTIaRSgTId6DfyZ+ja4lySgTc:3n43dFnNXS3TIO
MD5:	54DD092220EFB0A6222E38DF17F5A51A
SHA1:	FD93870B3E48580667E773E5A725370E64454473
SHA-256:	72ECA68388A0BB4CDDDE2099CB2A9676E9D0A0A5B63246B4C4F6E8FC2EADDD7C
SHA-512:	B5402F0D5C9239CAB6AE2C4D6BF5085F34E93E8E946B3C86948E2391C32B12F427E93962BC36E5AF69021AFC19A30F490922620960A814BB743CE0170A2F056B
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("B-hgEQaJJwnz3bF30wprYrleWKg", "DSyfBG6VAOnWN5EAxQxmANMBTyE", {"props":{"id":"pendo-base","data-layout":"lightboxBlank","class":"_pendo-step-container"},"type":"div","children":[{"css":[{"selector":"label.pendo-radio:hover","styles":{"background":"rgba(204, 204, 204, 1)","color":"#222222"}},{"selector":"input[type=\"radio\"].pendo-radio:checked + label","styles":{"background":"rgba(34, 34, 34, 1)","color":"#FFFFFF"}},{"selector":"input[type=\"radio\"].pendo-radio:focus + label","styles":{"outline":"5px solid Highlight","outline-color":"-webkit-focus-ring-color","outline-style":"auto","outline-offset":"2px"}},{"selector":"label.pendo-radio:hover","styles":{"background":"rgba(204, 204, 204, 1)","color":"#222222"}},{"selector":"input[type=\"radio\"].pendo-radio:checked + label","styles":{"background":"rgba(34, 34, 34, 1)","color":"#FFFFFF"}},{"selector":"input[type=\"radio\"].pendo-radio:focus + label","styles":{"outline":"5px solid Highlight","outline-color"

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	502312
Entropy (8bit):	5.094002613213753
Encrypted:	false
SSDEEP:	6144:MriM0BcfC3cLJYDb4miGF7EBaE4wArTi0byVFFg:giM0efGF7EBaE4wArTi5Fg
MD5:	2219B9D85DAC8D8FB4F19D1006C52D5F
SHA1:	7EF0C307F76F632C740A86D6EF67B71A629C6C24
SHA-256:	7FC259D1AE8DC393BD8F747A4FCEBE7BE9D5477A77921DC351F1459955E4EB8A
SHA-512:	3DB6FFE3315A31B416AD92A1B79D6B0AABE4591F05C5FB059FBB53B79227C7931BBFD0F58168E6A38157696E4E8377F5014C518EA9A3091AB7536B2A72C9DA16
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin2.css?v=v1027121389246675
Preview:	/* Sender Details Modal (basic editor) */.#template-setting .section .setting-section-container .from-input-wrap { width: 100% !important;position: relative;padding:0 5px 0 0 !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 1px solid var(--slate-200) !important;border-radius: 4px;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;margin-right: 10px; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input { position: relative;width: 90% !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 0px !important;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;height:32px;padding:4px 5px 4px 10px!important; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input.inactive { color: #c3c3c3 !important; }.#template-setting .section .setting-section-container .from-input-wra

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2090
Entropy (8bit):	4.9960885285090875
Encrypted:	false
SSDEEP:	24:VJXImbnyoWYd7J0YcAkN8mx8ipMV3BWTxgb+E6hvgPZUsyHiBY1XcrY:VJXI8nyol7Mpn8AnSnRB4mUXIY
MD5:	F9E56AF70E256BFF067A1E33017E7923
SHA1:	470A964363983D15EBB12571AEC76741D4EAB4D8
SHA-256:	3CFA49D8A373C3A457ADE077505808A6304B5207249B1D5007E74AF100DB66F2
SHA-512:	66A70E45FDE34964D1B804ECD274F66D7014302E5F54DA7966EA42488753A98599C64666F5F183A1786216DC4057E5185D0999BC01B43555A1FCAE58ABB81B67
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/footer.css?v=v1027121389246675
Preview:	/-------------------------------------------/./* Admin Global Footer Style ... / ./-------------------------------------------/..../------ Framework ------/.#page_footer {width:100%;height:64px;padding:24px 24px; background: #4e4e4e;text-align:left;box-sizing: border-box;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;}.#page_footer a, #page_footer a:visited { color:#c0c0c0;font-size:14px;text-decoration: none;margin-right:14px;}.#page_footer a:hover { color:#fff;}..#page_footer .twitter-icon:hover { color:#fff;}.#page_footer .facebook-icon:hover { color:#fff;}..#page_footer a.ac-icon { font-size:19px;}.../------ Support popup menu ------/../ Icon */..support-icon { position: fixed; right: 20px; bottom: 20px; width: 47px; height: 47px; background-color: #4DCBA9; border-radius: 100%; box-shadow: 0 1px 2px rgba(0, 0, 0, 0.2); cursor: pointer;z-index: 2000; }..support-icon:hover { background-color: #40c19e; }..support-icon span { width: 22px; height: 22px;font-size:2

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (737)
Category:	downloaded
Size (bytes):	787
Entropy (8bit):	5.2740326471992605
Encrypted:	false
SSDEEP:	12:sUcc5LoVpeKfYNMcKfYRBdUcc5LHDJ/HpeKfQJMcKfQtQD33LodV2dln:seKQNMVQDde9lpIJMVI2GQj
MD5:	D9B5637AAE8A62B8BBDFCA632D45BA7D
SHA1:	4501983D5178EAE28A519B6E08DF75431C5C715B
SHA-256:	79235A5DAC24B67CD59327B342BAA0B37C08DA0F42ABC2C2EB4F94DD1E75C46E
SHA-512:	6504DA4957EE3B3E24BC7B330D22C9BF0131477E9C902069B090EA55EC9443F347010C126B2E3A2ED21046E51EF862F8AFFCCFF6B0A70D4E31C3A87449881803
Malicious:	false
Reputation:	low
URL:	https://solve-widget.forethought.ai/static/css/647.38ef54d4.chunk.css
Preview:	@font-face{font-display:swap;font-family:Plus Jakarta Sans;font-style:normal;font-weight:200 800;src:url(/static/media/PlusJakartaSans[wght].892556e07963b2d4849a.woff2) format("woff2") tech("variations"),url(/static/media/PlusJakartaSans[wght].892556e07963b2d4849a.woff2) format("woff2-variations")}@font-face{font-display:swap;font-family:Plus Jakarta Sans Italic;font-style:italic;font-weight:200 800;src:url(/static/media/PlusJakartaSans-Italic[wght].084b925b159dbb6c76b1.woff2) format("woff2") tech("variations"),url(/static/media/PlusJakartaSans-Italic[wght].084b925b159dbb6c76b1.woff2) format("woff2-variations")}em,i{font-family:"Plus Jakarta Sans Italic",var(--font-fallback);font-synthesis:none;font-variation-settings:"ital" 1}./# sourceMappingURL=647.38ef54d4.chunk.css.map/

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (478)
Category:	downloaded
Size (bytes):	102428
Entropy (8bit):	5.28862593980317
Encrypted:	false
SSDEEP:	3072:GAO0SJbXw8mW0hh9+L5D/sAchakEF66KuYF8EF66Ku7inltF66KudintF66KuPzs:SJbXJkh9+1/zchakEF66KuYF8EF66KuA
MD5:	D0BDB42CB9722B4EC35231718D6CB19A
SHA1:	1D389A0035F984913F3757119F98DF051AEFAD97
SHA-256:	FD8A6D740BE134C443FB0B5BD4EB16D4769D492B1D2583E6487245661F304CB4
SHA-512:	1ECB36C81FBAEC10AA508DFD2B7EC60A62FD2A485D485AB813A98927C2648F38A30B3D20BE18CA9F8399AD0F7C9D7892A3F88911820C8998C1D719F367CF11E3
Malicious:	false
Reputation:	low
URL:	"https://yourexcellency.activehosted.com/ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader"
Preview:	// ac.js.// Loading.....// ajax.js..var ac_ajax_debug = true;..function ac_ajax_request_object() {. var hreq;.. try {. hreq = new XMLHttpRequest();. } catch (e) {...hreq = null;. }.. return hreq;.}..function ac_ajax_call_url(url, post, cb) {. var hreq = ac_ajax_request_object();.. if (hreq !== null) {. hreq.onreadystatechange = function() {. try {. ac_ajax_handle(hreq, cb);. } catch (e) {}. };.. var method = ( post === null ? 'GET' : 'POST' );.. var postType = typeof(post);.. if ( post !== null ) {... if ( postType == 'array' \|\| postType == 'object' ) {... .var postArr = new Array();... for ( var i in post ) {..... var postType = typeof(post[i]);..... if ( postType == 'array' \|\| postType == 'object' ) {..... for ( var j in post[i] ) {..... ..if ( typeof(post[i][j]) != 'function' ) {.... ..postArr.push(i + '[' + ( j == 'undefined' ? '' : j ) + ']=' + encodeURIC

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	dropped
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	76307
Entropy (8bit):	4.746710080995372
Encrypted:	false
SSDEEP:	768:IrOmOo/x/SOmOw/l/Unz/S/cySy+/Z/PoXs:U/x/c/l/Unz/S/0/Z/PoXs
MD5:	150D94F24A187415CDCC65BACC6A530F
SHA1:	96744B4F44EEF0534CCB3B573987C3AE0637752E
SHA-256:	AAFEEA77D9DCA87810387D9FAA14CB890E756A510D17E7D08A69E19DE4D7E19D
SHA-512:	60127AEE5974ED861B621CC466DDDC3E737CD1479F9C6C784C236391D14D1956B27977C195ECE1FD40866A2DF8E1F9B74275CBC288CFF3C40B3459B16F5CB8A0
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/animations.css?v=v1027121389246675
Preview:	@charset "UTF-8";./!.Animate.css - http://daneden.me/animate.Licensed under the MIT license - http://opensource.org/licenses/MIT..Copyright (c) 2014 Daniel Eden./...animated {. -webkit-animation-duration: 1s;. animation-duration: 1s;. -webkit-animation-fill-mode: both;. animation-fill-mode: both;.}..animated.slow {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..animated.fast {. -webkit-animation-duration: .4s;. animation-duration: .4s;.}..animated.fastest {. -webkit-animation-duration: .2s;. animation-duration: .2s;.}...animated.infinite {. -webkit-animation-iteration-count: infinite;. animation-iteration-count: infinite;.}...animated.hinge {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..@-webkit-keyframes bounce {. 0%, 20%, 53%, 80%, 100% {. -webkit-transition-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);. transition-timing-function: cubic-bezier(0.215, 0.61

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	76307
Entropy (8bit):	4.746710080995372
Encrypted:	false
SSDEEP:	768:IrOmOo/x/SOmOw/l/Unz/S/cySy+/Z/PoXs:U/x/c/l/Unz/S/0/Z/PoXs
MD5:	150D94F24A187415CDCC65BACC6A530F
SHA1:	96744B4F44EEF0534CCB3B573987C3AE0637752E
SHA-256:	AAFEEA77D9DCA87810387D9FAA14CB890E756A510D17E7D08A69E19DE4D7E19D
SHA-512:	60127AEE5974ED861B621CC466DDDC3E737CD1479F9C6C784C236391D14D1956B27977C195ECE1FD40866A2DF8E1F9B74275CBC288CFF3C40B3459B16F5CB8A0
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/animations.css?v=v102712424104756
Preview:	@charset "UTF-8";./!.Animate.css - http://daneden.me/animate.Licensed under the MIT license - http://opensource.org/licenses/MIT..Copyright (c) 2014 Daniel Eden./...animated {. -webkit-animation-duration: 1s;. animation-duration: 1s;. -webkit-animation-fill-mode: both;. animation-fill-mode: both;.}..animated.slow {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..animated.fast {. -webkit-animation-duration: .4s;. animation-duration: .4s;.}..animated.fastest {. -webkit-animation-duration: .2s;. animation-duration: .2s;.}...animated.infinite {. -webkit-animation-iteration-count: infinite;. animation-iteration-count: infinite;.}...animated.hinge {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..@-webkit-keyframes bounce {. 0%, 20%, 53%, 80%, 100% {. -webkit-transition-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);. transition-timing-function: cubic-bezier(0.215, 0.61

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19156, version 1.0
Category:	downloaded
Size (bytes):	19156
Entropy (8bit):	7.9875076768495505
Encrypted:	false
SSDEEP:	384:MTAwGDqiX+y8twBHfvD15VJQboDCFqvQT+yuEt7wo81a5yro556/R:Mb0nB/vD15VJQsDCtJ9+1wdcJ
MD5:	0CEB759015A6DF090AD355231FDB39F1
SHA1:	B947749BAAB5BFA0BEE35D31E5A5050D4BEEFE9B
SHA-256:	DB71F8A28AD8501544FB4E7668E3C6D0B731760B6F20DE3525EBAEBA597F1922
SHA-512:	48A93841B147AF84F9419154FB43E23ADF7C0AFB9328A4427450D82C07220A4F55B08991361BD8CD12A1372DE8333ED21A8911BFE372E90973D3A8C166B1E4D6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdHeFQ.woff2
Preview:	wOF2......J........ ..Js.........................F..d....`..l.>..s........}.....6.$.. . ..:.....2.^.%..c...{.~.O..nG........$V..g$.C..m..UFO..!"..#....Jm3m...i..G......e.u....ufN..D..+....M...._Y.......M.C6po...i..HLyet./.e. .)....@6(..#"A(z.h.......<....3s...R$...........<..?..G........1?3qa4V#..u..."B]..U."S]...YU.C..........=.7@.l.`.k. ....-....}.Q*ib.S......n..p...wH..v.#....c.0.........V0..`.a.4..w.j<.........}zu.....$..B.!@.$9...Sm_....n.#Eg.w.}).s.eS_2E.-.5Q....q.v....xq!....8pI..{........"..........$$<.MB.L'$Rw;q{_..X.\|KaP..._V.w;P.......>.l...8...Yc......}.L.n.a.......k..>.A./..+.\|.........\...H.I.....va.u.(./..\TWe...+......{..y....s._._]`;.S..c..Bx....@.h..............,.&..4..0..k.0.>...3..o.. ...`&.=.y.8...>.5.E>.^?.U](...1P.c<?e...b..d......h3.L....2.M.n.l..d.n.e{..J.....?..)=..Z..J.X.E.{.e...>....h/j.}...]...Ew....~.aH......2....(T..q\......C+.....#}...1.xF...!...."."....Y.).`.~...\.v...:L..\|g9..].IJ...r,.'.T...X.@1.8..=d.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43726)
Category:	downloaded
Size (bytes):	43760
Entropy (8bit):	5.298699837566787
Encrypted:	false
SSDEEP:	768:dbhh31McDL1vIg0rdZI0KYrD9DRR+Vtzo82Z1AFTxASlm0urvS/2k7KK2tynwUuv:dThWD9DPUxA14AH
MD5:	FD711E2BE1600F858842DB067F9E74C4
SHA1:	2333F07354375E18E7D8F92990D87646BE06146A
SHA-256:	F8FE0AD84E6D669F0865F65269F7F2B67EE28E83E75114CB58A368D7FD6CDF7B
SHA-512:	856BAD888847F4859757BBFE14FA4198893BECEA19898E43CD257EA46CDE66917D1CF69D0FA0C56139F05CE2150934808C446C7DF46A91B4AE730FAE10B37452
Malicious:	false
Reputation:	low
URL:	https://solve-widget.forethought.ai/embed.js
Preview:	!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="43712606-d556-4a7e-ab6d-430c086404e7",e._sentryDebugIdIdentifier="sentry-dbid-43712606-d556-4a7e-ab6d-430c086404e7")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{var e={3633:e=>{e.exports=function(){var e=function(e){return"function"===typeof e},t=Math.pow(2,53)-1,n=function(e){var n=function(e){var t=Number(e);return isNaN(t)?0:0!==t&&isFinite(t)?(t>0?1:-1)*Math.floor(Math.abs(t)):t}(e);return Math.min(Math.max(n,0),t)},i=function(e){var t=e.next();return!Boolean(t.done)&&t};return function(t){"use strict";var o,a,r,s=this,d=arguments.length>1?arguments[1]:void 0;if("undefined"!==typeof d){if(!e(d))throw new TypeError("Array.from

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	97532
Entropy (8bit):	5.39640903820033
Encrypted:	false
SSDEEP:	768:sL2zMXPi2uNAl16axww0AYD0DiDXDEDLBDNKDGDmDNQytALLNamG4lDYVLaNLf/v:UDB0tFD0ob4MqrxiZQ4sp9CO7v
MD5:	FF250489181ABD25AE13AD3063B7CE33
SHA1:	D56C6EE754EF0BB26F3CEF303E6657F81F0C79C2
SHA-256:	45062B870736D85C95D7D573C713F4A173FFB200F2F8A07B82FC1A2C945CBD9B
SHA-512:	89A5574690E6CB92A34CDFC6A84914E9F3151934553B39168ED3AADBB7F32D3F694442B2F3EC5F7E65F9489D8FA3457A44A2B1A0418EC1EE7212AB651747B59B
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Comfortaa:wght@300..700&family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&family=Merriweather:ital,wght@0,300;0,400;0,700;0,900;1,300;1,400;1,700;1,900&family=Playfair+Display:ital,wght@0,400..900;1,400..900&family=Roboto+Mono:ital,wght@0,100..700;1,100..700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Comfortaa';. font-style: normal;. font-weight: 300 700;. font-display: swap;. src: url(https://fonts.gstatic.com/s/comfortaa/v45/1Ptsg8LJRfWJmhDAuUs4QIFqPfE.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Comfortaa';. font-style: normal;. font-weight: 300 700;. font-display: swap;. src: url(https://fonts.gstatic.com/s/comfortaa/v45/1Ptsg8LJRfWJmhDAuUs4SYFqPfE.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Comfortaa';. font-style: normal;. font-weight: 300 700;. font-display: swap;. src: url(https://fonts.gstatic.com/s/comfortaa/v45/1Ptsg8LJRfWJmhDAuUs4ToFqPfE.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Comforta

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	dropped
Size (bytes):	458718
Entropy (8bit):	5.438375613696595
Encrypted:	false
SSDEEP:	6144:+WDT7vOhfzq+e1fnuMBvQD9UhSh11Hl/QHfjIPvlodf5KhkIQ0BrKiAqx:bT7vezq+e1fnuMB+7hnlDvlodfkJKiAQ
MD5:	3A75D4E1E7A171202302F5F4CA53F5F3
SHA1:	5B4B1179EA409B08776DD3B2A4FF7416EC49FD9D
SHA-256:	DF26DC3742F19F047438D98B587A51356B89BDC673D7BF53E1AC9E80456E9F82
SHA-512:	4A6C100DCE5C491DBF738AE77D7BC6317FB452E7E4C18BD7B1BC7004F640EA36DBF4933656F882B52C7A7D789F88516B9C977FF3B2E42246E289889EDBEB4591
Malicious:	false
Reputation:	low
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(()=>{var e,t,n,r,o={26436:(e,t,n)=>{"use strict";n.d(t,{Ci:()=>g,D9:()=>r.D9,Ez:()=>p,G1:()=>a,Kr:()=>c,NH:()=>_,RD:()=>d,Rj:()=>b,Ut:()=>v,ZY:()=>y,_k:()=>i,af:()=>j,az:()=>s,cK:()=>S,go:()=>x,pJ:()=>l,pK:()=>o,rN:()=>f,wG:()=>m,x5:()=>u,x7:()=>r.x7,xm:()=>h,yb:()=>r.yb,z7:()=>w});var r=n(70069);const o=700,s=380,i=64,a=16,c=20,l=16,u=Number(r.CK),d="0px 20px 30px rgba(23, 73, 77, 0.15)",f="cubic-bezier(0.66, 0, 0.12, 1)",p="16px",h="14px",g=25,v="widgetOpen",m="soundNotificationDisabledKey",y={bottom:e=>e+i-c+4,right:e=>e-4,rightZoomedIn:l-4,leftZoomedIn:i-c,left:e=>i+(e-l)},b={fullScreenHeight:926,fullScreenWidth:540,verticallySmallHeight:670},w="https://www.zendesk.com/service/messaging/?utm_source=webwidgetmessagingweb&utm_medium=webwidgetmessaging&utm_ca

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2090
Entropy (8bit):	4.9960885285090875
Encrypted:	false
SSDEEP:	24:VJXImbnyoWYd7J0YcAkN8mx8ipMV3BWTxgb+E6hvgPZUsyHiBY1XcrY:VJXI8nyol7Mpn8AnSnRB4mUXIY
MD5:	F9E56AF70E256BFF067A1E33017E7923
SHA1:	470A964363983D15EBB12571AEC76741D4EAB4D8
SHA-256:	3CFA49D8A373C3A457ADE077505808A6304B5207249B1D5007E74AF100DB66F2
SHA-512:	66A70E45FDE34964D1B804ECD274F66D7014302E5F54DA7966EA42488753A98599C64666F5F183A1786216DC4057E5185D0999BC01B43555A1FCAE58ABB81B67
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/footer.css?v=v1027121384670010
Preview:	/-------------------------------------------/./* Admin Global Footer Style ... / ./-------------------------------------------/..../------ Framework ------/.#page_footer {width:100%;height:64px;padding:24px 24px; background: #4e4e4e;text-align:left;box-sizing: border-box;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;}.#page_footer a, #page_footer a:visited { color:#c0c0c0;font-size:14px;text-decoration: none;margin-right:14px;}.#page_footer a:hover { color:#fff;}..#page_footer .twitter-icon:hover { color:#fff;}.#page_footer .facebook-icon:hover { color:#fff;}..#page_footer a.ac-icon { font-size:19px;}.../------ Support popup menu ------/../ Icon */..support-icon { position: fixed; right: 20px; bottom: 20px; width: 47px; height: 47px; background-color: #4DCBA9; border-radius: 100%; box-shadow: 0 1px 2px rgba(0, 0, 0, 0.2); cursor: pointer;z-index: 2000; }..support-icon:hover { background-color: #40c19e; }..support-icon span { width: 22px; height: 22px;font-size:2

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	1442999
Entropy (8bit):	5.40371682177587
Encrypted:	false
SSDEEP:	24576:Zf2WM38s8haHrsxZDjmMyFyEiwRvo24uqEFCZjPO0avYiWwv3agr:Zf2WM38bhaHrsxZDjmMytpZ45EFCRPOj
MD5:	4944CCE1675F5DD2210DA164212355EC
SHA1:	3E9E83CC3CC37892934DE8A0EF3E89ABA2217394
SHA-256:	2C0B265FE8C1807DB80BE57B24ED3AE260E3D5967D0815049F8DD6F6ECFAD785
SHA-512:	D6A0B57A8753331C7C4186A0311C26B8EDC0396049EB8AD88AA351138DCC3EA4ADFA898CDE87CD0F6DB9E835C03EB99F02CAB116B34A726287C233283C14A8A5
Malicious:	false
Reputation:	low
URL:	https://solve-widget.forethought.ai/static/js/621.d916e3cb.chunk.js
Preview:	/! For license information please see 621.d916e3cb.chunk.js.LICENSE.txt /.!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="09d3efee-9440-4f73-99cd-b944d463dd90",e._sentryDebugIdIdentifier="sentry-dbid-09d3efee-9440-4f73-99cd-b944d463dd90")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[621],{5513:(e,t,n)=>{"use strict";n.d(t,{A:()=>oe});var r=function(){function e(e){var t=this;this._insertTag=function(e){var n;n=0===t.tags.length?t.insertionPoint?t.insertionPoint.nextSibling:t.prepend?t.container.firstChild:t.before:t.tags[t.tags.length-1].nextSibling,t.container.insertBefore(e,n),t.tags.push(e)},this.isSpeedy=void 0===

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	502312
Entropy (8bit):	5.094002613213753
Encrypted:	false
SSDEEP:	6144:MriM0BcfC3cLJYDb4miGF7EBaE4wArTi0byVFFg:giM0efGF7EBaE4wArTi5Fg
MD5:	2219B9D85DAC8D8FB4F19D1006C52D5F
SHA1:	7EF0C307F76F632C740A86D6EF67B71A629C6C24
SHA-256:	7FC259D1AE8DC393BD8F747A4FCEBE7BE9D5477A77921DC351F1459955E4EB8A
SHA-512:	3DB6FFE3315A31B416AD92A1B79D6B0AABE4591F05C5FB059FBB53B79227C7931BBFD0F58168E6A38157696E4E8377F5014C518EA9A3091AB7536B2A72C9DA16
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin2.css?v=v1027121384670010
Preview:	/* Sender Details Modal (basic editor) */.#template-setting .section .setting-section-container .from-input-wrap { width: 100% !important;position: relative;padding:0 5px 0 0 !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 1px solid var(--slate-200) !important;border-radius: 4px;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;margin-right: 10px; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input { position: relative;width: 90% !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 0px !important;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;height:32px;padding:4px 5px 4px 10px!important; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input.inactive { color: #c3c3c3 !important; }.#template-setting .section .setting-section-container .from-input-wra

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1371
Entropy (8bit):	4.797038772781046
Encrypted:	false
SSDEEP:	24:tZGPrnqRk4m7xvYab/3jxRD6ipnSaHg4wN6rtAPz3NZpYVYM/F:XSqqf9vY23fnpSaHg4wNEAPJAVP/F
MD5:	355CC1E1050AF23B006EA14B35DB39A9
SHA1:	A43732D6CBFC70F8213CF0AB48C0C93C1E502053
SHA-256:	8D58AEE7AD7B7CB1D5908E9C27D76B4E4BE51CB943C268B39F0CAF2D38C3F3E3
SHA-512:	41DC607EA5BD2167C457F04746F391D5FAED0270A8123B258408C85B038A548548A840C7B1AC09CE9C82DC82324C6300E6E0171AF56A7F17B9EF1EF8DE0EDCD3
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v1027121471506941
Preview:	:root {. /* Primary palette /. --ocean: var(--ocean-500);. --ocean-120: var(--ocean-600);. --ocean-80: var(--ocean-400);. --ocean-60: var(--ocean-300);. --ocean-40: var(--ocean-200);. --ocean-30: var(--ocean-150);. --ocean-20: var(--ocean-100);. --slate: #4e5468;. --slate-120: #353A4A;. --slate-140: #1f2129;. --slate-80: #5f667e;. --slate-60: #9298ad;. --slate-40: #ced3e0;. --slate-30: #E4E7F0;. --slate-20: #F7F9FC;. --mint: #19cca3;. --mint-120: #139879;. --mint-80: #1bddb1;. --mint-60: #6ae6c9;. --mint-40: #b6f2e4;. --mint-20: #ebfffa;.. / Secondary palette */. --strawberry: #f3376b;. --strawberry-120: #e40e49;. --strawberry-80: #f56e94;. --strawberry-60: #faa5bd;. --strawberry-40: #fcdee7;. --strawberry-20: #fff2f6;. --creamsicle: #ff8730;. --creamsicle-120: #f46700;. --creamsicle-80: #ffa869;. --creamsicle-60: #ffbf90;. --creamsicle-40: #ffe1cb;. --creamsicle-20: #fff8f2;. --lavender: #9159fc;. --lavender-120: #73f;. --lavender-80: #aa81fc;.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65061)
Category:	downloaded
Size (bytes):	98648
Entropy (8bit):	5.500584392256398
Encrypted:	false
SSDEEP:	1536:CIQqXQoLZjBB3ovdzxo3MaidyI7N8JVdCgFZcrX/CLhfUSE5am:bQMjnydz2BJHdCCD2B
MD5:	7A965FA1BFF0D7D24BC10C99AB4C6107
SHA1:	F35647572142AC3A3167A7F09089E9A63CF38138
SHA-256:	54C0D489F8D98B5ECCF7C48AE0DB4F9AEE4BE50A9C57DE9BBDD912683A5FA99B
SHA-512:	8BC69ABAC38FFBBC29EF80C929FA0110F1722B34C808A6B90B93DEE357FEDAE0DE0650D258DEAC75223DDF5C78650CCAE1E01C3447EA949D479A13E683F262A8
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/EHawkTalon6.js
Preview:	/. E-HAWK Talon v6.0.6 Fri, 13 Oct 2023 08:21:41 GMT. * This file is the property of E-HAWK, LLC. This file may only be used by active subscribed customers of E-HAWK during a vetting API call. Use for any other purpose is strictly prohibited.. * It must be deleted upon termination of services with E-HAWK. Reverse engineering or copying functionality is strictly prohibited..*/.var Talon;!function(){var t={9662:function(t,e,n){var r=n(614),o=n(6330),i=TypeError;t.exports=function(t){if(r(t))return t;throw i(o(t)+" is not a function")}},6077:function(t,e,n){var r=n(614),o=String,i=TypeError;t.exports=function(t){if("object"==typeof t\|\|r(t))return t;throw i("Can't set "+o(t)+" as a prototype")}},1223:function(t,e,n){var r=n(5112),o=n(30),i=n(3070).f,a=r("unscopables"),c=Array.prototype;null==c[a]&&i(c,a,{configurable:!0,value:o(null)}),t.exports=function(t){c[a][t]=!0}},9670:function(t,e,n){var r=n(111),o=String,i=TypeError;t.exports=function(t){if(r(t))return t;throw i(o(t)+" is not

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10277), with no line terminators
Category:	downloaded
Size (bytes):	10277
Entropy (8bit):	5.352878238195692
Encrypted:	false
SSDEEP:	192:+YmYyW83qr6hYo9zqbCEwqURXnVhQTXdjriZ4KUWjKkGCKxrPkir04j5h2O3GDei:+YmYF83Y6hYOzqbCEwqiXnjQTXdviZ4W
MD5:	6EE6BAFD5311611F1980BB49422BBFC9
SHA1:	78DA648B4412D84FE6A7CBC399770AD42F84ECB2
SHA-256:	2B6BA0E6EED66AB5345210B7D09665AD5AB7E8B737B6F6CB0AE65D267372CC44
SHA-512:	84CFC5756833756FCBC4B1BACA0567E5F134C16B9AA39B25E3F88D01C3E569848B0A5C06AA0FAD217ECBBED24AA1DC722500724C217707DD976D33226DEFB30D
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/messenger/latest/web-widget-8173-b6408d4.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[8173],{66515:(e,t,n)=>{n.d(t,{A:()=>o});var r=n(88910);const o=()=>{const[e,t]=(0,r.useState)(Math.round(100window.devicePixelRatio)),n=()=>{t(Math.round(100window.devicePixelRatio))};return(0,r.useEffect)((()=>(window.addEventListener("resize",n),()=>{window.removeEventListener("resize",n)})),[]),{scale:e>=400?.5:1,isZoomedIn:e>=400}}},99317:(e,t,n)=>{n.d(t,{A:()=>h});var r=n(20912),o=n(70069),i=n(26436),s=n(66515),a=n(7533),c=n(32731),d=n(7087),l=n(52295),m=n(86222);const h=({children:e,ariaLabel:t})=>{const n=(0,r.d4)(l.E9),h=(0,r.d4)(l.fl),u=(0,r.d4)(c.iG),{vertical:g,horizontal:f}=(0,r.d4)(l.XI),p=g>i.G1,x=a.A.isRTL()?"rtl":"ltr",{isZoomedIn:y}=(0,s.A)();return(0,m.jsx)("div",{"aria-label":t,style:{display:"flex",flexDirection:"column",zIndex:h,bottom:u===o.Fe.none?g:(0,d.Uc)(Number(g)),position:"fixed",[n]:f,direction:x,alignItems:"end",gap:i.x5,..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	797
Entropy (8bit):	5.291587655336238
Encrypted:	false
SSDEEP:	24:2ubb9/EOB21MQw/064TWfOOiZRWjFUAZxe3YS:h94bRX5wJUAuYS
MD5:	069BA6B51AA83FE59B7C832CF74B02F1
SHA1:	437E593CE2B2E06E15AF9BA2A9D9CB28CA1774F7
SHA-256:	16873745F3FCBAE49D616FF66A6D99ECDA16FE4D87B51F8D480945D03E0BE414
SHA-512:	D219E33733D6A18C3A4CBC242A36BC7C089731B47DACA6BD481F06AEC4C592CE9C2EC0FEA2104D0FEDEE409C72959D57AECC4F61AE3A33AFC5C0CB77CCF0C72E
Malicious:	false
Reputation:	low
Preview:	(function (pendoConfig) {..(function(apiKey){...if (!apiKey) {....return null;...}....(function(p,e,n,d,o){var v,w,x,y,z;o=p[d]=p[d]\|\|{};o._q=[];....v=['initialize','identify','updateOptions','pageLoad'];for(w=0,x=v.length;w<x;++w)(function(m){.....o[m]=o[m]\|\|function(){o._q[m===v[0]?'unshift':'push']([m].concat([].slice.call(arguments,0)));};})(v[w]);....// Create a `<script>` tag linked to your application-specific Agent build from our CDN.......y=e.createElement(n);y.async=!0;y.src='https://cdn.pendo.io/agent/static/'+apiKey+'/pendo.js';....z=e.getElementsByTagName(n)[0];z.parentNode.insertBefore(y,z);...})(window,document,'script','pendo');....pendo.initialize({....visitor: pendoConfig.visitor,....account: pendoConfig.account...});..})(pendoConfig.apiKey);.})(window.AcPendoConfig);.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	1442999
Entropy (8bit):	5.40371682177587
Encrypted:	false
SSDEEP:	24576:Zf2WM38s8haHrsxZDjmMyFyEiwRvo24uqEFCZjPO0avYiWwv3agr:Zf2WM38bhaHrsxZDjmMytpZ45EFCRPOj
MD5:	4944CCE1675F5DD2210DA164212355EC
SHA1:	3E9E83CC3CC37892934DE8A0EF3E89ABA2217394
SHA-256:	2C0B265FE8C1807DB80BE57B24ED3AE260E3D5967D0815049F8DD6F6ECFAD785
SHA-512:	D6A0B57A8753331C7C4186A0311C26B8EDC0396049EB8AD88AA351138DCC3EA4ADFA898CDE87CD0F6DB9E835C03EB99F02CAB116B34A726287C233283C14A8A5
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 621.d916e3cb.chunk.js.LICENSE.txt /.!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="09d3efee-9440-4f73-99cd-b944d463dd90",e._sentryDebugIdIdentifier="sentry-dbid-09d3efee-9440-4f73-99cd-b944d463dd90")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[621],{5513:(e,t,n)=>{"use strict";n.d(t,{A:()=>oe});var r=function(){function e(e){var t=this;this._insertTag=function(e){var n;n=0===t.tags.length?t.insertionPoint?t.insertionPoint.nextSibling:t.prepend?t.container.firstChild:t.before:t.tags[t.tags.length-1].nextSibling,t.container.insertBefore(e,n),t.tags.push(e)},this.isSpeedy=void 0===

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1300
Entropy (8bit):	5.046621337641176
Encrypted:	false
SSDEEP:	24:Y+3F/K6gjyIdpTWxM8CfzPQtGAqcAAtU/USsz824Zkt4s:YW/KTdpTafCfrQcAqLCUspzGkZ
MD5:	0E4B3A3AB4586E5F91E21A7E639703BB
SHA1:	0F594502B249E568AAF967F879FAF028F0D2C2EB
SHA-256:	BBDCF1BD76250DF99C30CAE03F7F5AF7437A21673D1E48221F46892FCB02E7E2
SHA-512:	756E5B206C8CB7AE0F472571DE9C6BDE2347F6F88B5B44C01905955F7CB300CC65A8B22CF5C261C5D3835FB028A5E3C315B1B5C36F69508E69B24D1AE4DDE2B1
Malicious:	false
Reputation:	low
Preview:	{"products":[{"name":"web_widget","id":"prodhostedtest.zendesk.com","bootstrap":{"config":{"features":{"multiConvoEnabled":true,"fastLoad":true,"privateAttachmentsEnabled":true,"conversationTicketMetadata":true},"messenger":{"canUserCreateMoreConversations":true,"color":{"message":"#00363d","action":"#000cff","primary":"#000cff"},"integrationId":"651edd8f5f5e9b98d7077f4f","description":"How can we help?","attachmentsEnabled":true,"avatar":"https://prodhostedtest.zendesk.com/embeddable/avatars/10718314379804","positionOffset":{"mobile":{"horizontal":"16","vertical":"16"},"web":{"horizontal":"16","vertical":"16"}},"title":"ActiveCampaign","showZendeskLogo":false,"canUserSeeConversationList":true,"baseUrl":"https://prodhostedtest.zendesk.com/sc/sdk","conversationHistory":"forget","channelLinkingEnabled":false,"frameBorderRadius":"16","appId":"6185c3c6587c5300e119773e","soundNotificationEnabled":true,"position":"right","proactiveMessagingEnabled":false,"launcher":{"shapeSettings":null,"sho

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65310)
Category:	downloaded
Size (bytes):	613492
Entropy (8bit):	5.4074442759880466
Encrypted:	false
SSDEEP:	12288:t4wD1I8PId/qQ/Pu7NYg1U1wYQykePIyJ3LPKa:t4ARPAq+G7NYg1U1CePIEf
MD5:	2D9AD81AAF14574D10A93E4DADD05083
SHA1:	7A5C592B1052E08241C0CF86DD0F8911D1886C14
SHA-256:	3E160A41535B089EB11765540EA3AFB076A00EFF41455188AB23AF97133B16BD
SHA-512:	9F68493F128E696948B04AE09F5B19AB346F1F0B6C86D7571AE51EA6144501B8D6504C5118A0BCC5879AA6AF81FC2002224D7BB9DB2FE67DA291C03F1EFF51FA
Malicious:	false
Reputation:	low
URL:	https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo.js
Preview:	// Pendo Agent Wrapper.// Copyright 2025 Pendo.io, Inc..// Environment: production.// Agent Version: 2.260.1.// Installed: 2025-01-13T22:12:23Z.(function (PendoConfig) {./.@license https://agent.pendo.io/licenses./.!function(Ew,xw,Cw){!function(){var d=Array.prototype.slice;try{d.call(xw.documentElement)}catch(Gt){Array.prototype.slice=function(e,t){if(t=void 0!==t?t:this.length,"[object Array]"===Object.prototype.toString.call(this))return d.call(this,e,t);var n,i=[],r=this.length,o=e\|\|0,a=(t<0?r+t:t\|\|r)-(o=0<=o?o:r+o);if(0<a)if(i=new Array(a),this.charAt)for(n=0;n<a;n++)i[n]=this.charAt(o+n);else for(n=0;n<a;n++)i[n]=this[o+n];return i}}String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")});var T=function(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".split("");return{uint8ToBase64:function(e){var t,n,i,r=e.length%3,o="";for(t=0,i=e.length-r;t<i;t+=3)n=(e[t]<<16)+(e[t+1]<<8)+e[t+2]

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14755), with no line terminators
Category:	dropped
Size (bytes):	14755
Entropy (8bit):	4.94400067874837
Encrypted:	false
SSDEEP:	192:zqrOGd3v6RbNbGN7073q0won/lkOLEffqjUMwCv2sbyL6JX:zqr7d3vCxjq0BUMwCVbyq
MD5:	835F7CFF134156384684FCC0DB13880B
SHA1:	4A3788A02C0484F3DD8E654DE3A963810790426D
SHA-256:	BEB03D92DA93FF6EC0163B2D79BACA82C9583AD71318E82D23D8BF47E06E67D8
SHA-512:	838413DD628EF242DF0687C4DF97B334221378413B5D4AC9D901B5A00A856A9FE8F318D35733F2F9C5C80E1182682B2DC527190F6E2087F743E8164CA8223F5C
Malicious:	false
Reputation:	low
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[3190],{30339:(e,r,a)=>{a.d(r,{A:()=>t});var n=a(20912),s=a(7533),o=a(26983);const t=()=>((0,n.d4)(o.JK),s.A.translate)},43190:(e,r,a)=>{a.d(r,{A:()=>v});var n=a(24726),s=a.n(n),o=a(88910),t=a(20912),i=a(10948),m=a(3261),l=a.n(m),d=a(64043),b=a(70069),g=a(70513),_=a(26436),c=a(7533),k=a(30339),f=a(87944),u=a(52295),p=a(86222);const w=(0,i.DU)([""," html{overflow-y:hidden;font-size:initial;",";}"],l(),(e=>e.backgroundColor&&`background: ${e.backgroundColor}`)),h=({children:e,setBackgroundColor:r})=>{const a=(0,t.d4)(u.iB),n=(0,t.d4)(f._),s=n?_.xm:_.Ez,i=(0,g.UC)(),m=(0,k.A)();(0,o.useEffect)((()=>{i.document.documentElement.setAttribute("dir",c.A.isRTL()?"rtl":"ltr"),i.document.documentElement.setAttribute("lang",c.A.getLocale())}),[c.A.getLocale()]);return(0,p.jsx)(d.A,{currentFrame:i,primaryColor:a.primary,messageColor:a.message,actionColor:a.action,baseFo

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1856241
Entropy (8bit):	5.08809466828566
Encrypted:	false
SSDEEP:	49152:dNmEvSVlsi1KtMxnF/DMB+13kUZyV9maZKmTKLxg4haTR+NTEwBSdh28xe9HkE5R:4
MD5:	20702285B0C5A918CB57D15B735321FE
SHA1:	3F75A40DF21B39BB79AA79A03A9D0218C2B00BB3
SHA-256:	010F01F8A34B7CE0A388499EC3D3B310BAAD3B298C4ABCF1A909CDDAE65BEA22
SHA-512:	9422A614474263D502E9F622DA93B1CAEFB0AAD0AC764DC0B332FD4E8BE6EEDF886B10E614FB3D9FFCD1EFF08C1BFC60238F3521EE24C0F53204ADF873C7FD28
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v1027121384670010
Preview:	:root{--b-0:0;--b-100:1px;--b-200:2px;--b-300:4px;--b-none:none;--b-dashed:dashed;--b-solid:solid;--radii-0:0;--radii-100:4px;--radii-200:8px;--radii-rounded:99rem;--radii-circle:100%;--shadow-50:0 1px 4px rgba(31,33,41,0.3);--shadow-100:0 4px 8px -2px rgba(31,33,41,0.3);--shadow-200:0 4px 12px 0 rgba(31,33,41,0.08);--shadow-300:0 14px 22px 0 rgba(31,33,41,0.1);--shadow-400:0 26px 32px 0 rgba(31,33,41,0.3);--banana-100:#fff9e6;--banana-200:#fdecb2;--banana-300:#fce28b;--banana-400:#fbd965;--banana-500:#facf3f;--banana-600:#deaa00;--black:#000;--creamsicle-100:#fff8f2;--creamsicle-200:#ffe1cb;--creamsicle-300:#ffbf90;--creamsicle-400:#ffa869;--creamsicle-500:#ff8730;--creamsicle-600:#e66000;--lavender-100:#f7f2ff;--lavender-200:#eae0fe;--lavender-300:#c3a7fc;--lavender-400:#aa81fc;--lavender-500:#9159fc;--lavender-600:#73f;--mint-100:#ebfffa;--mint-200:#b6f2e4;--mint-300:#6ae6c9;--mint-400:#1bddb1;--mint-500:#19cca3;--mint-600:#11866f;--network-android:#3ddc84;--network-apple:#1f2129;--

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10215), with no line terminators
Category:	downloaded
Size (bytes):	10215
Entropy (8bit):	5.196370762379201
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCtsAoLlHn:KFSk/OROk5u4QK0kTOkcISh2DjkotshN
MD5:	C88D625098DDB649CF216DBA2E52435C
SHA1:	1385FD033122892210B8BBE0970B723BC873D38D
SHA-256:	C7631939BBC2C74FC9A5FB1EE9565250A15BF95CC0E364DA7FC5F15E3DB41427
SHA-512:	0897EF72E744B5EAE67368BBA6CA566210998AFEB12BFBDA6260F245B108ACA1003CBFB77810BC06E0A34BD004012AF70F3586846DF235A9C166E5509AE03998
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/ekr/snippet.js?key=dcd5b484-abf6-47e3-adad-bc7b7da716c4
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	downloaded
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/functions.js?v=v102712283221662
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13558), with no line terminators
Category:	dropped
Size (bytes):	13558
Entropy (8bit):	5.4710596464616685
Encrypted:	false
SSDEEP:	384:SzMYJF6jh47DwiX0VQ3KLz67zUXBDQPTuvz0ny+r9VTNBFSURX1WP:SoYJG47DdEVQEO7zUXBDQPTuvzezYUpq
MD5:	BB8CBFD720C605961AAE1C3D74C181EE
SHA1:	4E7AF46B7F94C0BD45A5C39F75DE71BF3B8EDDB9
SHA-256:	47D2E14459A3D61C1DB079AAC737BDFE9D57BECF439E33C6DA279484DBA40BA6
SHA-512:	B6D2F9B3EA01DF0CD7CFEEA5A38DE3E4D23D3B554392686F73D414B5860D043A37F248111517AC51B4BFAA70CE7365A56CC095B8FA3D0596E42FF2AC21B05E46
Malicious:	false
Reputation:	low
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[2229],{50915:(e,n,t)=>{t.r(n),t.d(n,{default:()=>Ye});var r=t(48559),s=t(20912),i=t(88910),a=t(24726),o=t.n(a),d=t(70069),l=t(54899),c=t(43229),p=t(10948),h=t(94998);const m=p.Ay.div.withConfig({componentId:"sc-1q9fwvy-0"})(["position:absolute;left:0px;display:flex;align-items:center;justify-content:center;height:100%;width:100%;transition:top ","s ",";",""],.5,h.rN,(e=>"entering"===e.state\|\|"entered"===e.state?(0,p.AH)(["top:0;"]):(0,p.AH)(["top:",";"],e.hiddenPosition)));var u=t(86222);const g=({isVisible:e,hiddenPosition:n,children:t})=>(0,u.jsx)(c.Ay,{in:e,timeout:500,children:e=>(0,u.jsx)(m,{state:e,hiddenPosition:n,"aria-hidden":"exited"===e,children:t})});g.propTypes={isVisible:o().bool,hiddenPosition:o().string,children:o().node};const x=g;var f=function(e){return(0,u.jsx)("svg",{...e,children:(0,u.jsx)("path",{fillRule:"evenodd",clipRule:"evenodd"

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (488)
Category:	downloaded
Size (bytes):	13515
Entropy (8bit):	5.082581993641253
Encrypted:	false
SSDEEP:	384:dSuCKDujQMeDH1W60sYsTrBwrRXAQPWgg7L7feADl3PM1:yQ1W60sYsTrBaRXAQPWgg7L7fDDl301
MD5:	0E9AA12DD744EC41246AB1C292D7B8F9
SHA1:	DA650223A8C4E6F16A1E2A74EF1B8F8891C98756
SHA-256:	AE05BF66E25C9E25F93031CD5C196959FC91C812A5E3F29E2FD6F9FE398F0C98
SHA-512:	DBD0A2AAEEDA109CDD487755190C2A68CA87D4B5181826F23E5DFED4C3470C8D664A4A36247999D86843995524A658E53ABE6D39D9D6011EA564FA5D6AB7B79D
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v1027121389246675
Preview:	@font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.eot?9608958');. src: url('../font/ac-icons.eot?9608958#iefix') format('embedded-opentype'),. url('../font/ac-icons.woff2?9608958') format('woff2'),. url('../font/ac-icons.woff?9608958') format('woff'),. url('../font/ac-icons.ttf?9608958') format('truetype'),. url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. }.}./.. [class^="ac-icon-"]:before, [class=" ac-icon-"]:before {. font-family: "ac-icons";. font-style: normal;. font-weight: normal;. speak: none;.. display: inline-bl

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	downloaded
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/jsc/ac.js?v=v102712424104756
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	251
Entropy (8bit):	3.9141243326856108
Encrypted:	false
SSDEEP:	3:UCIIsmKA4F2XFFWNNGKK1I1sH2I1uUI8zIILIfflkEGc82nkcser4/tKRAYmH:U8sW4F2CdK1CsWCm8JIfGfwR6H
MD5:	F1DA0AADBF845CB0C4D5B31765836E41
SHA1:	8FB141B3EF2782EAA667E11EC7E263EF7E4B2EFB
SHA-256:	1ADFAFBBFC90BF463E79BAC61F069BEF70247D04E7EB9CB82DFE1ADB2279F8F8
SHA-512:	7C12B90B5AD2361B041E82D19F23BEDA3523770A33B514489EE3C24C8D35286354B0EE352F544989CEB716EAC46160693AFA86E73C9D42B7D0F395EF99B8BAAE
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/content.css?v=v102712424104756
Preview:	/-------------------------------------------/./* Admin Global Content Style ...... / ./-------------------------------------------/...../------ Framework ------*/..ac-content_wrap { padding: 0 23px 23px 23px;width:100%;box-sizing:border-box;}

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/jq/notification.js?v=v1027121471506941
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1371
Entropy (8bit):	4.797038772781046
Encrypted:	false
SSDEEP:	24:tZGPrnqRk4m7xvYab/3jxRD6ipnSaHg4wN6rtAPz3NZpYVYM/F:XSqqf9vY23fnpSaHg4wNEAPJAVP/F
MD5:	355CC1E1050AF23B006EA14B35DB39A9
SHA1:	A43732D6CBFC70F8213CF0AB48C0C93C1E502053
SHA-256:	8D58AEE7AD7B7CB1D5908E9C27D76B4E4BE51CB943C268B39F0CAF2D38C3F3E3
SHA-512:	41DC607EA5BD2167C457F04746F391D5FAED0270A8123B258408C85B038A548548A840C7B1AC09CE9C82DC82324C6300E6E0171AF56A7F17B9EF1EF8DE0EDCD3
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v1027121389246675
Preview:	:root {. /* Primary palette /. --ocean: var(--ocean-500);. --ocean-120: var(--ocean-600);. --ocean-80: var(--ocean-400);. --ocean-60: var(--ocean-300);. --ocean-40: var(--ocean-200);. --ocean-30: var(--ocean-150);. --ocean-20: var(--ocean-100);. --slate: #4e5468;. --slate-120: #353A4A;. --slate-140: #1f2129;. --slate-80: #5f667e;. --slate-60: #9298ad;. --slate-40: #ced3e0;. --slate-30: #E4E7F0;. --slate-20: #F7F9FC;. --mint: #19cca3;. --mint-120: #139879;. --mint-80: #1bddb1;. --mint-60: #6ae6c9;. --mint-40: #b6f2e4;. --mint-20: #ebfffa;.. / Secondary palette */. --strawberry: #f3376b;. --strawberry-120: #e40e49;. --strawberry-80: #f56e94;. --strawberry-60: #faa5bd;. --strawberry-40: #fcdee7;. --strawberry-20: #fff2f6;. --creamsicle: #ff8730;. --creamsicle-120: #f46700;. --creamsicle-80: #ffa869;. --creamsicle-60: #ffbf90;. --creamsicle-40: #ffe1cb;. --creamsicle-20: #fff8f2;. --lavender: #9159fc;. --lavender-120: #73f;. --lavender-80: #aa81fc;.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26791), with no line terminators
Category:	downloaded
Size (bytes):	26792
Entropy (8bit):	4.895914894770049
Encrypted:	false
SSDEEP:	192:3NtDAFAFAFAFAFAFAFAFAFAFAHBlFf76jN0M64SgTIaRSgTId6DfyZ+ja4lySgTc:3n43dFnNXS3TIO
MD5:	54DD092220EFB0A6222E38DF17F5A51A
SHA1:	FD93870B3E48580667E773E5A725370E64454473
SHA-256:	72ECA68388A0BB4CDDDE2099CB2A9676E9D0A0A5B63246B4C4F6E8FC2EADDD7C
SHA-512:	B5402F0D5C9239CAB6AE2C4D6BF5085F34E93E8E946B3C86948E2391C32B12F427E93962BC36E5AF69021AFC19A30F490922620960A814BB743CE0170A2F056B
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5646107534426112.storage.googleapis.com/guide-content/B-hgEQaJJwnz3bF30wprYrleWKg/DSyfBG6VAOnWN5EAxQxmANMBTyE/_ZOHCz5IWAZn53PlpyU3DmRFRHM.dom.jsonp?sha256=cuymg4igu0zd3iCZyyqWdunQoKW2Mka0xPbo_C6t3Xw
Preview:	pendo.receiveDomStructureJson("B-hgEQaJJwnz3bF30wprYrleWKg", "DSyfBG6VAOnWN5EAxQxmANMBTyE", {"props":{"id":"pendo-base","data-layout":"lightboxBlank","class":"_pendo-step-container"},"type":"div","children":[{"css":[{"selector":"label.pendo-radio:hover","styles":{"background":"rgba(204, 204, 204, 1)","color":"#222222"}},{"selector":"input[type=\"radio\"].pendo-radio:checked + label","styles":{"background":"rgba(34, 34, 34, 1)","color":"#FFFFFF"}},{"selector":"input[type=\"radio\"].pendo-radio:focus + label","styles":{"outline":"5px solid Highlight","outline-color":"-webkit-focus-ring-color","outline-style":"auto","outline-offset":"2px"}},{"selector":"label.pendo-radio:hover","styles":{"background":"rgba(204, 204, 204, 1)","color":"#222222"}},{"selector":"input[type=\"radio\"].pendo-radio:checked + label","styles":{"background":"rgba(34, 34, 34, 1)","color":"#FFFFFF"}},{"selector":"input[type=\"radio\"].pendo-radio:focus + label","styles":{"outline":"5px solid Highlight","outline-color"

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4364
Entropy (8bit):	5.129189625936672
Encrypted:	false
SSDEEP:	96:slSEb4eZaHaHH4HXMH2mJCSdzQnbW1YX2c8qwdZEWmRqwHqwLQboa4uvp8uE5Btf:Hiydc2tDny1oV8PdZEW8PHPLop8uE/8Q
MD5:	905273050B6DFCA4EC09742D0A19C207
SHA1:	D20D0F77CCFFF38C5322C356F1BFE77FD751332D
SHA-256:	4CA80ECB98305D1995D359203327927E6C311CFC1F10EE2428346253B314DDC4
SHA-512:	C7C2E5100DD3FD62946004FFFB1E77FA813167D2B649F39C825BAE7DE97AFCC8F02E55D9C8579E3B14498B85002B94A3FCD29265995231A8AF274B1E2AA5A1A0
Malicious:	false
Reputation:	low
Preview:	/*. Monkey patch jQuery so that for each AJAX request, it grabs the CSRF token . * directly from the cookie and sets it as a header. This way, it will always . * send the newest token.. /.(function(allTheJQueries) {...function validateUrl(url) {...if (typeof url !== 'string') {....return false;...}....// If the URL does not begin with 'http' then it is a relative path,...// so it is okay...if (url.indexOf('http') !== 0) {....return true;...}....// If it is a fully qualified URL, then it MUST be to the current host...var upperCaseUrl = url.toUpperCase();...var upperCaseDocumentLocationOrigin = document.location.origin.toUpperCase();....return upperCaseUrl.indexOf(upperCaseDocumentLocationOrigin) === 0;..}.../.. This is called every AJAX request, and adds our CSRF token header.. * to the request.. */..function setHeader(options) {...var csrfResponseHeaderName = "X-XSRF-TOKEN";....if (!validateUrl(options.url)) {....return;...}....options.headers = typeof options.headers === 'obje

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10277), with no line terminators
Category:	dropped
Size (bytes):	10277
Entropy (8bit):	5.352878238195692
Encrypted:	false
SSDEEP:	192:+YmYyW83qr6hYo9zqbCEwqURXnVhQTXdjriZ4KUWjKkGCKxrPkir04j5h2O3GDei:+YmYF83Y6hYOzqbCEwqiXnjQTXdviZ4W
MD5:	6EE6BAFD5311611F1980BB49422BBFC9
SHA1:	78DA648B4412D84FE6A7CBC399770AD42F84ECB2
SHA-256:	2B6BA0E6EED66AB5345210B7D09665AD5AB7E8B737B6F6CB0AE65D267372CC44
SHA-512:	84CFC5756833756FCBC4B1BACA0567E5F134C16B9AA39B25E3F88D01C3E569848B0A5C06AA0FAD217ECBBED24AA1DC722500724C217707DD976D33226DEFB30D
Malicious:	false
Reputation:	low
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[8173],{66515:(e,t,n)=>{n.d(t,{A:()=>o});var r=n(88910);const o=()=>{const[e,t]=(0,r.useState)(Math.round(100window.devicePixelRatio)),n=()=>{t(Math.round(100window.devicePixelRatio))};return(0,r.useEffect)((()=>(window.addEventListener("resize",n),()=>{window.removeEventListener("resize",n)})),[]),{scale:e>=400?.5:1,isZoomedIn:e>=400}}},99317:(e,t,n)=>{n.d(t,{A:()=>h});var r=n(20912),o=n(70069),i=n(26436),s=n(66515),a=n(7533),c=n(32731),d=n(7087),l=n(52295),m=n(86222);const h=({children:e,ariaLabel:t})=>{const n=(0,r.d4)(l.E9),h=(0,r.d4)(l.fl),u=(0,r.d4)(c.iG),{vertical:g,horizontal:f}=(0,r.d4)(l.XI),p=g>i.G1,x=a.A.isRTL()?"rtl":"ltr",{isZoomedIn:y}=(0,s.A)();return(0,m.jsx)("div",{"aria-label":t,style:{display:"flex",flexDirection:"column",zIndex:h,bottom:u===o.Fe.none?g:(0,d.Uc)(Number(g)),position:"fixed",[n]:f,direction:x,alignItems:"end",gap:i.x5,..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	76307
Entropy (8bit):	4.746710080995372
Encrypted:	false
SSDEEP:	768:IrOmOo/x/SOmOw/l/Unz/S/cySy+/Z/PoXs:U/x/c/l/Unz/S/0/Z/PoXs
MD5:	150D94F24A187415CDCC65BACC6A530F
SHA1:	96744B4F44EEF0534CCB3B573987C3AE0637752E
SHA-256:	AAFEEA77D9DCA87810387D9FAA14CB890E756A510D17E7D08A69E19DE4D7E19D
SHA-512:	60127AEE5974ED861B621CC466DDDC3E737CD1479F9C6C784C236391D14D1956B27977C195ECE1FD40866A2DF8E1F9B74275CBC288CFF3C40B3459B16F5CB8A0
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/animations.css?v=v1027121471506941
Preview:	@charset "UTF-8";./!.Animate.css - http://daneden.me/animate.Licensed under the MIT license - http://opensource.org/licenses/MIT..Copyright (c) 2014 Daniel Eden./...animated {. -webkit-animation-duration: 1s;. animation-duration: 1s;. -webkit-animation-fill-mode: both;. animation-fill-mode: both;.}..animated.slow {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..animated.fast {. -webkit-animation-duration: .4s;. animation-duration: .4s;.}..animated.fastest {. -webkit-animation-duration: .2s;. animation-duration: .2s;.}...animated.infinite {. -webkit-animation-iteration-count: infinite;. animation-iteration-count: infinite;.}...animated.hinge {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..@-webkit-keyframes bounce {. 0%, 20%, 53%, 80%, 100% {. -webkit-transition-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);. transition-timing-function: cubic-bezier(0.215, 0.61

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10215), with no line terminators
Category:	dropped
Size (bytes):	10215
Entropy (8bit):	5.196370762379201
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCtsAoLlHn:KFSk/OROk5u4QK0kTOkcISh2DjkotshN
MD5:	C88D625098DDB649CF216DBA2E52435C
SHA1:	1385FD033122892210B8BBE0970B723BC873D38D
SHA-256:	C7631939BBC2C74FC9A5FB1EE9565250A15BF95CC0E364DA7FC5F15E3DB41427
SHA-512:	0897EF72E744B5EAE67368BBA6CA566210998AFEB12BFBDA6260F245B108ACA1003CBFB77810BC06E0A34BD004012AF70F3586846DF235A9C166E5509AE03998
Malicious:	false
Reputation:	low
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/jq/notification.js?v=v102712283221662
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/jq/notification.js?v=v1027121384670010
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1300
Entropy (8bit):	5.046621337641176
Encrypted:	false
SSDEEP:	24:Y+3F/K6gjyIdpTWxM8CfzPQtGAqcAAtU/USsz824Zkt4s:YW/KTdpTafCfrQcAqLCUspzGkZ
MD5:	0E4B3A3AB4586E5F91E21A7E639703BB
SHA1:	0F594502B249E568AAF967F879FAF028F0D2C2EB
SHA-256:	BBDCF1BD76250DF99C30CAE03F7F5AF7437A21673D1E48221F46892FCB02E7E2
SHA-512:	756E5B206C8CB7AE0F472571DE9C6BDE2347F6F88B5B44C01905955F7CB300CC65A8B22CF5C261C5D3835FB028A5E3C315B1B5C36F69508E69B24D1AE4DDE2B1
Malicious:	false
Reputation:	low
URL:	https://ekr.zdassets.com/compose/dcd5b484-abf6-47e3-adad-bc7b7da716c4
Preview:	{"products":[{"name":"web_widget","id":"prodhostedtest.zendesk.com","bootstrap":{"config":{"features":{"multiConvoEnabled":true,"fastLoad":true,"privateAttachmentsEnabled":true,"conversationTicketMetadata":true},"messenger":{"canUserCreateMoreConversations":true,"color":{"message":"#00363d","action":"#000cff","primary":"#000cff"},"integrationId":"651edd8f5f5e9b98d7077f4f","description":"How can we help?","attachmentsEnabled":true,"avatar":"https://prodhostedtest.zendesk.com/embeddable/avatars/10718314379804","positionOffset":{"mobile":{"horizontal":"16","vertical":"16"},"web":{"horizontal":"16","vertical":"16"}},"title":"ActiveCampaign","showZendeskLogo":false,"canUserSeeConversationList":true,"baseUrl":"https://prodhostedtest.zendesk.com/sc/sdk","conversationHistory":"forget","channelLinkingEnabled":false,"frameBorderRadius":"16","appId":"6185c3c6587c5300e119773e","soundNotificationEnabled":true,"position":"right","proactiveMessagingEnabled":false,"launcher":{"shapeSettings":null,"sho

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	downloaded
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/functions.js?v=v102712424104756
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	502312
Entropy (8bit):	5.094002613213753
Encrypted:	false
SSDEEP:	6144:MriM0BcfC3cLJYDb4miGF7EBaE4wArTi0byVFFg:giM0efGF7EBaE4wArTi5Fg
MD5:	2219B9D85DAC8D8FB4F19D1006C52D5F
SHA1:	7EF0C307F76F632C740A86D6EF67B71A629C6C24
SHA-256:	7FC259D1AE8DC393BD8F747A4FCEBE7BE9D5477A77921DC351F1459955E4EB8A
SHA-512:	3DB6FFE3315A31B416AD92A1B79D6B0AABE4591F05C5FB059FBB53B79227C7931BBFD0F58168E6A38157696E4E8377F5014C518EA9A3091AB7536B2A72C9DA16
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin2.css?v=v1027121471506941
Preview:	/* Sender Details Modal (basic editor) */.#template-setting .section .setting-section-container .from-input-wrap { width: 100% !important;position: relative;padding:0 5px 0 0 !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 1px solid var(--slate-200) !important;border-radius: 4px;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;margin-right: 10px; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input { position: relative;width: 90% !important;display: inline-block;background-color: #ffffff;line-height: 100%;border: 0px !important;font: 14px "IBM Plex Sans", Helvetica, sans-serif !important;color: #333 !important;float: left;height:32px;padding:4px 5px 4px 10px!important; }.#template-setting .section .setting-section.name-field .from-input-wrap input.from-input.inactive { color: #c3c3c3 !important; }.#template-setting .section .setting-section-container .from-input-wra

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	113889
Entropy (8bit):	5.254021734457043
Encrypted:	false
SSDEEP:	1536:CASDBvFn3nEjwiUCp4E5LQVeD0NLpe4vO94jhoTeNFHQ5dE7:CASH0jEEho1fjyi/cA
MD5:	1C1F4D86AF33DFBDE894FED8BE69496E
SHA1:	F70558267E35B333E926FA72B725F5E8785981EC
SHA-256:	853A2ECAC03D6311DC032989D9D3CA69ED9B77789C6885C8F634EBA9111C33F9
SHA-512:	2F226E3BD97A9C6BD2C48743007E70E0BDD1F819F8AFE518ADCA5E76D2E721CA5771932F244ED271853D464CDF03E24BCBD1ECB3761B35D2AE36CA3860E0DC15
Malicious:	false
Reputation:	low
Preview:	/! For license information please see nr-spa-1.278.2.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.278.2.PROD"]=self["webpackChunk:NRBA-1.278.2.PROD"]\|\|[]).push([[478],{7699:(e,t,i)=>{i.d(t,{I:()=>s,N:()=>r});const r=64e3,s=1e6},2123:(e,t,i)=>{function r(e){return!!e&&e.self!==e.top}i.d(t,{v:()=>r})},5519:(e,t,i)=>{i.d(t,{AQ:()=>u,me:()=>o,sH:()=>c,uJ:()=>h});var r=i(3304),s=i(3371),n=Object.prototype.hasOwnProperty,a=64;function o(e,t,i){return e\|\|0===e\|\|""===e?t(e)+(i?",":""):"!"}function c(e,t){return t?Math.floor(e).toString(36):void 0===e\|\|0===e?"":Math.floor(e).toString(36)}function h(e){let t=0;const i=Object.prototype.hasOwnProperty.call(Object,"create")?Object.create(null):{},r=(0,s.f)(e).obfuscator;return function(e){if(void 0===e\|\|""===e)return"";return e=r.obfuscateString(String(e)),n.call(i,e)?c(i[e],!0):(i[e]=t++,function(e){return"'"+e.replace(d,"\\$1")}(e))}}function u(e,t){var i=[];return Object.entries(e\|\|{}).forEach((([e,s])=>{if(!(i.length>=a)){var

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50622)
Category:	downloaded
Size (bytes):	50664
Entropy (8bit):	5.4312298218561486
Encrypted:	false
SSDEEP:	768:o1EEaLSH2XU2rPgwUBgKz9ed8HSV17gMGScKp4RQ8qRSW:o1EPuH0rPgwjqScpR/6
MD5:	791E4410EF4E9B6965605EE65AC8FDFD
SHA1:	2238BFF5604FA2792C24AF266AAB9852E7560329
SHA-256:	212F81EDF3C9B18D548C18A73F8B580A9CBAC67639EF9DDC090321941C2D2644
SHA-512:	36F34DDA833356B24E0001A798164D85AB16345F4D168A1E35BD25C129ACD2CEA0764BE3B9F69E85039F72A21922D013D4B8F230B01DCFA67BBA5B31659C4027
Malicious:	false
Reputation:	low
URL:	https://solve-widget.forethought.ai/static/js/main.64e6aab4.js
Preview:	!function(){try{var t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},r=(new t.Error).stack;r&&(t._sentryDebugIds=t._sentryDebugIds\|\|{},t._sentryDebugIds[r]="02e986c9-d0bc-4892-bec8-de9466ea57a9",t._sentryDebugIdIdentifier="sentry-dbid-02e986c9-d0bc-4892-bec8-de9466ea57a9")}catch(t){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{"use strict";var t={1239:(t,r,e)=>{var n=e(4706),o=e(5464),i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is not a function")}},83:(t,r,e)=>{var n=e(1012),o=e(5464),i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is not a constructor")}},6579:(t,r,e)=>{var n=e(8682),o=String,i=TypeError;t.exports=function(t){if(n(t))return t;throw new i("Can't set "+o(t)+" as a prototype")}},3348:(t,r,e)=>{var n=e(4352),o=e(6115),i=e(3572).f,a=

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	675
Entropy (8bit):	7.489836499902425
Encrypted:	false
SSDEEP:	12:6v/70wZ0ojbaZk5tBdSf/TjCl4+OICEmjO7pZrmIxZhXPujVU1VLGS3NnPD:NFojb3dSXHCliSmaXrrZUjmBGk
MD5:	5B8CCF123779CF06A364A3124BBEA0B3
SHA1:	0D9D16CE5D8784E9E76F26E6468D1971E3397CB4
SHA-256:	2AC8E5C7FFF39CA7873097E0843688D0B232C610ED5DDC471694630E3D1A7107
SHA-512:	412988D1D40C33B0B319853E32C3195D982786269E90A1E53ECC8F7A75DDED9CC90F04D855BB712871385B008C5B76A5B985A0003D4E30165B301FA099EC51E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F......PLTE...5j..........4k..........5i.......0p.5k.5i.6j.6j.0h.0h....5j......................N}...g.....[........Bs....................................o..%".n....tRNS.......`` ...... ] ......IDATh....n.0...q.K.9....=.._....&..,.<...w...!...IQ.p..3(.Oe.}.4{?R.8?...4]b0.a.....C../.....C..@......;...[.oh.I..zBzD5......EJ._.ZJ....(.......@C...65.0.E........q.......O.d....D=...jlP.l..`..-.c.6[.[.]............,..~.o.#......J..hH..L.T..C.".?r7..LE..}..6=(.x......x..[UgH.Uoe.:..E7.FUo....F...P...k.o.$^.!`..(\g..4%06...n.T.zC.d..r..O....h..1.s...]V.b.[...+.1.#.!....../C....9...E.X.?....8:>..../..t..?.\....IEND.B`.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386)
Category:	downloaded
Size (bytes):	55497
Entropy (8bit):	5.221657851036488
Encrypted:	false
SSDEEP:	1536:YFjoJ562ZFjhBsy1qry1qxy1q7y1qOyIqAZFKZFvjZrnbHysX2ysXgqyPsZ3qyPe:sjGLZFAy1qry1qxy1q7y1qOyIqAZFKZF
MD5:	144B224ED178586F2DFA9600C4D9B825
SHA1:	582D8C2B46E9C0BE2F04E699059EAA59D8B4C0F8
SHA-256:	F6F2D9995566D984A815B81BCE63BC1D1798BD63C4696574D7DA413100F12842
SHA-512:	34951AEC874857F98B8FC1AED37387D65AA331CD731E0100F780B74E736A7AEFE173F8C4A339FFB9D358FE043B1185AF8BC8089D70C261862766D6C09BE87EA9
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/default.css?v=v1027121389246675
Preview:	../* PAGE DEFAULTS /./ Setting the main body, font, color, and link defaults /............./ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /............body{ font-family: Arial, Helvetica, sans-serif; font-size:11px; color:#333333; margin:0; padding:0; }..input{ font-size:12px; font-weight:normal; font-family:Arial, Helvetica, sans-serif; }..a, a:visited{ color:#666666; }.a:hover{ color:#333333; }..hr{ background:#CCCCCC; color:#CCCCCC; height:1px; border:0; }../ Login Box For Index Page (usually the admin index) */..ac_login_container{ }..ac_login_head{..border-top-left-radius: 15px;..border-top-right-radius: 15px;..-moz-border-radius-topright: 15px;..-moz-border-radius-topleft: 15px;..background:#0E3E75;..padding-top:35px;..paddin

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	downloaded
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/functions.js?v=v1027121384670010
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23165)
Category:	downloaded
Size (bytes):	23387
Entropy (8bit):	5.306972084602657
Encrypted:	false
SSDEEP:	384:1Z0h5E9y4QIWDPrcB8Hgj8HBCxPJZUVnYFZkd2o7vXMF0OB8NyLvOTHQeP0zjE1x:U5E9y4qzcB4CZmPdPrORfeP0zjE1/V11
MD5:	D95555BF007FCDDA849A37D9714463B7
SHA1:	D26443C35CE9E5E1E6193FA0FB191C2AAB7F55A5
SHA-256:	3B0720CF5312D04A43124A81E657A9AAA77CD27688D0146DAAEDBE6D423107CE
SHA-512:	5DA3C97775D619B0430A143A0AD17EC03A92EED94EEDB627B8BDFB905BA5EB77283975C1E10C858400183B99A0515DA43F1827216CC061C6F7FB8023327B4149
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/css-vars-ponyfill/2.4.9/css-vars-ponyfill.min.js
Preview:	/!. css-vars-ponyfill. * v2.4.9. * https://jhildenbiddle.github.io/css-vars-ponyfill/. * (c) 2018-2024 John Hildenbiddle <http://hildenbiddle.com>. * MIT license. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).cssVars=t()}(this,(function(){"use strict";function e(){return e=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},e.apply(this,arguments)}function t(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},r={mimeType:t.mimeType\|\|null,onBeforeSend:t.onBeforeSend\|\|Function.prototype,onSuccess:t.onSuccess\|\|Function.prototype,onError:t.onError\|\|Function.prototype,onComplete:t.onComplete\|\|Function.prototype},n=Array.isArray(e)?e:[e],o=Array.apply(null,Array(n.length)).map((function(e){return null})

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20064, version 1.0
Category:	downloaded
Size (bytes):	20064
Entropy (8bit):	7.988312941780516
Encrypted:	false
SSDEEP:	384:vBLOncPH2cNuJpXWlReg7CicrqNO/fo0lEcGW/QJBO4F/8LGzF4wL4C9:4nY2cNiB8WicrrHJlEcVYJBiLA4s9
MD5:	767677E475131FA7D3F37880976BEE39
SHA1:	386DB54484CFF1DFEE2CBC4441AD790FE9829A6B
SHA-256:	5EF914E59B0047A261844D96ACABB60C34D3ACAB6B85EA24198726CE4781FD37
SHA-512:	9A890E72CB981CFAD21537F636AC7365958460134950FF08FD7D578AB8F70BDE441B60AA1884C6884147E0660CD20BAC7675BCDF46D93FC3C592B5A2BE69F3BA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjSL9AIFsdA.woff2
Preview:	wOF2......N`.......P..M..........................F..@....`..l.>..s.....\........6.$.. . ........J.......P.......=.6.Aw.f.BQ3......+....Nn.!....CL.....9...V(tUn.U.rAW.l..J.5...........y.3D./.Q...?.v.,.6.....I...XBL......m>.G....d......?..K.....o.;."......H...:4........E..6..c...QsC.:../..Y....B..f..F...[.l. 1...6..[..V..........F6V.`...v\|!o.eK...==.=.;;.4;.".5H..........dRtu....]..[..P..A.y..g....~..>...\zj.T....%.M.F4.B.......g.Gpj.._30i.K...Xm...l...MU?c_....p.....{T.7.d!?.,c....x){C.........._..MH..x.....J...\.....{.3...l.B.K.?UC...._..[.d...g...]...N..o..P.........KR%..J.>;9r..VjC...........k..?.y...b./....Zh+......,...h...........O9......=...o.yv'..m.w.ABP.R......W5...j.YZ.qx..h.z....T......my...w4...#X0PK.l..!.......[y.={......>.{?..........>H..u......4,..D....EO.O..!.6.F..Y.....W#.).nS*..J...>.R...=7..ec.6. EEdf.......u...Q.(..EK.~.......&...7....".J(...B(.9....I.N..&.DAA@8.D._......C..Q!.2.N..-..6....o\|A.&\..X).z.'..v;...1.4.W.......`.n

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	251
Entropy (8bit):	3.9141243326856108
Encrypted:	false
SSDEEP:	3:UCIIsmKA4F2XFFWNNGKK1I1sH2I1uUI8zIILIfflkEGc82nkcser4/tKRAYmH:U8sW4F2CdK1CsWCm8JIfGfwR6H
MD5:	F1DA0AADBF845CB0C4D5B31765836E41
SHA1:	8FB141B3EF2782EAA667E11EC7E263EF7E4B2EFB
SHA-256:	1ADFAFBBFC90BF463E79BAC61F069BEF70247D04E7EB9CB82DFE1ADB2279F8F8
SHA-512:	7C12B90B5AD2361B041E82D19F23BEDA3523770A33B514489EE3C24C8D35286354B0EE352F544989CEB716EAC46160693AFA86E73C9D42B7D0F395EF99B8BAAE
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/content.css?v=v1027121389246675
Preview:	/-------------------------------------------/./* Admin Global Content Style ...... / ./-------------------------------------------/...../------ Framework ------*/..ac-content_wrap { padding: 0 23px 23px 23px;width:100%;box-sizing:border-box;}

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	675
Entropy (8bit):	7.489836499902425
Encrypted:	false
SSDEEP:	12:6v/70wZ0ojbaZk5tBdSf/TjCl4+OICEmjO7pZrmIxZhXPujVU1VLGS3NnPD:NFojb3dSXHCliSmaXrrZUjmBGk
MD5:	5B8CCF123779CF06A364A3124BBEA0B3
SHA1:	0D9D16CE5D8784E9E76F26E6468D1971E3397CB4
SHA-256:	2AC8E5C7FFF39CA7873097E0843688D0B232C610ED5DDC471694630E3D1A7107
SHA-512:	412988D1D40C33B0B319853E32C3195D982786269E90A1E53ECC8F7A75DDED9CC90F04D855BB712871385B008C5B76A5B985A0003D4E30165B301FA099EC51E1
Malicious:	false
Reputation:	low
URL:	https://d226aj4ao1t61q.cloudfront.net/jhynp592_idcard.png
Preview:	.PNG........IHDR...`...`......F......PLTE...5j..........4k..........5i.......0p.5k.5i.6j.6j.0h.0h....5j......................N}...g.....[........Bs....................................o..%".n....tRNS.......`` ...... ] ......IDATh....n.0...q.K.9....=.._....&..,.<...w...!...IQ.p..3(.Oe.}.4{?R.8?...4]b0.a.....C../.....C..@......;...[.oh.I..zBzD5......EJ._.ZJ....(.......@C...65.0.E........q.......O.d....D=...jlP.l..`..-.c.6[.[.]............,..~.o.#......J..hH..L.T..C.".?r7..LE..}..6=(.x......x..[UgH.Uoe.:..E7.FUo....F...P...k.o.$^.!`..(\g..4%06...n.T.zC.d..r..O....h..1.s...]V.b.[...+.1.#.!....../C....9...E.X.?....8:>..../..t..?.\....IEND.B`.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	797
Entropy (8bit):	5.291587655336238
Encrypted:	false
SSDEEP:	24:2ubb9/EOB21MQw/064TWfOOiZRWjFUAZxe3YS:h94bRX5wJUAuYS
MD5:	069BA6B51AA83FE59B7C832CF74B02F1
SHA1:	437E593CE2B2E06E15AF9BA2A9D9CB28CA1774F7
SHA-256:	16873745F3FCBAE49D616FF66A6D99ECDA16FE4D87B51F8D480945D03E0BE414
SHA-512:	D219E33733D6A18C3A4CBC242A36BC7C089731B47DACA6BD481F06AEC4C592CE9C2EC0FEA2104D0FEDEE409C72959D57AECC4F61AE3A33AFC5C0CB77CCF0C72E
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/ac-pendo.js
Preview:	(function (pendoConfig) {..(function(apiKey){...if (!apiKey) {....return null;...}....(function(p,e,n,d,o){var v,w,x,y,z;o=p[d]=p[d]\|\|{};o._q=[];....v=['initialize','identify','updateOptions','pageLoad'];for(w=0,x=v.length;w<x;++w)(function(m){.....o[m]=o[m]\|\|function(){o._q[m===v[0]?'unshift':'push']([m].concat([].slice.call(arguments,0)));};})(v[w]);....// Create a `<script>` tag linked to your application-specific Agent build from our CDN.......y=e.createElement(n);y.async=!0;y.src='https://cdn.pendo.io/agent/static/'+apiKey+'/pendo.js';....z=e.getElementsByTagName(n)[0];z.parentNode.insertBefore(y,z);...})(window,document,'script','pendo');....pendo.initialize({....visitor: pendoConfig.visitor,....account: pendoConfig.account...});..})(pendoConfig.apiKey);.})(window.AcPendoConfig);.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1371
Entropy (8bit):	4.797038772781046
Encrypted:	false
SSDEEP:	24:tZGPrnqRk4m7xvYab/3jxRD6ipnSaHg4wN6rtAPz3NZpYVYM/F:XSqqf9vY23fnpSaHg4wNEAPJAVP/F
MD5:	355CC1E1050AF23B006EA14B35DB39A9
SHA1:	A43732D6CBFC70F8213CF0AB48C0C93C1E502053
SHA-256:	8D58AEE7AD7B7CB1D5908E9C27D76B4E4BE51CB943C268B39F0CAF2D38C3F3E3
SHA-512:	41DC607EA5BD2167C457F04746F391D5FAED0270A8123B258408C85B038A548548A840C7B1AC09CE9C82DC82324C6300E6E0171AF56A7F17B9EF1EF8DE0EDCD3
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v102712283221662
Preview:	:root {. /* Primary palette /. --ocean: var(--ocean-500);. --ocean-120: var(--ocean-600);. --ocean-80: var(--ocean-400);. --ocean-60: var(--ocean-300);. --ocean-40: var(--ocean-200);. --ocean-30: var(--ocean-150);. --ocean-20: var(--ocean-100);. --slate: #4e5468;. --slate-120: #353A4A;. --slate-140: #1f2129;. --slate-80: #5f667e;. --slate-60: #9298ad;. --slate-40: #ced3e0;. --slate-30: #E4E7F0;. --slate-20: #F7F9FC;. --mint: #19cca3;. --mint-120: #139879;. --mint-80: #1bddb1;. --mint-60: #6ae6c9;. --mint-40: #b6f2e4;. --mint-20: #ebfffa;.. / Secondary palette */. --strawberry: #f3376b;. --strawberry-120: #e40e49;. --strawberry-80: #f56e94;. --strawberry-60: #faa5bd;. --strawberry-40: #fcdee7;. --strawberry-20: #fff2f6;. --creamsicle: #ff8730;. --creamsicle-120: #f46700;. --creamsicle-80: #ffa869;. --creamsicle-60: #ffbf90;. --creamsicle-40: #ffe1cb;. --creamsicle-20: #fff8f2;. --lavender: #9159fc;. --lavender-120: #73f;. --lavender-80: #aa81fc;.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1856241
Entropy (8bit):	5.08809466828566
Encrypted:	false
SSDEEP:	49152:dNmEvSVlsi1KtMxnF/DMB+13kUZyV9maZKmTKLxg4haTR+NTEwBSdh28xe9HkE5R:4
MD5:	20702285B0C5A918CB57D15B735321FE
SHA1:	3F75A40DF21B39BB79AA79A03A9D0218C2B00BB3
SHA-256:	010F01F8A34B7CE0A388499EC3D3B310BAAD3B298C4ABCF1A909CDDAE65BEA22
SHA-512:	9422A614474263D502E9F622DA93B1CAEFB0AAD0AC764DC0B332FD4E8BE6EEDF886B10E614FB3D9FFCD1EFF08C1BFC60238F3521EE24C0F53204ADF873C7FD28
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v102712283221662
Preview:	:root{--b-0:0;--b-100:1px;--b-200:2px;--b-300:4px;--b-none:none;--b-dashed:dashed;--b-solid:solid;--radii-0:0;--radii-100:4px;--radii-200:8px;--radii-rounded:99rem;--radii-circle:100%;--shadow-50:0 1px 4px rgba(31,33,41,0.3);--shadow-100:0 4px 8px -2px rgba(31,33,41,0.3);--shadow-200:0 4px 12px 0 rgba(31,33,41,0.08);--shadow-300:0 14px 22px 0 rgba(31,33,41,0.1);--shadow-400:0 26px 32px 0 rgba(31,33,41,0.3);--banana-100:#fff9e6;--banana-200:#fdecb2;--banana-300:#fce28b;--banana-400:#fbd965;--banana-500:#facf3f;--banana-600:#deaa00;--black:#000;--creamsicle-100:#fff8f2;--creamsicle-200:#ffe1cb;--creamsicle-300:#ffbf90;--creamsicle-400:#ffa869;--creamsicle-500:#ff8730;--creamsicle-600:#e66000;--lavender-100:#f7f2ff;--lavender-200:#eae0fe;--lavender-300:#c3a7fc;--lavender-400:#aa81fc;--lavender-500:#9159fc;--lavender-600:#73f;--mint-100:#ebfffa;--mint-200:#b6f2e4;--mint-300:#6ae6c9;--mint-400:#1bddb1;--mint-500:#19cca3;--mint-600:#11866f;--network-android:#3ddc84;--network-apple:#1f2129;--

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2090
Entropy (8bit):	4.9960885285090875
Encrypted:	false
SSDEEP:	24:VJXImbnyoWYd7J0YcAkN8mx8ipMV3BWTxgb+E6hvgPZUsyHiBY1XcrY:VJXI8nyol7Mpn8AnSnRB4mUXIY
MD5:	F9E56AF70E256BFF067A1E33017E7923
SHA1:	470A964363983D15EBB12571AEC76741D4EAB4D8
SHA-256:	3CFA49D8A373C3A457ADE077505808A6304B5207249B1D5007E74AF100DB66F2
SHA-512:	66A70E45FDE34964D1B804ECD274F66D7014302E5F54DA7966EA42488753A98599C64666F5F183A1786216DC4057E5185D0999BC01B43555A1FCAE58ABB81B67
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/footer.css?v=v102712424104756
Preview:	/-------------------------------------------/./* Admin Global Footer Style ... / ./-------------------------------------------/..../------ Framework ------/.#page_footer {width:100%;height:64px;padding:24px 24px; background: #4e4e4e;text-align:left;box-sizing: border-box;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;}.#page_footer a, #page_footer a:visited { color:#c0c0c0;font-size:14px;text-decoration: none;margin-right:14px;}.#page_footer a:hover { color:#fff;}..#page_footer .twitter-icon:hover { color:#fff;}.#page_footer .facebook-icon:hover { color:#fff;}..#page_footer a.ac-icon { font-size:19px;}.../------ Support popup menu ------/../ Icon */..support-icon { position: fixed; right: 20px; bottom: 20px; width: 47px; height: 47px; background-color: #4DCBA9; border-radius: 100%; box-shadow: 0 1px 2px rgba(0, 0, 0, 0.2); cursor: pointer;z-index: 2000; }..support-icon:hover { background-color: #40c19e; }..support-icon span { width: 22px; height: 22px;font-size:2

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	34830
Entropy (8bit):	4.910432505435297
Encrypted:	false
SSDEEP:	768:vJ8ZVsHVYjed0pUb/T/VNtiDohwvC6YJc:SZV5jed0pUbL/VNtiDohwvC6j
MD5:	A8AF09F2B17F4B6A08A5FC528049F15C
SHA1:	94019425F27F44FE5F8023E55ACA3D7C05912201
SHA-256:	59F5064EB2EBFE68879979E1821741F449BB11625F7D8EEAB95C121EC428C387
SHA-512:	5FAA5D5F9B4619F4437856DEBB987D5341AB949D2D4D40EB007D90861D315ACD956B8C85BF989224A4000130F2DB6E1481BD63E4F6A914A8A4587E4EE50C0426
Malicious:	false
Reputation:	low
URL:	https://prodhostedtest.zendesk.com/embeddable/messaging/custom_ticket_fields
Preview:	[{"id":23117150,"type":"tagger","options":["r-account_login","r-account-change-plan","r-account-change-info","r-account-review","r-account-other","r-sending-delivery","r-sending-segments","r-sending-review","r-sending-other","r-contacts-adding","r-contacts-segments","r-contacts-fields-tags","r-contacts-pers","r-contacts-tracking","r-contacts-other","r-design-inbox","r-design-designer","r-design-custom","r-design-other","r-integrate-supported","r-integrate-deep-data","r-integrate-api","r-integrate-other","r-forms-general","r-forms-integration","r-forms-other","r-crm-permissions","r-crm-imap","r-crm-other","r-automations-add","r-automations-setup","r-automations-review","r-automations-other","r-migrations-new","r-migrations-current","r-migrations-previous","r-gdpr","r-other"]},{"id":22990690,"type":"tagger","options":["w_account","w_automations","w_campaigns","w_contacts","w_deals","w_delivery","w_integrations","w_reports"]},{"id":31869287,"type":"text"},{"id":22993230,"type":"tagger","o

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386)
Category:	downloaded
Size (bytes):	55497
Entropy (8bit):	5.221657851036488
Encrypted:	false
SSDEEP:	1536:YFjoJ562ZFjhBsy1qry1qxy1q7y1qOyIqAZFKZFvjZrnbHysX2ysXgqyPsZ3qyPe:sjGLZFAy1qry1qxy1q7y1qOyIqAZFKZF
MD5:	144B224ED178586F2DFA9600C4D9B825
SHA1:	582D8C2B46E9C0BE2F04E699059EAA59D8B4C0F8
SHA-256:	F6F2D9995566D984A815B81BCE63BC1D1798BD63C4696574D7DA413100F12842
SHA-512:	34951AEC874857F98B8FC1AED37387D65AA331CD731E0100F780B74E736A7AEFE173F8C4A339FFB9D358FE043B1185AF8BC8089D70C261862766D6C09BE87EA9
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/default.css?v=v102712283221662
Preview:	../* PAGE DEFAULTS /./ Setting the main body, font, color, and link defaults /............./ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /............body{ font-family: Arial, Helvetica, sans-serif; font-size:11px; color:#333333; margin:0; padding:0; }..input{ font-size:12px; font-weight:normal; font-family:Arial, Helvetica, sans-serif; }..a, a:visited{ color:#666666; }.a:hover{ color:#333333; }..hr{ background:#CCCCCC; color:#CCCCCC; height:1px; border:0; }../ Login Box For Index Page (usually the admin index) */..ac_login_container{ }..ac_login_head{..border-top-left-radius: 15px;..border-top-right-radius: 15px;..-moz-border-radius-topright: 15px;..-moz-border-radius-topleft: 15px;..background:#0E3E75;..padding-top:35px;..paddin

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (581)
Category:	downloaded
Size (bytes):	39824
Entropy (8bit):	5.045873983753402
Encrypted:	false
SSDEEP:	768:GgESIAx1V4LKH/7iiv6RnocbDJe9xhzWCTOwSWIFk5j8aT4wyw:GgESIAx1SLKza4xhXT4wyw
MD5:	28A95E36CEA25EAA2230E9E63E06BC22
SHA1:	29E45B17A2C6C4C59B4A2F8EAFD64741BD44AF10
SHA-256:	906CFBDA5764425918166E43023816EA52E998EC45C720E815083A78807DC925
SHA-512:	C7C3E02FC2AE0A65817AC4716BB42420D858864B93566611E1CE6BD88A3E7FB5A0E0067D0F80A9CDA64DA5C50FFCD5AEE40A6BE2BBE27EC217C16BC1FF3EEA7A
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/header.css?v=v1027121384670010
Preview:	/..Global admin header. /.../------------------------------------\. Framework.\------------------------------------/.#page_header {position:fixed; top:0; width:100%; margin:0; padding:0; background:#274C7C; height:64px; zoom:1; z-index:990;}.#page_header:after {position:relative; content:''; display:table; clear:both; zoom:1;}.#page_header .hdrwrap {position:relative; display:table; top:0; margin:0; padding:0; height:58px; width:100%; min-width:1024px; left:0!important; right:0!important;}.#page_header .hdrwrap .logo {position:absolute; display:table-cell; top:0; left:0; margin:0; padding:14px 14px 13px 14px; width:40px; height:36px; background: #508CD6;color:#fff;font-size: 29px;cursor:pointer;line-height:37px;text-decoration:none; z-index:100;}.#page_header .hdrwrap .logo.custom-logo { padding:0;background:none;}.#page_header .hdrwrap .logo:hover {background:#3F77BC;}.#page_header .hdrwrap .logo.custom-logo:hover {background:none;}../------------------------------------\.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	548
Entropy (8bit):	4.660801881684815
Encrypted:	false
SSDEEP:	12:TvgsoCVIogs01lI5r8INGlTF5TF5TF5TF5TF5TFK:cEQtnDTPTPTPTPTPTc
MD5:	4B074B0B59693FA9F94FB71B175FB187
SHA1:	0004D4F82B546013424B2E0DE084395071EEF98B
SHA-256:	25FB23868EBF48348F9E438E00CB9B9D9B3A054F32482A781C762CC4F9CC6393
SHA-512:	F928E9FAA0BC776FC5D8A0326981853709D437B7B1C2E238894BFB2ACBB627442C425CBB00D369C52D15876B6C795E67F7580341686696D569A908A6ADD4B444
Malicious:	false
Reputation:	low
Preview:	<html>..<head><title>403 Forbidden</title></head>..<body>..<center><h1>403 Forbidden</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	dropped
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23542), with no line terminators
Category:	dropped
Size (bytes):	23558
Entropy (8bit):	4.7068539819418955
Encrypted:	false
SSDEEP:	384:IAxByPkahyY8YicCKc6Rgo120TJZPq0K5u:IAZsyDYi0R9dXq0K5u
MD5:	0C279E1E04E4FA0F64F26C7EE021166D
SHA1:	39E7C1160F350C26FC911A7E03E2E320DB1EF01C
SHA-256:	E65B0A0098818B0B8383E06EEA1C7738FDFAB46FD0678F84F60A2F7DE172F53F
SHA-512:	D51A29F0F582A5CA3C37B28F8F9841CFF6CE1A5B553F62827C05F183BC16A7AC343A892A40CEE1D6A14F277C1E9D00DD910E3FFA0335C7170C3E3205BB525219
Malicious:	false
Reputation:	low
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[7250],{33034:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.messenger.carousel_message.action.accessible_text":"{{action}}: {{title}}","embeddable_framework.messenger.carousel_message.button.next":"Next item","embeddable_framework.messenger.carousel_message.button.previous":"Previous item","embeddable_framework.messenger.channel_link.instagram.disconnect_button_text":"Instagram connected.","embeddable_framework.messenger.channel_link.instagram.disconnect_link_text":"Disconnect","embeddable_framework.messenger.channel_link.link_error.button_error":"Link code couldn\'t be loaded","embeddable_framework.messenger.channel_link.link_error.qr_code_error":"QR code couldn\'t be loaded","embeddable_framework.messenger.channel_link.link_error.retry":"Click to retry","embeddable_framework.messenger.channel_link.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4871), with no line terminators
Category:	dropped
Size (bytes):	4871
Entropy (8bit):	5.435829573726116
Encrypted:	false
SSDEEP:	96:YDUJwqC++6G5cA4hiabI/Ap5XnqU/imNJGeSMSkaeZswuGxGKS:YD4wl++6GohiabI/q5XnT/imOpkTsCxC
MD5:	D585776B166FE428BBE3201BB1138A61
SHA1:	3B4CB5151D9AAEA8224C9858CF08D79F80C6709C
SHA-256:	793250DEEBB0867A1DDDFA7C18860E4984E8CBD621EBDDC5B9495FC18349B1AB
SHA-512:	4DF53171820EB1528DE8B32FBAF033022411523836DDB0A477A66A9EA39FE557D033D785DE1BCBA5B3EF6B8779771E40E34FABE6445190F16C5BAE634354ADA9
Malicious:	false
Reputation:	low
Preview:	!function(){const e="ze-snippet",t="ca0b7420-83ee-40d7-917b-e5d48bb4ca16",n="dcd5b484-abf6-47e3-adad-bc7b7da716c4",a="31869287",o="isChatOpened",d={id:"custom-widget-bubble",offsetY:"20px",offsetX:"20px",exactPatterns:["/admin/index.php","/admin","/campaign/editor","/campaign/template"],pathPatterns:[{pattern:/^\/campaign\/\d+\/designer$/},{pattern:/^\/template\/\d+$/}],queryPatterns:[{path:"/admin/main.php",params:[{action:"campaign_new_text"},{action:"campaign_new_message"}]}],hashPatterns:[{path:"/admin/main.php",pattern:/^#form-\d+$/}]},i=()=>{const e=(e=>{const{pathname:t,search:n,hash:a}=e,o=t.replace(/\/+$/,"");if(d.exactPatterns.includes(o))return!0;if(d.pathPatterns.some((({pattern:e})=>e.test(o))))return!0;if(n){const e=new URLSearchParams(n);for(const{path:t,params:n}of d.queryPatterns)if(o===t&&n.some((t=>Object.entries(t).every((([t,n])=>e.get(t)===n)))))return!0}if(a)for(const{path:e,pattern:t}of d.hashPatterns)if(o===e&&t.test(a))return!0;return!1})(window.location);if(d

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (581)
Category:	downloaded
Size (bytes):	39824
Entropy (8bit):	5.045873983753402
Encrypted:	false
SSDEEP:	768:GgESIAx1V4LKH/7iiv6RnocbDJe9xhzWCTOwSWIFk5j8aT4wyw:GgESIAx1SLKza4xhXT4wyw
MD5:	28A95E36CEA25EAA2230E9E63E06BC22
SHA1:	29E45B17A2C6C4C59B4A2F8EAFD64741BD44AF10
SHA-256:	906CFBDA5764425918166E43023816EA52E998EC45C720E815083A78807DC925
SHA-512:	C7C3E02FC2AE0A65817AC4716BB42420D858864B93566611E1CE6BD88A3E7FB5A0E0067D0F80A9CDA64DA5C50FFCD5AEE40A6BE2BBE27EC217C16BC1FF3EEA7A
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/header.css?v=v102712424104756
Preview:	/..Global admin header. /.../------------------------------------\. Framework.\------------------------------------/.#page_header {position:fixed; top:0; width:100%; margin:0; padding:0; background:#274C7C; height:64px; zoom:1; z-index:990;}.#page_header:after {position:relative; content:''; display:table; clear:both; zoom:1;}.#page_header .hdrwrap {position:relative; display:table; top:0; margin:0; padding:0; height:58px; width:100%; min-width:1024px; left:0!important; right:0!important;}.#page_header .hdrwrap .logo {position:absolute; display:table-cell; top:0; left:0; margin:0; padding:14px 14px 13px 14px; width:40px; height:36px; background: #508CD6;color:#fff;font-size: 29px;cursor:pointer;line-height:37px;text-decoration:none; z-index:100;}.#page_header .hdrwrap .logo.custom-logo { padding:0;background:none;}.#page_header .hdrwrap .logo:hover {background:#3F77BC;}.#page_header .hdrwrap .logo.custom-logo:hover {background:none;}../------------------------------------\.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (721)
Category:	downloaded
Size (bytes):	430286
Entropy (8bit):	5.10702242018368
Encrypted:	false
SSDEEP:	6144:mRJEHslkkP0cFhzP+nSQSOmAv+n35aW2jO7cmD:s0cFxGI24cmD
MD5:	A44777845F43D4D9EEED8D89BBF6B837
SHA1:	2741F2BD238A632D7367E8480691E17B672DD647
SHA-256:	98BFD2F56B13FB952C683C4DD5007009FD80B9212CC0A1247C62D9BB19F885D6
SHA-512:	876906961B7B49C72956B9355632EB040C24A4DA37FC2E3762E1334C3AA4689C5FAD3A94D71755D3DB3CABFAAACC3F4DCFE5ABC34ABA4F5F4706D22D0021A5A8
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin.css?v=v1027121471506941
Preview:	html { margin: 0;padding: 0;color: #000;height: 100%;min-height: 100%;font-family: 'IBM Plex Sans', helvetica, arial, serif; /* background-color: #343434; */ }.body, div, dl, dt, dd, ul, ol, li, h1, h2, h3, h4, h5, h6, pre, code, blockquote { margin: 0;padding: 0 }.table { border-collapse: collapse;border-spacing: 0 }.fieldset, img { border: 0 }.address, button, caption, cite, code, dfn, em, input, optgroup, option, select, strong, textarea, th, var { font: inherit }.i, em, td i, td em { font-style: italic }.del, ins { text-decoration: none }.li { list-style: none }.caption, th { text-align: left }.h1, h2, h3, h4, h5, h6 { font-weight: normal }.q:before, q:after { content: '' }.abbr, acronym { border: 0;font-variant: normal }.sup { vertical-align: baseline }.sub { vertical-align: baseline }.legend { color: #000 }.body { position: relative;margin: 0;padding: 0 0 0;font-family: "IBM Plex Sans", helvetica, arial, serif;min-width: 940px;height: 100%;display: flex;min-height: 100%;flex-dire

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	dropped
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	7.334254443932632
Encrypted:	false
SSDEEP:	12:6v/7Mfu0aE5kAE2ktFvjH/X6tKuxvuxE7AeEMrdw8d73QvKHU2DnuE3t81z2rxc:FG6kLFz/XArxvuxE7JJnsvWU27uEmRD
MD5:	7E33AA8C72FC5B80F81DF51E4F3F400B
SHA1:	7339C4833594E6D19F8AE3D37D0F732753CA544E
SHA-256:	93D3BA02051C3FB37C956B5966864DD09B692A5DD0B7FC8F2A8650A92D638860
SHA-512:	7AB7045E1B0E71C78F86BE4FF50B9DFA15622B7BE2491D2FC50308C65DC32CAAEDABC9939B8D1489F27DB774240A82CA1374D32B51A4060EA9079AD67A24E6FD
Malicious:	false
Reputation:	low
URL:	https://d226aj4ao1t61q.cloudfront.net/gpcxgatc_buttonctaclick.png
Preview:	.PNG........IHDR...`...`......F......PLTE......4j......................4h.5j....5j..........4j.5j..........5i....5i.3i.4h....0p.....................5j................N}........................V.....M{.Bs.?r.t..0Y%V...#tRNS...@0 ....@..P@@....p``P .....p0.g}....IDATh..io.0.....c.............L...oE....<_...>.cP.....8.....RJp.d.\.._..S.........`.RM.0........f.S.....X..@..\|j..v>....$?..E...........P....}..Y0HV..`.6.4.......<....6..!V;..=.`d.. K..9...N......i".........(.Zk.?4..R.5.....$Xb.X".7;....W.YjK.@...aO..,"F....E ......n.^...&v......e..J-@\|.5..5@C..........t.!..D.=.....+e. :l.P.f...".....}.....Nl..p..6.>>...lg..,.e.E.y@.../.._......-...7....,.4.......0.O..A......?.&...UL._......zF.dp.p%.. ....-....`n.S.t...Pg.G;I.V...........f.......IEND.B`.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28988), with no line terminators
Category:	downloaded
Size (bytes):	28988
Entropy (8bit):	5.163188905073505
Encrypted:	false
SSDEEP:	384:xgsa5cvR3u1eAUJwamUr2uZG6buqESc7nfZBhVf:xpJGUJHmvuZG6buqUBhN
MD5:	B6FFCF9EDF281E009B6D8A4F00545F6A
SHA1:	0ED8139AB27BBBD7C19C7DA57BB8C3E34C7A2AA8
SHA-256:	D2553E8B21C07D36D7548259F0AD1E10C4E7BAA77128C49AEBBA918F2881126A
SHA-512:	14033DD2292E4FD6DC17B96579B2228A6095DD603C1EADECCB414273C3E2FAD7D06811DAC5AC63C6F964DBBCAAD0C86D80BD1D684BF6CCAFBA6A1C3ED825612D
Malicious:	false
Reputation:	low
URL:	https://platform-cdn.app-us1.com/core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css
Preview:	.ui-helper-hidden{display:none}.ui-helper-hidden-accessible{clip:rect(0 0 0 0);border:0;height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.ui-helper-reset{border:0;font-size:100%;line-height:1.3;list-style:none;margin:0;outline:0;padding:0;text-decoration:none}.ui-helper-clearfix:after,.ui-helper-clearfix:before{border-collapse:collapse;content:"";display:table}.ui-helper-clearfix:after{clear:both}.ui-helper-zfix{-ms-filter:"alpha(opacity=0)";height:100%;left:0;opacity:0;position:absolute;top:0;width:100%}.ui-front{z-index:100}.ui-state-disabled{cursor:default!important;pointer-events:none}.ui-icon{background-repeat:no-repeat;display:inline-block;margin-top:-.25em;overflow:hidden;position:relative;text-indent:-99999px;vertical-align:middle}.ui-widget-icon-block{display:block;left:50%;margin-left:-8px}.ui-widget-overlay{height:100%;left:0;position:fixed;top:0;width:100%}.ui-accordion .ui-accordion-header{cursor:pointer;display:block;font-size:100%;margin:2px 0

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14755), with no line terminators
Category:	downloaded
Size (bytes):	14755
Entropy (8bit):	4.94400067874837
Encrypted:	false
SSDEEP:	192:zqrOGd3v6RbNbGN7073q0won/lkOLEffqjUMwCv2sbyL6JX:zqr7d3vCxjq0BUMwCVbyq
MD5:	835F7CFF134156384684FCC0DB13880B
SHA1:	4A3788A02C0484F3DD8E654DE3A963810790426D
SHA-256:	BEB03D92DA93FF6EC0163B2D79BACA82C9583AD71318E82D23D8BF47E06E67D8
SHA-512:	838413DD628EF242DF0687C4DF97B334221378413B5D4AC9D901B5A00A856A9FE8F318D35733F2F9C5C80E1182682B2DC527190F6E2087F743E8164CA8223F5C
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/messenger/latest/web-widget-3190-b6408d4.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[3190],{30339:(e,r,a)=>{a.d(r,{A:()=>t});var n=a(20912),s=a(7533),o=a(26983);const t=()=>((0,n.d4)(o.JK),s.A.translate)},43190:(e,r,a)=>{a.d(r,{A:()=>v});var n=a(24726),s=a.n(n),o=a(88910),t=a(20912),i=a(10948),m=a(3261),l=a.n(m),d=a(64043),b=a(70069),g=a(70513),_=a(26436),c=a(7533),k=a(30339),f=a(87944),u=a(52295),p=a(86222);const w=(0,i.DU)([""," html{overflow-y:hidden;font-size:initial;",";}"],l(),(e=>e.backgroundColor&&`background: ${e.backgroundColor}`)),h=({children:e,setBackgroundColor:r})=>{const a=(0,t.d4)(u.iB),n=(0,t.d4)(f._),s=n?_.xm:_.Ez,i=(0,g.UC)(),m=(0,k.A)();(0,o.useEffect)((()=>{i.document.documentElement.setAttribute("dir",c.A.isRTL()?"rtl":"ltr"),i.document.documentElement.setAttribute("lang",c.A.getLocale())}),[c.A.getLocale()]);return(0,p.jsx)(d.A,{currentFrame:i,primaryColor:a.primary,messageColor:a.message,actionColor:a.action,baseFo

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120803
Entropy (8bit):	4.997768528289863
Encrypted:	false
SSDEEP:	1536:aSK9VvhKv0F4U3SuKkqnUaP8RX+W5bq7kkn9MONPG8f5++cde6HZk7Ld:aHKkqoZk7x
MD5:	D88C5718C1944BE29206CCB1BB58B963
SHA1:	B83B72330C7B682C576C786DFA28C89AF9B96EF8
SHA-256:	59B95CCDA82D6CB0DE5A6D9EF2D106866F3F49F692A0008AFAB934A803B14EFE
SHA-512:	3E57A27A3BE2DAC10D4BC0C15F3E1CA56885D7836B2A8141C0285079E1B4CC7F5A95612BFD0C70ECB7F34F0C8C9C84EA580FDCAE07F2D512B0768F6C9A3B43B4
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/css_camp.min.css?v=v102712283221662
Preview:	/! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%;line-height:1.15}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{-webkit-text-decoration:underline dotted;border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4364
Entropy (8bit):	5.129189625936672
Encrypted:	false
SSDEEP:	96:slSEb4eZaHaHH4HXMH2mJCSdzQnbW1YX2c8qwdZEWmRqwHqwLQboa4uvp8uE5Btf:Hiydc2tDny1oV8PdZEW8PHPLop8uE/8Q
MD5:	905273050B6DFCA4EC09742D0A19C207
SHA1:	D20D0F77CCFFF38C5322C356F1BFE77FD751332D
SHA-256:	4CA80ECB98305D1995D359203327927E6C311CFC1F10EE2428346253B314DDC4
SHA-512:	C7C2E5100DD3FD62946004FFFB1E77FA813167D2B649F39C825BAE7DE97AFCC8F02E55D9C8579E3B14498B85002B94A3FCD29265995231A8AF274B1E2AA5A1A0
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/jq/csrf_protection.js
Preview:	/*. Monkey patch jQuery so that for each AJAX request, it grabs the CSRF token . * directly from the cookie and sets it as a header. This way, it will always . * send the newest token.. /.(function(allTheJQueries) {...function validateUrl(url) {...if (typeof url !== 'string') {....return false;...}....// If the URL does not begin with 'http' then it is a relative path,...// so it is okay...if (url.indexOf('http') !== 0) {....return true;...}....// If it is a fully qualified URL, then it MUST be to the current host...var upperCaseUrl = url.toUpperCase();...var upperCaseDocumentLocationOrigin = document.location.origin.toUpperCase();....return upperCaseUrl.indexOf(upperCaseDocumentLocationOrigin) === 0;..}.../.. This is called every AJAX request, and adds our CSRF token header.. * to the request.. */..function setHeader(options) {...var csrfResponseHeaderName = "X-XSRF-TOKEN";....if (!validateUrl(options.url)) {....return;...}....options.headers = typeof options.headers === 'obje

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	dropped
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386)
Category:	downloaded
Size (bytes):	55497
Entropy (8bit):	5.221657851036488
Encrypted:	false
SSDEEP:	1536:YFjoJ562ZFjhBsy1qry1qxy1q7y1qOyIqAZFKZFvjZrnbHysX2ysXgqyPsZ3qyPe:sjGLZFAy1qry1qxy1q7y1qOyIqAZFKZF
MD5:	144B224ED178586F2DFA9600C4D9B825
SHA1:	582D8C2B46E9C0BE2F04E699059EAA59D8B4C0F8
SHA-256:	F6F2D9995566D984A815B81BCE63BC1D1798BD63C4696574D7DA413100F12842
SHA-512:	34951AEC874857F98B8FC1AED37387D65AA331CD731E0100F780B74E736A7AEFE173F8C4A339FFB9D358FE043B1185AF8BC8089D70C261862766D6C09BE87EA9
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/default.css?v=v102712424104756
Preview:	../* PAGE DEFAULTS /./ Setting the main body, font, color, and link defaults /............./ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /............body{ font-family: Arial, Helvetica, sans-serif; font-size:11px; color:#333333; margin:0; padding:0; }..input{ font-size:12px; font-weight:normal; font-family:Arial, Helvetica, sans-serif; }..a, a:visited{ color:#666666; }.a:hover{ color:#333333; }..hr{ background:#CCCCCC; color:#CCCCCC; height:1px; border:0; }../ Login Box For Index Page (usually the admin index) */..ac_login_container{ }..ac_login_head{..border-top-left-radius: 15px;..border-top-right-radius: 15px;..-moz-border-radius-topright: 15px;..-moz-border-radius-topleft: 15px;..background:#0E3E75;..padding-top:35px;..paddin

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65061)
Category:	dropped
Size (bytes):	98648
Entropy (8bit):	5.500584392256398
Encrypted:	false
SSDEEP:	1536:CIQqXQoLZjBB3ovdzxo3MaidyI7N8JVdCgFZcrX/CLhfUSE5am:bQMjnydz2BJHdCCD2B
MD5:	7A965FA1BFF0D7D24BC10C99AB4C6107
SHA1:	F35647572142AC3A3167A7F09089E9A63CF38138
SHA-256:	54C0D489F8D98B5ECCF7C48AE0DB4F9AEE4BE50A9C57DE9BBDD912683A5FA99B
SHA-512:	8BC69ABAC38FFBBC29EF80C929FA0110F1722B34C808A6B90B93DEE357FEDAE0DE0650D258DEAC75223DDF5C78650CCAE1E01C3447EA949D479A13E683F262A8
Malicious:	false
Reputation:	low
Preview:	/. E-HAWK Talon v6.0.6 Fri, 13 Oct 2023 08:21:41 GMT. * This file is the property of E-HAWK, LLC. This file may only be used by active subscribed customers of E-HAWK during a vetting API call. Use for any other purpose is strictly prohibited.. * It must be deleted upon termination of services with E-HAWK. Reverse engineering or copying functionality is strictly prohibited..*/.var Talon;!function(){var t={9662:function(t,e,n){var r=n(614),o=n(6330),i=TypeError;t.exports=function(t){if(r(t))return t;throw i(o(t)+" is not a function")}},6077:function(t,e,n){var r=n(614),o=String,i=TypeError;t.exports=function(t){if("object"==typeof t\|\|r(t))return t;throw i("Can't set "+o(t)+" as a prototype")}},1223:function(t,e,n){var r=n(5112),o=n(30),i=n(3070).f,a=r("unscopables"),c=Array.prototype;null==c[a]&&i(c,a,{configurable:!0,value:o(null)}),t.exports=function(t){c[a][t]=!0}},9670:function(t,e,n){var r=n(111),o=String,i=TypeError;t.exports=function(t){if(r(t))return t;throw i(o(t)+" is not

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64399)
Category:	downloaded
Size (bytes):	255084
Entropy (8bit):	5.159519117191277
Encrypted:	false
SSDEEP:	3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV
MD5:	1E2047978946A1D271356D0B557A84A3
SHA1:	5F29A324C8AFFB1FDB26AD4564B1E044372BEED2
SHA-256:	9528CA634FECAD433D044DDD3E6F9CE1F068D5D932DAFDBB19D8E6DAEA1968BD
SHA-512:	E7BA19FEF5BC00D32347F290E817BDBFFFBF87A6EAF7F9777F439CEEF9FAA8CAB286F3DDD5CBCA051596A73BB44289DE226AABD929263B8312A94F91A47A26DD
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (478)
Category:	dropped
Size (bytes):	102428
Entropy (8bit):	5.28862593980317
Encrypted:	false
SSDEEP:	3072:GAO0SJbXw8mW0hh9+L5D/sAchakEF66KuYF8EF66Ku7inltF66KudintF66KuPzs:SJbXJkh9+1/zchakEF66KuYF8EF66KuA
MD5:	D0BDB42CB9722B4EC35231718D6CB19A
SHA1:	1D389A0035F984913F3757119F98DF051AEFAD97
SHA-256:	FD8A6D740BE134C443FB0B5BD4EB16D4769D492B1D2583E6487245661F304CB4
SHA-512:	1ECB36C81FBAEC10AA508DFD2B7EC60A62FD2A485D485AB813A98927C2648F38A30B3D20BE18CA9F8399AD0F7C9D7892A3F88911820C8998C1D719F367CF11E3
Malicious:	false
Reputation:	low
Preview:	// ac.js.// Loading.....// ajax.js..var ac_ajax_debug = true;..function ac_ajax_request_object() {. var hreq;.. try {. hreq = new XMLHttpRequest();. } catch (e) {...hreq = null;. }.. return hreq;.}..function ac_ajax_call_url(url, post, cb) {. var hreq = ac_ajax_request_object();.. if (hreq !== null) {. hreq.onreadystatechange = function() {. try {. ac_ajax_handle(hreq, cb);. } catch (e) {}. };.. var method = ( post === null ? 'GET' : 'POST' );.. var postType = typeof(post);.. if ( post !== null ) {... if ( postType == 'array' \|\| postType == 'object' ) {... .var postArr = new Array();... for ( var i in post ) {..... var postType = typeof(post[i]);..... if ( postType == 'array' \|\| postType == 'object' ) {..... for ( var j in post[i] ) {..... ..if ( typeof(post[i][j]) != 'function' ) {.... ..postArr.push(i + '[' + ( j == 'undefined' ? '' : j ) + ']=' + encodeURIC

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	downloaded
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/jsc/ac.js?v=v1027121471506941
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23992, version 1.0
Category:	downloaded
Size (bytes):	23992
Entropy (8bit):	7.99264910774992
Encrypted:	true
SSDEEP:	384:m74XR7L4v87mrr0fH0nJeVAB679CtO+h42RcywrpWfaNpsS0orqrU+gj586:1XR7L4/rr0fUnJWAltO+a2RmRNpfh766
MD5:	06C4ADB01BB0D5E26EDA62A478D66F2C
SHA1:	BD34F1326D2FD1F0B2A44ED46CCEF3F1021E8502
SHA-256:	02CB33A80586D8CCFDE73497BD053A542DDF2B94FA47A2F12EEDEA2B8B747800
SHA-512:	72CD986B402177604BC007FAD5C7E4357E16AE84846E622AC72A974BD8A5D3C2D07463E3BE4677B35C30196251DEF83AD2930F300F0B9B7730A9EC975EB793B4
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/ac_global/fontello/font/ac-icons.woff2?9608958
Preview:	wOF2......]........4..]Z.........................B.V..d.,..p.....@..f.6.$..p..z.. ..M.......T.Wd....t..R..9.!l.. .q...J....YIe.mRH+(........$.m.-P.!.n.CId#H. ..........n..M.<.b....E.......0a.P\|X..L..MOgw.;...<...&=..*.G.V...U.L,J4......."...w.cO.v...,"X:>5.?g.^.....o.C.....Z..~.4..!.BN.......0%%5....p.Q.....o6.l....>.\|..f.f..Y..6..B...u....u.>.K....u.:'}.;.]...i..?.>.....$1..j.qZ.O......JI...>..1.S..&....../iJ..........+5yB..`N+.Y..K..((-$u.E.G~...,;.$.ub;..f..@...>>..h{..L..U..t!2.S.6KA.T.)...M...LI tK...=._..V'.....'.~..Jc..t.{.c.I.m.}1+.....2.t..&.).p[....7t. ,...2.......5,..}._..&3.{.E........e..G.....o.~.=...........i.....@s=......I....I. ..P....<.....1.Z....#...(D.J..9U^..v../...ax!.4.S._Um.@S...R;S......Z.F..... (..l.T!@..!.,..CP..s...V:.7......H....U..j.n..n.n.a.i<oW.u.a.b..(......x.A..ll..FC...z..2W..W.>.!'(..,...~/.......6X..)........j.....WG..=s2v.0&.'9.......\....U..$..W......i..._(.Z..U..:..V.@.n........M...EZ..

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	dropped
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (581)
Category:	downloaded
Size (bytes):	39824
Entropy (8bit):	5.045873983753402
Encrypted:	false
SSDEEP:	768:GgESIAx1V4LKH/7iiv6RnocbDJe9xhzWCTOwSWIFk5j8aT4wyw:GgESIAx1SLKza4xhXT4wyw
MD5:	28A95E36CEA25EAA2230E9E63E06BC22
SHA1:	29E45B17A2C6C4C59B4A2F8EAFD64741BD44AF10
SHA-256:	906CFBDA5764425918166E43023816EA52E998EC45C720E815083A78807DC925
SHA-512:	C7C3E02FC2AE0A65817AC4716BB42420D858864B93566611E1CE6BD88A3E7FB5A0E0067D0F80A9CDA64DA5C50FFCD5AEE40A6BE2BBE27EC217C16BC1FF3EEA7A
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/header.css?v=v1027121389246675
Preview:	/..Global admin header. /.../------------------------------------\. Framework.\------------------------------------/.#page_header {position:fixed; top:0; width:100%; margin:0; padding:0; background:#274C7C; height:64px; zoom:1; z-index:990;}.#page_header:after {position:relative; content:''; display:table; clear:both; zoom:1;}.#page_header .hdrwrap {position:relative; display:table; top:0; margin:0; padding:0; height:58px; width:100%; min-width:1024px; left:0!important; right:0!important;}.#page_header .hdrwrap .logo {position:absolute; display:table-cell; top:0; left:0; margin:0; padding:14px 14px 13px 14px; width:40px; height:36px; background: #508CD6;color:#fff;font-size: 29px;cursor:pointer;line-height:37px;text-decoration:none; z-index:100;}.#page_header .hdrwrap .logo.custom-logo { padding:0;background:none;}.#page_header .hdrwrap .logo:hover {background:#3F77BC;}.#page_header .hdrwrap .logo.custom-logo:hover {background:none;}../------------------------------------\.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13846), with no line terminators
Category:	downloaded
Size (bytes):	13846
Entropy (8bit):	5.308669772596896
Encrypted:	false
SSDEEP:	384:4aVQi60eZpG+eFai2z1i3i1iBDBYtpg2zMSZNoUg59BI5jj9RUpk7d3:4aVq0eZpG+jeypg2zMSZaV59BI5jj96o
MD5:	AA3FED8E69B72F1B6965AFD8512F3A6A
SHA1:	9D7E7BA23A9EAAFC237F5A039A2FAD3B303652AF
SHA-256:	25046DE857066E2A87B729D55871729A63ED7273BE1BA2B62B0274A04B097CF3
SHA-512:	CB5AC2A62B34AC7232871107FFC485669162BC9AF1FB4C69BD2A65F02F722990BC831E7838349B10A971BD6A805DF87CC2E3D61757D087FBCC0CEE322D4DEA5F
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/messenger/latest/web-widget-7437-b6408d4.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[7437],{36913:(e,t,n)=>{n.d(t,{K:()=>g});var o=n(88910),i=n(24726),s=n.n(i),r=n(31869),a=n(34485),d=n(10948),l=n(6999),u=n(26385),c=n(58492),p=n(8863);const h="buttons.icon_button",m=e=>{const t=(0,p.v)(e);return(0,d.AH)(["border:",";padding:0;width:",";min-width:",";",";&:disabled{background-color:",";}"],e.isBasic&&"none",t,t,e.isBasic&&!(e.isPrimary\|\|e.isDanger\|\|e.disabled)&&(e=>{const t=(0,l.A)("neutralHue",600,e.theme),n=(0,l.A)("neutralHue",700,e.theme),o=(0,l.A)("neutralHue",800,e.theme);return(0,d.AH)(["color:",";&:hover{color:",";}&:active,&[aria-pressed='true'],&[aria-pressed='mixed']{color:",";}"],t,n,o)})(e),!e.isPrimary&&"transparent")},f=(0,d.Ay)(p.O).attrs({"data-garden-id":h,"data-garden-version":"8.76.7"}).withConfig({displayName:"StyledIconButton",componentId:"sc-1t0ughp-0"})(["",";& ","{","}",";"],(e=>m(e)),a.v,(e=>(e=>{const t=e.theme.ic

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/jq/notification.js?v=v102712424104756
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	downloaded
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/functions.js?v=v1027121389246675
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (744)
Category:	dropped
Size (bytes):	811
Entropy (8bit):	5.511377096937751
Encrypted:	false
SSDEEP:	24:cgqHHVvCa2uSnZsFEN4ycHyICnP2GkSrmQrwtxk+V:hWk/LIENwW+G/r0tfV
MD5:	7CEF69693A58D0F4567B43BBB261886F
SHA1:	DCF55A477B85D0A97393CAA33E4366ECFC6D4486
SHA-256:	DCFFB566F10BC6FB510B29F901F955CBBFDCF44964568BD9B64F282B31949E7E
SHA-512:	56B5AC214F4CBED6F469A638DD9047906D01BF95CB5986C531358C51215110F60026B18EE39E46D557F6C6F30F129EAF9B667E70446FABBA35FE1EED5EE20593
Malicious:	false
Reputation:	low
Preview:	!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="5a3dc026-fb02-4774-9da2-17640d819e4c",e._sentryDebugIdIdentifier="sentry-dbid-5a3dc026-fb02-4774-9da2-17640d819e4c")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[705],{3752:()=>{Promise.withResolvers\|\|(Promise.withResolvers=function(){var e,n,d=new this((function(d,o){e=d,n=o}));return{resolve:e,reject:n,promise:d}})}}]);.//# sourceMappingURL=polyfill-with-resolvers.42c0e97c.chunk.js.map

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23165)
Category:	dropped
Size (bytes):	23387
Entropy (8bit):	5.306972084602657
Encrypted:	false
SSDEEP:	384:1Z0h5E9y4QIWDPrcB8Hgj8HBCxPJZUVnYFZkd2o7vXMF0OB8NyLvOTHQeP0zjE1x:U5E9y4qzcB4CZmPdPrORfeP0zjE1/V11
MD5:	D95555BF007FCDDA849A37D9714463B7
SHA1:	D26443C35CE9E5E1E6193FA0FB191C2AAB7F55A5
SHA-256:	3B0720CF5312D04A43124A81E657A9AAA77CD27688D0146DAAEDBE6D423107CE
SHA-512:	5DA3C97775D619B0430A143A0AD17EC03A92EED94EEDB627B8BDFB905BA5EB77283975C1E10C858400183B99A0515DA43F1827216CC061C6F7FB8023327B4149
Malicious:	false
Reputation:	low
Preview:	/!. css-vars-ponyfill. * v2.4.9. * https://jhildenbiddle.github.io/css-vars-ponyfill/. * (c) 2018-2024 John Hildenbiddle <http://hildenbiddle.com>. * MIT license. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).cssVars=t()}(this,(function(){"use strict";function e(){return e=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},e.apply(this,arguments)}function t(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},r={mimeType:t.mimeType\|\|null,onBeforeSend:t.onBeforeSend\|\|Function.prototype,onSuccess:t.onSuccess\|\|Function.prototype,onError:t.onError\|\|Function.prototype,onComplete:t.onComplete\|\|Function.prototype},n=Array.isArray(e)?e:[e],o=Array.apply(null,Array(n.length)).map((function(e){return null})

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (944)
Category:	downloaded
Size (bytes):	153634
Entropy (8bit):	5.071540401076863
Encrypted:	false
SSDEEP:	1536:aNjsEFdaGU6u9k9s4nV1kw2sIcao0rII05RfvxwUEg5o0NG0lHGc/Rbie0XQ/1sm:BH9lwDRbi4PhBLZkQ46
MD5:	ED29493E4E2A6D3BAF5E44FF14E51AFC
SHA1:	B68D1BDE9C9DC80482A70B9A138818AC3E16FF07
SHA-256:	794185BB74A488CA7D2E91871E9CD7BDDDF0864EF083F5862D9332D9767B2B11
SHA-512:	E89C6510D8DAABF6210BB9A9D9BD92AA41F0E183E1A374556ACE7B6AB665EB2041227BEF1687794C040D5C3734108C6E7267C1AC3A557B906BA11941A235D7ED
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/style.css?v=v102712283221662
Preview:	/* ---------------------------. WARNING: DEPRECATED - DO NOT ADD TO THIS FILE.-------------------------------/../. Global element styling./../ Import / Include fonts here /.@import url("https://fonts.googleapis.com/css?family=IBM+Plex+Sans:200,300,400,500,600,700");../-------------------------------------------------------------------------\. Colors.\------------------------------------------------------------------------/./ Primary palette /..ac-blue { background: #19467C;}..medium-blue { background: #23538C;}..highlight-blue { background: #3E70B5;}..light-blue { background: #EEF4FC;}..alt-green { background: #4DCBA9;}../ Backgrounds and borders /..dark-grey { background: var(--slate-500);}..border-grey { border: var(--slate-200) 1px solid;}..medium-grey { background: var(--slate-100);}..light-grey { background: var(--slate-150);}../ Status and label /..go-green { background: #60CB98;}..stop-red { background: #F37C7B;}..border-red { background: #F37C7B;}../ Text */.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120803
Entropy (8bit):	4.997768528289863
Encrypted:	false
SSDEEP:	1536:aSK9VvhKv0F4U3SuKkqnUaP8RX+W5bq7kkn9MONPG8f5++cde6HZk7Ld:aHKkqoZk7x
MD5:	D88C5718C1944BE29206CCB1BB58B963
SHA1:	B83B72330C7B682C576C786DFA28C89AF9B96EF8
SHA-256:	59B95CCDA82D6CB0DE5A6D9EF2D106866F3F49F692A0008AFAB934A803B14EFE
SHA-512:	3E57A27A3BE2DAC10D4BC0C15F3E1CA56885D7836B2A8141C0285079E1B4CC7F5A95612BFD0C70ECB7F34F0C8C9C84EA580FDCAE07F2D512B0768F6C9A3B43B4
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/css_camp.min.css?v=v1027121389246675
Preview:	/! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%;line-height:1.15}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{-webkit-text-decoration:underline dotted;border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	76307
Entropy (8bit):	4.746710080995372
Encrypted:	false
SSDEEP:	768:IrOmOo/x/SOmOw/l/Unz/S/cySy+/Z/PoXs:U/x/c/l/Unz/S/0/Z/PoXs
MD5:	150D94F24A187415CDCC65BACC6A530F
SHA1:	96744B4F44EEF0534CCB3B573987C3AE0637752E
SHA-256:	AAFEEA77D9DCA87810387D9FAA14CB890E756A510D17E7D08A69E19DE4D7E19D
SHA-512:	60127AEE5974ED861B621CC466DDDC3E737CD1479F9C6C784C236391D14D1956B27977C195ECE1FD40866A2DF8E1F9B74275CBC288CFF3C40B3459B16F5CB8A0
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/animations.css?v=v102712283221662
Preview:	@charset "UTF-8";./!.Animate.css - http://daneden.me/animate.Licensed under the MIT license - http://opensource.org/licenses/MIT..Copyright (c) 2014 Daniel Eden./...animated {. -webkit-animation-duration: 1s;. animation-duration: 1s;. -webkit-animation-fill-mode: both;. animation-fill-mode: both;.}..animated.slow {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..animated.fast {. -webkit-animation-duration: .4s;. animation-duration: .4s;.}..animated.fastest {. -webkit-animation-duration: .2s;. animation-duration: .2s;.}...animated.infinite {. -webkit-animation-iteration-count: infinite;. animation-iteration-count: infinite;.}...animated.hinge {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..@-webkit-keyframes bounce {. 0%, 20%, 53%, 80%, 100% {. -webkit-transition-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);. transition-timing-function: cubic-bezier(0.215, 0.61

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	730
Entropy (8bit):	7.550528522404558
Encrypted:	false
SSDEEP:	12:6v/7kt/Bz9g8DxyZwmsfbK6iVi4+BMs0xHlB/zx5Rt27C/dtsvsdR8NJJtZ8gKeN:T9DxSw9K/ymx33D2edtZdRGJDJN
MD5:	2ED86F7B79C7AFA8FC13DA5D9180C70A
SHA1:	E234C01F9B5F8510E2DF6D7247E655E35E8E58F9
SHA-256:	424BC306A7592F083083582B9240E0EBCAD2338861B8D6D218A4E51F1349B733
SHA-512:	9FE43E2CD6E5AA5CFE7B789F70A787359A3807BA4A4C372C95B19C7748BF955334850FD97ED9CDC87DA67AA087BCDEB05B545D16BDB46B89070D0821EEE8AE8B
Malicious:	false
Reputation:	low
URL:	https://d3rxaij56vjege.cloudfront.net/media/favicon.ico
Preview:	.PNG........IHDR...0...0.....W.......pHYs...%...%.IR$.....sRGB.........gAMA......a....oIDATx..=L.A...%.J."IC..N.4.....6.O.4..5n.....C.....?..@..@.LCc.....!Q.>-.....}..B.O:.i...7.sg.?no.y.'..`.'.6N.m........n..D.....~`..x..."j../`{.......s.<s....VI.Iu..>..........$.iF.uH...cg.@n../...9.H.T".f.1..p70.1..";.E..[..n...........Y.d).,........B_5.-_..E..}s...AlD-...+.o.....y...`.d....V.....I..m}Q.H.[....m..U^6..o..8.......h..-=.^.)..Qy..%..Au(.P.";....z.y:...f....R...........#.4Ke.3..G'.'..E.6o.h.=.....Rt....6?...3.......i}f.{.B..6.3.@B.-E{::.\`.7J".Z...BeU.Q/......u.T<y.0.L.F.~9..\|..^3...F....F.....;.8.......\|?./..b..uv........+....t.e..Z...2.#U.kE4.$.c...8..^.,....)-........`.'.6w3..dQ.5.....IEND.B`.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	872
Entropy (8bit):	7.447062220201434
Encrypted:	false
SSDEEP:	12:6v/7k9dzvypEPpR+h1qe+A2s6rU/INkHXWZsu40wdq5+h7jhwxTuSvo880EH:drmEPr+h1qeqrUwSHTu6qE9wxTboPBH
MD5:	3A2E925FD41F6B32A435DBA0B094DAA7
SHA1:	68FD4DC056391FC4D4228CFE68D43A620997CA08
SHA-256:	B3A65DB0E3F09AE0FAACF8E6B62E9852AB5137680B5BBBE13FA4D862C31FFF0E
SHA-512:	5CEF19EA101494EF7ED197C1DC578D68BD206F249DA0BC92FFAB4556633A0E436059C01FC7E6BD6E893F1C67BE51246553942ADDE827D30D76D73948FC007B46
Malicious:	false
Reputation:	low
URL:	https://d226aj4ao1t61q.cloudfront.net/dh5u5fb9y_funnel.png
Preview:	.PNG........IHDR...`...`......F......PLTE...6j.4j.7h.5j.@p.5h.4k.5j.4j.4h....0p....4i.4i....4i.............5e....3i....6j.......5j..........6j..................4j.............5j............5j..........Bs.................g........u..N\|.P.e....1tRNS.. .. ..@...p`....`00 P........`P@@0......p`...L... IDATh...n.`.F.b.^....i..K>.]L..._.Iq.y..Y.....s./..B:.......r.\.........p..r"F....!&.CQa..."!....E....8..x..p.L.../../.'.Ra...J......0>....G..>..K#. ...N.E^I......6...... ...[.._.y\...<.XH....E`..H.q.6{.10j<.j..U]x\|.L...n.g$.L+.i."......'.\......H......%....8...FI.9e.'......F....p...=V.qm....o..6.W....J..HR......wk.......1.oS..@.M.~.B..N..@.e.~.s.....).oS..@.M.~...6..m.....).oS..@.M.~...6..m..[......u5..;I..U..` Z...{9......q.#.'z...i....@...]....2.@..#.@.....:..]>.7?.<..D...*]o..9..ZC.x.....o.R.J.:.$\HG.....E..v......IEND.B`.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (581)
Category:	downloaded
Size (bytes):	39824
Entropy (8bit):	5.045873983753402
Encrypted:	false
SSDEEP:	768:GgESIAx1V4LKH/7iiv6RnocbDJe9xhzWCTOwSWIFk5j8aT4wyw:GgESIAx1SLKza4xhXT4wyw
MD5:	28A95E36CEA25EAA2230E9E63E06BC22
SHA1:	29E45B17A2C6C4C59B4A2F8EAFD64741BD44AF10
SHA-256:	906CFBDA5764425918166E43023816EA52E998EC45C720E815083A78807DC925
SHA-512:	C7C3E02FC2AE0A65817AC4716BB42420D858864B93566611E1CE6BD88A3E7FB5A0E0067D0F80A9CDA64DA5C50FFCD5AEE40A6BE2BBE27EC217C16BC1FF3EEA7A
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/header.css?v=v1027121471506941
Preview:	/..Global admin header. /.../------------------------------------\. Framework.\------------------------------------/.#page_header {position:fixed; top:0; width:100%; margin:0; padding:0; background:#274C7C; height:64px; zoom:1; z-index:990;}.#page_header:after {position:relative; content:''; display:table; clear:both; zoom:1;}.#page_header .hdrwrap {position:relative; display:table; top:0; margin:0; padding:0; height:58px; width:100%; min-width:1024px; left:0!important; right:0!important;}.#page_header .hdrwrap .logo {position:absolute; display:table-cell; top:0; left:0; margin:0; padding:14px 14px 13px 14px; width:40px; height:36px; background: #508CD6;color:#fff;font-size: 29px;cursor:pointer;line-height:37px;text-decoration:none; z-index:100;}.#page_header .hdrwrap .logo.custom-logo { padding:0;background:none;}.#page_header .hdrwrap .logo:hover {background:#3F77BC;}.#page_header .hdrwrap .logo.custom-logo:hover {background:none;}../------------------------------------\.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	downloaded
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/jsc/ac.js?v=v102712283221662
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.066108939837481
Encrypted:	false
SSDEEP:	3:C0NY:u
MD5:	D59DE2F2B1F18AFAAB6EFBB5E8D7DB42
SHA1:	77587B981A047955407905358D39950877368CC9
SHA-256:	E5D91D35F7D93D22881F28575657D7928D6A63A6381EB58B9759935171CD6A0D
SHA-512:	8D1BFAB6D22907F036BA0B8B5AF1B8FA1738C2F761B7373B93DBEF8790131844379206060CEA0CB059AA6D566A2FCDA102D391B0740F4618A573047BE660808A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmww7SSU46UUBIFDQiEZ_ESBQ3Fk8Qk?alt=proto
Preview:	ChIKBw0IhGfxGgAKBw3Fk8QkGgA=

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	730
Entropy (8bit):	7.550528522404558
Encrypted:	false
SSDEEP:	12:6v/7kt/Bz9g8DxyZwmsfbK6iVi4+BMs0xHlB/zx5Rt27C/dtsvsdR8NJJtZ8gKeN:T9DxSw9K/ymx33D2edtZdRGJDJN
MD5:	2ED86F7B79C7AFA8FC13DA5D9180C70A
SHA1:	E234C01F9B5F8510E2DF6D7247E655E35E8E58F9
SHA-256:	424BC306A7592F083083582B9240E0EBCAD2338861B8D6D218A4E51F1349B733
SHA-512:	9FE43E2CD6E5AA5CFE7B789F70A787359A3807BA4A4C372C95B19C7748BF955334850FD97ED9CDC87DA67AA087BCDEB05B545D16BDB46B89070D0821EEE8AE8B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......pHYs...%...%.IR$.....sRGB.........gAMA......a....oIDATx..=L.A...%.J."IC..N.4.....6.O.4..5n.....C.....?..@..@.LCc.....!Q.>-.....}..B.O:.i...7.sg.?no.y.'..`.'.6N.m........n..D.....~`..x..."j../`{.......s.<s....VI.Iu..>..........$.iF.uH...cg.@n../...9.H.T".f.1..p70.1..";.E..[..n...........Y.d).,........B_5.-_..E..}s...AlD-...+.o.....y...`.d....V.....I..m}Q.H.[....m..U^6..o..8.......h..-=.^.)..Qy..%..Au(.P.";....z.y:...f....R...........#.4Ke.3..G'.'..E.6o.h.=.....Rt....6?...3.......i}f.{.B..6.3.@B.-E{::.\`.7J".Z...BeU.Q/......u.T<y.0.L.F.~9..\|..^3...F....F.....;.8.......\|?./..b..uv........+....t.e..Z...2.#U.kE4.$.c...8..^.,....)-........`.'.6w3..dQ.5.....IEND.B`.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20356, version 1.0
Category:	downloaded
Size (bytes):	20356
Entropy (8bit):	7.9886714421795215
Encrypted:	false
SSDEEP:	384:MyZzXviNz7P0MEYon8IRIhe6PaTT7uqrxowFQ46WK54Mx6agq4PmrJIwP:MczfiRArYonxRIhe6cNrll6TF+Bir
MD5:	E78568807D101B47DFD21E34244E072F
SHA1:	4CFC3C246E975C42EF684033A58AFDACF8D5F54B
SHA-256:	31535A91CE3F6B8ED3DDEDADAB1E49957E2220263A640DF1A3F14F6FDFE15EB6
SHA-512:	550A389C346B688DA31A377C829980571B4B8863EB8F52905B9A72AB437064E77304E35F31418EEFE982FBE32ACF531E6B439FDDC20E1165201DD72BAE5C8B03
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIFsdA.woff2
Preview:	wOF2......O........8..O".........................F..6....`..l.@..s.....(..m.....6.$.. . ..&.....d...'.6..z....zV..`.w;.;..c3.............t.!.........8..]..3%..R.9W.)..r.9.5m.....<....o...CHq.j6..........EM..?DF...S...28..(....qh"..Y.xM.2K.$....w.Y._...gO.l...za....(^...".q.#Yu.KT.Ae..1.[ pD...C._SxBE.k.4g?ow....F..$@J.?J..N."B.....Q....3.Pd.V........p.........;@.l.......#$2E..E.F....w.JW..E.R].W.".@.........q....rZ.V....A.......^.%..u>..e..V]..$......:.......z.Kqr..yf....<...1.../KH....j...fF.<.+..fi..k....N.~..*B..Eg...:.......;.....:Uj?i...W`.;...E\..,.....i.....Ba...F.kl.k!F....d6>=....S..D..g.{......wF.~...V...E.\.H../....a.Jm..d...\l......VFa^7....'Y.V...W\|!......'......0..k......~........1.}.!..."....J....8.L..B.....j..,[..5.....3Y[T....b....Bz..!L..%Cv....9.......\M.A.s.$....m...-..n.r.n....Yo...a.T..J....'..>Sj.b..u.V.J. .h.h.8.G.Uk.Z&.O..'..(I(uh.e.#0.<(B....=v{...\..)"..d$H...=........Z(b.Y.c%W..7.l:...$.........d&.... ...l....>..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (721)
Category:	downloaded
Size (bytes):	430286
Entropy (8bit):	5.10702242018368
Encrypted:	false
SSDEEP:	6144:mRJEHslkkP0cFhzP+nSQSOmAv+n35aW2jO7cmD:s0cFxGI24cmD
MD5:	A44777845F43D4D9EEED8D89BBF6B837
SHA1:	2741F2BD238A632D7367E8480691E17B672DD647
SHA-256:	98BFD2F56B13FB952C683C4DD5007009FD80B9212CC0A1247C62D9BB19F885D6
SHA-512:	876906961B7B49C72956B9355632EB040C24A4DA37FC2E3762E1334C3AA4689C5FAD3A94D71755D3DB3CABFAAACC3F4DCFE5ABC34ABA4F5F4706D22D0021A5A8
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin.css?v=v1027121389246675
Preview:	html { margin: 0;padding: 0;color: #000;height: 100%;min-height: 100%;font-family: 'IBM Plex Sans', helvetica, arial, serif; /* background-color: #343434; */ }.body, div, dl, dt, dd, ul, ol, li, h1, h2, h3, h4, h5, h6, pre, code, blockquote { margin: 0;padding: 0 }.table { border-collapse: collapse;border-spacing: 0 }.fieldset, img { border: 0 }.address, button, caption, cite, code, dfn, em, input, optgroup, option, select, strong, textarea, th, var { font: inherit }.i, em, td i, td em { font-style: italic }.del, ins { text-decoration: none }.li { list-style: none }.caption, th { text-align: left }.h1, h2, h3, h4, h5, h6 { font-weight: normal }.q:before, q:after { content: '' }.abbr, acronym { border: 0;font-variant: normal }.sup { vertical-align: baseline }.sub { vertical-align: baseline }.legend { color: #000 }.body { position: relative;margin: 0;padding: 0 0 0;font-family: "IBM Plex Sans", helvetica, arial, serif;min-width: 940px;height: 100%;display: flex;min-height: 100%;flex-dire

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1856241
Entropy (8bit):	5.08809466828566
Encrypted:	false
SSDEEP:	49152:dNmEvSVlsi1KtMxnF/DMB+13kUZyV9maZKmTKLxg4haTR+NTEwBSdh28xe9HkE5R:4
MD5:	20702285B0C5A918CB57D15B735321FE
SHA1:	3F75A40DF21B39BB79AA79A03A9D0218C2B00BB3
SHA-256:	010F01F8A34B7CE0A388499EC3D3B310BAAD3B298C4ABCF1A909CDDAE65BEA22
SHA-512:	9422A614474263D502E9F622DA93B1CAEFB0AAD0AC764DC0B332FD4E8BE6EEDF886B10E614FB3D9FFCD1EFF08C1BFC60238F3521EE24C0F53204ADF873C7FD28
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v1027121471506941
Preview:	:root{--b-0:0;--b-100:1px;--b-200:2px;--b-300:4px;--b-none:none;--b-dashed:dashed;--b-solid:solid;--radii-0:0;--radii-100:4px;--radii-200:8px;--radii-rounded:99rem;--radii-circle:100%;--shadow-50:0 1px 4px rgba(31,33,41,0.3);--shadow-100:0 4px 8px -2px rgba(31,33,41,0.3);--shadow-200:0 4px 12px 0 rgba(31,33,41,0.08);--shadow-300:0 14px 22px 0 rgba(31,33,41,0.1);--shadow-400:0 26px 32px 0 rgba(31,33,41,0.3);--banana-100:#fff9e6;--banana-200:#fdecb2;--banana-300:#fce28b;--banana-400:#fbd965;--banana-500:#facf3f;--banana-600:#deaa00;--black:#000;--creamsicle-100:#fff8f2;--creamsicle-200:#ffe1cb;--creamsicle-300:#ffbf90;--creamsicle-400:#ffa869;--creamsicle-500:#ff8730;--creamsicle-600:#e66000;--lavender-100:#f7f2ff;--lavender-200:#eae0fe;--lavender-300:#c3a7fc;--lavender-400:#aa81fc;--lavender-500:#9159fc;--lavender-600:#73f;--mint-100:#ebfffa;--mint-200:#b6f2e4;--mint-300:#6ae6c9;--mint-400:#1bddb1;--mint-500:#19cca3;--mint-600:#11866f;--network-android:#3ddc84;--network-apple:#1f2129;--

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (488)
Category:	downloaded
Size (bytes):	13515
Entropy (8bit):	5.082581993641253
Encrypted:	false
SSDEEP:	384:dSuCKDujQMeDH1W60sYsTrBwrRXAQPWgg7L7feADl3PM1:yQ1W60sYsTrBaRXAQPWgg7L7fDDl301
MD5:	0E9AA12DD744EC41246AB1C292D7B8F9
SHA1:	DA650223A8C4E6F16A1E2A74EF1B8F8891C98756
SHA-256:	AE05BF66E25C9E25F93031CD5C196959FC91C812A5E3F29E2FD6F9FE398F0C98
SHA-512:	DBD0A2AAEEDA109CDD487755190C2A68CA87D4B5181826F23E5DFED4C3470C8D664A4A36247999D86843995524A658E53ABE6D39D9D6011EA564FA5D6AB7B79D
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v102712283221662
Preview:	@font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.eot?9608958');. src: url('../font/ac-icons.eot?9608958#iefix') format('embedded-opentype'),. url('../font/ac-icons.woff2?9608958') format('woff2'),. url('../font/ac-icons.woff?9608958') format('woff'),. url('../font/ac-icons.ttf?9608958') format('truetype'),. url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. }.}./.. [class^="ac-icon-"]:before, [class=" ac-icon-"]:before {. font-family: "ac-icons";. font-style: normal;. font-weight: normal;. speak: none;.. display: inline-bl

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1417), with no line terminators
Category:	downloaded
Size (bytes):	1417
Entropy (8bit):	5.250908738327739
Encrypted:	false
SSDEEP:	24:0ELN/P7cP7mN/DxMcDxMmN/LBMcLBMP5XhV1oDlUHl6mlllW9bIkEjzi2VWEVrrR:0ELN3707mNLxMcxMmNVMUMRXhV1oDaHt
MD5:	F7EF4BF46CCE95993674E83C398E7051
SHA1:	D7E516E6DF9FBBBCE56077255372C9FE97504881
SHA-256:	87B37A01F4292314C4A8CA5760812543D8A8F66233384B7C9882A5CB2F8E2E47
SHA-512:	D4A4F8B6B83A12A5F475F3BFC202B363995ECC2CB9B6B76A34CF3DAB918C357C122766BD153EC761C23F61DE3DEB30E8C464C98D5991A27627AC05CB7D6F716A
Malicious:	false
Reputation:	low
URL:	https://solve-widget.forethought.ai/?v=2
Preview:	<!doctype html><html lang="en"><head><link rel="preconnect" href="https://solve-api.forethought.ai/"/><link rel="dns-prefetch" href="https://solve-api.forethought.ai/"/><link rel="preconnect" href="https://static.cloudflareinsights.com"/><link rel="dns-prefetch" href="https://static.cloudflareinsights.com"/><link rel="preconnect" href="https://cloudflareinsights.com"/><link rel="dns-prefetch" href="https://cloudflareinsights.com"/><link href="https://fonts.googleapis.com/css2?family=Comfortaa:wght@300..700&family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&family=Merriweather:ital,wght@0,300;0,400;0,700;0,900;1,300;1,400;1,700;1,900&family=Playfair+Display:ital,wght@0,400..900;1,400..900&family=Roboto+Mono:ital,wght@0,100..700;1,100..700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap" rel="stylesheet"/><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1"/><bas

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.280128763145388
Encrypted:	false
SSDEEP:	12:6v/71UrhTnzFfCusv30Sl0ledZT6yEMHB3hzXQysnSgg7:iWTZCuIlOI6IgQ7
MD5:	5BB4BF932BD8470DEDADC94B24F860FA
SHA1:	0BDA2AFB55195C97879FD8A30DD27B8EC9389A87
SHA-256:	D6CAA1F86FE756A65595155EFF8B65E22F633D83FCD28BC44BED215F1EF9F357
SHA-512:	B3612D53C2A6F280FA6FF3109EE1086DAE05F385FEECDB9DAE4D333B201717F61DF8C797DE9F503432A673F1F77AE1FD616F2A2EB30E3849A97A6FCC56A3B586
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F.....HPLTE...4j.5j.5j.3p.5h.5j.4j.4h.4e.4i.5i.0h.4j.4j.3i.5j.5j.5i.5i.5j.......`..<......tRNS.... ..@0p` .P............IDATh....0.E.o..t.'........f.C..,............fbZ.t....O..I..D.y..".$=<...q.........S...M....).;....xY.X.&..H.qYmd.U......C.[........A.j....z...b.Zi"A8.3.2.j..."o.#y.`..(.8....^5..X..1P.....V....T..I3.xX)h...S.H;v..1......(.H...(.......'..e..2....i....c..z.j.....N......m8/...9.$.E.....U.f.B....e..}....p.....q...2..r.\.I?u.k....p...w...=;..... ...C....)..j.P...y................<......[q[.z..<5/g-m.b.>..P..X........IEND.B`.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	186349
Entropy (8bit):	5.310945040918864
Encrypted:	false
SSDEEP:	1536:R6S+p++PDBkSPT/Qy2g0BycStb/zC5YkEtASBn/T5eYj/MTzU8uoHoqJd4R3YjFq:4PlPH2TKbbCZEaIIbwYFeUaZZRBpR+gf
MD5:	A2C8C80A4D473E45905E59318545D08F
SHA1:	06EC786AC34F107FFDD52B5B2091F6BD4BBBF695
SHA-256:	9521170BBA73E8510E258DC77AD76297429CEC8645411B0DB51E7FA6A546DB07
SHA-512:	A7D7D815F545D4FC198E7B7D8894FEA2601D5DA961EBA7BC84D57F621C9C6594F152C99314DD42C52EFEE4AB27AE838B0EE2ECCAA67D3BCA7583380C0268188C
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js
Preview:	!function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var r=null!=arguments[n]?arguments[n]:{};n%2?t(Object(r),!0).forEach((function(t){s(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):t(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function n(t){return n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},n(t)}function r(t,e,n,r,o,i,a){try{var s=t[i](a),l=s.value}catch(t){return void n(t)}s.done?e(l):Promise.resolve(l).then(r,o)}function o(t,e){if(!(t instanceof e))throw new Ty

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	305171
Entropy (8bit):	5.39167381586239
Encrypted:	false
SSDEEP:	3072:fFiUV5Ewol1YO7/n85NRCl0Uvh3AkdTmsksf9jJ2DHi1mHVY:fxMPZ7/n85NRClBhwkdaVIm2
MD5:	39231E102F7314A1619964FD27929CEE
SHA1:	EFC790F494F1C417C77184977F1B6988B25159AE
SHA-256:	79659DE908A983B1D2014DF92552E044D19E76043090EC9A815DA972D3B42E06
SHA-512:	0256ECE45BDAA31B7131D8448E26FDB7D7EE312A311FFFF6713C5FDC5E576D68916C5478412CD59914C4889CCC1E592C815AD4EDFBEE7AD883CFC13A3ED6B126
Malicious:	false
Reputation:	low
URL:	https://solve-widget.forethought.ai/static/js/647.f82da89b.chunk.js
Preview:	!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="d3de62ff-62b9-4a4f-a4bd-4d3f2a8e3f03",e._sentryDebugIdIdentifier="sentry-dbid-d3de62ff-62b9-4a4f-a4bd-4d3f2a8e3f03")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[647],{5944:(e,t,n)=>{n.r(t);var o=n(5043),i=n(2965),a=n(3868),s=n(8344),r=n(3249),l=n(5585),d=n(3923);const c="clear/imageViewer",u="closeWidget",p="navigate/back",g="navigate/to",m="openWidget",f="reset/widget",v="set/imageViewer",h="set/setIsMobile",x="main/setIsWidgetVisible",_="set/selected_answer_index",w="set/visualViewportOffset",b="set/start",y=(0,s.VP)(f),k=(0,s.VP)(b),C=(0,s.VP)(g),A=(0,s.VP)(p),I=(0,s.V

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/jq/notification.js?v=v1027121389246675
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	370
Entropy (8bit):	6.971221767667918
Encrypted:	false
SSDEEP:	6:6v/lhPEt+fNdmBdgqBjrBREso9K9em7/cXhof1BziOHHObozEsv7feQLbp:6v/71/mBKqBjr1o9eDcX+jGOHDv7Wo
MD5:	FE8AA2BB56BDBF2FCC808F8FD32EB5A8
SHA1:	C213B37DA3C77B15F5099AB8D22DCEF39B789B6F
SHA-256:	9E03CF78462F89F5F13755ED11DAE20C5CB52EEB32A9749719D6FB7D8B60F28F
SHA-512:	8599424A77BE5860A8220E3AA5F0976C19BD6775C0598E3E3F07162ABD27218B6FE8835A624F8C972C66EBDFBE425BF665F97133CC0921DCB83BFC8921F3F467
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F.....EPLTE...4j.4j.4i.5j.4i.5e.:k.......5j.......X.................Kz.......@^.....tRNS....p0..7EW....IDATh......0...R..J....T.i.F.h8H..W...2@R..;... [.T)...X.e. "..........1...."..2...."q..........C&..`.3.....M....0u.....#.... ...v#.....(.-".."U......[D`.-".../.....?...G;.X9.............$.....&.T...1.....c....uv....IEND.B`.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (721)
Category:	downloaded
Size (bytes):	430286
Entropy (8bit):	5.10702242018368
Encrypted:	false
SSDEEP:	6144:mRJEHslkkP0cFhzP+nSQSOmAv+n35aW2jO7cmD:s0cFxGI24cmD
MD5:	A44777845F43D4D9EEED8D89BBF6B837
SHA1:	2741F2BD238A632D7367E8480691E17B672DD647
SHA-256:	98BFD2F56B13FB952C683C4DD5007009FD80B9212CC0A1247C62D9BB19F885D6
SHA-512:	876906961B7B49C72956B9355632EB040C24A4DA37FC2E3762E1334C3AA4689C5FAD3A94D71755D3DB3CABFAAACC3F4DCFE5ABC34ABA4F5F4706D22D0021A5A8
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/skin.css?v=v1027121384670010
Preview:	html { margin: 0;padding: 0;color: #000;height: 100%;min-height: 100%;font-family: 'IBM Plex Sans', helvetica, arial, serif; /* background-color: #343434; */ }.body, div, dl, dt, dd, ul, ol, li, h1, h2, h3, h4, h5, h6, pre, code, blockquote { margin: 0;padding: 0 }.table { border-collapse: collapse;border-spacing: 0 }.fieldset, img { border: 0 }.address, button, caption, cite, code, dfn, em, input, optgroup, option, select, strong, textarea, th, var { font: inherit }.i, em, td i, td em { font-style: italic }.del, ins { text-decoration: none }.li { list-style: none }.caption, th { text-align: left }.h1, h2, h3, h4, h5, h6 { font-weight: normal }.q:before, q:after { content: '' }.abbr, acronym { border: 0;font-variant: normal }.sup { vertical-align: baseline }.sub { vertical-align: baseline }.legend { color: #000 }.body { position: relative;margin: 0;padding: 0 0 0;font-family: "IBM Plex Sans", helvetica, arial, serif;min-width: 940px;height: 100%;display: flex;min-height: 100%;flex-dire

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	downloaded
Size (bytes):	47585
Entropy (8bit):	5.265462522776657
Encrypted:	false
SSDEEP:	768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP
MD5:	B18E0AE8A5E893AC4A0A627AAB0B1E77
SHA1:	5F9A5AF4087A771960E2C0D48D9E8A1BED836A75
SHA-256:	A8EF97C3C11D3D216259ACCFB864BD5360EF771AEF244922331993EBA0C35AA8
SHA-512:	1CD2156699D2DDE75706FE1771CA0E3072ED9D9FF3011262B3A256457CF62A04414A99947CB9EC672FD16CF5E979E586235D0E51631E487A8853F09F66D85209
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/js/functions.js?v=v1027121471506941
Preview:	function console_log() {..// attempt to send a message to the console..try {...for(var i =0; i < arguments.length; i++) {....console.log(arguments[i]);...}..} catch(e) {} // fail gracefully if it does not exist..}..function form_branding_delete(plan, rsid, formid) {..if (!plan && !rsid ) {...alert(strFormUpgrade);..} else {...form_part_delete("branding",formid);..}.}..function jump(url) {..ac_loader_show();..window.location = url;.}..../. CLONER FUNCTIONS./..function clone_1st_element(node, elem, clearInputs) {..return ac_dom_clone_node(node, elem, 0, clearInputs);.}..function clone_1st_div(node) {..return clone_1st_element(node, 'div', true);.}..function clone_1st_tr(node) {..return clone_1st_element(node, 'tr', false);.}..function clear_inputs(node) {..$J('input', node).each(function(i) {...var o = $J(this);...var t = o.attr('type');...if (t == 'text' \|\| t == 'file') o.val('');..});.}..function clear_selects(node) {..$J('select', node).each(function(i) {...this.selectedIndex = -

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64399)
Category:	dropped
Size (bytes):	255084
Entropy (8bit):	5.159519117191277
Encrypted:	false
SSDEEP:	3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV
MD5:	1E2047978946A1D271356D0B557A84A3
SHA1:	5F29A324C8AFFB1FDB26AD4564B1E044372BEED2
SHA-256:	9528CA634FECAD433D044DDD3E6F9CE1F068D5D932DAFDBB19D8E6DAEA1968BD
SHA-512:	E7BA19FEF5BC00D32347F290E817BDBFFFBF87A6EAF7F9777F439CEEF9FAA8CAB286F3DDD5CBCA051596A73BB44289DE226AABD929263B8312A94F91A47A26DD
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	dropped
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	251
Entropy (8bit):	3.9141243326856108
Encrypted:	false
SSDEEP:	3:UCIIsmKA4F2XFFWNNGKK1I1sH2I1uUI8zIILIfflkEGc82nkcser4/tKRAYmH:U8sW4F2CdK1CsWCm8JIfGfwR6H
MD5:	F1DA0AADBF845CB0C4D5B31765836E41
SHA1:	8FB141B3EF2782EAA667E11EC7E263EF7E4B2EFB
SHA-256:	1ADFAFBBFC90BF463E79BAC61F069BEF70247D04E7EB9CB82DFE1ADB2279F8F8
SHA-512:	7C12B90B5AD2361B041E82D19F23BEDA3523770A33B514489EE3C24C8D35286354B0EE352F544989CEB716EAC46160693AFA86E73C9D42B7D0F395EF99B8BAAE
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/content.css?v=v1027121384670010
Preview:	/-------------------------------------------/./* Admin Global Content Style ...... / ./-------------------------------------------/...../------ Framework ------*/..ac-content_wrap { padding: 0 23px 23px 23px;width:100%;box-sizing:border-box;}

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	960
Entropy (8bit):	4.925254741153538
Encrypted:	false
SSDEEP:	12:Y7Y+FAKFAwpZPWQZqWa0cvBvpwPbXHKFyp98XR0LDY1puosBwRiGARlZkq9g2JVD:YcVK6wTMV0cJvpgaMnYeoqIiGi9gImCF
MD5:	7D20E038F63E6A44479B2CBA8C34DDB1
SHA1:	9B92B6B43F6D6DC963B6961DFF1784292169D3D0
SHA-256:	AFB76F00A4AF899E119B52B1CB3289D4D2ECF9CAFBAA8156893406060C1129A6
SHA-512:	DCCF36FAAF13D3353BB217B857EA0302FABAF4DCBFA39B4FEA584C5B07D83B06495A77CAAAEE89B61965A88534791FD93129849799B32F2CB57BDF91660FC6AA
Malicious:	false
Reputation:	low
Preview:	{"features":{"conversationTicketMetadata":true,"fastLoad":true,"multiConvoEnabled":true,"privateAttachmentsEnabled":true},"messenger":{"integrationId":"651edd8f5f5e9b98d7077f4f","appId":"6185c3c6587c5300e119773e","position":"right","conversationHistory":"forget","color":{"primary":"#000cff","action":"#000cff","message":"#00363d"},"title":"ActiveCampaign","description":"How can we help?","avatar":"https://prodhostedtest.zendesk.com/embeddable/avatars/10718314379804","launcher":{"text":"","showTextInMobile":false,"shape":"circle","shapeSettings":null},"baseUrl":"https://prodhostedtest.zendesk.com/sc/sdk","channelLinkingEnabled":false,"showZendeskLogo":false,"attachmentsEnabled":true,"canUserCreateMoreConversations":true,"canUserSeeConversationList":true,"frameBorderRadius":"16","proactiveMessagingEnabled":false,"soundNotificationEnabled":true,"positionOffset":{"web":{"vertical":"16","horizontal":"16"},"mobile":{"vertical":"16","horizontal":"16"}}}}

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12840
Entropy (8bit):	5.588954395447791
Encrypted:	false
SSDEEP:	192:1J/lJUJn38JhJRrJHJBiJRJt3nJcJ/AJIJ3PJeJb36J7JlpJFJxkJDJd3dJqJv2U:rIQCwo0G+I2URA
MD5:	7CFA080356587BA8FD518EB778675ADB
SHA1:	103FD0FEA56F49C60F4A7B40984ACCCC77FF944E
SHA-256:	43C5D69A8FE2E1956C1954B8E24A99AF2130E9273C4868F1F89E86F078FF55AE
SHA-512:	5F7E1795FCBF2DB56FD4C01A533EA009A49B976B21B4F2C94E6EFF59198FC0D465C38CC176F0FEE27700941CBF46D0C06152F8964B92B24B577A1B2CE50A2CAB
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=IBM+Plex+Sans:200,300,400,500,600,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight: 200;. src: url(https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjR7_AIxsdO_q.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight: 200;. src: url(https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjR7_AIVsdO_q.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. font-weight: 200;. src: url(https://fonts.gstatic.com/s/ibmplexsans/v19/zYX9KVElMYYaJe8bpLHnCwDKjR7_AIJsdO_q.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'IBM Plex Sans';. font-style: normal;. f

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120803
Entropy (8bit):	4.997768528289863
Encrypted:	false
SSDEEP:	1536:aSK9VvhKv0F4U3SuKkqnUaP8RX+W5bq7kkn9MONPG8f5++cde6HZk7Ld:aHKkqoZk7x
MD5:	D88C5718C1944BE29206CCB1BB58B963
SHA1:	B83B72330C7B682C576C786DFA28C89AF9B96EF8
SHA-256:	59B95CCDA82D6CB0DE5A6D9EF2D106866F3F49F692A0008AFAB934A803B14EFE
SHA-512:	3E57A27A3BE2DAC10D4BC0C15F3E1CA56885D7836B2A8141C0285079E1B4CC7F5A95612BFD0C70ECB7F34F0C8C9C84EA580FDCAE07F2D512B0768F6C9A3B43B4
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/css_camp.min.css?v=v1027121471506941
Preview:	/! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%;line-height:1.15}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{-webkit-text-decoration:underline dotted;border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (488)
Category:	downloaded
Size (bytes):	13515
Entropy (8bit):	5.082581993641253
Encrypted:	false
SSDEEP:	384:dSuCKDujQMeDH1W60sYsTrBwrRXAQPWgg7L7feADl3PM1:yQ1W60sYsTrBaRXAQPWgg7L7fDDl301
MD5:	0E9AA12DD744EC41246AB1C292D7B8F9
SHA1:	DA650223A8C4E6F16A1E2A74EF1B8F8891C98756
SHA-256:	AE05BF66E25C9E25F93031CD5C196959FC91C812A5E3F29E2FD6F9FE398F0C98
SHA-512:	DBD0A2AAEEDA109CDD487755190C2A68CA87D4B5181826F23E5DFED4C3470C8D664A4A36247999D86843995524A658E53ABE6D39D9D6011EA564FA5D6AB7B79D
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v1027121384670010
Preview:	@font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.eot?9608958');. src: url('../font/ac-icons.eot?9608958#iefix') format('embedded-opentype'),. url('../font/ac-icons.woff2?9608958') format('woff2'),. url('../font/ac-icons.woff?9608958') format('woff'),. url('../font/ac-icons.ttf?9608958') format('truetype'),. url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. }.}./.. [class^="ac-icon-"]:before, [class=" ac-icon-"]:before {. font-family: "ac-icons";. font-style: normal;. font-weight: normal;. speak: none;.. display: inline-bl

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	137736
Entropy (8bit):	5.281481519639307
Encrypted:	false
SSDEEP:	1536:+n2vnRCxq51NzuciMwSEll2IHbELM4ve2Xcmr/WfcnJoAPN:+n2fEsLv9cHYBG2Xci/W0mo
MD5:	4C37342DB5AD594D06EBBD1C0BA47D13
SHA1:	6AA54C53816D9B4A658643372B53D65A4D454ECD
SHA-256:	6C079922F22A5B0F90A5DBF336ACA62D0EC1A50A720CAE96F0B746D0B3BD3B45
SHA-512:	80985293F0233375B61FAD1B717A9EE049A4AACD2A285374D9C20D60632605730FAB8E01A6D7EECC15A74DE621D78B2B6550789B164C9B1E4DC4D49953D7DE20
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/messenger/latest/web-widget-9606-b6408d4.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[9606],{3261:(e,n,t)=>{(n=t(3256)(!1)).push([e.id,'/!\n Copyright Zendesk, Inc.\n \n Use of this source code is governed under the Apache License, Version 2.0\n * found at http://www.apache.org/licenses/LICENSE-2.0.\n */\n\nhtml{\n line-height:1.15;\n -webkit-text-size-adjust:100%;\n}\n\nbody{\n margin:0;\n}\n\nmain{\n display:block;\n}\n\nh1{\n font-size:2em;\n margin:.67em 0;\n}\n\nhr{\n box-sizing:content-box;\n height:0;\n overflow:visible;\n}\n\npre{\n font-family:monospace,monospace;\n font-size:1em;\n}\n\na{\n background-color:transparent;\n}\n\nabbr[title]{\n border-bottom:none;\n text-decoration:underline;\n -webkit

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (488)
Category:	downloaded
Size (bytes):	13515
Entropy (8bit):	5.082581993641253
Encrypted:	false
SSDEEP:	384:dSuCKDujQMeDH1W60sYsTrBwrRXAQPWgg7L7feADl3PM1:yQ1W60sYsTrBaRXAQPWgg7L7fDDl301
MD5:	0E9AA12DD744EC41246AB1C292D7B8F9
SHA1:	DA650223A8C4E6F16A1E2A74EF1B8F8891C98756
SHA-256:	AE05BF66E25C9E25F93031CD5C196959FC91C812A5E3F29E2FD6F9FE398F0C98
SHA-512:	DBD0A2AAEEDA109CDD487755190C2A68CA87D4B5181826F23E5DFED4C3470C8D664A4A36247999D86843995524A658E53ABE6D39D9D6011EA564FA5D6AB7B79D
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/ac_global/fontello/css/ac-icons.css?v=v102712424104756
Preview:	@font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.eot?9608958');. src: url('../font/ac-icons.eot?9608958#iefix') format('embedded-opentype'),. url('../font/ac-icons.woff2?9608958') format('woff2'),. url('../font/ac-icons.woff?9608958') format('woff'),. url('../font/ac-icons.ttf?9608958') format('truetype'),. url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'ac-icons';. src: url('../font/ac-icons.svg?9608958#ac-icons') format('svg');. }.}./.. [class^="ac-icon-"]:before, [class=" ac-icon-"]:before {. font-family: "ac-icons";. font-style: normal;. font-weight: normal;. speak: none;.. display: inline-bl

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1371
Entropy (8bit):	4.797038772781046
Encrypted:	false
SSDEEP:	24:tZGPrnqRk4m7xvYab/3jxRD6ipnSaHg4wN6rtAPz3NZpYVYM/F:XSqqf9vY23fnpSaHg4wNEAPJAVP/F
MD5:	355CC1E1050AF23B006EA14B35DB39A9
SHA1:	A43732D6CBFC70F8213CF0AB48C0C93C1E502053
SHA-256:	8D58AEE7AD7B7CB1D5908E9C27D76B4E4BE51CB943C268B39F0CAF2D38C3F3E3
SHA-512:	41DC607EA5BD2167C457F04746F391D5FAED0270A8123B258408C85B038A548548A840C7B1AC09CE9C82DC82324C6300E6E0171AF56A7F17B9EF1EF8DE0EDCD3
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v102712424104756
Preview:	:root {. /* Primary palette /. --ocean: var(--ocean-500);. --ocean-120: var(--ocean-600);. --ocean-80: var(--ocean-400);. --ocean-60: var(--ocean-300);. --ocean-40: var(--ocean-200);. --ocean-30: var(--ocean-150);. --ocean-20: var(--ocean-100);. --slate: #4e5468;. --slate-120: #353A4A;. --slate-140: #1f2129;. --slate-80: #5f667e;. --slate-60: #9298ad;. --slate-40: #ced3e0;. --slate-30: #E4E7F0;. --slate-20: #F7F9FC;. --mint: #19cca3;. --mint-120: #139879;. --mint-80: #1bddb1;. --mint-60: #6ae6c9;. --mint-40: #b6f2e4;. --mint-20: #ebfffa;.. / Secondary palette */. --strawberry: #f3376b;. --strawberry-120: #e40e49;. --strawberry-80: #f56e94;. --strawberry-60: #faa5bd;. --strawberry-40: #fcdee7;. --strawberry-20: #fff2f6;. --creamsicle: #ff8730;. --creamsicle-120: #f46700;. --creamsicle-80: #ffa869;. --creamsicle-60: #ffbf90;. --creamsicle-40: #ffe1cb;. --creamsicle-20: #fff8f2;. --lavender: #9159fc;. --lavender-120: #73f;. --lavender-80: #aa81fc;.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	downloaded
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/jsc/ac.js?v=v1027121389246675
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120803
Entropy (8bit):	4.997768528289863
Encrypted:	false
SSDEEP:	1536:aSK9VvhKv0F4U3SuKkqnUaP8RX+W5bq7kkn9MONPG8f5++cde6HZk7Ld:aHKkqoZk7x
MD5:	D88C5718C1944BE29206CCB1BB58B963
SHA1:	B83B72330C7B682C576C786DFA28C89AF9B96EF8
SHA-256:	59B95CCDA82D6CB0DE5A6D9EF2D106866F3F49F692A0008AFAB934A803B14EFE
SHA-512:	3E57A27A3BE2DAC10D4BC0C15F3E1CA56885D7836B2A8141C0285079E1B4CC7F5A95612BFD0C70ECB7F34F0C8C9C84EA580FDCAE07F2D512B0768F6C9A3B43B4
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/css_camp.min.css?v=v1027121384670010
Preview:	/! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%;line-height:1.15}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{-webkit-text-decoration:underline dotted;border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	786
Entropy (8bit):	7.334254443932632
Encrypted:	false
SSDEEP:	12:6v/7Mfu0aE5kAE2ktFvjH/X6tKuxvuxE7AeEMrdw8d73QvKHU2DnuE3t81z2rxc:FG6kLFz/XArxvuxE7JJnsvWU27uEmRD
MD5:	7E33AA8C72FC5B80F81DF51E4F3F400B
SHA1:	7339C4833594E6D19F8AE3D37D0F732753CA544E
SHA-256:	93D3BA02051C3FB37C956B5966864DD09B692A5DD0B7FC8F2A8650A92D638860
SHA-512:	7AB7045E1B0E71C78F86BE4FF50B9DFA15622B7BE2491D2FC50308C65DC32CAAEDABC9939B8D1489F27DB774240A82CA1374D32B51A4060EA9079AD67A24E6FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F......PLTE......4j......................4h.5j....5j..........4j.5j..........5i....5i.3i.4h....0p.....................5j................N}........................V.....M{.Bs.?r.t..0Y%V...#tRNS...@0 ....@..P@@....p``P .....p0.g}....IDATh..io.0.....c.............L...oE....<_...>.cP.....8.....RJp.d.\.._..S.........`.RM.0........f.S.....X..@..\|j..v>....$?..E...........P....}..Y0HV..`.6.4.......<....6..!V;..=.`d.. K..9...N......i".........(.Zk.?4..R.5.....$Xb.X".7;....W.YjK.@...aO..,"F....E ......n.^...&v......e..J-@\|.5..5@C..........t.!..D.=.....+e. :l.P.f...".....}.....Nl..p..6.>>...lg..,.e.E.y@.../.._......-...7....,.4.......0.O..A......?.&...UL._......zF.dp.p%.. ....-....`n.S.t...Pg.G;I.V...........f.......IEND.B`.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	4.887729412545851
Encrypted:	false
SSDEEP:	24:+ZLl5RJuvehMvcZtaItEVBGIEJD2cS1ycSCVKAL+reaxG4jg4Q1M9KEnn:+ZLlYWhTtawEVB2qaAVKprJ3JQ1EKm
MD5:	C9244A53CF44E50B3FB6C0E2BC2AEC38
SHA1:	E4AEA45CBE5B546A1DCDB57F7CA9286808F8CE0C
SHA-256:	7676ABEC852FACAAA77246DA43EF04BB4D52386F23F40EAD92D3CFF35F482D3C
SHA-512:	5BA51B344B2514C601275E8937D1220E944E77FA87BAE24CD5EA7A66537F4EAA124F6AA313AE5EF95CCBA33157A105B0169A825674887D3D6CC453F9E8A94299
Malicious:	false
Reputation:	low
Preview:	//.// Notification.// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'}).//.// Docs:.// .// type: string (success, error, warning, notice).// text: string (alert text).// persist: boolean (should the alert remain on screen).// delay: int (time in milliseconds for the alert to disappear if persistant is set to true)..(function($){..$.fn.notification = function( options ) {.....var _this = this;.......// Default options...var settings = $.extend({....text: "Supply some text for your notification.",....type: "success",....persist: true,....delay: 5000...}, options );....var template = '<div class="notify ' + settings.type + ' ">' + settings.text + '</div>';....var existing = $("> div.notify." + settings.type, _this);...if ( existing.length ) {....existing.....//.removeClass().....//.addClass('notify').....//.addClass(settings.type)......html(settings.text)....;....var timeout = existing.data('notify-timeout');....if ( timeout ) {.....clearTimeout(timeo

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	960
Entropy (8bit):	4.925254741153538
Encrypted:	false
SSDEEP:	12:Y7Y+FAKFAwpZPWQZqWa0cvBvpwPbXHKFyp98XR0LDY1puosBwRiGARlZkq9g2JVD:YcVK6wTMV0cJvpgaMnYeoqIiGi9gImCF
MD5:	7D20E038F63E6A44479B2CBA8C34DDB1
SHA1:	9B92B6B43F6D6DC963B6961DFF1784292169D3D0
SHA-256:	AFB76F00A4AF899E119B52B1CB3289D4D2ECF9CAFBAA8156893406060C1129A6
SHA-512:	DCCF36FAAF13D3353BB217B857EA0302FABAF4DCBFA39B4FEA584C5B07D83B06495A77CAAAEE89B61965A88534791FD93129849799B32F2CB57BDF91660FC6AA
Malicious:	false
Reputation:	low
URL:	https://prodhostedtest.zendesk.com/embeddable/config
Preview:	{"features":{"conversationTicketMetadata":true,"fastLoad":true,"multiConvoEnabled":true,"privateAttachmentsEnabled":true},"messenger":{"integrationId":"651edd8f5f5e9b98d7077f4f","appId":"6185c3c6587c5300e119773e","position":"right","conversationHistory":"forget","color":{"primary":"#000cff","action":"#000cff","message":"#00363d"},"title":"ActiveCampaign","description":"How can we help?","avatar":"https://prodhostedtest.zendesk.com/embeddable/avatars/10718314379804","launcher":{"text":"","showTextInMobile":false,"shape":"circle","shapeSettings":null},"baseUrl":"https://prodhostedtest.zendesk.com/sc/sdk","channelLinkingEnabled":false,"showZendeskLogo":false,"attachmentsEnabled":true,"canUserCreateMoreConversations":true,"canUserSeeConversationList":true,"frameBorderRadius":"16","proactiveMessagingEnabled":false,"soundNotificationEnabled":true,"positionOffset":{"web":{"vertical":"16","horizontal":"16"},"mobile":{"vertical":"16","horizontal":"16"}}}}

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2016)
Category:	downloaded
Size (bytes):	54805
Entropy (8bit):	5.443590996313587
Encrypted:	false
SSDEEP:	1536:8DugRTFpVr+zEVnJFkF3HHiWK3ScuAObxbw:MJRTtCHAULk
MD5:	214CE99F38586404EED475CD9334A95F
SHA1:	0028E9A86D209398A9BC5C92B363E48DD6265304
SHA-256:	73EC19D93EDD584CEC03C3AE29DD1864B1848D9A9BD5625B00B93FDA3A734929
SHA-512:	83A68B846137E6E5B2F27410304A6274A27E7418FDA60793D2A515BC1438E30C8E0FA37E3510BA358E40857F42A174C8BB02AB8AF759757B53DA58EB20FF96AA
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/jsc/ac.js?v=v1027121384670010
Preview:	var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1;return!0},redirect:function(a){a.match(/^http/)\|\|(a=ac_js_site.p_link+"/"+a);window.location.href=a},refresh:function(){window.location.reload(!0)},highlight:function(a){a.focus();a.select()},distance:function(a,c){return Math.sqrt(Math.pow(a,2)+.Math.pow(c,2))},uniqid:function(){return ac.encodeBase64(Math.random().toString()).replace(/(\+\|\/\|=)+/,"")},clickToEdit:function(a,c,d){var e=ac.uniqid();c=c\|\|function(){};d=d\|\|{};$J(document).on("click",a,function(a){d.allowPropagation\|\|a.stopPropagation();a=$J(this);a.hasClass("click-to-edit")\|\|(a.addClass("click-to-edit "+e).data("click-to-edit-original",a.html()),!1!==d.select_all&&document.execCommand("selectAll",!1,null))});$J(document).on("keypress",a,function(a){if(13==a.which){var d

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34830
Entropy (8bit):	4.910432505435297
Encrypted:	false
SSDEEP:	768:vJ8ZVsHVYjed0pUb/T/VNtiDohwvC6YJc:SZV5jed0pUbL/VNtiDohwvC6j
MD5:	A8AF09F2B17F4B6A08A5FC528049F15C
SHA1:	94019425F27F44FE5F8023E55ACA3D7C05912201
SHA-256:	59F5064EB2EBFE68879979E1821741F449BB11625F7D8EEAB95C121EC428C387
SHA-512:	5FAA5D5F9B4619F4437856DEBB987D5341AB949D2D4D40EB007D90861D315ACD956B8C85BF989224A4000130F2DB6E1481BD63E4F6A914A8A4587E4EE50C0426
Malicious:	false
Reputation:	low
Preview:	[{"id":23117150,"type":"tagger","options":["r-account_login","r-account-change-plan","r-account-change-info","r-account-review","r-account-other","r-sending-delivery","r-sending-segments","r-sending-review","r-sending-other","r-contacts-adding","r-contacts-segments","r-contacts-fields-tags","r-contacts-pers","r-contacts-tracking","r-contacts-other","r-design-inbox","r-design-designer","r-design-custom","r-design-other","r-integrate-supported","r-integrate-deep-data","r-integrate-api","r-integrate-other","r-forms-general","r-forms-integration","r-forms-other","r-crm-permissions","r-crm-imap","r-crm-other","r-automations-add","r-automations-setup","r-automations-review","r-automations-other","r-migrations-new","r-migrations-current","r-migrations-previous","r-gdpr","r-other"]},{"id":22990690,"type":"tagger","options":["w_account","w_automations","w_campaigns","w_contacts","w_deals","w_delivery","w_integrations","w_reports"]},{"id":31869287,"type":"text"},{"id":22993230,"type":"tagger","o

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (744)
Category:	downloaded
Size (bytes):	811
Entropy (8bit):	5.511377096937751
Encrypted:	false
SSDEEP:	24:cgqHHVvCa2uSnZsFEN4ycHyICnP2GkSrmQrwtxk+V:hWk/LIENwW+G/r0tfV
MD5:	7CEF69693A58D0F4567B43BBB261886F
SHA1:	DCF55A477B85D0A97393CAA33E4366ECFC6D4486
SHA-256:	DCFFB566F10BC6FB510B29F901F955CBBFDCF44964568BD9B64F282B31949E7E
SHA-512:	56B5AC214F4CBED6F469A638DD9047906D01BF95CB5986C531358C51215110F60026B18EE39E46D557F6C6F30F129EAF9B667E70446FABBA35FE1EED5EE20593
Malicious:	false
Reputation:	low
URL:	https://solve-widget.forethought.ai/static/js/polyfill-with-resolvers.42c0e97c.chunk.js
Preview:	!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="5a3dc026-fb02-4774-9da2-17640d819e4c",e._sentryDebugIdIdentifier="sentry-dbid-5a3dc026-fb02-4774-9da2-17640d819e4c")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[705],{3752:()=>{Promise.withResolvers\|\|(Promise.withResolvers=function(){var e,n,d=new this((function(d,o){e=d,n=o}));return{resolve:e,reject:n,promise:d}})}}]);.//# sourceMappingURL=polyfill-with-resolvers.42c0e97c.chunk.js.map

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	251
Entropy (8bit):	3.9141243326856108
Encrypted:	false
SSDEEP:	3:UCIIsmKA4F2XFFWNNGKK1I1sH2I1uUI8zIILIfflkEGc82nkcser4/tKRAYmH:U8sW4F2CdK1CsWCm8JIfGfwR6H
MD5:	F1DA0AADBF845CB0C4D5B31765836E41
SHA1:	8FB141B3EF2782EAA667E11EC7E263EF7E4B2EFB
SHA-256:	1ADFAFBBFC90BF463E79BAC61F069BEF70247D04E7EB9CB82DFE1ADB2279F8F8
SHA-512:	7C12B90B5AD2361B041E82D19F23BEDA3523770A33B514489EE3C24C8D35286354B0EE352F544989CEB716EAC46160693AFA86E73C9D42B7D0F395EF99B8BAAE
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/content.css?v=v1027121471506941
Preview:	/-------------------------------------------/./* Admin Global Content Style ...... / ./-------------------------------------------/...../------ Framework ------*/..ac-content_wrap { padding: 0 23px 23px 23px;width:100%;box-sizing:border-box;}

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (944)
Category:	downloaded
Size (bytes):	153634
Entropy (8bit):	5.071540401076863
Encrypted:	false
SSDEEP:	1536:aNjsEFdaGU6u9k9s4nV1kw2sIcao0rII05RfvxwUEg5o0NG0lHGc/Rbie0XQ/1sm:BH9lwDRbi4PhBLZkQ46
MD5:	ED29493E4E2A6D3BAF5E44FF14E51AFC
SHA1:	B68D1BDE9C9DC80482A70B9A138818AC3E16FF07
SHA-256:	794185BB74A488CA7D2E91871E9CD7BDDDF0864EF083F5862D9332D9767B2B11
SHA-512:	E89C6510D8DAABF6210BB9A9D9BD92AA41F0E183E1A374556ACE7B6AB665EB2041227BEF1687794C040D5C3734108C6E7267C1AC3A557B906BA11941A235D7ED
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/style.css?v=v1027121384670010
Preview:	/* ---------------------------. WARNING: DEPRECATED - DO NOT ADD TO THIS FILE.-------------------------------/../. Global element styling./../ Import / Include fonts here /.@import url("https://fonts.googleapis.com/css?family=IBM+Plex+Sans:200,300,400,500,600,700");../-------------------------------------------------------------------------\. Colors.\------------------------------------------------------------------------/./ Primary palette /..ac-blue { background: #19467C;}..medium-blue { background: #23538C;}..highlight-blue { background: #3E70B5;}..light-blue { background: #EEF4FC;}..alt-green { background: #4DCBA9;}../ Backgrounds and borders /..dark-grey { background: var(--slate-500);}..border-grey { border: var(--slate-200) 1px solid;}..medium-grey { background: var(--slate-100);}..light-grey { background: var(--slate-150);}../ Status and label /..go-green { background: #60CB98;}..stop-red { background: #F37C7B;}..border-red { background: #F37C7B;}../ Text */.

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50622)
Category:	dropped
Size (bytes):	50664
Entropy (8bit):	5.4312298218561486
Encrypted:	false
SSDEEP:	768:o1EEaLSH2XU2rPgwUBgKz9ed8HSV17gMGScKp4RQ8qRSW:o1EPuH0rPgwjqScpR/6
MD5:	791E4410EF4E9B6965605EE65AC8FDFD
SHA1:	2238BFF5604FA2792C24AF266AAB9852E7560329
SHA-256:	212F81EDF3C9B18D548C18A73F8B580A9CBAC67639EF9DDC090321941C2D2644
SHA-512:	36F34DDA833356B24E0001A798164D85AB16345F4D168A1E35BD25C129ACD2CEA0764BE3B9F69E85039F72A21922D013D4B8F230B01DCFA67BBA5B31659C4027
Malicious:	false
Reputation:	low
Preview:	!function(){try{var t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},r=(new t.Error).stack;r&&(t._sentryDebugIds=t._sentryDebugIds\|\|{},t._sentryDebugIds[r]="02e986c9-d0bc-4892-bec8-de9466ea57a9",t._sentryDebugIdIdentifier="sentry-dbid-02e986c9-d0bc-4892-bec8-de9466ea57a9")}catch(t){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{"use strict";var t={1239:(t,r,e)=>{var n=e(4706),o=e(5464),i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is not a function")}},83:(t,r,e)=>{var n=e(1012),o=e(5464),i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is not a constructor")}},6579:(t,r,e)=>{var n=e(8682),o=String,i=TypeError;t.exports=function(t){if(n(t))return t;throw new i("Can't set "+o(t)+" as a prototype")}},3348:(t,r,e)=>{var n=e(4352),o=e(6115),i=e(3572).f,a=

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	186349
Entropy (8bit):	5.310945040918864
Encrypted:	false
SSDEEP:	1536:R6S+p++PDBkSPT/Qy2g0BycStb/zC5YkEtASBn/T5eYj/MTzU8uoHoqJd4R3YjFq:4PlPH2TKbbCZEaIIbwYFeUaZZRBpR+gf
MD5:	A2C8C80A4D473E45905E59318545D08F
SHA1:	06EC786AC34F107FFDD52B5B2091F6BD4BBBF695
SHA-256:	9521170BBA73E8510E258DC77AD76297429CEC8645411B0DB51E7FA6A546DB07
SHA-512:	A7D7D815F545D4FC198E7B7D8894FEA2601D5DA961EBA7BC84D57F621C9C6594F152C99314DD42C52EFEE4AB27AE838B0EE2ECCAA67D3BCA7583380C0268188C
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var r=null!=arguments[n]?arguments[n]:{};n%2?t(Object(r),!0).forEach((function(t){s(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):t(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function n(t){return n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},n(t)}function r(t,e,n,r,o,i,a){try{var s=t[i](a),l=s.value}catch(t){return void n(t)}s.done?e(l):Promise.resolve(l).then(r,o)}function o(t,e){if(!(t instanceof e))throw new Ty

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13851)
Category:	dropped
Size (bytes):	13992
Entropy (8bit):	5.281231488978167
Encrypted:	false
SSDEEP:	192:XAprDN+s0g6YfKIUfmI9vP1lg+vm9kdg6iLJJaCJQ+h4MlcjbRe:XAprx0kfKIi7P1lrvmAiLJo+h4M2j0
MD5:	FAD78486D895A1CB63D4D7259DDCBEF8
SHA1:	F0F21780B00985D01AA185AE09F6B5BC0FFFCC35
SHA-256:	FABC1309FD87F5C5276434F78EA50D8BEBBD2B78608A07BAE68464C411F4177B
SHA-512:	073BE0604A075EEA615FE83B07F95A7A624660576BAB87D3284A3E0773EEAD2C6CB4C66DC2EDBC14790F297BBA752042CDB516AB3FEB32FEF9E67530863432A7
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.5.2 \| (c) OpenJS Foundation and other contributors \| jquery.com/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.5.2";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 362, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14241
Entropy (8bit):	7.569061846636186
Encrypted:	false
SSDEEP:	384:xCQCqfej9kQmz8RtgOP1RPPbEVAA9EHg7EAcENVCb6J:vC+ebmzKtg41QEHgJ9NVP
MD5:	CC61AA0476FA8CDE02BFD796601A1842
SHA1:	0D35D7849FEA95E316062D8D3D890BE03466EFD8
SHA-256:	539EC10B0E8A870A764CBBE5B052892073926AC637FE6433FFE21E0B778D8055
SHA-512:	FF31CCE1D018A22CCF80F40A204C288DB0237690F2862D6D064DD29193FEC79E912B1660B7A95D7F9081A735B9DB0F9275C85D8F9E39D691F9D0559DB1E393D2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......j.....E.......pHYs..,K..,K..=......sRGB.........gAMA......a...76IDATx........0......".C.n".:...X"...%..G.D0..X".&.p...V.w.e>...3.s...lM.Z-.J.nUE.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................E...!..?v.........\|T.t...v.....K..{.........i.D_..7.v.n.......".8...K....w.....M......g..s..m.W..2..L.F.........l&XD.G...nb....m..i..OS.rL.i./.` .h..S...Ju..........+VV......

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1371
Entropy (8bit):	4.797038772781046
Encrypted:	false
SSDEEP:	24:tZGPrnqRk4m7xvYab/3jxRD6ipnSaHg4wN6rtAPz3NZpYVYM/F:XSqqf9vY23fnpSaHg4wNEAPJAVP/F
MD5:	355CC1E1050AF23B006EA14B35DB39A9
SHA1:	A43732D6CBFC70F8213CF0AB48C0C93C1E502053
SHA-256:	8D58AEE7AD7B7CB1D5908E9C27D76B4E4BE51CB943C268B39F0CAF2D38C3F3E3
SHA-512:	41DC607EA5BD2167C457F04746F391D5FAED0270A8123B258408C85B038A548548A840C7B1AC09CE9C82DC82324C6300E6E0171AF56A7F17B9EF1EF8DE0EDCD3
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/camp-colors.css?v=v1027121384670010
Preview:	:root {. /* Primary palette /. --ocean: var(--ocean-500);. --ocean-120: var(--ocean-600);. --ocean-80: var(--ocean-400);. --ocean-60: var(--ocean-300);. --ocean-40: var(--ocean-200);. --ocean-30: var(--ocean-150);. --ocean-20: var(--ocean-100);. --slate: #4e5468;. --slate-120: #353A4A;. --slate-140: #1f2129;. --slate-80: #5f667e;. --slate-60: #9298ad;. --slate-40: #ced3e0;. --slate-30: #E4E7F0;. --slate-20: #F7F9FC;. --mint: #19cca3;. --mint-120: #139879;. --mint-80: #1bddb1;. --mint-60: #6ae6c9;. --mint-40: #b6f2e4;. --mint-20: #ebfffa;.. / Secondary palette */. --strawberry: #f3376b;. --strawberry-120: #e40e49;. --strawberry-80: #f56e94;. --strawberry-60: #faa5bd;. --strawberry-40: #fcdee7;. --strawberry-20: #fff2f6;. --creamsicle: #ff8730;. --creamsicle-120: #f46700;. --creamsicle-80: #ffa869;. --creamsicle-60: #ffbf90;. --creamsicle-40: #ffe1cb;. --creamsicle-20: #fff8f2;. --lavender: #9159fc;. --lavender-120: #73f;. --lavender-80: #aa81fc;.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386)
Category:	downloaded
Size (bytes):	55497
Entropy (8bit):	5.221657851036488
Encrypted:	false
SSDEEP:	1536:YFjoJ562ZFjhBsy1qry1qxy1q7y1qOyIqAZFKZFvjZrnbHysX2ysXgqyPsZ3qyPe:sjGLZFAy1qry1qxy1q7y1qOyIqAZFKZF
MD5:	144B224ED178586F2DFA9600C4D9B825
SHA1:	582D8C2B46E9C0BE2F04E699059EAA59D8B4C0F8
SHA-256:	F6F2D9995566D984A815B81BCE63BC1D1798BD63C4696574D7DA413100F12842
SHA-512:	34951AEC874857F98B8FC1AED37387D65AA331CD731E0100F780B74E736A7AEFE173F8C4A339FFB9D358FE043B1185AF8BC8089D70C261862766D6C09BE87EA9
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/default.css?v=v1027121471506941
Preview:	../* PAGE DEFAULTS /./ Setting the main body, font, color, and link defaults /............./ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /../ DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE /............body{ font-family: Arial, Helvetica, sans-serif; font-size:11px; color:#333333; margin:0; padding:0; }..input{ font-size:12px; font-weight:normal; font-family:Arial, Helvetica, sans-serif; }..a, a:visited{ color:#666666; }.a:hover{ color:#333333; }..hr{ background:#CCCCCC; color:#CCCCCC; height:1px; border:0; }../ Login Box For Index Page (usually the admin index) */..ac_login_container{ }..ac_login_head{..border-top-left-radius: 15px;..border-top-right-radius: 15px;..-moz-border-radius-topright: 15px;..-moz-border-radius-topleft: 15px;..background:#0E3E75;..padding-top:35px;..paddin

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43726)
Category:	dropped
Size (bytes):	43760
Entropy (8bit):	5.298699837566787
Encrypted:	false
SSDEEP:	768:dbhh31McDL1vIg0rdZI0KYrD9DRR+Vtzo82Z1AFTxASlm0urvS/2k7KK2tynwUuv:dThWD9DPUxA14AH
MD5:	FD711E2BE1600F858842DB067F9E74C4
SHA1:	2333F07354375E18E7D8F92990D87646BE06146A
SHA-256:	F8FE0AD84E6D669F0865F65269F7F2B67EE28E83E75114CB58A368D7FD6CDF7B
SHA-512:	856BAD888847F4859757BBFE14FA4198893BECEA19898E43CD257EA46CDE66917D1CF69D0FA0C56139F05CE2150934808C446C7DF46A91B4AE730FAE10B37452
Malicious:	false
Reputation:	low
Preview:	!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="43712606-d556-4a7e-ab6d-430c086404e7",e._sentryDebugIdIdentifier="sentry-dbid-43712606-d556-4a7e-ab6d-430c086404e7")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{var e={3633:e=>{e.exports=function(){var e=function(e){return"function"===typeof e},t=Math.pow(2,53)-1,n=function(e){var n=function(e){var t=Number(e);return isNaN(t)?0:0!==t&&isFinite(t)?(t>0?1:-1)*Math.floor(Math.abs(t)):t}(e);return Math.min(Math.max(n,0),t)},i=function(e){var t=e.next();return!Boolean(t.done)&&t};return function(t){"use strict";var o,a,r,s=this,d=arguments.length>1?arguments[1]:void 0;if("undefined"!==typeof d){if(!e(d))throw new TypeError("Array.from

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43726)
Category:	downloaded
Size (bytes):	43760
Entropy (8bit):	5.298699837566787
Encrypted:	false
SSDEEP:	768:dbhh31McDL1vIg0rdZI0KYrD9DRR+Vtzo82Z1AFTxASlm0urvS/2k7KK2tynwUuv:dThWD9DPUxA14AH
MD5:	FD711E2BE1600F858842DB067F9E74C4
SHA1:	2333F07354375E18E7D8F92990D87646BE06146A
SHA-256:	F8FE0AD84E6D669F0865F65269F7F2B67EE28E83E75114CB58A368D7FD6CDF7B
SHA-512:	856BAD888847F4859757BBFE14FA4198893BECEA19898E43CD257EA46CDE66917D1CF69D0FA0C56139F05CE2150934808C446C7DF46A91B4AE730FAE10B37452
Malicious:	false
Reputation:	low
URL:	https://solve-widget.forethought.ai/embed.js
Preview:	!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="43712606-d556-4a7e-ab6d-430c086404e7",e._sentryDebugIdIdentifier="sentry-dbid-43712606-d556-4a7e-ab6d-430c086404e7")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{var e={3633:e=>{e.exports=function(){var e=function(e){return"function"===typeof e},t=Math.pow(2,53)-1,n=function(e){var n=function(e){var t=Number(e);return isNaN(t)?0:0!==t&&isFinite(t)?(t>0?1:-1)*Math.floor(Math.abs(t)):t}(e);return Math.min(Math.max(n,0),t)},i=function(e){var t=e.next();return!Boolean(t.done)&&t};return function(t){"use strict";var o,a,r,s=this,d=arguments.length>1?arguments[1]:void 0;if("undefined"!==typeof d){if(!e(d))throw new TypeError("Array.from

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 362, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14241
Entropy (8bit):	7.569061846636186
Encrypted:	false
SSDEEP:	384:xCQCqfej9kQmz8RtgOP1RPPbEVAA9EHg7EAcENVCb6J:vC+ebmzKtg41QEHgJ9NVP
MD5:	CC61AA0476FA8CDE02BFD796601A1842
SHA1:	0D35D7849FEA95E316062D8D3D890BE03466EFD8
SHA-256:	539EC10B0E8A870A764CBBE5B052892073926AC637FE6433FFE21E0B778D8055
SHA-512:	FF31CCE1D018A22CCF80F40A204C288DB0237690F2862D6D064DD29193FEC79E912B1660B7A95D7F9081A735B9DB0F9275C85D8F9E39D691F9D0559DB1E393D2
Malicious:	false
Reputation:	low
URL:	https://d3rxaij56vjege.cloudfront.net/media/logo.png
Preview:	.PNG........IHDR.......j.....E.......pHYs..,K..,K..=......sRGB.........gAMA......a...76IDATx........0......".C.n".:...X"...%..G.D0..X".&.p...V.w.e>...3.s...lM.Z-.J.nUE.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................E...!..?v.........\|T.t...v.....K..{.........i.D_..7.v.n.......".8...K....w.....M......g..s..m.W..2..L.F.........l&XD.G...nb....m..i..OS.rL.i./.` .h..S...Ju..........+VV......

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13846), with no line terminators
Category:	dropped
Size (bytes):	13846
Entropy (8bit):	5.308669772596896
Encrypted:	false
SSDEEP:	384:4aVQi60eZpG+eFai2z1i3i1iBDBYtpg2zMSZNoUg59BI5jj9RUpk7d3:4aVq0eZpG+jeypg2zMSZaV59BI5jj96o
MD5:	AA3FED8E69B72F1B6965AFD8512F3A6A
SHA1:	9D7E7BA23A9EAAFC237F5A039A2FAD3B303652AF
SHA-256:	25046DE857066E2A87B729D55871729A63ED7273BE1BA2B62B0274A04B097CF3
SHA-512:	CB5AC2A62B34AC7232871107FFC485669162BC9AF1FB4C69BD2A65F02F722990BC831E7838349B10A971BD6A805DF87CC2E3D61757D087FBCC0CEE322D4DEA5F
Malicious:	false
Reputation:	low
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[7437],{36913:(e,t,n)=>{n.d(t,{K:()=>g});var o=n(88910),i=n(24726),s=n.n(i),r=n(31869),a=n(34485),d=n(10948),l=n(6999),u=n(26385),c=n(58492),p=n(8863);const h="buttons.icon_button",m=e=>{const t=(0,p.v)(e);return(0,d.AH)(["border:",";padding:0;width:",";min-width:",";",";&:disabled{background-color:",";}"],e.isBasic&&"none",t,t,e.isBasic&&!(e.isPrimary\|\|e.isDanger\|\|e.disabled)&&(e=>{const t=(0,l.A)("neutralHue",600,e.theme),n=(0,l.A)("neutralHue",700,e.theme),o=(0,l.A)("neutralHue",800,e.theme);return(0,d.AH)(["color:",";&:hover{color:",";}&:active,&[aria-pressed='true'],&[aria-pressed='mixed']{color:",";}"],t,n,o)})(e),!e.isPrimary&&"transparent")},f=(0,d.Ay)(p.O).attrs({"data-garden-id":h,"data-garden-version":"8.76.7"}).withConfig({displayName:"StyledIconButton",componentId:"sc-1t0ughp-0"})(["",";& ","{","}",";"],(e=>m(e)),a.v,(e=>(e=>{const t=e.theme.ic

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120803
Entropy (8bit):	4.997768528289863
Encrypted:	false
SSDEEP:	1536:aSK9VvhKv0F4U3SuKkqnUaP8RX+W5bq7kkn9MONPG8f5++cde6HZk7Ld:aHKkqoZk7x
MD5:	D88C5718C1944BE29206CCB1BB58B963
SHA1:	B83B72330C7B682C576C786DFA28C89AF9B96EF8
SHA-256:	59B95CCDA82D6CB0DE5A6D9EF2D106866F3F49F692A0008AFAB934A803B14EFE
SHA-512:	3E57A27A3BE2DAC10D4BC0C15F3E1CA56885D7836B2A8141C0285079E1B4CC7F5A95612BFD0C70ECB7F34F0C8C9C84EA580FDCAE07F2D512B0768F6C9A3B43B4
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/css_camp.min.css?v=v102712424104756
Preview:	/! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%;line-height:1.15}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{-webkit-text-decoration:underline dotted;border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	76307
Entropy (8bit):	4.746710080995372
Encrypted:	false
SSDEEP:	768:IrOmOo/x/SOmOw/l/Unz/S/cySy+/Z/PoXs:U/x/c/l/Unz/S/0/Z/PoXs
MD5:	150D94F24A187415CDCC65BACC6A530F
SHA1:	96744B4F44EEF0534CCB3B573987C3AE0637752E
SHA-256:	AAFEEA77D9DCA87810387D9FAA14CB890E756A510D17E7D08A69E19DE4D7E19D
SHA-512:	60127AEE5974ED861B621CC466DDDC3E737CD1479F9C6C784C236391D14D1956B27977C195ECE1FD40866A2DF8E1F9B74275CBC288CFF3C40B3459B16F5CB8A0
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/admin/css/animations.css?v=v1027121384670010
Preview:	@charset "UTF-8";./!.Animate.css - http://daneden.me/animate.Licensed under the MIT license - http://opensource.org/licenses/MIT..Copyright (c) 2014 Daniel Eden./...animated {. -webkit-animation-duration: 1s;. animation-duration: 1s;. -webkit-animation-fill-mode: both;. animation-fill-mode: both;.}..animated.slow {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..animated.fast {. -webkit-animation-duration: .4s;. animation-duration: .4s;.}..animated.fastest {. -webkit-animation-duration: .2s;. animation-duration: .2s;.}...animated.infinite {. -webkit-animation-iteration-count: infinite;. animation-iteration-count: infinite;.}...animated.hinge {. -webkit-animation-duration: 2s;. animation-duration: 2s;.}..@-webkit-keyframes bounce {. 0%, 20%, 53%, 80%, 100% {. -webkit-transition-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);. transition-timing-function: cubic-bezier(0.215, 0.61

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.86469832616696
Encrypted:	false
SSDEEP:	3:YBAvZNQaY:YwZNQaY
MD5:	2D7D30EA1C6F925302D2C3ABED382951
SHA1:	5BA6BBC5670C4AF1125CF9AC0AA1CA2811E744D1
SHA-256:	83C09BA9A8DAEDB136F90B17A294CAA90AD471A016E430DF6E229ACB5A81E100
SHA-512:	BCC7AAA8A6A27ADCBD1B3E0FCA73FC1BD727FECEAB34734E99863503D1D50936A8830C0A12D75D187614F318F46B1E67F046E89F5EB6CE727D8433A722E2C525
Malicious:	false
Reputation:	low
Preview:	{"detail":"Method Not Allowed"}

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1856241
Entropy (8bit):	5.08809466828566
Encrypted:	false
SSDEEP:	49152:dNmEvSVlsi1KtMxnF/DMB+13kUZyV9maZKmTKLxg4haTR+NTEwBSdh28xe9HkE5R:4
MD5:	20702285B0C5A918CB57D15B735321FE
SHA1:	3F75A40DF21B39BB79AA79A03A9D0218C2B00BB3
SHA-256:	010F01F8A34B7CE0A388499EC3D3B310BAAD3B298C4ABCF1A909CDDAE65BEA22
SHA-512:	9422A614474263D502E9F622DA93B1CAEFB0AAD0AC764DC0B332FD4E8BE6EEDF886B10E614FB3D9FFCD1EFF08C1BFC60238F3521EE24C0F53204ADF873C7FD28
Malicious:	false
Reputation:	low
URL:	https://yourexcellency.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css?v=v102712424104756
Preview:	:root{--b-0:0;--b-100:1px;--b-200:2px;--b-300:4px;--b-none:none;--b-dashed:dashed;--b-solid:solid;--radii-0:0;--radii-100:4px;--radii-200:8px;--radii-rounded:99rem;--radii-circle:100%;--shadow-50:0 1px 4px rgba(31,33,41,0.3);--shadow-100:0 4px 8px -2px rgba(31,33,41,0.3);--shadow-200:0 4px 12px 0 rgba(31,33,41,0.08);--shadow-300:0 14px 22px 0 rgba(31,33,41,0.1);--shadow-400:0 26px 32px 0 rgba(31,33,41,0.3);--banana-100:#fff9e6;--banana-200:#fdecb2;--banana-300:#fce28b;--banana-400:#fbd965;--banana-500:#facf3f;--banana-600:#deaa00;--black:#000;--creamsicle-100:#fff8f2;--creamsicle-200:#ffe1cb;--creamsicle-300:#ffbf90;--creamsicle-400:#ffa869;--creamsicle-500:#ff8730;--creamsicle-600:#e66000;--lavender-100:#f7f2ff;--lavender-200:#eae0fe;--lavender-300:#c3a7fc;--lavender-400:#aa81fc;--lavender-500:#9159fc;--lavender-600:#73f;--mint-100:#ebfffa;--mint-200:#b6f2e4;--mint-300:#6ae6c9;--mint-400:#1bddb1;--mint-500:#19cca3;--mint-600:#11866f;--network-android:#3ddc84;--network-apple:#1f2129;--

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 16:20:27.193154097 CET	192.168.2.8	1.1.1.1	0xc6de	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:27.193391085 CET	192.168.2.8	1.1.1.1	0xc2e3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:28.667532921 CET	192.168.2.8	1.1.1.1	0x6d34	Standard query (0)	yourexcellency.activehosted.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.668207884 CET	192.168.2.8	1.1.1.1	0xc58	Standard query (0)	yourexcellency.activehosted.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:28.684864044 CET	192.168.2.8	1.1.1.1	0x646	Standard query (0)	yourexcellency.activehosted.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.685086966 CET	192.168.2.8	1.1.1.1	0xb458	Standard query (0)	yourexcellency.activehosted.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:30.463411093 CET	192.168.2.8	1.1.1.1	0x71dd	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.463565111 CET	192.168.2.8	1.1.1.1	0x1319	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:30.464344978 CET	192.168.2.8	1.1.1.1	0x36cb	Standard query (0)	platform-cdn.app-us1.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.464498997 CET	192.168.2.8	1.1.1.1	0x349f	Standard query (0)	platform-cdn.app-us1.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:30.469718933 CET	192.168.2.8	1.1.1.1	0x3cc8	Standard query (0)	d3rxaij56vjege.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.469854116 CET	192.168.2.8	1.1.1.1	0x7eb0	Standard query (0)	d3rxaij56vjege.cloudfront.net	65	IN (0x0001)	false
Jan 14, 2025 16:20:31.087416887 CET	192.168.2.8	1.1.1.1	0x6706	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:31.087601900 CET	192.168.2.8	1.1.1.1	0x79c0	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:31.512696028 CET	192.168.2.8	1.1.1.1	0xd4ba	Standard query (0)	d3rxaij56vjege.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:31.512841940 CET	192.168.2.8	1.1.1.1	0x1a86	Standard query (0)	d3rxaij56vjege.cloudfront.net	65	IN (0x0001)	false
Jan 14, 2025 16:20:32.501861095 CET	192.168.2.8	1.1.1.1	0x8d90	Standard query (0)	yourexcellency.activehosted.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:32.502016068 CET	192.168.2.8	1.1.1.1	0xc54d	Standard query (0)	yourexcellency.activehosted.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:34.263618946 CET	192.168.2.8	1.1.1.1	0xf0af	Standard query (0)	d226aj4ao1t61q.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:34.264493942 CET	192.168.2.8	1.1.1.1	0x5c50	Standard query (0)	d226aj4ao1t61q.cloudfront.net	65	IN (0x0001)	false
Jan 14, 2025 16:20:34.465468884 CET	192.168.2.8	1.1.1.1	0xc24d	Standard query (0)	cdn.pendo.io	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:34.465647936 CET	192.168.2.8	1.1.1.1	0x9df	Standard query (0)	cdn.pendo.io	65	IN (0x0001)	false
Jan 14, 2025 16:20:35.582834959 CET	192.168.2.8	1.1.1.1	0x6f85	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.583360910 CET	192.168.2.8	1.1.1.1	0x6ca1	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:35.611624956 CET	192.168.2.8	1.1.1.1	0x7f00	Standard query (0)	d226aj4ao1t61q.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.612067938 CET	192.168.2.8	1.1.1.1	0x4d4d	Standard query (0)	d226aj4ao1t61q.cloudfront.net	65	IN (0x0001)	false
Jan 14, 2025 16:20:35.621668100 CET	192.168.2.8	1.1.1.1	0x4b8b	Standard query (0)	platform-cdn.app-us1.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.622036934 CET	192.168.2.8	1.1.1.1	0x20f2	Standard query (0)	platform-cdn.app-us1.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:35.643277884 CET	192.168.2.8	1.1.1.1	0xb802	Standard query (0)	cdn.pendo.io	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.643435001 CET	192.168.2.8	1.1.1.1	0xd9fe	Standard query (0)	cdn.pendo.io	65	IN (0x0001)	false
Jan 14, 2025 16:20:36.225835085 CET	192.168.2.8	1.1.1.1	0x1c88	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.226063013 CET	192.168.2.8	1.1.1.1	0x400c	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:36.226686001 CET	192.168.2.8	1.1.1.1	0x8c1	Standard query (0)	solve-widget.forethought.ai	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.226819038 CET	192.168.2.8	1.1.1.1	0x53e0	Standard query (0)	solve-widget.forethought.ai	65	IN (0x0001)	false
Jan 14, 2025 16:20:36.227822065 CET	192.168.2.8	1.1.1.1	0x62ef	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.227955103 CET	192.168.2.8	1.1.1.1	0xb407	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:36.992120981 CET	192.168.2.8	1.1.1.1	0xb57e	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.992261887 CET	192.168.2.8	1.1.1.1	0x6f59	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:37.048254013 CET	192.168.2.8	1.1.1.1	0x8c62	Standard query (0)	solve-widget.forethought.ai	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:37.048469067 CET	192.168.2.8	1.1.1.1	0x5f53	Standard query (0)	solve-widget.forethought.ai	65	IN (0x0001)	false
Jan 14, 2025 16:20:37.063769102 CET	192.168.2.8	1.1.1.1	0x46	Standard query (0)	solve-widget.forethought.ai	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:37.063925028 CET	192.168.2.8	1.1.1.1	0xe160	Standard query (0)	solve-widget.forethought.ai	65	IN (0x0001)	false
Jan 14, 2025 16:20:38.271368027 CET	192.168.2.8	1.1.1.1	0x2254	Standard query (0)	solve-api.forethought.ai	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.271723032 CET	192.168.2.8	1.1.1.1	0xc028	Standard query (0)	solve-api.forethought.ai	65	IN (0x0001)	false
Jan 14, 2025 16:20:38.272046089 CET	192.168.2.8	1.1.1.1	0x5532	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.272600889 CET	192.168.2.8	1.1.1.1	0x52c3	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:38.274301052 CET	192.168.2.8	1.1.1.1	0x126b	Standard query (0)	cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.274591923 CET	192.168.2.8	1.1.1.1	0xc521	Standard query (0)	cloudflareinsights.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:39.163005114 CET	192.168.2.8	1.1.1.1	0xb8a6	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:39.163389921 CET	192.168.2.8	1.1.1.1	0x7c0	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:39.192915916 CET	192.168.2.8	1.1.1.1	0x44c6	Standard query (0)	prodhostedtest.zendesk.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:39.193283081 CET	192.168.2.8	1.1.1.1	0x2fdf	Standard query (0)	prodhostedtest.zendesk.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:39.866051912 CET	192.168.2.8	1.1.1.1	0xf9aa	Standard query (0)	prodhostedtest.zendesk.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:39.866239071 CET	192.168.2.8	1.1.1.1	0x7ba2	Standard query (0)	prodhostedtest.zendesk.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:41.649122953 CET	192.168.2.8	1.1.1.1	0xc923	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:41.649274111 CET	192.168.2.8	1.1.1.1	0x28f1	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 16:20:43.330920935 CET	192.168.2.8	1.1.1.1	0x22e0	Standard query (0)	o185886.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:43.331127882 CET	192.168.2.8	1.1.1.1	0x7fd5	Standard query (0)	o185886.ingest.sentry.io	65	IN (0x0001)	false
Jan 14, 2025 16:20:43.390038013 CET	192.168.2.8	1.1.1.1	0x1222	Standard query (0)	data.pendo.io	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:43.390261889 CET	192.168.2.8	1.1.1.1	0x1c80	Standard query (0)	data.pendo.io	65	IN (0x0001)	false
Jan 14, 2025 16:20:44.147064924 CET	192.168.2.8	1.1.1.1	0xf08	Standard query (0)	o185886.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.147376060 CET	192.168.2.8	1.1.1.1	0xdf90	Standard query (0)	o185886.ingest.sentry.io	65	IN (0x0001)	false
Jan 14, 2025 16:20:44.150688887 CET	192.168.2.8	1.1.1.1	0x8560	Standard query (0)	data.pendo.io	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.150840998 CET	192.168.2.8	1.1.1.1	0xf5a4	Standard query (0)	data.pendo.io	65	IN (0x0001)	false
Jan 14, 2025 16:20:44.953851938 CET	192.168.2.8	1.1.1.1	0xc7b4	Standard query (0)	d3tnn7lar6ozas.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.954015970 CET	192.168.2.8	1.1.1.1	0xb32	Standard query (0)	d3tnn7lar6ozas.cloudfront.net	65	IN (0x0001)	false
Jan 14, 2025 16:20:44.969362974 CET	192.168.2.8	1.1.1.1	0x8e96	Standard query (0)	solve-api.forethought.ai	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.969640970 CET	192.168.2.8	1.1.1.1	0x8fa3	Standard query (0)	solve-api.forethought.ai	65	IN (0x0001)	false
Jan 14, 2025 16:20:46.001729965 CET	192.168.2.8	1.1.1.1	0x1d38	Standard query (0)	d3tnn7lar6ozas.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:46.001894951 CET	192.168.2.8	1.1.1.1	0x7fc0	Standard query (0)	d3tnn7lar6ozas.cloudfront.net	65	IN (0x0001)	false
Jan 14, 2025 16:21:15.331531048 CET	192.168.2.8	1.1.1.1	0x79bb	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:15.331794024 CET	192.168.2.8	1.1.1.1	0x8035	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Jan 14, 2025 16:21:16.099822044 CET	192.168.2.8	1.1.1.1	0x4fd4	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:16.099822998 CET	192.168.2.8	1.1.1.1	0xda45	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Jan 14, 2025 16:21:16.147433996 CET	192.168.2.8	1.1.1.1	0xae53	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:16.147574902 CET	192.168.2.8	1.1.1.1	0x945e	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Jan 14, 2025 16:21:16.727500916 CET	192.168.2.8	1.1.1.1	0xabc	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:16.727763891 CET	192.168.2.8	1.1.1.1	0xd034	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Jan 14, 2025 16:21:36.979008913 CET	192.168.2.8	1.1.1.1	0xbb22	Standard query (0)	platform-cdn.app-us1.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:36.979948044 CET	192.168.2.8	1.1.1.1	0x3aca	Standard query (0)	platform-cdn.app-us1.com	65	IN (0x0001)	false
Jan 14, 2025 16:21:36.980273008 CET	192.168.2.8	1.1.1.1	0x3c08	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:36.980406046 CET	192.168.2.8	1.1.1.1	0xa786	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 16:21:41.651532888 CET	192.168.2.8	1.1.1.1	0xdcb	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:41.651705980 CET	192.168.2.8	1.1.1.1	0xa123	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 16:21:43.608274937 CET	192.168.2.8	1.1.1.1	0x3dc2	Standard query (0)	solve-widget.forethought.ai	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:43.608544111 CET	192.168.2.8	1.1.1.1	0xebb9	Standard query (0)	solve-widget.forethought.ai	65	IN (0x0001)	false
Jan 14, 2025 16:21:43.617712975 CET	192.168.2.8	1.1.1.1	0x8b28	Standard query (0)	solve-widget.forethought.ai	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:43.617861986 CET	192.168.2.8	1.1.1.1	0xe4c	Standard query (0)	solve-widget.forethought.ai	65	IN (0x0001)	false
Jan 14, 2025 16:21:44.751148939 CET	192.168.2.8	1.1.1.1	0xf4	Standard query (0)	solve-api.forethought.ai	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.751297951 CET	192.168.2.8	1.1.1.1	0xec13	Standard query (0)	solve-api.forethought.ai	65	IN (0x0001)	false
Jan 14, 2025 16:21:44.751835108 CET	192.168.2.8	1.1.1.1	0xa980	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.752199888 CET	192.168.2.8	1.1.1.1	0x1ddb	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Jan 14, 2025 16:21:44.752742052 CET	192.168.2.8	1.1.1.1	0xb3ff	Standard query (0)	cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.752881050 CET	192.168.2.8	1.1.1.1	0x9cd8	Standard query (0)	cloudflareinsights.com	65	IN (0x0001)	false
Jan 14, 2025 16:21:46.937110901 CET	192.168.2.8	1.1.1.1	0x52cf	Standard query (0)	solve-api.forethought.ai	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:46.938743114 CET	192.168.2.8	1.1.1.1	0xfa5f	Standard query (0)	solve-api.forethought.ai	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 16:20:27.200062990 CET	1.1.1.1	192.168.2.8	0xc6de	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:27.200129032 CET	1.1.1.1	192.168.2.8	0xc2e3	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 14, 2025 16:20:28.678298950 CET	1.1.1.1	192.168.2.8	0x6d34	No error (0)	yourexcellency.activehosted.com		104.17.206.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.678298950 CET	1.1.1.1	192.168.2.8	0x6d34	No error (0)	yourexcellency.activehosted.com		104.17.205.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.678298950 CET	1.1.1.1	192.168.2.8	0x6d34	No error (0)	yourexcellency.activehosted.com		104.17.204.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.678298950 CET	1.1.1.1	192.168.2.8	0x6d34	No error (0)	yourexcellency.activehosted.com		104.17.202.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.678298950 CET	1.1.1.1	192.168.2.8	0x6d34	No error (0)	yourexcellency.activehosted.com		104.17.203.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.684359074 CET	1.1.1.1	192.168.2.8	0xc58	No error (0)	yourexcellency.activehosted.com			65	IN (0x0001)	false
Jan 14, 2025 16:20:28.693582058 CET	1.1.1.1	192.168.2.8	0x646	No error (0)	yourexcellency.activehosted.com		104.17.202.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.693582058 CET	1.1.1.1	192.168.2.8	0x646	No error (0)	yourexcellency.activehosted.com		104.17.203.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.693582058 CET	1.1.1.1	192.168.2.8	0x646	No error (0)	yourexcellency.activehosted.com		104.17.206.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.693582058 CET	1.1.1.1	192.168.2.8	0x646	No error (0)	yourexcellency.activehosted.com		104.17.204.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.693582058 CET	1.1.1.1	192.168.2.8	0x646	No error (0)	yourexcellency.activehosted.com		104.17.205.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:28.696043968 CET	1.1.1.1	192.168.2.8	0xb458	No error (0)	yourexcellency.activehosted.com			65	IN (0x0001)	false
Jan 14, 2025 16:20:30.470524073 CET	1.1.1.1	192.168.2.8	0x71dd	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.470524073 CET	1.1.1.1	192.168.2.8	0x71dd	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.470828056 CET	1.1.1.1	192.168.2.8	0x1319	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 16:20:30.481740952 CET	1.1.1.1	192.168.2.8	0x3cc8	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.143	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.481740952 CET	1.1.1.1	192.168.2.8	0x3cc8	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.210	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.481740952 CET	1.1.1.1	192.168.2.8	0x3cc8	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.59	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.481740952 CET	1.1.1.1	192.168.2.8	0x3cc8	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.63	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.487673998 CET	1.1.1.1	192.168.2.8	0x349f	No error (0)	platform-cdn.app-us1.com	d3r4ionp7m7mlj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:30.492194891 CET	1.1.1.1	192.168.2.8	0x36cb	No error (0)	platform-cdn.app-us1.com	d3r4ionp7m7mlj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:30.492194891 CET	1.1.1.1	192.168.2.8	0x36cb	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.492194891 CET	1.1.1.1	192.168.2.8	0x36cb	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.65	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.492194891 CET	1.1.1.1	192.168.2.8	0x36cb	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.116	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:30.492194891 CET	1.1.1.1	192.168.2.8	0x36cb	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.19	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:31.094031096 CET	1.1.1.1	192.168.2.8	0x6706	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:31.094031096 CET	1.1.1.1	192.168.2.8	0x6706	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:31.094400883 CET	1.1.1.1	192.168.2.8	0x79c0	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 16:20:31.539830923 CET	1.1.1.1	192.168.2.8	0xd4ba	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.143	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:31.539830923 CET	1.1.1.1	192.168.2.8	0xd4ba	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.210	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:31.539830923 CET	1.1.1.1	192.168.2.8	0xd4ba	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.59	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:31.539830923 CET	1.1.1.1	192.168.2.8	0xd4ba	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.63	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:32.510947943 CET	1.1.1.1	192.168.2.8	0xc54d	No error (0)	yourexcellency.activehosted.com			65	IN (0x0001)	false
Jan 14, 2025 16:20:32.511322975 CET	1.1.1.1	192.168.2.8	0x8d90	No error (0)	yourexcellency.activehosted.com		104.17.205.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:32.511322975 CET	1.1.1.1	192.168.2.8	0x8d90	No error (0)	yourexcellency.activehosted.com		104.17.206.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:32.511322975 CET	1.1.1.1	192.168.2.8	0x8d90	No error (0)	yourexcellency.activehosted.com		104.17.204.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:32.511322975 CET	1.1.1.1	192.168.2.8	0x8d90	No error (0)	yourexcellency.activehosted.com		104.17.203.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:32.511322975 CET	1.1.1.1	192.168.2.8	0x8d90	No error (0)	yourexcellency.activehosted.com		104.17.202.31	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:34.288558006 CET	1.1.1.1	192.168.2.8	0xf0af	No error (0)	d226aj4ao1t61q.cloudfront.net		65.9.7.19	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:34.288558006 CET	1.1.1.1	192.168.2.8	0xf0af	No error (0)	d226aj4ao1t61q.cloudfront.net		65.9.7.201	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:34.288558006 CET	1.1.1.1	192.168.2.8	0xf0af	No error (0)	d226aj4ao1t61q.cloudfront.net		65.9.7.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:34.288558006 CET	1.1.1.1	192.168.2.8	0xf0af	No error (0)	d226aj4ao1t61q.cloudfront.net		65.9.7.124	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:34.472313881 CET	1.1.1.1	192.168.2.8	0xc24d	No error (0)	cdn.pendo.io		34.36.213.229	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.589690924 CET	1.1.1.1	192.168.2.8	0x6f85	No error (0)	static.zdassets.com		216.198.54.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.589690924 CET	1.1.1.1	192.168.2.8	0x6f85	No error (0)	static.zdassets.com		216.198.53.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.623953104 CET	1.1.1.1	192.168.2.8	0x7f00	No error (0)	d226aj4ao1t61q.cloudfront.net		65.9.7.19	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.623953104 CET	1.1.1.1	192.168.2.8	0x7f00	No error (0)	d226aj4ao1t61q.cloudfront.net		65.9.7.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.623953104 CET	1.1.1.1	192.168.2.8	0x7f00	No error (0)	d226aj4ao1t61q.cloudfront.net		65.9.7.124	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.623953104 CET	1.1.1.1	192.168.2.8	0x7f00	No error (0)	d226aj4ao1t61q.cloudfront.net		65.9.7.201	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.631963015 CET	1.1.1.1	192.168.2.8	0x20f2	No error (0)	platform-cdn.app-us1.com	d3r4ionp7m7mlj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:35.635736942 CET	1.1.1.1	192.168.2.8	0x4b8b	No error (0)	platform-cdn.app-us1.com	d3r4ionp7m7mlj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:35.635736942 CET	1.1.1.1	192.168.2.8	0x4b8b	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.65	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.635736942 CET	1.1.1.1	192.168.2.8	0x4b8b	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.19	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.635736942 CET	1.1.1.1	192.168.2.8	0x4b8b	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.116	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.635736942 CET	1.1.1.1	192.168.2.8	0x4b8b	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:35.650629044 CET	1.1.1.1	192.168.2.8	0xb802	No error (0)	cdn.pendo.io		34.36.213.229	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.232718945 CET	1.1.1.1	192.168.2.8	0x1c88	No error (0)	ekr.zdassets.com		216.198.53.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.232718945 CET	1.1.1.1	192.168.2.8	0x1c88	No error (0)	ekr.zdassets.com		216.198.54.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.234292030 CET	1.1.1.1	192.168.2.8	0x8c1	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:36.234292030 CET	1.1.1.1	192.168.2.8	0x8c1	No error (0)	solve-ui.pages.dev		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.234292030 CET	1.1.1.1	192.168.2.8	0x8c1	No error (0)	solve-ui.pages.dev		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.235354900 CET	1.1.1.1	192.168.2.8	0x62ef	No error (0)	static.zdassets.com		216.198.53.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.235354900 CET	1.1.1.1	192.168.2.8	0x62ef	No error (0)	static.zdassets.com		216.198.54.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:36.277257919 CET	1.1.1.1	192.168.2.8	0x53e0	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:36.277257919 CET	1.1.1.1	192.168.2.8	0x53e0	No error (0)	solve-ui.pages.dev			65	IN (0x0001)	false
Jan 14, 2025 16:20:37.000236034 CET	1.1.1.1	192.168.2.8	0xb57e	No error (0)	ekr.zdassets.com		216.198.54.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:37.000236034 CET	1.1.1.1	192.168.2.8	0xb57e	No error (0)	ekr.zdassets.com		216.198.53.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:37.055468082 CET	1.1.1.1	192.168.2.8	0x8c62	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:37.055468082 CET	1.1.1.1	192.168.2.8	0x8c62	No error (0)	solve-ui.pages.dev		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:37.055468082 CET	1.1.1.1	192.168.2.8	0x8c62	No error (0)	solve-ui.pages.dev		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:37.057615995 CET	1.1.1.1	192.168.2.8	0x5f53	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:37.057615995 CET	1.1.1.1	192.168.2.8	0x5f53	No error (0)	solve-ui.pages.dev			65	IN (0x0001)	false
Jan 14, 2025 16:20:37.072350979 CET	1.1.1.1	192.168.2.8	0xe160	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:37.072350979 CET	1.1.1.1	192.168.2.8	0xe160	No error (0)	solve-ui.pages.dev			65	IN (0x0001)	false
Jan 14, 2025 16:20:37.072525024 CET	1.1.1.1	192.168.2.8	0x46	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:20:37.072525024 CET	1.1.1.1	192.168.2.8	0x46	No error (0)	solve-ui.pages.dev		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:37.072525024 CET	1.1.1.1	192.168.2.8	0x46	No error (0)	solve-ui.pages.dev		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.278860092 CET	1.1.1.1	192.168.2.8	0x5532	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.278860092 CET	1.1.1.1	192.168.2.8	0x5532	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.279037952 CET	1.1.1.1	192.168.2.8	0x2254	No error (0)	solve-api.forethought.ai		104.17.255.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.279037952 CET	1.1.1.1	192.168.2.8	0x2254	No error (0)	solve-api.forethought.ai		104.17.1.4	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.279527903 CET	1.1.1.1	192.168.2.8	0x52c3	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Jan 14, 2025 16:20:38.281050920 CET	1.1.1.1	192.168.2.8	0xc028	No error (0)	solve-api.forethought.ai			65	IN (0x0001)	false
Jan 14, 2025 16:20:38.281239986 CET	1.1.1.1	192.168.2.8	0x126b	No error (0)	cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.281239986 CET	1.1.1.1	192.168.2.8	0x126b	No error (0)	cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:38.281925917 CET	1.1.1.1	192.168.2.8	0xc521	No error (0)	cloudflareinsights.com			65	IN (0x0001)	false
Jan 14, 2025 16:20:39.171803951 CET	1.1.1.1	192.168.2.8	0x7c0	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Jan 14, 2025 16:20:39.172605038 CET	1.1.1.1	192.168.2.8	0xb8a6	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:39.172605038 CET	1.1.1.1	192.168.2.8	0xb8a6	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:39.211795092 CET	1.1.1.1	192.168.2.8	0x44c6	No error (0)	prodhostedtest.zendesk.com		216.198.53.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:39.211795092 CET	1.1.1.1	192.168.2.8	0x44c6	No error (0)	prodhostedtest.zendesk.com		216.198.54.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:39.873495102 CET	1.1.1.1	192.168.2.8	0xf9aa	No error (0)	prodhostedtest.zendesk.com		216.198.53.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:39.873495102 CET	1.1.1.1	192.168.2.8	0xf9aa	No error (0)	prodhostedtest.zendesk.com		216.198.54.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:41.656002998 CET	1.1.1.1	192.168.2.8	0xc923	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:43.337985039 CET	1.1.1.1	192.168.2.8	0x22e0	No error (0)	o185886.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:43.398339987 CET	1.1.1.1	192.168.2.8	0x1222	No error (0)	data.pendo.io		34.107.204.85	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.154206038 CET	1.1.1.1	192.168.2.8	0xf08	No error (0)	o185886.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.157411098 CET	1.1.1.1	192.168.2.8	0x8560	No error (0)	data.pendo.io		34.107.204.85	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.962577105 CET	1.1.1.1	192.168.2.8	0xc7b4	No error (0)	d3tnn7lar6ozas.cloudfront.net		52.222.250.40	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.962577105 CET	1.1.1.1	192.168.2.8	0xc7b4	No error (0)	d3tnn7lar6ozas.cloudfront.net		52.222.250.231	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.962577105 CET	1.1.1.1	192.168.2.8	0xc7b4	No error (0)	d3tnn7lar6ozas.cloudfront.net		52.222.250.117	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.962577105 CET	1.1.1.1	192.168.2.8	0xc7b4	No error (0)	d3tnn7lar6ozas.cloudfront.net		52.222.250.34	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.976999044 CET	1.1.1.1	192.168.2.8	0x8e96	No error (0)	solve-api.forethought.ai		104.17.255.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.976999044 CET	1.1.1.1	192.168.2.8	0x8e96	No error (0)	solve-api.forethought.ai		104.17.1.4	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:44.977214098 CET	1.1.1.1	192.168.2.8	0x8fa3	No error (0)	solve-api.forethought.ai			65	IN (0x0001)	false
Jan 14, 2025 16:20:46.012604952 CET	1.1.1.1	192.168.2.8	0x1d38	No error (0)	d3tnn7lar6ozas.cloudfront.net		52.222.250.117	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:46.012604952 CET	1.1.1.1	192.168.2.8	0x1d38	No error (0)	d3tnn7lar6ozas.cloudfront.net		52.222.250.40	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:46.012604952 CET	1.1.1.1	192.168.2.8	0x1d38	No error (0)	d3tnn7lar6ozas.cloudfront.net		52.222.250.34	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:20:46.012604952 CET	1.1.1.1	192.168.2.8	0x1d38	No error (0)	d3tnn7lar6ozas.cloudfront.net		52.222.250.231	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:15.338644028 CET	1.1.1.1	192.168.2.8	0x79bb	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:16.107039928 CET	1.1.1.1	192.168.2.8	0x4fd4	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:16.107039928 CET	1.1.1.1	192.168.2.8	0x4fd4	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:16.107039928 CET	1.1.1.1	192.168.2.8	0x4fd4	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:16.107801914 CET	1.1.1.1	192.168.2.8	0xda45	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:16.107801914 CET	1.1.1.1	192.168.2.8	0xda45	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:16.154525995 CET	1.1.1.1	192.168.2.8	0xae53	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:16.734997034 CET	1.1.1.1	192.168.2.8	0xabc	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:16.734997034 CET	1.1.1.1	192.168.2.8	0xabc	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:16.734997034 CET	1.1.1.1	192.168.2.8	0xabc	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:16.735039949 CET	1.1.1.1	192.168.2.8	0xd034	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:16.735039949 CET	1.1.1.1	192.168.2.8	0xd034	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:36.986896992 CET	1.1.1.1	192.168.2.8	0x3c08	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:36.986896992 CET	1.1.1.1	192.168.2.8	0x3c08	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:36.987394094 CET	1.1.1.1	192.168.2.8	0xa786	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 16:21:36.990386009 CET	1.1.1.1	192.168.2.8	0xbb22	No error (0)	platform-cdn.app-us1.com	d3r4ionp7m7mlj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:36.990386009 CET	1.1.1.1	192.168.2.8	0xbb22	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.19	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:36.990386009 CET	1.1.1.1	192.168.2.8	0xbb22	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.116	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:36.990386009 CET	1.1.1.1	192.168.2.8	0xbb22	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:36.990386009 CET	1.1.1.1	192.168.2.8	0xbb22	No error (0)	d3r4ionp7m7mlj.cloudfront.net		143.204.215.65	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:36.991580009 CET	1.1.1.1	192.168.2.8	0x3aca	No error (0)	platform-cdn.app-us1.com	d3r4ionp7m7mlj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:41.658389091 CET	1.1.1.1	192.168.2.8	0xdcb	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:43.615504980 CET	1.1.1.1	192.168.2.8	0x3dc2	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:43.615504980 CET	1.1.1.1	192.168.2.8	0x3dc2	No error (0)	solve-ui.pages.dev		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:43.615504980 CET	1.1.1.1	192.168.2.8	0x3dc2	No error (0)	solve-ui.pages.dev		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:43.619364023 CET	1.1.1.1	192.168.2.8	0xebb9	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:43.619364023 CET	1.1.1.1	192.168.2.8	0xebb9	No error (0)	solve-ui.pages.dev			65	IN (0x0001)	false
Jan 14, 2025 16:21:43.625844955 CET	1.1.1.1	192.168.2.8	0xe4c	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:43.625844955 CET	1.1.1.1	192.168.2.8	0xe4c	No error (0)	solve-ui.pages.dev			65	IN (0x0001)	false
Jan 14, 2025 16:21:43.629153013 CET	1.1.1.1	192.168.2.8	0x8b28	No error (0)	solve-widget.forethought.ai	solve-ui.pages.dev		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 16:21:43.629153013 CET	1.1.1.1	192.168.2.8	0x8b28	No error (0)	solve-ui.pages.dev		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:43.629153013 CET	1.1.1.1	192.168.2.8	0x8b28	No error (0)	solve-ui.pages.dev		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.758263111 CET	1.1.1.1	192.168.2.8	0xf4	No error (0)	solve-api.forethought.ai		104.17.255.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.758263111 CET	1.1.1.1	192.168.2.8	0xf4	No error (0)	solve-api.forethought.ai		104.17.1.4	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.758552074 CET	1.1.1.1	192.168.2.8	0xa980	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.758552074 CET	1.1.1.1	192.168.2.8	0xa980	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.758800983 CET	1.1.1.1	192.168.2.8	0xec13	No error (0)	solve-api.forethought.ai			65	IN (0x0001)	false
Jan 14, 2025 16:21:44.759005070 CET	1.1.1.1	192.168.2.8	0x1ddb	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Jan 14, 2025 16:21:44.759346008 CET	1.1.1.1	192.168.2.8	0xb3ff	No error (0)	cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.759346008 CET	1.1.1.1	192.168.2.8	0xb3ff	No error (0)	cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:44.760078907 CET	1.1.1.1	192.168.2.8	0x9cd8	No error (0)	cloudflareinsights.com			65	IN (0x0001)	false
Jan 14, 2025 16:21:46.945976973 CET	1.1.1.1	192.168.2.8	0x52cf	No error (0)	solve-api.forethought.ai		104.17.1.4	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:46.945976973 CET	1.1.1.1	192.168.2.8	0x52cf	No error (0)	solve-api.forethought.ai		104.17.255.3	A (IP address)	IN (0x0001)	false
Jan 14, 2025 16:21:46.946276903 CET	1.1.1.1	192.168.2.8	0xfa5f	No error (0)	solve-api.forethought.ai			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49715	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:29 UTC	674	OUT	GET / HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:29 UTC	1358	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 15:20:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close location: https://yourexcellency.activehosted.com/admin/ Cache-Control: no-store, no-cache, must-revalidate content-security-policy: upgrade-insecure-requests;report-uri /csp/ content-security-policy-report-only: default-src https: 'self';font-src https: data: 'self';script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' https:;script-src-elem 'unsafe-inline' https:;style-src 'unsafe-inline' https:;style-src-elem 'unsafe-inline' https:;img-src https: blob: data:;connect-src https: wss:;worker-src https: blob:;form-action 'self';block-all-mixed-content;report-uri /csp/ expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache Set-Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; path=/; secure; HttpOnly; SameSite=Lax x-content-type-options: nosniff x-request-id: 21fd5ed8d9f774ad83cd2f548b899c5b x-xss-protection: 1; mode=block CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; path=/; expires=Tue, 14-Jan-25 15:50:29 GMT; domain=.activehosted.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2025-01-14 15:20:29 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 31 65 39 63 33 65 63 64 39 65 34 34 30 36 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 901e9c3ecd9e4406-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49716	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:29 UTC	891	OUT	GET /admin/ HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ
2025-01-14 15:20:30 UTC	1088	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, must-revalidate content-security-policy: upgrade-insecure-requests;report-uri /csp/ content-security-policy-report-only: default-src https: 'self';font-src https: data: 'self';script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' https:;script-src-elem 'unsafe-inline' https:;style-src 'unsafe-inline' https:;style-src-elem 'unsafe-inline' https:;img-src https: blob: data:;connect-src https: wss:;worker-src https: blob:;form-action 'self';block-all-mixed-content;report-uri /csp/ expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache Set-Cookie: XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q; path=/; secure; SameSite=Strict x-content-type-options: nosniff x-request-id: 039a24e99cbadfebefe48117a8171d3e x-xss-protection: 1; mode=block CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c43bffec42c-EWR
2025-01-14 15:20:30 UTC	281	IN	Data Raw: 33 39 33 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 Data Ascii: 3935<!DOCTYPE html><html lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="Content-Language" content="en-us" /> <meta name="robots" content="noindex" /> <link rel="icon" href="htt
2025-01-14 15:20:30 UTC	1369	IN	Data Raw: 72 6f 6e 74 2e 6e 65 74 2f 6d 65 64 69 61 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 59 4f 55 52 45 58 43 45 4c 4c 45 4e 43 59 20 45 6d 61 69 6c 20 4d 61 72 6b 65 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 37 2e 31 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 76 32 43 4a 37 55 61 59 79 34 4a 77 71 4c 44 49 72 5a 55 49 2f 34 68 71 65 6f 51 69 65 4f 6d 41 5a 4e 58 42 65 51 79 6a 6f 32 31 64 61 64 6e 77 52 2b 38 5a 61 49 4a 56 54 38 45 45 32 69 79 49 36 31 4f 56 38 65 36 4d Data Ascii: ront.net/media/favicon.ico" /> <title>YOUREXCELLENCY Email Marketing</title> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js" integrity="sha512-v2CJ7UaYy4JwqLDIrZUI/4hqeoQieOmAZNXBeQyjo21dadnwR+8ZaIJVT8EE2iyI61OV8e6M
2025-01-14 15:20:30 UTC	1369	IN	Data Raw: 73 63 2f 61 63 2e 6a 73 3f 76 3d 76 31 30 32 37 31 32 31 34 37 31 35 30 36 39 34 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 66 75 6e 63 74 69 6f 6e 73 2e 6a 73 3f 76 3d 76 31 30 32 37 31 32 31 34 37 31 35 30 36 39 34 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 63 61 6d 70 2d 63 6f 6c 6f 72 73 2e 63 73 73 3f 76 3d 76 31 30 32 37 31 32 31 34 37 31 35 30 36 39 34 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 6b 69 6e 2e 63 73 73 3f 76 3d 76 31 30 32 37 31 32 31 34 37 31 35 30 36 39 34 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 20 20 20 20 Data Ascii: sc/ac.js?v=v1027121471506941"></script> <script src="js/functions.js?v=v1027121471506941"></script> <link href="css/camp-colors.css?v=v1027121471506941" rel="stylesheet" /> <link href="css/skin.css?v=v1027121471506941" rel="stylesheet" />
2025-01-14 15:20:30 UTC	1369	IN	Data Raw: 57 47 62 42 44 43 68 51 36 43 74 46 2b 77 44 71 53 37 74 6c 4f 37 62 59 6e 75 4c 33 37 6b 46 75 6c 36 33 63 6f 4f 58 58 42 34 51 79 46 68 41 41 59 4f 35 6d 67 55 56 32 6b 50 78 67 6e 49 57 7a 41 59 63 62 33 2b 34 41 6a 4d 6e 74 42 53 51 3d 3d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 72 65 66 65 72 72 65 72 70 6f 6c 69 63 79 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 63 73 73 56 61 72 73 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 61 63 74 69 76 65 63 61 6d 70 61 69 67 6e 2f 63 61 6d 70 2d 63 6f 72 65 2d 72 65 74 72 6f 66 69 74 2f 64 69 73 74 2f 62 75 6e 64 6c 65 2e 6a 73 22 Data Ascii: WGbBDChQ6CtF+wDqS7tlO7bYnuL37kFul63coOXXB4QyFhAAYO5mgUV2kPxgnIWzAYcb3+4AjMntBSQ==" crossorigin="anonymous" referrerpolicy="no-referrer"></script><script>cssVars();</script> <script src="/node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js"
2025-01-14 15:20:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 69 64 3d 22 61 63 5f 72 65 73 75 6c 74 5f 74 65 78 74 22 3e 43 68 61 6e 67 65 73 20 53 61 76 65 64 2e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 61 63 5f 65 72 72 6f 72 5f 62 61 72 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 3c 73 70 61 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 61 63 5f 65 72 72 6f 72 5f 74 65 78 74 22 3e 45 72 72 6f 72 20 4f 63 63 75 72 72 65 64 21 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 22 20 69 64 3d 22 6c 6f 67 69 6e Data Ascii: id="ac_result_text">Changes Saved.</span></div> <div id="ac_error_bar" style="display:none;"><span id="ac_error_text">Error Occurred!</span></div> <div class="ac_login_box_container" id="login
2025-01-14 15:20:30 UTC	1369	IN	Data Raw: 73 2f 72 65 71 75 65 73 74 73 2f 6e 65 77 27 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 75 72 6c 2c 20 27 5f 62 6c 61 6e 6b 27 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 24 4a 28 22 61 2e 66 6f 72 67 6f 74 70 61 73 73 22 29 2e 63 6c 69 63 6b 28 6c 6f 6f 6b 75 70 5f 6c 69 6e 6b 5f 66 69 78 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 69 66 20 74 68 65 72 65 20 69 73 20 61 20 68 61 73 68 2c 20 61 70 70 65 6e 64 20 69 74 20 74 6f 20 6c 69 6e 6b 73 0a 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 4a 28 22 66 6f 72 6d 5b Data Ascii: s/requests/new'; window.open(url, '_blank'); } $J(document).ready(function () { $J("a.forgotpass").click(lookup_link_fix); // if there is a hash, append it to links if (window.location.hash) { $J("form[
2025-01-14 15:20:30 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 20 66 6f 72 3d 22 72 6d 75 22 20 63 6c 61 73 73 3d 22 63 68 65 63 6b 62 6f 78 22 3e 52 65 6d 65 6d 62 65 72 20 6d 79 20 75 73 65 72 6e 61 6d 65 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 61 63 5f 62 75 74 74 6f 6e 20 62 75 74 74 6f 6e 5f 6c 61 72 67 65 20 61 6c 74 31 20 66 72 69 67 68 74 20 6e 6f 6d 61 72 67 69 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 4c 6f 67 69 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 34 22 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 66 6f 72 6d 3e 0a 3c 73 63 72 69 70 74 3e 0a 63 6f 6e 73 74 20 65 48 61 77 6b 54 61 6c 6f 6e 53 65 74 74 69 6e 67 73 20 Data Ascii: label for="rmu" class="checkbox">Remember my username</label> </div> <input type="submit" class="ac_button button_large alt1 fright nomargin" value="Login" tabindex="4"/> </div></form><script>const eHawkTalonSettings
2025-01-14 15:20:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 20 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 75 6d 6e 20 70 2d 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 32 32 36 61 6a 34 61 6f 31 74 36 31 71 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 64 68 35 75 35 66 62 39 79 5f 66 75 6e 6e 65 6c 2e 70 6e 67 22 20 61 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 34 38 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3d 22 34 38 22 20 63 6c 61 73 73 3d 22 6d 62 2d 34 20 6d 78 2d 61 75 74 6f 22 3e 0a 20 20 Data Ascii: <div class="inner flex flex-column p-4"> <img src="https://d226aj4ao1t61q.cloudfront.net/dh5u5fb9y_funnel.png" alt="" width="48" height="48" class="mb-4 mx-auto">
2025-01-14 15:20:30 UTC	1369	IN	Data Raw: 3c 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 72 61 72 72 20 6d 6c 2d 31 22 3e 3c 2f 69 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 70 65 6e 64 6f 2d 63 61 72 64 2d 72 65 77 61 72 64 2d 63 6f 6e 74 61 63 74 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <i class="rarr ml-1"></i></span> </div> </a> <a id="pendo-card-reward-contacts"
2025-01-14 15:20:30 UTC	1369	IN	Data Raw: 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 32 32 36 61 6a 34 61 6f 31 74 36 31 71 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 63 6b 6b 65 39 67 33 67 66 5f 62 72 6f 77 73 65 72 77 69 6e 64 6f 77 61 70 70 2e 70 6e 67 22 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 63 6c 61 73 73 3d 22 6d 62 2d 34 20 6d 78 2d 61 75 74 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 62 6f 64 79 2d 32 20 73 6c 61 74 65 2d 31 32 30 20 6d 74 2d 30 20 6d 62 2d 32 22 3e Data Ascii: <img src="https://d226aj4ao1t61q.cloudfront.net/ckke9g3gf_browserwindowapp.png" alt="" width="48" height="48" class="mb-4 mx-auto"> <p class="body-2 slate-120 mt-0 mb-2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49718	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	879	OUT	GET /admin/css/camp-colors.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:31 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1371 Connection: close etag: "1127230879" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c49defd185d-EWR
2025-01-14 15:20:31 UTC	999	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 2f 2a 20 50 72 69 6d 61 72 79 20 70 61 6c 65 74 74 65 20 2a 2f 0a 20 20 2d 2d 6f 63 65 61 6e 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 35 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 31 32 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 36 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 38 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 34 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 36 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 33 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 34 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 32 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 33 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 31 35 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 32 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 31 30 30 29 3b 0a 20 Data Ascii: :root { /* Primary palette */ --ocean: var(--ocean-500); --ocean-120: var(--ocean-600); --ocean-80: var(--ocean-400); --ocean-60: var(--ocean-300); --ocean-40: var(--ocean-200); --ocean-30: var(--ocean-150); --ocean-20: var(--ocean-100);
2025-01-14 15:20:31 UTC	372	IN	Data Raw: 20 20 2d 2d 6c 61 76 65 6e 64 65 72 2d 36 30 3a 20 23 63 33 61 37 66 63 3b 0a 20 20 2d 2d 6c 61 76 65 6e 64 65 72 2d 34 30 3a 20 23 65 61 65 30 66 65 3b 0a 20 20 2d 2d 6c 61 76 65 6e 64 65 72 2d 32 30 3a 20 23 66 37 66 32 66 66 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 3a 20 23 66 61 63 66 33 66 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 31 32 30 3a 20 23 64 65 61 61 30 30 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 38 30 3a 20 23 66 62 64 39 36 35 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 36 30 3a 20 23 66 63 65 32 38 62 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 34 30 3a 20 23 66 64 65 63 62 32 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 32 30 3a 20 23 66 66 66 39 65 36 3b 0a 0a 20 20 2f 2a 20 4e 65 75 74 72 61 6c 73 20 2a 2f 0a 20 20 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 0a Data Ascii: --lavender-60: #c3a7fc; --lavender-40: #eae0fe; --lavender-20: #f7f2ff; --banana: #facf3f; --banana-120: #deaa00; --banana-80: #fbd965; --banana-60: #fce28b; --banana-40: #fdecb2; --banana-20: #fff9e6; /* Neutrals */ --black: #000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49717	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	872	OUT	GET /admin/css/skin.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:31 UTC	372	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 430286 Connection: close etag: "3729127005" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c49e9894339-EWR
2025-01-14 15:20:31 UTC	997	IN	Data Raw: 68 74 6d 6c 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 27 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 61 72 69 61 6c 2c 20 73 65 72 69 66 3b 20 2f 2a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 34 33 34 33 34 3b 20 2a 2f 20 7d 0a 62 6f 64 79 2c 20 64 69 76 2c 20 64 6c 2c 20 64 74 2c 20 64 64 2c 20 75 6c 2c 20 6f 6c 2c 20 6c 69 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 63 6f 64 65 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 70 61 Data Ascii: html { margin: 0;padding: 0;color: #000;height: 100%;min-height: 100%;font-family: 'IBM Plex Sans', helvetica, arial, serif; /* background-color: #343434; */ }body, div, dl, dt, dd, ul, ol, li, h1, h2, h3, h4, h5, h6, pre, code, blockquote { margin: 0;pa
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 36 30 30 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 73 75 62 70 69 78 65 6c 2d 61 6e 74 69 61 6c 69 61 73 65 64 3b 20 7d 0a 69 6d 67 20 7b 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 20 7d 0a 73 74 72 6f 6e 67 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 7d 0a 61 3a 6c 69 6e 6b 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 35 30 30 29 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0a 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 0a 2e 6c 61 73 74 63 Data Ascii: irection: column;color: var(--slate-600);-webkit-font-smoothing: subpixel-antialiased; }img { border: none; }strong { font-weight: 700; }a:link, a:visited { color: var(--ocean-500);text-decoration: none; }a:hover { text-decoration: underline; }.lastc
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6f 74 20 68 65 61 64 65 72 20 23 67 6c 6f 62 61 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 2c 0a 23 67 6c 6f 62 61 6c 2d 72 6f 6f 74 20 68 65 61 64 65 72 20 23 67 6c 6f 62 61 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 69 76 2e 72 65 70 6f 72 74 73 2d 64 72 6f 70 64 6f 77 6e 20 7b 0a 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 32 30 30 29 0a 7d 0a 0a 23 67 6c 6f 62 61 6c 2d 72 6f 6f 74 20 68 65 61 64 65 72 20 23 67 6c 6f 62 61 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 2e 61 63 74 69 76 65 2c 0a 23 67 6c 6f 62 61 6c 2d 72 6f 6f 74 20 68 65 61 64 65 72 20 23 67 6c 6f 62 61 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 69 76 2e 72 65 70 6f 72 74 73 2d 64 72 6f 70 64 6f 77 6e 2e 61 63 74 69 76 65 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d Data Ascii: ot header #global-navigation a,#global-root header #global-navigation div.reports-dropdown {color: var(--slate-200)}#global-root header #global-navigation a.active,#global-root header #global-navigation div.reports-dropdown.active {color: #fff;}
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 30 20 36 30 25 3b 0a 09 09 2d 6d 6f 7a 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 0a 09 09 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 36 30 25 3b 0a 09 09 66 6c 65 78 3a 20 30 20 30 20 36 30 25 3b 20 7d 0a 7d 0a 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 66 65 61 74 75 72 65 64 2d 70 61 6e 65 20 2e 77 72 61 70 70 65 72 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 66 65 61 74 75 72 65 64 2d 70 61 6e 65 20 2e 74 69 6c 65 20 7b 0a 09 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 20 7b 0a 09 62 6f 64 79 2e 6c 6f Data Ascii: 0 60%;-moz-box-flex: 0;-ms-flex: 0 0 60%;flex: 0 0 60%; }}body.login .featured-pane .wrapper {max-width: 700px;margin: auto;width: 100%;}body.login .featured-pane .tile {width: 50%;}@media screen and (min-width:1024px) {body.lo
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 2e 32 35 72 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 68 6f 76 65 72 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 2e 68 6f 76 65 72 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 2d 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 20 72 69 67 68 74 3a 20 2d 2e 33 31 32 35 72 65 6d 3b 20 7d 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 68 6f 76 65 72 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 3a 66 6f 63 75 73 3a 61 66 74 65 72 2c 20 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 68 6f 76 65 72 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 3a 68 6f 76 65 72 3a 61 66 74 65 72 20 Data Ascii: transparent; border-right: 0 solid transparent; border-top: .25rem solid transparent; }body.login .hover-link-border.hover-link-border-arrow:after { right: -.3125rem; }body.login .hover-link-border:focus:after, body.login .hover-link-border:hover:after
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 7b 77 69 64 74 68 3a 34 35 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 61 63 5f 6c 6f 67 69 6e 5f 68 65 61 64 20 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 74 6f 70 6c 65 66 74 3a 36 70 78 3b 20 2d 6d 6f 7a 2d 62 6f 72 64 Data Ascii: }.ac_login_box_container {width:450px;font-family: "IBM Plex Sans", Helvetica, sans-serif;position: relative;top:50%;transform: translateY(-50%);padding-top: 0 !important;}.ac_login_box_container .ac_login_head {-moz-border-radius-topleft:6px; -moz-bord
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 67 3a 30 20 32 30 70 78 3b 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 65 72 72 6f 72 20 2e 6e 6f 2d 72 65 73 75 6c 74 73 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 65 72 72 6f 72 20 2e 6e 6f 2d 72 65 73 75 6c 74 73 20 61 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 7d 0a 0a 2f 2a 20 4c 6f 67 69 6e 20 46 61 69 6c 65 64 20 2a 2f 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 66 61 69 6c 65 64 2e 6e 6f 2d 72 65 73 75 6c 74 73 20 7b 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 63 6f 6c 6f 72 3a 20 23 37 37 36 65 33 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 33 61 35 3b 20 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 66 61 Data Ascii: g:0 20px;}.ac_login_error .no-results { font-size:15px;padding:16px;}.ac_login_error .no-results a { font-weight: bold;}/* Login Failed */.ac_login_failed.no-results { padding: 30px;line-height: 150%;color: #776e30;background: #fff3a5; }.ac_login_fa
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 37 64 63 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 69 63 6f 6e 2d 6c 6f 67 69 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 32 70 78 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 77 69 64 74 68 3a 20 32 34 70 78 3b 20 7d 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 69 63 6f 6e 2d 6c 6f 67 69 6e 2e 73 73 6f 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 64 32 32 36 61 6a 34 61 6f 31 74 36 31 71 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 35 77 65 34 6e 73 77 6b 6f 5f 73 73 6f Data Ascii: 7dc; text-decoration: none; }body.login .icon-login { display: inline-block; height: 24px; margin-right: 12px; vertical-align: middle; width: 24px; }body.login .icon-login.sso { background-image: url("https://d226aj4ao1t61q.cloudfront.net/5we4nswko_sso
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 20 2d 6d 6f 7a 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 2d 6d 6f 7a 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 7a 6f 6f 6d 3a 20 31 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 20 7d 0a 23 75 78 62 6f 64 79 3a 61 66 74 65 72 20 7b 20 2f 2a 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 64 69 73 70 Data Ascii: -flex;display: -moz-flex;display: -ms-flexbox;display: flex;flex-direction: column;-webkit-flex-direction: column;-moz-flex-direction: column;font-size: 14px;zoom: 1;vertical-align: top; }#uxbody:after { /* position: relative;content: '';width: 100%;disp
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 64 3a 20 23 46 46 46 3b 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 30 64 66 64 62 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 33 70 78 20 33 70 78 20 34 70 78 20 23 65 30 64 66 64 63 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 33 70 78 20 33 70 78 20 34 70 78 20 23 65 30 64 66 64 63 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 33 70 78 20 33 70 78 20 34 70 78 20 23 65 30 64 66 64 63 3b 7d 0a 0a 2e 75 78 6c 66 74 63 6f 6c 6d 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 70 61 64 64 69 6e 67 3a 20 38 37 70 78 20 32 33 70 78 20 32 33 70 78 20 32 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 46 3b 77 69 64 74 68 3a 20 61 75 74 6f 3b 6d 69 6e 2d 77 69 Data Ascii: d: #FFF; border:1px solid #e0dfdb; -moz-box-shadow:3px 3px 4px #e0dfdc; -webkit-box-shadow:3px 3px 4px #e0dfdc; box-shadow:3px 3px 4px #e0dfdc;}.uxlftcolm { position: relative;flex-grow: 1;padding: 87px 23px 23px 23px;background: #FFF;width: auto;min-wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49719	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	878	OUT	GET /admin/css/animations.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:31 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 76307 Connection: close etag: "3479753198" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c49d94242d2-EWR
2025-01-14 15:20:31 UTC	998	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 2a 2f 0a 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0a 20 20 2d 77 65 62 6b 69 74 Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateLicensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2014 Daniel Eden/.animated { -webkit-animation-duration: 1s; animation-duration: 1s; -webkit
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 0a 20 20 7d 0a 0a 20 20 34 30 25 2c 20 34 33 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a Data Ascii: 610, 0.355, 1.000); -webkit-transform: translate3d(0,0,0); transform: translate3d(0,0,0); } 40%, 43% { -webkit-transition-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); transition-timing-function: cubic-bez
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 35 70 78 2c 20 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 35 70 78 2c 20 30 29 Data Ascii: webkit-transition-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); transition-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -15px, 0); transform: translate3d(0, -15px, 0)
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 31 29 3b 0a 20 20 7d 0a 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 20 31 2e 30 35 2c 20 31 2e 30 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 20 31 2e 30 35 2c 20 31 2e 30 35 29 3b 0a 20 20 7d 0a 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 7d 0a 0a 2e 70 75 6c 73 65 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 Data Ascii: 1); } 50% { -webkit-transform: scale3d(1.05, 1.05, 1.05); transform: scale3d(1.05, 1.05, 1.05); } 100% { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); }}.pulse { -webkit-animation-name:
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 20 31 2e 32 35 2c 20 31 29 3b 0a 20 20 7d 0a 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 20 30 2e 38 35 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 20 30 2e 38 35 2c 20 31 29 3b 0a 20 20 7d 0a 0a 20 20 36 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 35 2c 20 31 2e 30 35 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 35 2c 20 31 2e 30 35 2c 20 31 29 3b 0a 20 20 7d 0a 0a 20 20 37 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f Data Ascii: 1.25, 1); } 50% { -webkit-transform: scale3d(1.15, 0.85, 1); transform: scale3d(1.15, 0.85, 1); } 65% { -webkit-transform: scale3d(.95, 1.05, 1); transform: scale3d(.95, 1.05, 1); } 75% { -webkit-transfo
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 68 61 6b 65 3b 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 77 69 6e 67 20 7b 0a 20 20 32 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 31 35 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 31 35 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 34 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 30 64 65 67 29 3b 0a Data Ascii: hake;}@-webkit-keyframes swing { 20% { -webkit-transform: rotate3d(0, 0, 1, 15deg); transform: rotate3d(0, 0, 1, 15deg); } 40% { -webkit-transform: rotate3d(0, 0, 1, -10deg); transform: rotate3d(0, 0, 1, -10deg);
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 74 61 64 61 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 0a 20 20 31 30 25 2c 20 32 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c Data Ascii: bkit-keyframes tada { 0% { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); } 10%, 20% { -webkit-transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); transform: scale3d(.9, .9, .9) rotate3d(0, 0,
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 7d 0a 0a 2e 74 61 64 61 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 74 61 64 61 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 74 61 64 61 3b 0a 7d 0a 0a 2f 2a 20 6f 72 69 67 69 6e 61 6c 6c 79 20 61 75 74 68 6f 72 65 64 20 62 79 20 4e 69 63 6b 20 50 65 74 74 69 74 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 69 63 6b 70 65 74 74 69 74 2f 67 6c 69 64 65 20 2a 2f 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 77 6f 62 62 6c 65 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e Data Ascii: transform: scale3d(1, 1, 1); }}.tada { -webkit-animation-name: tada; animation-name: tada;}/* originally authored by Nick Pettit - https://github.com/nickpettit/glide */@-webkit-keyframes wobble { 0% { -webkit-transform: n
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 35 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 33 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 20 30 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 33 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 20 30 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 33 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 34 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 20 30 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 Data Ascii: ) rotate3d(0, 0, 1, -5deg); } 30% { -webkit-transform: translate3d(20%, 0, 0) rotate3d(0, 0, 1, 3deg); transform: translate3d(20%, 0, 0) rotate3d(0, 0, 1, 3deg); } 45% { -webkit-transform: translate3d(-15%, 0, 0) rotate3d(0,
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 0a 20 20 36 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 30 33 2c 20 31 2e 30 33 2c 20 31 2e 30 33 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 30 33 2c 20 31 2e 30 33 2c 20 31 2e 30 33 29 3b 0a 20 20 7d 0a 0a 20 20 38 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 37 2c 20 2e 39 37 2c 20 2e 39 37 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 37 2c 20 2e 39 37 2c 20 2e 39 37 29 3b 0a 20 20 7d 0a 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 Data Ascii: 60% { opacity: 1; -webkit-transform: scale3d(1.03, 1.03, 1.03); transform: scale3d(1.03, 1.03, 1.03); } 80% { -webkit-transform: scale3d(.97, .97, .97); transform: scale3d(.97, .97, .97); } 100% { opaci

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49722	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	874	OUT	GET /admin/css/header.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:31 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 39824 Connection: close etag: "2285169136" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c49de7f0f80-EWR
2025-01-14 15:20:31 UTC	998	IN	Data Raw: 2f 2a 0a 09 47 6c 6f 62 61 6c 20 61 64 6d 69 6e 20 68 65 61 64 65 72 0a 20 2a 2f 0a 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 5c 0a 20 20 20 20 46 72 61 6d 65 77 6f 72 6b 0a 5c 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 20 74 6f 70 3a 30 3b 20 77 69 64 74 68 3a 31 30 30 25 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 37 34 43 37 43 3b 20 68 65 69 67 68 74 3a 36 34 70 78 3b 20 7a 6f 6f 6d 3a 31 3b 20 7a 2d 69 6e 64 65 78 3a 39 39 30 3b 7d 0a 23 70 61 67 Data Ascii: /Global admin header //------------------------------------\ Framework\------------------------------------/#page_header {position:fixed; top:0; width:100%; margin:0; padding:0; background:#274C7C; height:64px; zoom:1; z-index:990;}#pag
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 0a 20 20 20 20 48 65 61 64 65 72 20 61 6c 74 65 72 6e 61 74 65 20 63 6f 6c 6f 72 73 0a 5c 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 62 6f 64 79 2e 74 65 6d 70 6c 61 74 65 5f 76 69 65 77 20 23 70 61 67 65 5f 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 64 65 73 69 67 6e 65 72 32 20 23 70 61 67 65 5f 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 61 6d 70 61 69 67 6e 5f 6e 65 77 20 23 70 61 67 65 5f 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 61 6d 70 61 69 67 6e 5f 64 65 73 69 67 6e 65 72 20 23 70 61 67 65 5f 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 6f 6c 64 2e 74 65 6d 70 6c 61 74 65 20 23 70 61 67 65 5f 68 65 61 64 65 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 21 69 6d 70 Data Ascii: Header alternate colors\------------------------------------/body.template_view #page_header, body.designer2 #page_header, body.campaign_new #page_header, body.campaign_designer #page_header, body.old.template #page_header { background: #fff !imp
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 61 34 64 38 61 3b 20 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 30 20 32 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 37 70 78 3b 20 63 6f 6c 6f 72 3a 23 64 61 64 61 64 61 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 30 33 39 36 62 3b 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 30 33 39 36 62 3b 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 3b 20 7a 2d 69 6e 64 65 78 3a 35 30 30 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d Data Ascii: ackground-color:#1a4d8a; padding:0 20px 0 20px; line-height:37px; color:#dadada; font-size:14px; text-decoration:none; font-weight:700; border:1px solid #10396b; border-right:1px solid #10396b; border-right:none; z-index:500;}#page_header .hdrwrap .act_m
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6e 64 65 6e 74 3a 31 30 30 25 3b 20 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 61 63 74 5f 6d 65 6e 75 5f 6c 69 5f 73 65 61 72 63 68 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 32 70 78 20 31 31 70 78 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 6c 69 20 64 69 76 2e 73 65 61 72 63 68 77 72 61 70 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 68 65 69 67 68 74 3a 33 31 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 61 34 64 38 61 3b 20 70 61 64 64 69 6e 67 3a 33 70 78 20 Data Ascii: ndent:100%; white-space:nowrap; overflow:hidden; background:url('../images/act_menu_li_search.png') no-repeat 2px 11px;}#page_header .hdrwrap .act_menu li div.searchwrap {display:none; height:31px; line-height:100%; background-color:#1a4d8a; padding:3px
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 30 33 39 36 62 3b 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 53 68 61 64 6f 77 28 53 74 72 65 6e 67 74 68 3d 34 2c 20 44 69 72 65 63 74 69 6f 6e 3d 31 33 35 2c 20 43 6f 6c 6f 72 3d 27 23 31 30 33 39 36 62 27 29 22 3b 20 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 53 68 61 64 6f 77 28 53 74 72 65 6e 67 74 68 3d 34 2c 20 44 69 72 65 63 74 69 6f 6e 3d 31 33 35 2c 20 43 6f 6c 6f 72 3d 27 23 31 30 33 39 36 62 27 29 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 6c 69 20 2e 61 63 63 74 5f 69 6d 67 20 7b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: 0396b; -ms-filter:"progid:DXImageTransform.Microsoft.Shadow(Strength=4, Direction=135, Color='#10396b')"; filter:progid:DXImageTransform.Microsoft.Shadow(Strength=4, Direction=135, Color='#10396b');}#page_header .hdrwrap .act_menu li .acct_img {position:
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 30 20 30 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 20 33 70 78 20 30 20 30 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 6c 69 20 61 2e 68 6c 70 2e 61 63 74 69 76 65 20 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 33 30 29 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 33 30 29 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 33 30 29 3b 7d 0a 23 70 61 67 65 5f 68 65 61 Data Ascii: 0 0; border-radius:3px 3px 0 0;}#page_header .hdrwrap .act_menu li a.hlp.active {border-bottom-color:transparent; -moz-box-shadow:0 0 8px rgba(0, 0, 0, .30); -webkit-box-shadow:0 0 8px rgba(0, 0, 0, .30); box-shadow:0 0 8px rgba(0, 0, 0, .30);}#page_hea
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 67 68 74 3a 31 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 33 70 78 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 20 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 62 34 34 37 36 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 3e 20 75 6c 20 3e 20 6c 69 20 61 3a 6c 69 6e 6b 2c 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 3e 20 75 6c 20 3e 20 6c 69 20 61 3a 76 69 73 69 74 65 64 20 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 61 64 64 69 6e 67 3a 36 70 78 20 32 30 70 78 3b 20 62 61 63 6b 67 72 6f Data Ascii: ght:1px; margin:0 0 3px; padding:0; border:none; border-top:1px solid #1b4476;}#page_header .hdrwrap .act_menu ul li > ul > li a:link,#page_header .hdrwrap .act_menu ul li > ul > li a:visited {display:block; margin:0!important; padding:6px 20px; backgro
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 70 78 20 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 6f 6c 6f 72 3a 23 64 65 64 65 64 65 3b 20 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 75 6c 2e 73 74 61 74 75 73 20 6c 69 2e 6e 6f 73 74 61 74 75 73 65 73 20 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d Data Ascii: px 5px!important; display:block!important; line-height:14px!important; color:#dedede; word-wrap:break-word;}#page_header .hdrwrap .act_menu ul li ul.status li.nostatuses {margin-top:0!important; margin-bottom:10px!important;}#page_header .hdrwrap .act_m
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 67 72 61 70 68 63 6f 6e 74 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 75 6c 2e 73 74 61 74 75 73 20 6c 69 20 2e 67 72 61 70 68 63 6f 6e 74 20 73 70 61 6e 20 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 61 64 64 69 6e 67 3a 30 20 30 20 34 70 78 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 20 77 69 64 74 68 3a 31 30 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 Data Ascii: graphcont:first-child {margin-right:5px!important;}#page_header .hdrwrap .act_menu ul li ul.status li .graphcont span {display:block; margin:0!important; padding:0 0 4px 0!important; width:100px!important; color:#fff!important;}#page_header .hdrwrap .ac
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 23 68 65 6c 70 20 75 6c 20 6c 69 20 66 6f 72 6d 20 64 69 76 2e 68 73 65 61 72 63 68 20 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 70 61 64 64 69 6e 67 3a 35 70 78 20 30 3b 20 77 69 64 74 68 3a 31 34 38 70 78 3b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 68 65 69 67 68 74 3a 32 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 68 65 6c 70 5f 73 65 61 72 63 68 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 36 70 78 20 35 30 25 3b 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 62 34 34 37 36 3b 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 Data Ascii: page_header .hdrwrap .act_menu ul li#help ul li form div.hsearch {position:relative; padding:5px 0; width:148px; display:block; height:20px; background:#fff url('../images/help_search.png') no-repeat 6px 50%; border:1px solid #1b4476; -moz-border-radius:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49724	104.17.24.14	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	566	OUT	GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yourexcellency.activehosted.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:31 UTC	962	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64ed75bb-76fe" Last-Modified: Tue, 29 Aug 2023 04:36:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 322108 Expires: Sun, 04 Jan 2026 15:20:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6oN3tjxAq623h2ccPla%2Fz8P9KgNgGq2nNBDp4rL%2BT5Z9SbDzKQOYlE1QTlMJdsE7bysBwOtltkZvPz%2BGXyaA61WRK6TVZorI4XWj9HIAHmsGTtEmo3s8ADHdnZ2Bc%2Bkc%2FkD7D9fi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e9c49dba40f60-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:31 UTC	407	IN	Data Raw: 37 62 65 65 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bee/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 61 65 3d 6f 65 2e 73 6c 69 63 65 2c 67 3d 6f 65 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 73 3d 6f 65 2e 70 75 73 68 2c 73 65 3d 6f 65 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 69 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 75 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 75 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 Data Ascii: etPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 61 6c 6c 28 65 2c 74 2c 65 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 61 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: all(e,t,e)}))},slice:function(){return this.pushStack(ae.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){retu
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 65 7d 2c 6e 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 3b 69 66 28 63 28 65 29 29 7b 66 6f 72 28 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 7c Data Ascii: e},n)},each:function(e,t){var n,r=0;if(c(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=ce.text(t);return 1===i\|
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 7c 7c 21 28 21 6e 7c 7c 31 21 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 65 2e 63 6f 6e 74 61 69 6e 73 3f 65 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 6e 29 29 29 7d 3b 76 61 72 20 66 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d Data Ascii: .contains=function(e,t){var n=t&&t.parentNode;return e===n\|\|!(!n\|\|1!==n.nodeType\|\|!(e.contains?e.contains(n):e.compareDocumentPosition&&16&e.compareDocumentPosition(n)))};var f=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\0"==
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 67 65 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 67 65 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 66 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 Data Ascii: [+-]\|)(\\d)n\|)"+ge+"(?:([+-]\|)"+ge+"(\\d+)\|))"+ge+"\\)\|)","i"),bool:new RegExp("^(?:"+f+")$","i"),needsContext:new RegExp("^"+ge+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+ge+"((?:-\\d)?\\d)"+ge+"\$\|)(?=[^-]\|$)","i")},N=/^(?:input\|select\|t
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 73 74 28 74 29 29 29 7b 69 66 28 63 3d 74 2c 66 3d 65 2c 31 3d 3d 3d 70 26 26 28 78 2e 74 65 73 74 28 74 29 7c 7c 6d 2e 74 65 73 74 28 74 29 29 29 7b 28 66 3d 48 2e 74 65 73 74 28 74 29 26 26 55 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 65 26 26 6c 65 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 28 73 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 59 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b Data Ascii: st(t))){if(c=t,f=e,1===p&&(x.test(t)\|\|m.test(t))){(f=H.test(t)&&U(e.parentNode)\|\|e)==e&&le.scope\|\|((s=e.getAttribute("id"))?s=ce.escapeSelector(s):e.setAttribute("id",s=S)),o=(l=Y(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}try{
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 72 3d 28 54 3d 6e 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 43 3d 21 63 65 2e 69 73 58 4d 4c 44 6f 63 28 54 29 2c 69 3d 72 2e 6d 61 74 63 68 65 73 7c 7c 72 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 2c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 79 65 21 3d 54 26 26 28 74 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 4d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 63 Data Ascii: entElement&&(r=(T=n).documentElement,C=!ce.isXMLDoc(T),i=r.matches\|\|r.webkitMatchesSelector\|\|r.msMatchesSelector,r.msMatchesSelector&&ye!=T&&(t=T.defaultView)&&t.top!==t&&t.addEventListener("unload",M),le.getById=$(function(e){return r.appendChild(e).id=c
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 43 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 64 3d 5b 5d 2c 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 53 2b 22 27 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 53 2b 22 2d 5c 72 5c 5c 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 Data Ascii: .getElementsByClassName&&C)return t.getElementsByClassName(e)},d=[],$(function(e){var t;r.appendChild(e).innerHTML="<a id='"+S+"' href='' disabled='disabled'></a><select id='"+S+"-\r\\' disabled='disabled'><option selected=''></option></select>",e.querySe
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 56 28 65 29 2c 43 26 26 21 68 5b 74 2b 22 20 22 5d 26 26 28 21 64 7c 7c 21 64 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 6e 3d 69 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 6e 7c 7c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 54 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 Data Ascii: tchesSelector=function(e,t){if(V(e),C&&!h[t+" "]&&(!d\|\|!d.test(t)))try{var n=i.call(e,t);if(n\|\|le.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return n}catch(e){h(t,!0)}return 0<I(t,T,null,[e]).length},I.contains=function(e,t){return(e.ownerDoc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49723	104.17.24.14	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	582	OUT	GET /ajax/libs/jquery-migrate/3.5.2/jquery-migrate.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yourexcellency.activehosted.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:31 UTC	963	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"66984d4f-13c6" Last-Modified: Wed, 17 Jul 2024 23:01:35 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 42387 Expires: Sun, 04 Jan 2026 15:20:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ELn%2FpcruoReawPNRVMkoYW9j%2FOTJhcidA2OkPUPtKqChty60AbGYgl72F2YHFd305CE65MU%2B%2BxLOwAnuvC9D671KtDH45kzm9MjEGXCry2R0MBuOHvARTyeeu%2Bebz8qrEY%2B9rWkc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e9c49dd904326-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:31 UTC	406	IN	Data Raw: 33 36 61 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 35 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 36a8/! jQuery Migrate v3.5.2 \| (c) OpenJS Foundation and other contributors \| jquery.com/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 30 3c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 2f 5e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 29 7c 7c 5b 5d 2c 6f 3d 72 2e 65 78 65 63 28 74 29 7c 7c 5b 5d 2c 61 3d 31 3b 61 3c 3d 33 3b 61 2b 2b 29 7b 69 66 28 2b 6f 5b 61 5d 3c 2b 6e 5b 61 5d 29 72 65 74 75 72 6e 20 31 3b 69 66 28 2b 6e 5b 61 5d 3c 2b 6f 5b 61 5d 29 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 35 2e 32 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 73 2e 6d 69 67 72 61 74 65 44 69 Data Ascii: t";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.5.2";var t=Object.create(null);s.migrateDi
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 69 64 65 64 22 29 3b 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 72 2c 6e 2c 6f 29 2c 30 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 72 2c 6e 29 2c 30 7d 73 2e 6d 69 67 72 61 74 65 44 65 64 75 70 6c 69 63 61 74 65 57 61 72 6e 69 6e 67 73 3d 21 30 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 28 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 73 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 7b 7d 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d Data Ascii: ided");return a(e,t,r,n,o),0}function i(e,t,r,n){return a(e,t,r,n),0}s.migrateDeduplicateWarnings=!0,s.migrateWarnings=[],void 0===s.migrateTrace&&(s.migrateTrace=!0),s.migrateReset=function(){o={},s.migrateWarnings.length=0},"BackCompat"===n.document.com
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 73 69 7a 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 3b 20 75 73 65 20 74 68 65 20 2e 6c 65 6e 67 74 68 20 70 72 6f 70 65 72 74 79 22 29 2c 63 28 73 2c 22 70 61 72 73 65 4a 53 4f 4e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 70 61 72 73 65 4a 53 4f 4e 22 2c 22 6a 51 75 65 72 79 2e 70 61 72 73 65 4a 53 4f 4e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 4a 53 4f 4e 2e 70 61 72 73 65 22 29 2c 63 28 73 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 73 2e 68 6f 6c 64 52 65 61 64 79 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 22 6a 51 75 65 72 79 2e 68 6f 6c Data Ascii: ","jQuery.fn.size() is deprecated and removed; use the .length property"),c(s,"parseJSON",function(){return JSON.parse.apply(null,arguments)},"parseJSON","jQuery.parseJSON is deprecated; use JSON.parse"),c(s,"holdReady",s.holdReady,"holdReady","jQuery.hol
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 2c 22 74 79 70 65 22 2c 22 6a 51 75 65 72 79 2e 74 79 70 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 22 6a 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 57 69 6e 64 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 22 69 73 57 69 6e 64 6f 77 22 2c 22 Data Ascii: type.toString.call(e)]\|\|"object":typeof e},"type","jQuery.type is deprecated"),c(s,"isFunction",function(e){return"function"==typeof e},"isFunction","jQuery.isFunction() is deprecated"),c(s,"isWindow",function(e){return null!=e&&e===e.window},"isWindow","
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 51 75 65 72 79 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 65 74 73 20 62 6f 6f 6c 65 61 6e 20 70 72 6f 70 65 72 74 69 65 73 3a 20 22 2b 74 29 2c 72 2e 70 72 6f 70 28 74 2c 21 31 29 29 7d 29 2c 6a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 72 65 6d 6f 76 65 41 74 74 72 2d 62 6f 6f 6c 22 29 2c 69 28 73 2e 66 6e 2c 22 74 6f 67 67 6c 65 43 6c 61 73 73 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 62 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 75 28 22 74 6f 67 67 6c 65 43 6c 61 73 73 2d 62 6f 6f 6c 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 74 6f 67 67 6c 65 Data Ascii: Query.fn.removeAttr no longer sets boolean properties: "+t),r.prop(t,!1))}),j.apply(this,arguments)},"removeAttr-bool"),i(s.fn,"toggleClass",function(t){return void 0!==t&&"boolean"!=typeof t?b.apply(this,arguments):(u("toggleClass-bool","jQuery.fn.toggle
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 3a 21 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 21 30 2c 67 72 69 64 41 72 65 61 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 45 6e 64 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 74 61 72 74 3a 21 30 2c 67 72 69 64 52 6f 77 3a 21 30 2c 67 72 69 64 52 6f 77 45 6e 64 3a 21 30 2c 67 72 69 64 52 6f 77 53 74 61 72 74 3a 21 30 2c 6c 69 6e 65 48 65 69 67 68 74 3a 21 30 2c 6f 70 61 63 69 74 79 3a 21 30 2c 6f 72 64 65 72 3a 21 30 2c 6f 72 70 68 61 6e 73 3a 21 30 2c 73 63 61 6c 65 3a 21 30 2c 77 69 64 6f 77 73 3a 21 30 2c 7a 49 6e 64 65 78 3a 21 30 2c 7a 6f 6f 6d 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 6f 6f 64 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 6f 70 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 72 6f 6b 65 Data Ascii: :!0,fontWeight:!0,gridArea:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnStart:!0,gridRow:!0,gridRowEnd:!0,gridRowStart:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,scale:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,stroke
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 73 20 63 61 6d 65 6c 43 61 73 65 64 20 6e 61 6d 65 73 3a 20 22 2b 74 29 2c 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 28 6e 5b 74 5d 3d 72 29 2c 6e 5b 74 5d 29 3a 4d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 64 61 74 61 2d 63 61 6d 65 6c 43 61 73 65 22 29 2c 73 2e 66 78 26 26 28 48 3d 73 2e 54 77 65 65 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 75 6e 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 69 28 73 2e 54 77 65 65 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 75 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 31 3c 73 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 2e 6c 65 6e 67 74 68 26 26 28 75 28 22 65 61 73 69 6e 67 2d 6f 6e 65 2d 61 72 67 22 2c 22 27 6a 51 75 65 72 79 Data Ascii: s camelCased names: "+t),2<arguments.length&&(n[t]=r),n[t]):M.apply(this,arguments)},"data-camelCase"),s.fx&&(H=s.Tween.prototype.run,E=function(e){return e},i(s.Tween.prototype,"run",function(){1<s.easing[this.easing].length&&(u("easing-one-arg","'jQuery
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 22 61 64 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 26 26 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 75 28 22 6c 6f 61 64 2d 61 66 74 65 72 2d 65 76 65 6e 74 22 2c 22 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2e 2e 2e 29 20 63 61 6c 6c 65 64 20 61 66 74 65 72 20 6c 6f 61 64 20 65 76 65 6e 74 20 6f 63 63 75 72 72 65 64 22 29 2c 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 6c 6f 61 64 2d 61 66 74 65 72 2d 65 76 65 6e 74 22 29 2c 73 2e 65 61 63 68 28 5b 22 6c 6f 61 64 22 2c 22 75 6e 6c 6f 61 64 22 2c 22 65 72 72 6f 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: "add",function(e,t){return e===n&&"load"===t&&"complete"===n.document.readyState&&u("load-after-event","jQuery(window).on('load'...) called after load event occurred"),O.apply(this,arguments)},"load-after-event"),s.each(["load","unload","error"],function(
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6e 20 74 68 69 73 2e 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7d 2c 22 70 72 65 2d 6f 6e 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2e 66 6e 2c 22 75 6e 64 65 6c 65 67 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 66 66 28 65 2c 22 2a 2a 22 29 3a 74 68 69 73 2e 6f 66 66 28 74 2c 65 7c 7c 22 2a 2a 22 2c 72 29 7d 2c 22 70 72 65 2d 6f 6e 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2e 66 6e 2c 22 68 6f 76 65 72 22 2c 66 75 6e 63 Data Ascii: n this.on(t,e,r,n)},"pre-on-methods","jQuery.fn.delegate() is deprecated"),c(s.fn,"undelegate",function(e,t,r){return 1===arguments.length?this.off(e,""):this.off(t,e\|\|"",r)},"pre-on-methods","jQuery.fn.undelegate() is deprecated"),c(s.fn,"hover",func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49725	104.17.24.14	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	572	OUT	GET /ajax/libs/jqueryui/1.13.2/jquery-ui.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yourexcellency.activehosted.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:31 UTC	958	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"62e445d5-10919" Last-Modified: Fri, 29 Jul 2022 20:40:53 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 42387 Expires: Sun, 04 Jan 2026 15:20:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=038BtEKFOPm8Drj4WLgT6InrZaY3RkRtH5QvZJErwCxCrm220OsTKfWgiH1GOrIxax6S2TfjbH%2FSQFHx7AfwW%2Bi4rBi7CBdek6DpoSF%2BKYwUbD58rnxgPgNEtq9lALcI7Y5BHmJY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e9c49d96042b2-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:31 UTC	411	IN	Data Raw: 37 62 65 62 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 Data Ascii: 7beb/! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effec
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 2d 73 63 61 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 68 61 6b 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 69 7a 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 6c 69 64 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 74 72 61 6e 73 66 65 72 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 70 61 74 63 68 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 Data Ascii: -scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js,
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 68 69 73 7c 7c 21 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 29 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 74 2c 65 29 3b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 28 74 2c 65 29 7d 2c 56 2e 65 78 74 65 6e 64 28 6e 2c 73 2c 7b 76 65 72 73 69 6f 6e 3a 65 2e 76 65 72 73 69 6f 6e 2c 5f 70 72 6f 74 6f 3a 56 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 29 2c 5f 63 68 69 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 73 3a 5b 5d 7d 29 2c 28 6f 3d 6e 65 77 20 69 29 2e 6f 70 74 69 6f 6e 73 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 2e 6f 70 74 69 6f 6e 73 29 2c 56 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b Data Ascii: =function(t,e){if(!this\|\|!this._createWidget)return new n(t,e);arguments.length&&this._createWidget(t,e)},V.extend(n,s,{version:e.version,_proto:V.extend({},e),_childConstructors:[]}),(o=new i).options=V.widget.extend({},o.options),V.each(e,function(e,s){
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 69 3f 28 6e 3d 65 2c 21 31 29 3a 65 3f 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5b 69 5d 7c 7c 22 5f 22 3d 3d 3d 69 2e 63 68 61 72 41 74 28 30 29 3f 56 2e 65 72 72 6f 72 28 22 6e 6f 20 73 75 63 68 20 6d 65 74 68 6f 64 20 27 22 2b 69 2b 22 27 20 66 6f 72 20 22 2b 6f 2b 22 20 77 69 64 67 65 74 20 69 6e 73 74 61 6e 63 65 22 29 3a 28 74 3d 65 5b 69 5d 2e 61 70 70 6c 79 28 65 2c 73 29 29 21 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 28 6e 3d 74 26 26 74 2e 6a 71 75 65 72 79 3f 6e 2e 70 75 73 68 53 74 61 63 6b 28 74 2e 67 65 74 28 29 29 3a 74 2c 21 31 29 3a 76 6f 69 64 20 30 3a 56 2e 65 72 72 6f 72 28 22 63 61 6e 6e 6f 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 73 20 6f 6e 20 22 2b 6f 2b 22 20 70 72 69 6f 72 20 74 6f 20 69 6e 69 74 69 61 6c Data Ascii: i?(n=e,!1):e?"function"!=typeof e[i]\|\|"_"===i.charAt(0)?V.error("no such method '"+i+"' for "+o+" widget instance"):(t=e[i].apply(e,s))!==e&&void 0!==t?(n=t&&t.jquery?n.pushStack(t.get()):t,!1):void 0:V.error("cannot call methods on "+o+" prior to initial
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 73 2e 5f 69 6e 69 74 28 29 7d 2c 5f 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 2c 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 3a 56 2e 6e 6f 6f 70 2c 5f 63 72 65 61 74 65 3a 56 2e 6e 6f 6f 70 2c 5f 69 6e 69 74 3a 56 2e 6e 6f 6f 70 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 28 29 2c 56 2e 65 61 63 68 28 74 68 69 73 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 2c 74 29 7d 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 Data Ascii: s._init()},_getCreateOptions:function(){return{}},_getCreateEventData:V.noop,_create:V.noop,_init:V.noop,destroy:function(){var i=this;this._destroy(),V.each(this.classesElementLookup,function(t,e){i._removeClass(e,t)}),this.element.off(this.eventNamespac
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 77 69 64 67 65 74 28 29 2c 74 68 69 73 2e 77 69 64 67 65 74 46 75 6c 6c 4e 61 6d 65 2b 22 2d 64 69 73 61 62 6c 65 64 22 2c 6e 75 6c 6c 2c 21 21 74 29 2c 74 26 26 28 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 68 6f 76 65 72 61 62 6c 65 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 66 6f 63 75 73 61 62 6c 65 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 66 6f 63 75 73 22 29 29 7d 2c 65 6e 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 73 28 7b 64 69 73 61 Data Ascii: led:function(t){this._toggleClass(this.widget(),this.widgetFullName+"-disabled",null,!!t),t&&(this._removeClass(this.hoverable,null,"ui-state-hover"),this._removeClass(this.focusable,null,"ui-state-focus"))},enable:function(){return this._setOptions({disa
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 69 3d 7b 65 78 74 72 61 3a 6e 3f 65 3a 69 2c 6b 65 79 73 3a 6e 3f 74 3a 65 2c 65 6c 65 6d 65 6e 74 3a 6e 3f 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3a 74 2c 61 64 64 3a 73 3d 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 73 3f 73 3a 69 7d 3b 72 65 74 75 72 6e 20 69 2e 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 5f 63 6c 61 73 73 65 73 28 69 29 2c 73 29 2c 74 68 69 73 7d 2c 5f 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 74 29 7b 76 61 72 20 61 2c 72 3d 74 68 69 73 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 28 74 3d 6f 2c 6f 3d 6e 2c 6e 3d 21 31 29 2c 74 3f 28 6f 3d 61 3d 56 28 6f 29 2c 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 3d 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 2e 61 64 64 28 6f 29 29 3a 28 Data Ascii: i={extra:n?e:i,keys:n?t:e,element:n?this.element:t,add:s="boolean"==typeof s?s:i};return i.element.toggleClass(this._classes(i),s),this},_on:function(n,o,t){var a,r=this;"boolean"!=typeof n&&(t=o,o=n,n=!1),t?(o=a=V(o),this.bindings=this.bindings.add(o)):(
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6e 28 74 29 7b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 66 6f 63 75 73 22 29 7d 7d 29 7d 2c 5f 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 73 2c 6e 2c 6f 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 74 5d 3b 69 66 28 69 3d 69 7c 7c 7b 7d 2c 28 65 3d 56 2e 45 76 65 6e 74 28 65 29 29 2e 74 79 70 65 3d 28 74 3d 3d 3d 74 68 69 73 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3f 74 3a 74 68 69 73 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 2b 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 65 2e 74 61 72 67 65 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2c 6e 3d 65 2e 6f 72 69 67 69 Data Ascii: n(t){this._removeClass(V(t.currentTarget),null,"ui-state-focus")}})},_trigger:function(t,e,i){var s,n,o=this.options[t];if(i=i\|\|{},(e=V.Event(e)).type=(t===this.widgetEventPrefix?t:this.widgetEventPrefix+t).toLowerCase(),e.target=this.element[0],n=e.origi
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6e 3b 27 3e 3c 64 69 76 20 73 74 79 6c 65 3d 27 68 65 69 67 68 74 3a 33 30 30 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 27 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 29 2c 69 3d 65 2e 63 68 69 6c 64 72 65 6e 28 29 5b 30 5d 3b 72 65 74 75 72 6e 20 56 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 65 29 2c 74 3d 69 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 65 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 22 2c 22 73 63 72 6f 6c 6c 22 29 2c 74 3d 3d 3d 28 69 3d 69 2e 6f 66 66 73 65 74 57 69 64 74 68 29 26 26 28 69 3d 65 5b 30 5d 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 2c 65 2e 72 65 6d 6f 76 65 28 29 2c 73 3d 74 2d 69 7d 2c 67 65 74 53 63 72 6f 6c 6c 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 69 73 57 69 6e 64 6f 77 7c 7c 74 2e 69 73 Data Ascii: n;'><div style='height:300px;width:auto;'></div></div>"),i=e.children()[0];return V("body").append(e),t=i.offsetWidth,e.css("overflow","scroll"),t===(i=i.offsetWidth)&&(i=e[0].clientWidth),e.remove(),s=t-i},getScrollInfo:function(t){var e=t.isWindow\|\|t.is
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 65 2e 6f 66 66 73 65 74 28 29 7d 3b 72 65 74 75 72 6e 20 5f 5b 30 5d 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 28 75 2e 61 74 3d 22 6c 65 66 74 20 74 6f 70 22 29 2c 70 3d 65 2e 77 69 64 74 68 2c 66 3d 65 2e 68 65 69 67 68 74 2c 6d 3d 56 2e 65 78 74 65 6e 64 28 7b 7d 2c 67 3d 65 2e 6f 66 66 73 65 74 29 2c 56 2e 65 61 63 68 28 5b 22 6d 79 22 2c 22 61 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 69 3d 28 75 5b 74 68 69 73 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 28 69 3d 31 3d 3d 3d 69 2e 6c 65 6e 67 74 68 3f 6f 2e 74 65 73 74 28 69 5b 30 5d 29 3f 69 2e 63 6f 6e 63 61 74 28 5b 22 63 65 6e 74 65 72 22 5d 29 3a 6c 2e 74 65 73 74 28 69 5b 30 5d 29 3f 5b 22 63 65 6e 74 65 72 Data Ascii: ight(),offset:e.offset()};return _[0].preventDefault&&(u.at="left top"),p=e.width,f=e.height,m=V.extend({},g=e.offset),V.each(["my","at"],function(){var t,e,i=(u[this]\|\|"").split(" ");(i=1===i.length?o.test(i[0])?i.concat(["center"]):l.test(i[0])?["center

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49720	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	874	OUT	GET /admin/css/footer.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:31 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 2090 Connection: close etag: "1653225731" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c4a18464cf2-BOS
2025-01-14 15:20:31 UTC	999	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2f 2a 20 41 64 6d 69 6e 20 47 6c 6f 62 61 6c 20 46 6f 6f 74 65 72 20 53 74 79 6c 65 20 20 20 20 09 09 09 20 2a 2f 20 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 20 46 72 61 6d 65 77 6f 72 6b 20 2d 2d 2d 2d 2d 2d 2a 2f 0a 23 70 61 67 65 5f 66 6f 6f 74 65 72 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 36 34 70 78 3b 70 61 64 64 69 6e 67 3a 32 34 70 78 20 32 34 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 65 34 65 34 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c Data Ascii: /-------------------------------------------//* Admin Global Footer Style / /-------------------------------------------//------ Framework ------*/#page_footer {width:100%;height:64px;padding:24px 24px; background: #4e4e4e;text-align:l
2025-01-14 15:20:31 UTC	1091	IN	Data Raw: 32 32 70 78 3b 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 35 30 25 3b 20 6c 65 66 74 3a 20 35 30 25 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 31 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 20 7d 0a 2e 73 75 70 70 6f 72 74 2d 69 63 6f 6e 20 73 70 61 6e 3a 62 65 66 6f 72 65 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 7d 0a 0a 2f 2a 20 4d 65 6e 75 20 2a 2f 0a 2e 73 75 70 70 6f 72 74 2d 6d 65 6e 75 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 77 69 64 74 68 3a 20 32 35 30 70 78 3b 20 72 69 67 68 74 3a 20 32 30 70 78 3b 20 62 6f 74 74 6f 6d 3a 20 38 30 70 78 3b 20 62 Data Ascii: 22px;color: #fff; position: absolute; top: 50%; left: 50%; margin-left: -11px; margin-top: -11px;line-height: 0 }.support-icon span:before { margin: 0;}/* Menu */.support-menu { display: none;position: fixed; width: 250px; right: 20px; bottom: 80px; b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49721	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	873	OUT	GET /admin/css/skin2.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:31 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 502312 Connection: close etag: "931095885" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c4a19794d02-BOS
2025-01-14 15:20:31 UTC	998	IN	Data Raw: 2f 2a 20 53 65 6e 64 65 72 20 44 65 74 61 69 6c 73 20 4d 6f 64 61 6c 20 28 62 61 73 69 63 20 65 64 69 74 6f 72 29 20 2a 2f 0a 23 74 65 6d 70 6c 61 74 65 2d 73 65 74 74 69 6e 67 20 2e 73 65 63 74 69 6f 6e 20 2e 73 65 74 74 69 6e 67 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 66 72 6f 6d 2d 69 6e 70 75 74 2d 77 72 61 70 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 20 30 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 62 6f 72 Data Ascii: /* Sender Details Modal (basic editor) */#template-setting .section .setting-section-container .from-input-wrap { width: 100% !important;position: relative;padding:0 5px 0 0 !important;display: inline-block;background-color: #ffffff;line-height: 100%;bor
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 72 61 70 20 61 2e 66 72 6f 6d 2d 70 65 72 73 20 7b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 63 6f 6c 6f 72 3a 20 23 62 62 62 62 62 62 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 35 30 25 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 20 72 69 67 68 74 3a 20 35 70 78 3b 7d 0a 23 74 65 6d 70 6c 61 74 65 2d 73 65 74 74 69 6e 67 20 2e 73 65 63 74 69 6f 6e 20 2e 73 65 74 74 69 6e 67 2d 73 65 63 74 69 6f 6e 2e 6e 61 6d 65 2d 66 69 65 6c 64 20 2e 61 63 5f 70 6f 70 6f 76 65 72 2d 6d 65 6e 75 20 2e 70 6f 70 6f 76 65 72 2d 66 6f 6f 74 65 72 20 2e 61 63 5f 62 75 74 74 6f 6e 20 7b 20 77 69 64 74 68 3a 20 34 37 25 3b 7d 0a 23 74 65 6d 70 6c 61 74 65 2d 73 65 74 74 69 6e 67 20 2e 73 65 63 Data Ascii: rap a.from-pers { float: right;color: #bbbbbb; position: absolute; top: 50%; transform: translateY(-50%); right: 5px;}#template-setting .section .setting-section.name-field .ac_popover-menu .popover-footer .ac_button { width: 47%;}#template-setting .sec
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 61 72 28 2d 2d 73 6c 61 74 65 2d 32 30 30 29 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 3a 31 34 70 78 20 22 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 33 33 33 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 20 30 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 74 65 6d 70 6c 61 74 65 2d 73 65 74 74 69 6e 67 20 2e 73 65 63 74 69 6f 6e 20 2e 73 65 74 74 69 6e 67 2d 73 65 63 74 69 6f 6e 2e 6e 61 6d 65 2d 66 69 65 6c 64 20 2e 69 6e 70 75 74 2d 77 72 61 70 20 69 6e 70 75 74 Data Ascii: ar(--slate-200)!important;border-radius:4px;font:14px "IBM Plex Sans", Helvetica, sans-serif!important;color:#333!important;float:left;margin-right:10px;padding:0 5px 0 0!important;}#template-setting .section .setting-section.name-field .input-wrap input
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 64 69 75 73 3a 36 70 78 3b 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 75 70 6c 6f 61 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 65 63 33 34 66 3b 7d 0a 2f 2a 20 6d 65 6e 75 20 73 74 75 66 66 20 2a 2f 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 73 69 64 65 6d 65 6e 75 20 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 66 6c 6f 61 74 3a 72 69 67 68 74 3b 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 20 77 69 64 74 68 3a 32 32 30 70 78 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 73 69 64 65 6d 65 6e 75 20 3e 20 2e 68 65 61 64 Data Ascii: dius:6px; -moz-border-radius:6px; border-radius:6px;}#modal_gallery .upload input[type="submit"] {background:#6ec34f;}/* menu stuff */#modal_gallery .sidemenu {position:relative; float:right; padding:10px; width:220px;}#modal_gallery .sidemenu > .head
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 67 61 6c 6c 65 72 79 20 2e 66 6f 6c 64 65 72 5f 6c 69 73 74 20 3e 20 2e 66 6f 6c 64 65 72 73 20 3e 20 75 6c 20 3e 20 6c 69 20 3e 20 61 20 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 66 6c 6f 61 74 3a 6c 65 66 74 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 35 70 78 3b 20 63 6f 6c 6f 72 3a 23 35 35 35 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 66 6f 6c 64 65 72 5f 6c 69 73 74 20 3e 20 2e 66 6f 6c 64 65 72 73 20 3e 20 75 6c 20 3e 20 6c 69 20 3e 20 61 2e 66 6f 6c 64 65 72 2d 64 65 6c 65 74 65 20 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 74 6f 70 3a 36 70 78 3b 20 6d 61 72 67 69 Data Ascii: gallery .folder_list > .folders > ul > li > a {display:block; float:left; height:100%; margin-left:15px; color:#555; text-decoration:none;}#modal_gallery .folder_list > .folders > ul > li > a.folder-delete {position:absolute; display:none; top:6px; margi
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 64 69 76 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 69 6d 61 67 65 2d 70 69 63 74 75 72 65 20 3e 20 69 6d 67 20 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 38 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 31 31 38 70 78 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 69 6d 61 67 65 73 20 3e 20 2e 69 6d 61 67 65 20 3e 20 64 69 76 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 69 6d 61 67 65 2d 70 69 63 74 75 72 65 20 3e 20 64 69 76 2e 69 6d 61 67 65 2d 69 6d 67 74 61 67 20 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 31 38 70 78 3b 20 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 69 6d 61 67 65 73 20 3e 20 2e 69 6d 61 67 65 20 3e 20 64 69 76 2e 69 6d 61 67 65 Data Ascii: div.image-container > div.image-picture > img {max-width:118px; max-height:118px;}#modal_gallery .images > .image > div.image-container > div.image-picture > div.image-imgtag {max-height:118px; cursor:pointer;}#modal_gallery .images > .image > div.image
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 30 25 2c 23 38 32 63 63 35 64 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 30 30 25 2c 23 35 33 62 37 33 63 29 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 38 32 63 63 35 64 20 30 25 2c 23 35 33 62 37 33 63 20 31 30 30 25 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 38 32 63 63 35 64 20 30 25 2c 23 35 33 62 37 33 63 20 31 30 30 25 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 38 32 63 63 35 64 20 30 25 2c 23 35 33 62 37 33 Data Ascii: left top, left bottom, color-stop(0%,#82cc5d), color-stop(100%,#53b73c)); background:-webkit-linear-gradient(top, #82cc5d 0%,#53b73c 100%); background:-o-linear-gradient(top, #82cc5d 0%,#53b73c 100%); background:-ms-linear-gradient(top, #82cc5d 0%,#53b73
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 74 3a 2d 31 30 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 32 38 70 78 20 30 20 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 20 77 69 64 74 68 3a 32 30 30 70 78 3b 20 63 6f 6c 6f 72 3a 23 37 37 37 3b 7d 0a 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 5f 6c 6f 61 64 69 6e 67 20 7b 77 69 64 74 68 3a 39 37 2e 38 25 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 5f 6c 6f 61 64 69 6e 67 20 3e 20 69 6d 67 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 0a 23 73 75 62 73 63 72 69 62 65 72 5f 69 6d 70 6f 72 74 20 2e 75 70 67 72 61 64 65 70 6c 61 6e 20 3e 20 61 20 7b 20 6d 61 72 67 69 6e 3a 31 30 Data Ascii: t:-100px; padding:28px 0 0; font-size:12px; width:200px; color:#777;}#modal_gallery #modal_gallery_loading {width:97.8%!important;}#modal_gallery #modal_gallery_loading > img {margin-left:8px!important;}#subscriber_import .upgradeplan > a { margin:10
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 3a 31 3b 20 7a 6f 6f 6d 3a 31 3b 20 7d 0a 23 73 75 62 73 63 72 69 62 65 72 5f 69 6d 70 6f 72 74 20 2e 75 70 67 72 61 64 65 70 6c 61 6e 20 3e 20 61 3a 68 6f 76 65 72 20 7b 74 65 78 74 2d 73 68 61 64 6f 77 3a 31 70 78 20 30 20 30 20 23 66 66 66 36 64 32 3b 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 36 61 31 31 33 3b 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 63 33 61 33 32 36 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 20 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 30 2e 30 35 2c 20 23 66 37 63 62 32 30 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 2c 20 23 66 65 64 34 32 37 29 20 29 3b 20 62 61 63 6b Data Ascii: :1; zoom:1; }#subscriber_import .upgradeplan > a:hover {text-shadow:1px 0 0 #fff6d2; border:1px solid #c6a113; border-top-color:#c3a326; background:-webkit-gradient( linear, left top, left bottom, color-stop(0.05, #f7cb20), color-stop(1, #fed427) ); back
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 20 23 36 39 36 39 36 39 3b 20 7d 0a 0a 0a 23 73 75 62 73 63 72 69 62 65 72 44 65 74 61 69 6c 73 20 68 32 2e 70 72 69 6e 74 61 62 6c 65 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 23 74 61 62 5f 64 65 74 61 69 6c 73 5f 2c 0a 23 74 61 62 5f 6c 69 76 65 5f 74 72 61 76 65 6c 5f 2c 0a 23 74 61 62 5f 63 61 6d 70 61 69 67 6e 73 5f 2c 0a 23 74 61 62 5f 6c 6f 67 5f 2c 0a 23 74 61 62 5f 6e 6f 74 65 73 5f 0a 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 23 73 75 62 73 63 72 69 62 65 72 44 65 74 61 69 6c 73 20 20 23 6e 6f 74 65 73 20 2e 6f 70 74 69 6f 6e 73 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 20 63 6f 6c 6f 72 3a 23 33 33 33 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a Data Ascii: color: #696969; }#subscriberDetails h2.printable {display:none;}#tab_details_,#tab_live_travel_,#tab_campaigns_,#tab_log_,#tab_notes_{display:none;}#subscriberDetails #notes .options {font-size:11px; color:#333; font-weight:normal; padding-top:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49726	104.17.24.14	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:30 UTC	588	OUT	GET /ajax/libs/css-vars-ponyfill/2.4.9/css-vars-ponyfill.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yourexcellency.activehosted.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:31 UTC	960	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"65e79664-1ed5" Last-Modified: Tue, 05 Mar 2024 22:02:12 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 7327 Expires: Sun, 04 Jan 2026 15:20:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z9DC1%2FdR4KfiBUOdY98oKgcqsLxcWlQwoag8egLBKG%2BgxQyGzprBiQd1Nr%2Fn9oL6onjrxgsnvLEmvpzwerIHUjORBxv%2BurYuG2amxZW5xoqRRrLrDyUvczP6u82SnXbYF%2Fxt2ONj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e9c49fdf142c0-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:31 UTC	409	IN	Data Raw: 35 62 35 62 0d 0a 2f 2a 21 0a 20 2a 20 63 73 73 2d 76 61 72 73 2d 70 6f 6e 79 66 69 6c 6c 0a 20 2a 20 76 32 2e 34 2e 39 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 68 69 6c 64 65 6e 62 69 64 64 6c 65 2e 67 69 74 68 75 62 2e 69 6f 2f 63 73 73 2d 76 61 72 73 2d 70 6f 6e 79 66 69 6c 6c 2f 0a 20 2a 20 28 63 29 20 32 30 31 38 2d 32 30 32 34 20 4a 6f 68 6e 20 48 69 6c 64 65 6e 62 69 64 64 6c 65 20 3c 68 74 74 70 3a 2f 2f 68 69 6c 64 65 6e 62 69 64 64 6c 65 2e 63 6f 6d 3e 0a 20 2a 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 Data Ascii: 5b5b/! css-vars-ponyfill * v2.4.9 * https://jhildenbiddle.github.io/css-vars-ponyfill/ * (c) 2018-2024 John Hildenbiddle <http://hildenbiddle.com> * MIT license */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.expor
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: nction e(){return e=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},e.apply(this,arguments)}function t(e){var t=arguments
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 75 73 74 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 63 6f 6c 20 28 22 2e 63 6f 6e 63 61 74 28 65 2c 22 29 22 29 29 2c 61 28 6e 75 6c 6c 2c 74 29 7d 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 6f 2e 6f 70 65 6e 28 22 47 45 54 22 2c 65 29 2c 72 2e 6d 69 6d 65 54 79 70 65 26 26 6f 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 6f 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 72 2e 6d 69 6d 65 54 79 70 65 29 2c 72 2e 6f 6e 42 65 66 6f 72 65 53 65 6e 64 28 6f 2c 65 2c 74 29 2c 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 34 3d 3d 3d 6f 2e 72 65 61 64 79 53 74 61 74 65 29 7b 76 61 72 20 65 3d 6f 2e 72 65 73 70 6f 6e 73 65 54 Data Ascii: ust use the same protocol (".concat(e,")")),a(null,t)}else{var o=new XMLHttpRequest;o.open("GET",e),r.mimeType&&o.overrideMimeType&&o.overrideMimeType(r.mimeType),r.onBeforeSend(o,e,t),o.onreadystatechange=function(){if(4===o.readyState){var e=o.responseT
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 61 72 20 6f 3d 73 2e 6f 6e 53 75 63 63 65 73 73 28 65 2c 72 2c 6e 29 3b 66 28 65 3d 76 6f 69 64 20 30 21 3d 3d 6f 26 26 21 31 3d 3d 3d 42 6f 6f 6c 65 61 6e 28 6f 29 3f 22 22 3a 6f 7c 7c 65 2c 72 2c 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 63 5b 74 5d 26 26 28 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 2e 6f 6e 45 72 72 6f 72 28 65 2e 78 68 72 2c 72 2c 65 2e 75 72 6c 29 7d 29 29 2c 21 73 2e 66 69 6c 74 65 72 7c 7c 73 2e 66 69 6c 74 65 72 2e 74 65 73 74 28 65 29 3f 63 5b 74 5d 3d 65 3a 63 5b 74 5d 3d 22 22 2c 69 28 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 Data Ascii: ar o=s.onSuccess(e,r,n);f(e=void 0!==o&&!1===Boolean(o)?"":o\|\|e,r,n,(function(e,n){null===c[t]&&(n.forEach((function(e){return s.onError(e.xhr,r,e.url)})),!s.filter\|\|s.filter.test(e)?c[t]=e:c[t]="",i())}))}function l(e,t){var s=arguments.length>2&&void 0!
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 73 2e 73 6b 69 70 44 69 73 61 62 6c 65 64 26 26 65 2e 64 69 73 61 62 6c 65 64 2c 64 3d 22 73 74 79 6c 65 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 6c 26 26 21 66 29 69 66 28 2d 31 21 3d 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 3a 74 65 78 74 2f 63 73 73 22 29 29 7b 76 61 72 20 70 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 2e 73 75 62 73 74 72 69 6e 67 28 6f 2e 69 6e 64 65 78 4f 66 28 22 2c 22 29 2b 31 29 29 3b 73 2e 75 73 65 43 53 53 4f 4d 26 26 28 70 3d 41 72 72 61 79 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 65 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 73 73 54 65 78 74 7d 29 29 2e 6a 6f 69 Data Ascii: s.skipDisabled&&e.disabled,d="style"===e.nodeName.toLowerCase();if(l&&!f)if(-1!==o.indexOf("data:text/css")){var p=decodeURIComponent(o.substring(o.indexOf(",")+1));s.useCSSOM&&(p=Array.apply(null,e.sheet.cssRules).map((function(e){return e.cssText})).joi
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 28 65 2c 6c 2b 31 29 29 3a 31 3d 3d 6e 2e 6c 65 6e 67 74 68 3f 63 3d 5b 6e 2e 70 6f 70 28 29 2c 75 5d 3a 28 28 6f 3d 6e 2e 70 6f 70 28 29 29 3c 73 26 26 28 73 3d 6f 2c 61 3d 75 29 2c 75 3d 72 2e 69 6e 64 65 78 4f 66 28 74 2c 6c 2b 31 29 29 2c 6c 3d 69 3c 75 26 26 69 3e 3d 30 3f 69 3a 75 3b 6e 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 73 2c 61 5d 29 7d 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 7b 70 72 65 73 65 72 76 65 53 74 61 74 69 63 3a 21 30 2c 72 65 6d 6f 76 65 43 6f 6d 6d 65 6e 74 73 3a 21 31 7d 2c 73 3d 65 28 7b 7d 2c 6e 2c 72 29 Data Ascii: (e,l+1)):1==n.length?c=[n.pop(),u]:((o=n.pop())<s&&(s=o,a=u),u=r.indexOf(t,l+1)),l=i<u&&i>=0?i:u;n.length&&(c=[s,a])}return c}function i(t){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n={preserveStatic:!0,removeComments:!1},s=e({},n,r)
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 29 7b 69 66 28 72 3d 72 5b 30 5d 2e 74 72 69 6d 28 29 2c 21 69 28 2f 5e 3a 5c 73 2a 2f 29 29 72 65 74 75 72 6e 20 63 28 22 70 72 6f 70 65 72 74 79 20 6d 69 73 73 69 6e 67 20 27 3a 27 22 29 3b 76 61 72 20 6e 3d 69 28 2f 5e 28 28 3f 3a 5c 2f 5c 2a 2e 2a 3f 5c 2a 5c 2f 7c 27 28 3f 3a 5c 5c 27 7c 2e 29 2a 3f 27 7c 22 28 3f 3a 5c 5c 22 7c 2e 29 2a 3f 22 7c 5c 28 28 5c 73 2a 27 28 3f 3a 5c 5c 27 7c 2e 29 2a 3f 27 7c 22 28 3f 3a 5c 5c 22 7c 2e 29 2a 3f 22 7c 5b 5e 29 5d 2a 3f 29 5c 73 2a 5c 29 7c 5b 5e 7d 3b 5d 29 2b 29 2f 29 2c 6f 3d 7b 74 79 70 65 3a 22 64 65 63 6c 61 72 61 74 69 6f 6e 22 2c 70 72 6f 70 65 72 74 79 3a 72 2e 72 65 70 6c 61 63 65 28 65 2c 22 22 29 2c 76 61 6c 75 65 3a 6e 3f 6e 5b 30 5d 2e 72 65 70 6c 61 63 65 28 65 2c 22 22 29 2e 74 72 69 6d 28 Data Ascii: ){if(r=r[0].trim(),!i(/^:\s/))return c("property missing ':'");var n=i(/^((?:\/\.?\\/\|'(?:\\'\|.)?'\|"(?:\\"\|.)?"\|$(\s'(?:\\'\|.)?'\|"(?:\\"\|.)?"\|[^)]?)\s*$\|[^};])+)/),o={type:"declaration",property:r.replace(e,""),value:n?n[0].replace(e,"").trim(
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 69 66 28 69 28 2f 5e 40 68 6f 73 74 5c 73 2a 2f 29 29 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 68 6f 73 74 22 2c 72 75 6c 65 73 3a 4d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 76 61 72 20 65 3d 69 28 2f 5e 40 6d 65 64 69 61 28 5b 5e 7b 5d 2b 29 2a 2f 29 3b 69 66 28 65 29 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 6d 65 64 69 61 22 2c 6d 65 64 69 61 3a 28 65 5b 31 5d 7c 7c 22 22 29 2e 74 72 69 6d 28 29 2c 72 75 6c 65 73 3a 4d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 76 61 72 20 65 3d 69 28 2f 5e 40 63 75 73 74 6f 6d 2d 6d 65 64 69 61 5c 73 2b 28 2d 2d 5b 5e 5c 73 5d 2b 29 5c 73 2a 28 5b 5e 7b 3b 5d 2b 29 3b 2f 29 3b 69 66 28 65 29 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 63 75 73 74 6f 6d 2d 6d Data Ascii: ()}}function C(){if(i(/^@host\s/))return{type:"host",rules:M()}}function x(){var e=i(/^@media([^{]+)/);if(e)return{type:"media",media:(e[1]\|\|"").trim(),rules:M()}}function O(){var e=i(/^@custom-media\s+(--[^\s]+)\s*([^{;]+);/);if(e)return{type:"custom-m
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 3a 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 69 66 28 21 65 26 26 21 75 28 29 29 72 65 74 75 72 6e 20 63 28 22 6d 69 73 73 69 6e 67 20 27 7b 27 22 29 3b 66 6f 72 28 76 61 72 20 72 2c 6e 3d 70 28 29 3b 74 2e 6c 65 6e 67 74 68 26 26 28 65 7c 7c 22 7d 22 21 3d 3d 74 5b 30 5d 29 26 26 28 72 3d 5f 28 29 7c 7c 6a 28 29 29 3b 29 72 2e 74 79 70 65 26 26 6e 2e 70 75 73 68 28 72 29 2c 6e 3d 6e 2e 63 6f 6e 63 61 74 28 70 28 29 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6c 28 29 3f 6e 3a 63 28 22 6d 69 73 73 69 6e 67 20 27 7d 27 22 29 7d 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 73 74 79 6c 65 73 68 65 65 74 22 2c 73 74 79 6c 65 73 68 65 65 74 3a 7b 72 75 6c 65 73 3a 4d 28 21 30 29 2c 65 72 72 6f 72 73 3a 61 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 76 61 72 Data Ascii: :i}}function M(e){if(!e&&!u())return c("missing '{'");for(var r,n=p();t.length&&(e\|\|"}"!==t[0])&&(r=_()\|\|j());)r.type&&n.push(r),n=n.concat(p());return e\|\|l()?n:c("missing '}'")}return{type:"stylesheet",stylesheet:{rules:M(!0),errors:a}}}function u(t){var
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 73 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 7b 22 2b 6f 28 65 2e 64 65 63 6c 61 72 61 74 69 6f 6e 73 29 2b 22 7d 22 7d 2c 6b 65 79 66 72 61 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 40 22 2b 28 65 2e 76 65 6e 64 6f 72 7c 7c 22 22 29 2b 22 6b 65 79 66 72 61 6d 65 73 20 22 2b 65 2e 6e 61 6d 65 2b 22 7b 22 2b 6f 28 65 2e 6b 65 79 66 72 61 6d 65 73 29 2b 22 7d 22 7d 2c 6d 65 64 69 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 40 6d 65 64 69 61 20 22 2b 65 2e 6d 65 64 69 61 2b 22 7b 22 2b 6f 28 65 2e 72 75 6c 65 73 29 2b 22 7d 22 7d 2c 6e 61 6d 65 73 70 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 40 6e 61 6d 65 73 70 61 63 65 20 22 2b 65 2e 6e 61 6d 65 2b 22 Data Ascii: eturn e.values.join(",")+"{"+o(e.declarations)+"}"},keyframes:function(e){return"@"+(e.vendor\|\|"")+"keyframes "+e.name+"{"+o(e.keyframes)+"}"},media:function(e){return"@media "+e.media+"{"+o(e.rules)+"}"},namespace:function(e){return"@namespace "+e.name+"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49729	143.204.215.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	631	OUT	GET /core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css HTTP/1.1 Host: platform-cdn.app-us1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:31 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 28988 Connection: close Date: Tue, 14 Jan 2025 15:20:28 GMT Last-Modified: Tue, 09 Aug 2022 18:56:35 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=0, must-revalidate Accept-Ranges: bytes Server: AmazonS3 ETag: "b6ffcf9edf281e009b6d8a4f00545f6a" X-Cache: Hit from cloudfront Via: 1.1 660f4277d8fbef27985e8a4a97e362cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA53-C1 X-Amz-Cf-Id: wSma4_gJK1J2J29Y5MBi4IEuiUHHcDLYlMGza4kR5m4r5hTr54_QXA== Age: 4
2025-01-14 15:20:31 UTC	15849	IN	Data Raw: 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 7b 63 6c 69 70 3a 72 65 63 74 28 30 20 30 20 30 20 30 29 3b 62 6f 72 64 65 72 3a 30 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 7d 2e 75 69 2d 68 65 6c 70 65 72 2d 72 65 73 65 74 7b 62 6f 72 64 65 72 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 6f 75 74 6c 69 6e 65 3a Data Ascii: .ui-helper-hidden{display:none}.ui-helper-hidden-accessible{clip:rect(0 0 0 0);border:0;height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.ui-helper-reset{border:0;font-size:100%;line-height:1.3;list-style:none;margin:0;outline:
2025-01-14 15:20:31 UTC	13139	IN	Data Raw: 72 20 61 7b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 75 69 2d 62 75 74 74 6f 6e 2c 2e 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 2c 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 2c 68 74 6d 6c 20 2e 75 69 2d 62 75 74 74 6f 6e 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 68 74 6d 6c 20 2e 75 69 2d 62 75 74 74 6f 6e 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 36 66 36 66 36 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 35 63 35 63 35 3b 63 6f 6c 6f 72 3a 23 34 35 34 35 34 35 Data Ascii: r a{color:#333}.ui-button,.ui-state-default,.ui-widget-content .ui-state-default,.ui-widget-header .ui-state-default,html .ui-button.ui-state-disabled:active,html .ui-button.ui-state-disabled:hover{background:#f6f6f6;border:1px solid #c5c5c5;color:#454545

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49728	18.245.45.143	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	618	OUT	GET /media/logo.png HTTP/1.1 Host: d3rxaij56vjege.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:31 UTC	459	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 14241 Connection: close Last-Modified: Fri, 08 Oct 2021 14:59:03 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 07:01:49 GMT ETag: "cc61aa0476fa8cde02bfd796601a1842" X-Cache: Hit from cloudfront Via: 1.1 5a2cb96a37aeca3f9626798c4e9dab28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 2-RZe6DZQYhz8H7QJ-zGBf7Mve7t9OANnAOir3E4Oa0QorABmFLXyg== Age: 30137
2025-01-14 15:20:31 UTC	14241	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 01 6a 08 06 00 00 00 45 c4 f7 d8 00 00 00 09 70 48 59 73 00 00 2c 4b 00 00 2c 4b 01 a5 3d 96 a9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 37 36 49 44 41 54 78 01 ed dd fd 95 e4 c4 f5 30 e0 bb bf e3 ff bd 8e c0 22 02 43 04 6e 22 f0 3a 02 86 08 58 22 a0 89 80 25 82 1d 47 00 44 30 ed 08 58 22 e8 26 02 70 04 f5 aa 56 9a 77 9b 65 3e aa f4 dd 33 cf 73 8e ce 0c 6c 4d b7 5a 2d 95 4a b7 6e 55 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRjEpHYs,K,K=sRGBgAMAa76IDATx0"Cn":X"%GD0X"&pVwe>3slMZ-JnUE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49731	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	875	OUT	GET /admin/css/content.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:31 UTC	369	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 251 Connection: close etag: "3051866078" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c4dfa5642f2-EWR
2025-01-14 15:20:31 UTC	251	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2f 2a 20 41 64 6d 69 6e 20 47 6c 6f 62 61 6c 20 43 6f 6e 74 65 6e 74 20 53 74 79 6c 65 20 20 20 20 09 09 09 09 09 09 20 2a 2f 20 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 0a 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 20 46 72 61 6d 65 77 6f 72 6b 20 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 61 63 2d 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 7b 20 70 61 64 64 69 6e 67 3a 20 30 20 32 33 70 78 20 32 33 70 78 20 32 33 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d Data Ascii: /-------------------------------------------//* Admin Global Content Style / /-------------------------------------------//------ Framework ------*/.ac-content_wrap { padding: 0 23px 23px 23px;width:100%;box-sizing:border-box;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49730	104.17.25.14	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	396	OUT	GET /ajax/libs/jquery-migrate/3.5.2/jquery-migrate.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:31 UTC	960	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"66984d4f-13c6" Last-Modified: Wed, 17 Jul 2024 23:01:35 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 431906 Expires: Sun, 04 Jan 2026 15:20:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K8ozjAuGEknT4InnwFJYRMkq4A5JfEOcRPGmzWO8aSg41Nq2yHRymtnHWKBIDmZx8cMR05a9q5bdden5X9iUvJa6spSCaD%2BX6%2BrWxZGIYV89liQtAkEXSQ3jG3V5%2FHiN%2FKQ9b3UG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e9c4e2b8481d3-IAD alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:31 UTC	409	IN	Data Raw: 33 36 61 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 35 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 36a8/! jQuery Migrate v3.5.2 \| (c) OpenJS Foundation and other contributors \| jquery.com/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 30 3c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 2f 5e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 29 7c 7c 5b 5d 2c 6f 3d 72 2e 65 78 65 63 28 74 29 7c 7c 5b 5d 2c 61 3d 31 3b 61 3c 3d 33 3b 61 2b 2b 29 7b 69 66 28 2b 6f 5b 61 5d 3c 2b 6e 5b 61 5d 29 72 65 74 75 72 6e 20 31 3b 69 66 28 2b 6e 5b 61 5d 3c 2b 6f 5b 61 5d 29 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 35 2e 32 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 73 2e 6d 69 67 72 61 74 65 44 69 73 61 62 Data Ascii: function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.5.2";var t=Object.create(null);s.migrateDisab
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 64 22 29 3b 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 72 2c 6e 2c 6f 29 2c 30 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 72 2c 6e 29 2c 30 7d 73 2e 6d 69 67 72 61 74 65 44 65 64 75 70 6c 69 63 61 74 65 57 61 72 6e 69 6e 67 73 3d 21 30 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 28 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 73 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 7b 7d 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 Data Ascii: d");return a(e,t,r,n,o),0}function i(e,t,r,n){return a(e,t,r,n),0}s.migrateDeduplicateWarnings=!0,s.migrateWarnings=[],void 0===s.migrateTrace&&(s.migrateTrace=!0),s.migrateReset=function(){o={},s.migrateWarnings.length=0},"BackCompat"===n.document.compat
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6a 51 75 65 72 79 2e 66 6e 2e 73 69 7a 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 3b 20 75 73 65 20 74 68 65 20 2e 6c 65 6e 67 74 68 20 70 72 6f 70 65 72 74 79 22 29 2c 63 28 73 2c 22 70 61 72 73 65 4a 53 4f 4e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 70 61 72 73 65 4a 53 4f 4e 22 2c 22 6a 51 75 65 72 79 2e 70 61 72 73 65 4a 53 4f 4e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 4a 53 4f 4e 2e 70 61 72 73 65 22 29 2c 63 28 73 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 73 2e 68 6f 6c 64 52 65 61 64 79 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 22 6a 51 75 65 72 79 2e 68 6f 6c 64 52 65 Data Ascii: jQuery.fn.size() is deprecated and removed; use the .length property"),c(s,"parseJSON",function(){return JSON.parse.apply(null,arguments)},"parseJSON","jQuery.parseJSON is deprecated; use JSON.parse"),c(s,"holdReady",s.holdReady,"holdReady","jQuery.holdRe
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 2c 22 74 79 70 65 22 2c 22 6a 51 75 65 72 79 2e 74 79 70 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 22 6a 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 57 69 6e 64 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 22 69 73 57 69 6e 64 6f 77 22 2c 22 6a 51 75 Data Ascii: e.toString.call(e)]\|\|"object":typeof e},"type","jQuery.type is deprecated"),c(s,"isFunction",function(e){return"function"==typeof e},"isFunction","jQuery.isFunction() is deprecated"),c(s,"isWindow",function(e){return null!=e&&e===e.window},"isWindow","jQu
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 72 79 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 65 74 73 20 62 6f 6f 6c 65 61 6e 20 70 72 6f 70 65 72 74 69 65 73 3a 20 22 2b 74 29 2c 72 2e 70 72 6f 70 28 74 2c 21 31 29 29 7d 29 2c 6a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 72 65 6d 6f 76 65 41 74 74 72 2d 62 6f 6f 6c 22 29 2c 69 28 73 2e 66 6e 2c 22 74 6f 67 67 6c 65 43 6c 61 73 73 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 62 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 75 28 22 74 6f 67 67 6c 65 43 6c 61 73 73 2d 62 6f 6f 6c 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 Data Ascii: ry.fn.removeAttr no longer sets boolean properties: "+t),r.prop(t,!1))}),j.apply(this,arguments)},"removeAttr-bool"),i(s.fn,"toggleClass",function(t){return void 0!==t&&"boolean"!=typeof t?b.apply(this,arguments):(u("toggleClass-bool","jQuery.fn.toggleCla
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 2c 66 6f 6e 74 57 65 69 67 68 74 3a 21 30 2c 67 72 69 64 41 72 65 61 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 45 6e 64 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 74 61 72 74 3a 21 30 2c 67 72 69 64 52 6f 77 3a 21 30 2c 67 72 69 64 52 6f 77 45 6e 64 3a 21 30 2c 67 72 69 64 52 6f 77 53 74 61 72 74 3a 21 30 2c 6c 69 6e 65 48 65 69 67 68 74 3a 21 30 2c 6f 70 61 63 69 74 79 3a 21 30 2c 6f 72 64 65 72 3a 21 30 2c 6f 72 70 68 61 6e 73 3a 21 30 2c 73 63 61 6c 65 3a 21 30 2c 77 69 64 6f 77 73 3a 21 30 2c 7a 49 6e 64 65 78 3a 21 30 2c 7a 6f 6f 6d 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 6f 6f 64 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 6f 70 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 72 6f 6b 65 4d 69 74 Data Ascii: ,fontWeight:!0,gridArea:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnStart:!0,gridRow:!0,gridRowEnd:!0,gridRowStart:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,scale:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeMit
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 61 6d 65 6c 43 61 73 65 64 20 6e 61 6d 65 73 3a 20 22 2b 74 29 2c 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 28 6e 5b 74 5d 3d 72 29 2c 6e 5b 74 5d 29 3a 4d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 64 61 74 61 2d 63 61 6d 65 6c 43 61 73 65 22 29 2c 73 2e 66 78 26 26 28 48 3d 73 2e 54 77 65 65 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 75 6e 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 69 28 73 2e 54 77 65 65 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 75 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 31 3c 73 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 2e 6c 65 6e 67 74 68 26 26 28 75 28 22 65 61 73 69 6e 67 2d 6f 6e 65 2d 61 72 67 22 2c 22 27 6a 51 75 65 72 79 2e 65 61 Data Ascii: amelCased names: "+t),2<arguments.length&&(n[t]=r),n[t]):M.apply(this,arguments)},"data-camelCase"),s.fx&&(H=s.Tween.prototype.run,E=function(e){return e},i(s.Tween.prototype,"run",function(){1<s.easing[this.easing].length&&(u("easing-one-arg","'jQuery.ea
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 26 26 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 75 28 22 6c 6f 61 64 2d 61 66 74 65 72 2d 65 76 65 6e 74 22 2c 22 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2e 2e 2e 29 20 63 61 6c 6c 65 64 20 61 66 74 65 72 20 6c 6f 61 64 20 65 76 65 6e 74 20 6f 63 63 75 72 72 65 64 22 29 2c 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 6c 6f 61 64 2d 61 66 74 65 72 2d 65 76 65 6e 74 22 29 2c 73 2e 65 61 63 68 28 5b 22 6c 6f 61 64 22 2c 22 75 6e 6c 6f 61 64 22 2c 22 65 72 72 6f 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: d",function(e,t){return e===n&&"load"===t&&"complete"===n.document.readyState&&u("load-after-event","jQuery(window).on('load'...) called after load event occurred"),O.apply(this,arguments)},"load-after-event"),s.each(["load","unload","error"],function(e,t
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 68 69 73 2e 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7d 2c 22 70 72 65 2d 6f 6e 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2e 66 6e 2c 22 75 6e 64 65 6c 65 67 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 66 66 28 65 2c 22 2a 2a 22 29 3a 74 68 69 73 2e 6f 66 66 28 74 2c 65 7c 7c 22 2a 2a 22 2c 72 29 7d 2c 22 70 72 65 2d 6f 6e 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2e 66 6e 2c 22 68 6f 76 65 72 22 2c 66 75 6e 63 74 69 6f Data Ascii: his.on(t,e,r,n)},"pre-on-methods","jQuery.fn.delegate() is deprecated"),c(s.fn,"undelegate",function(e,t,r){return 1===arguments.length?this.off(e,""):this.off(t,e\|\|"",r)},"pre-on-methods","jQuery.fn.undelegate() is deprecated"),c(s.fn,"hover",functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49732	104.17.25.14	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	402	OUT	GET /ajax/libs/css-vars-ponyfill/2.4.9/css-vars-ponyfill.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:31 UTC	966	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"65e79664-1ed5" Last-Modified: Tue, 05 Mar 2024 22:02:12 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 7327 Expires: Sun, 04 Jan 2026 15:20:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GN75XxYYh9%2F4jXU9ug3ka3%2FYa5baM%2F5VP92U7KUXS%2B0LR4CHnrTOzC7e6fcrdfX0E44ysQgCnEvDWqRjxXiChKI%2B0LzvWMAImti7SouTIgvEHd%2FohO2dd1NV6NeW%2BBF%2BsFu4TPVH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e9c4e887241d9-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:31 UTC	403	IN	Data Raw: 35 62 35 62 0d 0a 2f 2a 21 0a 20 2a 20 63 73 73 2d 76 61 72 73 2d 70 6f 6e 79 66 69 6c 6c 0a 20 2a 20 76 32 2e 34 2e 39 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 68 69 6c 64 65 6e 62 69 64 64 6c 65 2e 67 69 74 68 75 62 2e 69 6f 2f 63 73 73 2d 76 61 72 73 2d 70 6f 6e 79 66 69 6c 6c 2f 0a 20 2a 20 28 63 29 20 32 30 31 38 2d 32 30 32 34 20 4a 6f 68 6e 20 48 69 6c 64 65 6e 62 69 64 64 6c 65 20 3c 68 74 74 70 3a 2f 2f 68 69 6c 64 65 6e 62 69 64 64 6c 65 2e 63 6f 6d 3e 0a 20 2a 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 Data Ascii: 5b5b/! css-vars-ponyfill * v2.4.9 * https://jhildenbiddle.github.io/css-vars-ponyfill/ * (c) 2018-2024 John Hildenbiddle <http://hildenbiddle.com> * MIT license */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.expor
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 74 3d 61 72 67 Data Ascii: ct";function e(){return e=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},e.apply(this,arguments)}function t(e){var t=arg
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 65 73 74 73 20 6d 75 73 74 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 63 6f 6c 20 28 22 2e 63 6f 6e 63 61 74 28 65 2c 22 29 22 29 29 2c 61 28 6e 75 6c 6c 2c 74 29 7d 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 6f 2e 6f 70 65 6e 28 22 47 45 54 22 2c 65 29 2c 72 2e 6d 69 6d 65 54 79 70 65 26 26 6f 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 6f 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 72 2e 6d 69 6d 65 54 79 70 65 29 2c 72 2e 6f 6e 42 65 66 6f 72 65 53 65 6e 64 28 6f 2c 65 2c 74 29 2c 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 34 3d 3d 3d 6f 2e 72 65 61 64 79 53 74 61 74 65 29 7b 76 61 72 20 65 3d 6f 2e 72 65 73 Data Ascii: ests must use the same protocol (".concat(e,")")),a(null,t)}else{var o=new XMLHttpRequest;o.open("GET",e),r.mimeType&&o.overrideMimeType&&o.overrideMimeType(r.mimeType),r.onBeforeSend(o,e,t),o.onreadystatechange=function(){if(4===o.readyState){var e=o.res
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 72 2c 6e 29 7b 76 61 72 20 6f 3d 73 2e 6f 6e 53 75 63 63 65 73 73 28 65 2c 72 2c 6e 29 3b 66 28 65 3d 76 6f 69 64 20 30 21 3d 3d 6f 26 26 21 31 3d 3d 3d 42 6f 6f 6c 65 61 6e 28 6f 29 3f 22 22 3a 6f 7c 7c 65 2c 72 2c 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 63 5b 74 5d 26 26 28 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 2e 6f 6e 45 72 72 6f 72 28 65 2e 78 68 72 2c 72 2c 65 2e 75 72 6c 29 7d 29 29 2c 21 73 2e 66 69 6c 74 65 72 7c 7c 73 2e 66 69 6c 74 65 72 2e 74 65 73 74 28 65 29 3f 63 5b 74 5d 3d 65 3a 63 5b 74 5d 3d 22 22 2c 69 28 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 Data Ascii: r,n){var o=s.onSuccess(e,r,n);f(e=void 0!==o&&!1===Boolean(o)?"":o\|\|e,r,n,(function(e,n){null===c[t]&&(n.forEach((function(e){return s.onError(e.xhr,r,e.url)})),!s.filter\|\|s.filter.test(e)?c[t]=e:c[t]="",i())}))}function l(e,t){var s=arguments.length>2&&v
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 3d 21 31 21 3d 3d 73 2e 73 6b 69 70 44 69 73 61 62 6c 65 64 26 26 65 2e 64 69 73 61 62 6c 65 64 2c 64 3d 22 73 74 79 6c 65 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 6c 26 26 21 66 29 69 66 28 2d 31 21 3d 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 3a 74 65 78 74 2f 63 73 73 22 29 29 7b 76 61 72 20 70 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 2e 73 75 62 73 74 72 69 6e 67 28 6f 2e 69 6e 64 65 78 4f 66 28 22 2c 22 29 2b 31 29 29 3b 73 2e 75 73 65 43 53 53 4f 4d 26 26 28 70 3d 41 72 72 61 79 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 65 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 73 73 54 65 78 74 7d Data Ascii: =!1!==s.skipDisabled&&e.disabled,d="style"===e.nodeName.toLowerCase();if(l&&!f)if(-1!==o.indexOf("data:text/css")){var p=decodeURIComponent(o.substring(o.indexOf(",")+1));s.useCSSOM&&(p=Array.apply(null,e.sheet.cssRules).map((function(e){return e.cssText}
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6e 64 65 78 4f 66 28 65 2c 6c 2b 31 29 29 3a 31 3d 3d 6e 2e 6c 65 6e 67 74 68 3f 63 3d 5b 6e 2e 70 6f 70 28 29 2c 75 5d 3a 28 28 6f 3d 6e 2e 70 6f 70 28 29 29 3c 73 26 26 28 73 3d 6f 2c 61 3d 75 29 2c 75 3d 72 2e 69 6e 64 65 78 4f 66 28 74 2c 6c 2b 31 29 29 2c 6c 3d 69 3c 75 26 26 69 3e 3d 30 3f 69 3a 75 3b 6e 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 73 2c 61 5d 29 7d 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 7b 70 72 65 73 65 72 76 65 53 74 61 74 69 63 3a 21 30 2c 72 65 6d 6f 76 65 43 6f 6d 6d 65 6e 74 73 3a 21 31 7d 2c 73 3d 65 28 7b Data Ascii: ndexOf(e,l+1)):1==n.length?c=[n.pop(),u]:((o=n.pop())<s&&(s=o,a=u),u=r.indexOf(t,l+1)),l=i<u&&i>=0?i:u;n.length&&(c=[s,a])}return c}function i(t){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n={preserveStatic:!0,removeComments:!1},s=e({
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 29 3b 69 66 28 72 29 7b 69 66 28 72 3d 72 5b 30 5d 2e 74 72 69 6d 28 29 2c 21 69 28 2f 5e 3a 5c 73 2a 2f 29 29 72 65 74 75 72 6e 20 63 28 22 70 72 6f 70 65 72 74 79 20 6d 69 73 73 69 6e 67 20 27 3a 27 22 29 3b 76 61 72 20 6e 3d 69 28 2f 5e 28 28 3f 3a 5c 2f 5c 2a 2e 2a 3f 5c 2a 5c 2f 7c 27 28 3f 3a 5c 5c 27 7c 2e 29 2a 3f 27 7c 22 28 3f 3a 5c 5c 22 7c 2e 29 2a 3f 22 7c 5c 28 28 5c 73 2a 27 28 3f 3a 5c 5c 27 7c 2e 29 2a 3f 27 7c 22 28 3f 3a 5c 5c 22 7c 2e 29 2a 3f 22 7c 5b 5e 29 5d 2a 3f 29 5c 73 2a 5c 29 7c 5b 5e 7d 3b 5d 29 2b 29 2f 29 2c 6f 3d 7b 74 79 70 65 3a 22 64 65 63 6c 61 72 61 74 69 6f 6e 22 2c 70 72 6f 70 65 72 74 79 3a 72 2e 72 65 70 6c 61 63 65 28 65 2c 22 22 29 2c 76 61 6c 75 65 3a 6e 3f 6e 5b 30 5d 2e 72 65 70 6c 61 63 65 28 65 2c 22 22 29 Data Ascii: );if(r){if(r=r[0].trim(),!i(/^:\s/))return c("property missing ':'");var n=i(/^((?:\/\.?\\/\|'(?:\\'\|.)?'\|"(?:\\"\|.)?"\|$(\s'(?:\\'\|.)?'\|"(?:\\"\|.)?"\|[^)]?)\s*$\|[^};])+)/),o={type:"declaration",property:r.replace(e,""),value:n?n[0].replace(e,"")
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 75 6c 65 73 3a 4d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 69 66 28 69 28 2f 5e 40 68 6f 73 74 5c 73 2a 2f 29 29 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 68 6f 73 74 22 2c 72 75 6c 65 73 3a 4d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 76 61 72 20 65 3d 69 28 2f 5e 40 6d 65 64 69 61 28 5b 5e 7b 5d 2b 29 2a 2f 29 3b 69 66 28 65 29 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 6d 65 64 69 61 22 2c 6d 65 64 69 61 3a 28 65 5b 31 5d 7c 7c 22 22 29 2e 74 72 69 6d 28 29 2c 72 75 6c 65 73 3a 4d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 76 61 72 20 65 3d 69 28 2f 5e 40 63 75 73 74 6f 6d 2d 6d 65 64 69 61 5c 73 2b 28 2d 2d 5b 5e 5c 73 5d 2b 29 5c 73 2a 28 5b 5e 7b 3b 5d 2b 29 3b 2f 29 3b 69 66 28 65 29 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 63 75 Data Ascii: ules:M()}}function C(){if(i(/^@host\s/))return{type:"host",rules:M()}}function x(){var e=i(/^@media([^{]+)/);if(e)return{type:"media",media:(e[1]\|\|"").trim(),rules:M()}}function O(){var e=i(/^@custom-media\s+(--[^\s]+)\s*([^{;]+);/);if(e)return{type:"cu
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 73 3a 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 69 66 28 21 65 26 26 21 75 28 29 29 72 65 74 75 72 6e 20 63 28 22 6d 69 73 73 69 6e 67 20 27 7b 27 22 29 3b 66 6f 72 28 76 61 72 20 72 2c 6e 3d 70 28 29 3b 74 2e 6c 65 6e 67 74 68 26 26 28 65 7c 7c 22 7d 22 21 3d 3d 74 5b 30 5d 29 26 26 28 72 3d 5f 28 29 7c 7c 6a 28 29 29 3b 29 72 2e 74 79 70 65 26 26 6e 2e 70 75 73 68 28 72 29 2c 6e 3d 6e 2e 63 6f 6e 63 61 74 28 70 28 29 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6c 28 29 3f 6e 3a 63 28 22 6d 69 73 73 69 6e 67 20 27 7d 27 22 29 7d 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 73 74 79 6c 65 73 68 65 65 74 22 2c 73 74 79 6c 65 73 68 65 65 74 3a 7b 72 75 6c 65 73 3a 4d 28 21 30 29 2c 65 72 72 6f 72 73 3a 61 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 Data Ascii: ations:i}}function M(e){if(!e&&!u())return c("missing '{'");for(var r,n=p();t.length&&(e\|\|"}"!==t[0])&&(r=_()\|\|j());)r.type&&n.push(r),n=n.concat(p());return e\|\|l()?n:c("missing '}'")}return{type:"stylesheet",stylesheet:{rules:M(!0),errors:a}}}function u(
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 73 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 7b 22 2b 6f 28 65 2e 64 65 63 6c 61 72 61 74 69 6f 6e 73 29 2b 22 7d 22 7d 2c 6b 65 79 66 72 61 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 40 22 2b 28 65 2e 76 65 6e 64 6f 72 7c 7c 22 22 29 2b 22 6b 65 79 66 72 61 6d 65 73 20 22 2b 65 2e 6e 61 6d 65 2b 22 7b 22 2b 6f 28 65 2e 6b 65 79 66 72 61 6d 65 73 29 2b 22 7d 22 7d 2c 6d 65 64 69 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 40 6d 65 64 69 61 20 22 2b 65 2e 6d 65 64 69 61 2b 22 7b 22 2b 6f 28 65 2e 72 75 6c 65 73 29 2b 22 7d 22 7d 2c 6e 61 6d 65 73 70 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 40 6e 61 6d 65 73 70 61 63 65 20 22 2b 65 2e Data Ascii: n(e){return e.values.join(",")+"{"+o(e.declarations)+"}"},keyframes:function(e){return"@"+(e.vendor\|\|"")+"keyframes "+e.name+"{"+o(e.keyframes)+"}"},media:function(e){return"@media "+e.media+"{"+o(e.rules)+"}"},namespace:function(e){return"@namespace "+e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49733	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	889	OUT	GET /ac_global/fontello/css/ac-icons.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:31 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 13515 Connection: close etag: "4282151121" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c4eceee41cd-EWR
2025-01-14 15:20:31 UTC	998	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 61 63 2d 69 63 6f 6e 73 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 61 63 2d 69 63 6f 6e 73 2e 65 6f 74 3f 39 36 30 38 39 35 38 27 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 61 63 2d 69 63 6f 6e 73 2e 65 6f 74 3f 39 36 30 38 39 35 38 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 61 63 2d 69 63 6f 6e 73 2e 77 6f 66 66 32 3f 39 36 30 38 39 35 38 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 61 63 2d 69 63 6f 6e 73 2e 77 6f Data Ascii: @font-face { font-family: 'ac-icons'; src: url('../font/ac-icons.eot?9608958'); src: url('../font/ac-icons.eot?9608958#iefix') format('embedded-opentype'), url('../font/ac-icons.woff2?9608958') format('woff2'), url('../font/ac-icons.wo
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 62 6c 6f 63 6b 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 77 69 64 74 68 3a 20 31 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2e 32 65 6d 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 2f 2a 20 6f 70 61 63 69 74 79 3a 20 2e 38 3b 20 2a 2f 0a 0a 20 20 2f 2a 20 46 6f 72 20 73 61 66 65 74 79 20 2d 20 72 65 73 65 74 20 70 61 72 65 6e 74 20 73 74 79 6c 65 73 2c 20 74 68 61 74 20 63 61 6e 20 62 72 65 61 6b 20 67 6c 79 70 68 20 63 6f 64 65 73 2a 2f 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 2f 2a 20 66 69 78 20 62 75 74 74 6f 6e 73 20 68 65 69 67 68 74 Data Ascii: block; text-decoration: inherit; width: 1em; margin-right: .2em; text-align: center; /* opacity: .8; / / For safety - reset parent styles, that can break glyph codes/ font-variant: normal; text-transform: none; / fix buttons height
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6c 69 73 74 5f 64 65 6c 65 74 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 35 36 27 3b 20 7d 20 2f 2a 20 27 56 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 73 65 72 69 65 73 5f 61 64 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 35 37 27 3b 20 7d 20 2f 2a 20 27 57 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 73 65 72 69 65 73 5f 64 65 6c 65 74 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 35 38 27 3b 20 7d 20 2f 2a 20 27 58 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 61 67 5f 61 64 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 35 39 27 3b 20 7d 20 2f 2a 20 27 59 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 61 67 5f 64 65 6c 65 74 65 3a 62 Data Ascii: ' /.ac-icon-list_delete:before { content: '\56'; } / 'V' /.ac-icon-series_add:before { content: '\57'; } / 'W' /.ac-icon-series_delete:before { content: '\58'; } / 'X' /.ac-icon-tag_add:before { content: '\59'; } / 'Y' */.ac-icon-tag_delete:b
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 69 66 79 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 30 27 3b 20 7d 20 2f 2a 20 27 ee a0 90 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6c 69 73 74 2d 62 75 6c 6c 65 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 31 27 3b 20 7d 20 2f 2a 20 27 ee a0 91 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6c 69 73 74 2d 6e 75 6d 62 65 72 65 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 32 27 3b 20 7d 20 2f 2a 20 27 ee a0 92 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 33 27 3b 20 7d 20 2f 2a 20 27 ee a0 93 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 6f 67 2d 63 69 72 63 6c 65 64 3a 62 65 66 Data Ascii: ify:before { content: '\e810'; } /* '' /.ac-icon-list-bullet:before { content: '\e811'; } / '' /.ac-icon-list-numbered:before { content: '\e812'; } / '' /.ac-icon-underline:before { content: '\e813'; } / '' */.ac-icon-cog-circled:bef
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 36 27 3b 20 7d 20 2f 2a 20 27 ee a0 a6 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 69 6e 64 65 6e 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 37 27 3b 20 7d 20 2f 2a 20 27 ee a0 a7 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 69 6e 64 65 6e 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 38 27 3b 20 7d 20 2f 2a 20 27 ee a0 a8 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 6f 64 65 2d 31 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 39 27 3b 20 7d 20 2f 2a 20 27 ee a0 a9 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 62 75 63 6b 65 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a Data Ascii: efore { content: '\e826'; } /* '' /.ac-icon-indent-right:before { content: '\e827'; } / '' /.ac-icon-indent-left:before { content: '\e828'; } / '' /.ac-icon-code-1:before { content: '\e829'; } / '' */.ac-icon-bucket:before { content:
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 7d 20 2f 2a 20 27 ee a0 bd 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 6f 6c 64 65 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 33 65 27 3b 20 7d 20 2f 2a 20 27 ee a0 be 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 33 66 27 3b 20 7d 20 2f 2a 20 27 ee a0 bf 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 72 61 73 68 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 34 30 27 3b 20 7d 20 2f 2a 20 27 ee a1 80 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6d 65 6e 75 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 34 31 27 3b 20 7d 20 2f 2a 20 27 ee a1 81 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 77 Data Ascii: } /* '' /.ac-icon-folder:before { content: '\e83e'; } / '' /.ac-icon-folder-open:before { content: '\e83f'; } / '' /.ac-icon-trash:before { content: '\e840'; } / '' /.ac-icon-menu:before { content: '\e841'; } / '' */.ac-icon-cw
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6e 2d 61 6c 65 72 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 35 35 27 3b 20 7d 20 2f 2a 20 27 ee a1 95 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 61 72 63 68 69 76 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 35 36 27 3b 20 7d 20 2f 2a 20 27 ee a1 96 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 35 37 27 3b 20 7d 20 2f 2a 20 27 ee a1 97 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 64 6f 77 6e 2d 31 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 35 38 27 3b 20 7d 20 2f 2a 20 27 ee a1 98 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 Data Ascii: n-alert:before { content: '\e855'; } /* '' /.ac-icon-archive:before { content: '\e856'; } / '' /.ac-icon-calendar:before { content: '\e857'; } / '' /.ac-icon-down-1:before { content: '\e858'; } / '' */.ac-icon-left:before { content:
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 36 63 27 3b 20 7d 20 2f 2a 20 27 ee a1 ac 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 36 64 27 3b 20 7d 20 2f 2a 20 27 ee a1 ad 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 36 65 27 3b 20 7d 20 2f 2a 20 27 ee a1 ae 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 67 70 6c 75 73 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 36 66 27 3b 20 7d 20 2f 2a 20 27 ee a1 af 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 37 30 27 3b 20 7d 20 2f 2a 20 27 ee a1 b0 27 20 2a 2f 0a 2e Data Ascii: content: '\e86c'; } /* '' /.ac-icon-up:before { content: '\e86d'; } / '' /.ac-icon-cog:before { content: '\e86e'; } / '' /.ac-icon-gplus:before { content: '\e86f'; } / '' /.ac-icon-twitter:before { content: '\e870'; } / '' */.
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 74 3a 20 27 5c 65 38 37 38 27 3b 20 7d 20 2f 2a 20 27 ee a1 b8 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 37 39 27 3b 20 7d 20 2f 2a 20 27 ee a1 b9 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 77 6f 72 64 70 72 65 73 73 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 37 61 27 3b 20 7d 20 2f 2a 20 27 ee a1 ba 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 37 62 27 3b 20 7d 20 2f 2a 20 27 ee a1 bb 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 6c 61 73 68 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 Data Ascii: t: '\e878'; } /* '' /.ac-icon-thumbs-down-alt:before { content: '\e879'; } / '' /.ac-icon-wordpress:before { content: '\e87a'; } / '' /.ac-icon-facebook-squared:before { content: '\e87b'; } / '' */.ac-icon-flash:before { content: '\e
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 74 3a 20 27 5c 65 38 38 66 27 3b 20 7d 20 2f 2a 20 27 ee a2 8f 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 70 61 6c 65 74 74 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 30 27 3b 20 7d 20 2f 2a 20 27 ee a2 90 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 67 70 6c 75 73 2d 63 69 72 63 6c 65 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 31 27 3b 20 7d 20 2f 2a 20 27 ee a2 91 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 32 27 3b 20 7d 20 2f 2a 20 27 ee a2 92 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 6c 69 63 6b 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 33 27 3b 20 7d 20 2f 2a 20 27 ee Data Ascii: t: '\e88f'; } /* '' /.ac-icon-palette:before { content: '\e890'; } / '' /.ac-icon-gplus-circled:before { content: '\e891'; } / '' /.ac-icon-github:before { content: '\e892'; } / '' /.ac-icon-flickr:before { content: '\e893'; } / '

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49734	104.17.25.14	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	380	OUT	GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:31 UTC	966	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64ed75bb-76fe" Last-Modified: Tue, 29 Aug 2023 04:36:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 322108 Expires: Sun, 04 Jan 2026 15:20:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FWsVpKlz%2B4Ez80XGIrSDxDIR24V0Z4jJ%2FDSP6A8uuocJBGK0gV%2BpkE%2Fa6h72whxopuHPJ%2FUtP8s0uYO7Sk2zg5Xn0YOg2YpWm28BdCsNslHmC6sYN%2BV1htVLkjB6yBvU8%2F0hAktE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e9c4f2a0a41e9-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:31 UTC	403	IN	Data Raw: 37 62 65 61 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bea/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 61 65 3d 6f 65 2e 73 6c 69 63 65 2c 67 3d 6f 65 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 73 3d 6f 65 2e 70 75 73 68 2c 73 65 3d 6f 65 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 69 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 75 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 75 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: ct.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 20 6e 2e 63 61 6c 6c 28 65 2c 74 2c 65 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 61 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: n.call(e,t,e)}))},slice:function(){return this.pushStack(ae.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6e 6f 6e 63 65 7d 2c 6e 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 3b 69 66 28 63 28 65 29 29 7b 66 6f 72 28 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d Data Ascii: nonce},n)},each:function(e,t){var n,r=0;if(c(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=ce.text(t);return 1=
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 29 3b 63 65 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 7c 7c 21 28 21 6e 7c 7c 31 21 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 65 2e 63 6f 6e 74 61 69 6e 73 3f 65 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 6e 29 29 29 7d 3b 76 61 72 20 66 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c Data Ascii: );ce.contains=function(e,t){var n=t&&t.parentNode;return e===n\|\|!(!n\|\|1!==n.nodeType\|\|!(e.contains?e.contains(n):e.compareDocumentPosition&&16&e.compareDocumentPosition(n)))};var f=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 67 65 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 67 65 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 66 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 Data Ascii: d\|(([+-]\|)(\\d)n\|)"+ge+"(?:([+-]\|)"+ge+"(\\d+)\|))"+ge+"\\)\|)","i"),bool:new RegExp("^(?:"+f+")$","i"),needsContext:new RegExp("^"+ge+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+ge+"((?:-\\d)?\\d)"+ge+"\$\|)(?=[^-]\|$)","i")},N=/^(?:input\|sele
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 64 2e 74 65 73 74 28 74 29 29 29 7b 69 66 28 63 3d 74 2c 66 3d 65 2c 31 3d 3d 3d 70 26 26 28 78 2e 74 65 73 74 28 74 29 7c 7c 6d 2e 74 65 73 74 28 74 29 29 29 7b 28 66 3d 48 2e 74 65 73 74 28 74 29 26 26 55 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 65 26 26 6c 65 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 28 73 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 59 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d Data Ascii: d.test(t))){if(c=t,f=e,1===p&&(x.test(t)\|\|m.test(t))){(f=H.test(t)&&U(e.parentNode)\|\|e)==e&&le.scope\|\|((s=e.getAttribute("id"))?s=ce.escapeSelector(s):e.setAttribute("id",s=S)),o=(l=Y(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 72 3d 28 54 3d 6e 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 43 3d 21 63 65 2e 69 73 58 4d 4c 44 6f 63 28 54 29 2c 69 3d 72 2e 6d 61 74 63 68 65 73 7c 7c 72 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 2c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 79 65 21 3d 54 26 26 28 74 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 4d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e Data Ascii: ocumentElement&&(r=(T=n).documentElement,C=!ce.isXMLDoc(T),i=r.matches\|\|r.webkitMatchesSelector\|\|r.msMatchesSelector,r.msMatchesSelector&&ye!=T&&(t=T.defaultView)&&t.top!==t&&t.addEventListener("unload",M),le.getById=$(function(e){return r.appendChild(e).
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 43 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 64 3d 5b 5d 2c 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 53 2b 22 27 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 53 2b 22 2d 5c 72 5c 5c 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 Data Ascii: of t.getElementsByClassName&&C)return t.getElementsByClassName(e)},d=[],$(function(e){var t;r.appendChild(e).innerHTML="<a id='"+S+"' href='' disabled='disabled'></a><select id='"+S+"-\r\\' disabled='disabled'><option selected=''></option></select>",e.que
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 49 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 56 28 65 29 2c 43 26 26 21 68 5b 74 2b 22 20 22 5d 26 26 28 21 64 7c 7c 21 64 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 6e 3d 69 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 6e 7c 7c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 54 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 Data Ascii: I.matchesSelector=function(e,t){if(V(e),C&&!h[t+" "]&&(!d\|\|!d.test(t)))try{var n=i.call(e,t);if(n\|\|le.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return n}catch(e){h(t,!0)}return 0<I(t,T,null,[e]).length},I.contains=function(e,t){return(e.owne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49735	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	873	OUT	GET /admin/css/style.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:31 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 153634 Connection: close etag: "316863886" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c4f2fe4de94-EWR
2025-01-14 15:20:31 UTC	998	IN	Data Raw: 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 57 41 52 4e 49 4e 47 3a 20 44 45 50 52 45 43 41 54 45 44 20 2d 20 44 4f 20 4e 4f 54 20 41 44 44 20 54 4f 20 54 48 49 53 20 46 49 4c 45 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2f 2a 0a 20 20 47 6c 6f 62 61 6c 20 65 6c 65 6d 65 6e 74 20 73 74 79 6c 69 6e 67 0a 2a 2f 0a 0a 2f 2a 20 49 6d 70 6f 72 74 20 2f 20 49 6e 63 6c 75 64 65 20 66 6f 6e 74 73 20 68 65 72 65 20 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 49 42 4d 2b 50 6c 65 78 2b 53 61 6e 73 3a 32 30 30 2c 33 30 30 2c 34 Data Ascii: /* --------------------------- WARNING: DEPRECATED - DO NOT ADD TO THIS FILE-------------------------------// Global element styling// Import / Include fonts here */@import url("https://fonts.googleapis.com/css?family=IBM+Plex+Sans:200,300,4
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 2f 0a 2e 6e 6f 72 6d 61 6c 2d 74 65 78 74 20 7b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 36 30 30 29 3b 20 7d 0a 2e 6d 65 64 69 75 6d 2d 74 65 78 74 20 7b 20 63 6f 6c 6f 72 3a 20 23 37 41 37 41 37 41 3b 20 7d 0a 2e 6c 69 67 68 74 2d 74 65 78 74 20 7b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 34 30 30 29 3b 20 7d 0a 2e 78 6c 69 67 68 74 2d 74 65 78 74 20 7b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 34 30 30 29 3b 20 7d 0a 2e 74 65 78 74 2d 72 65 64 20 7b 20 63 6f 6c 6f 72 3a 20 23 46 33 37 43 37 42 3b 7d 0a 2e 74 65 78 74 2d 67 72 65 65 6e 20 7b 20 63 6f 6c 6f 72 3a 20 23 36 30 43 42 39 38 3b 7d 0a 2e 74 65 78 74 2d 62 6c 75 65 20 7b 20 63 6f 6c 6f 72 3a 20 23 34 30 37 33 62 35 3b 7d 0a 0a 2f 2a 2d 2d Data Ascii: /.normal-text { color: var(--slate-600); }.medium-text { color: #7A7A7A; }.light-text { color: var(--slate-400); }.xlight-text { color: var(--slate-400); }.text-red { color: #F37C7B;}.text-green { color: #60CB98;}.text-blue { color: #4073b5;}/*--
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 6a 75 73 74 69 66 79 2d 72 69 67 68 74 20 7b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 65 6e 64 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 2d 6d 6f 7a 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 6a 75 73 74 69 66 79 2d 61 72 6f 75 6e 64 20 7b 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 64 69 73 74 72 69 62 75 74 65 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d Data Ascii: ify-content: flex-start; }.ac_flex-justify-right { -webkit-box-pack: end;-ms-flex-pack: end;-webkit-justify-content: flex-end;-moz-justify-content: flex-end;justify-content: flex-end; }.ac_flex-justify-around { -ms-flex-pack: distribute;-webkit-justify-
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 31 36 2e 36 36 37 25 3b 20 66 6c 65 78 3a 20 30 20 30 20 31 36 2e 36 36 37 25 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 63 6f 6c 2e 61 63 5f 66 6c 65 78 33 20 7b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 6d 6f 7a 2d 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 20 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 63 6f 6c 2e 61 63 5f 66 6c 65 78 34 20 7b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 20 30 20 30 20 33 33 2e 33 33 Data Ascii: -ms-flex: 0 0 16.667%; flex: 0 0 16.667%; }.ac_flex-col.ac_flex3 { -webkit-box-flex: 0; -webkit-flex: 0 0 25%; -moz-box-flex: 0; -moz-flex: 0 0 25%; -ms-flex: 0 0 25%; flex: 0 0 25%; }.ac_flex-col.ac_flex4 { -webkit-box-flex: 0; -webkit-flex: 0 0 33.33
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 31 2e 36 36 37 25 3b 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 39 31 2e 36 36 37 25 3b 20 66 6c 65 78 3a 20 30 20 30 20 39 31 2e 36 36 37 25 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 63 6f 6c 2e 61 63 5f 66 6c 65 78 31 32 20 7b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 20 30 20 30 20 31 30 30 25 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 6d 6f 7a 2d 66 6c 65 78 3a 20 30 20 30 20 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 31 30 30 25 3b 20 66 6c 65 78 3a 20 30 20 30 20 31 30 30 25 3b 20 7d 0a 0a 2f 2a 20 43 6f 6c 75 6d 6e 20 6d 6f 64 69 66 69 65 72 73 20 2a 2f 0a 2e 61 63 5f 66 6c 65 78 2d 61 75 74 6f 68 65 69 67 68 74 20 7b 20 64 69 73 70 6c 61 79 3a 20 2d Data Ascii: 1.667%; -ms-flex: 0 0 91.667%; flex: 0 0 91.667%; }.ac_flex-col.ac_flex12 { -webkit-box-flex: 0; -webkit-flex: 0 0 100%; -moz-box-flex: 0; -moz-flex: 0 0 100%; -ms-flex: 0 0 100%; flex: 0 0 100%; }/* Column modifiers */.ac_flex-autoheight { display: -
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 20 7b 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 74 77 6f 68 61 6c 66 20 7b 20 77 69 64 74 68 3a 20 32 31 2e 37 34 34 34 34 34 34 34 34 34 34 25 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 74 68 72 65 65 20 7b 20 77 69 64 74 68 3a 20 32 35 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 74 68 72 65 65 68 61 6c 66 20 7b 20 77 69 64 74 68 3a 20 32 37 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 66 6f 75 72 20 7b 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 66 69 76 65 20 7b 20 77 69 64 74 68 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 73 69 78 20 7b 20 77 69 64 74 68 3a 20 34 38 2e 32 36 36 36 36 36 36 36 36 36 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e Data Ascii: { width: 16.66666667%; }.ac_col.twohalf { width: 21.74444444444% }.ac_col.three { width: 25%; }.ac_col.threehalf { width: 27%; }.ac_col.four { width: 33.3333333%; }.ac_col.five { width: 41.66666667%; }.ac_col.six { width: 48.2666666666%; }.ac_col.
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 65 6d 3b 20 7d 0a 2e 61 63 5f 66 73 2d 73 68 6d 65 64 69 75 6d 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 65 6d 3b 20 7d 0a 2e 61 63 5f 66 73 2d 6c 61 72 67 65 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 65 6d 3b 20 7d 0a 2e 61 63 5f 66 73 2d 78 6c 61 72 67 65 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 39 65 6d 3b 20 7d 0a 2e 61 63 5f 66 73 2d 78 78 6c 61 72 67 65 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 Data Ascii: em; }.ac_fs-shmedium { font-size: 14px !important;line-height: 1.6em; }.ac_fs-large { font-size: 16px !important;line-height: 1.6em; }.ac_fs-xlarge { font-size: 17px !important;line-height: 1.9em; }.ac_fs-xxlarge { font-size: 20px !important;line-heig
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 5c 0a 20 20 20 54 61 67 73 0a 5c 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 75 6c 2e 74 61 67 69 74 20 7b 20 70 61 64 64 69 6e 67 3a 20 30 3b 6d 61 72 67 69 6e 3a 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 20 7d 0a 75 6c 2e 74 61 67 69 74 20 2e 74 61 67 69 74 2d 63 68 6f 69 63 65 20 7b 20 70 Data Ascii: /-------------------------------------------------------------------------\ Tags\------------------------------------------------------------------------/ul.tagit { padding: 0;margin: 0;background: none;border: none; }ul.tagit .tagit-choice { p
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 20 35 70 78 20 31 34 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 2e 61 63 5f 62 61 64 67 65 2e 68 6f 76 65 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 61 63 5f 62 61 64 67 65 2e 62 6c 75 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 31 45 39 46 34 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 30 37 33 42 35 3b 0a 7d 0a 2e 61 63 5f 62 61 64 67 65 2e 62 6f 72 64 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 32 30 30 29 20 31 70 78 20 73 6f 6c 69 64 3b 0a 7d 0a 2e 61 63 5f 62 61 64 67 65 2e 68 6f 76 65 72 3a 68 6f 76 65 72 20 7b 0a 20 20 62 61 Data Ascii: ding: 5px 14px; display: inline-block;}.ac_badge.hover { cursor: pointer;}.ac_badge.blue { background-color: #E1E9F4; color: #4073B5;}.ac_badge.border { background: none; border: var(--slate-200) 1px solid;}.ac_badge.hover:hover { ba
2025-01-14 15:20:31 UTC	1369	IN	Data Raw: 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 63 6f 6c 6f 72 3a 23 35 35 35 3b 20 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7a 6f 6f 6d 3a 31 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 20 7d 0a 2e 62 74 6e 73 6d 61 6c 6c 20 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 38 66 38 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 20 62 6f 72 64 65 72 3a 31 70 Data Ascii: ; border-radius:4px; display:inline-block; color:#555; cursor:pointer!important; zoom:1; -moz-box-sizing:border-box; -webkit-box-sizing:border-box; box-sizing:border-box; }.btnsmall {margin:0 0 10px; background-color:#f8f8f8;border-radius:3px; border:1p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49737	104.17.25.14	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	386	OUT	GET /ajax/libs/jqueryui/1.13.2/jquery-ui.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:32 UTC	958	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"62e445d5-10919" Last-Modified: Fri, 29 Jul 2022 20:40:53 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 58252 Expires: Sun, 04 Jan 2026 15:20:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eaP9u6Sbr36UQSwKhYmEwg2JZDnQiejfV0r8ozMlO2DT7t2o2nQg2bOiDjNwYuag10FoGK68MnssW0CXACGiu%2FD5%2BPzxyTRvbdeRXGNnYrj0Rm2fQNunBQsczgOSuOHjlupgQ%2FA0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901e9c501b4781e5-IAD alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:32 UTC	411	IN	Data Raw: 37 62 65 62 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 Data Ascii: 7beb/! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effec
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 2d 73 63 61 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 68 61 6b 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 69 7a 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 6c 69 64 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 74 72 61 6e 73 66 65 72 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 70 61 74 63 68 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 Data Ascii: -scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js,
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 68 69 73 7c 7c 21 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 29 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 74 2c 65 29 3b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 28 74 2c 65 29 7d 2c 56 2e 65 78 74 65 6e 64 28 6e 2c 73 2c 7b 76 65 72 73 69 6f 6e 3a 65 2e 76 65 72 73 69 6f 6e 2c 5f 70 72 6f 74 6f 3a 56 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 29 2c 5f 63 68 69 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 73 3a 5b 5d 7d 29 2c 28 6f 3d 6e 65 77 20 69 29 2e 6f 70 74 69 6f 6e 73 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 2e 6f 70 74 69 6f 6e 73 29 2c 56 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b Data Ascii: =function(t,e){if(!this\|\|!this._createWidget)return new n(t,e);arguments.length&&this._createWidget(t,e)},V.extend(n,s,{version:e.version,_proto:V.extend({},e),_childConstructors:[]}),(o=new i).options=V.widget.extend({},o.options),V.each(e,function(e,s){
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 69 3f 28 6e 3d 65 2c 21 31 29 3a 65 3f 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5b 69 5d 7c 7c 22 5f 22 3d 3d 3d 69 2e 63 68 61 72 41 74 28 30 29 3f 56 2e 65 72 72 6f 72 28 22 6e 6f 20 73 75 63 68 20 6d 65 74 68 6f 64 20 27 22 2b 69 2b 22 27 20 66 6f 72 20 22 2b 6f 2b 22 20 77 69 64 67 65 74 20 69 6e 73 74 61 6e 63 65 22 29 3a 28 74 3d 65 5b 69 5d 2e 61 70 70 6c 79 28 65 2c 73 29 29 21 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 28 6e 3d 74 26 26 74 2e 6a 71 75 65 72 79 3f 6e 2e 70 75 73 68 53 74 61 63 6b 28 74 2e 67 65 74 28 29 29 3a 74 2c 21 31 29 3a 76 6f 69 64 20 30 3a 56 2e 65 72 72 6f 72 28 22 63 61 6e 6e 6f 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 73 20 6f 6e 20 22 2b 6f 2b 22 20 70 72 69 6f 72 20 74 6f 20 69 6e 69 74 69 61 6c Data Ascii: i?(n=e,!1):e?"function"!=typeof e[i]\|\|"_"===i.charAt(0)?V.error("no such method '"+i+"' for "+o+" widget instance"):(t=e[i].apply(e,s))!==e&&void 0!==t?(n=t&&t.jquery?n.pushStack(t.get()):t,!1):void 0:V.error("cannot call methods on "+o+" prior to initial
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 73 2e 5f 69 6e 69 74 28 29 7d 2c 5f 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 2c 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 3a 56 2e 6e 6f 6f 70 2c 5f 63 72 65 61 74 65 3a 56 2e 6e 6f 6f 70 2c 5f 69 6e 69 74 3a 56 2e 6e 6f 6f 70 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 28 29 2c 56 2e 65 61 63 68 28 74 68 69 73 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 2c 74 29 7d 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 Data Ascii: s._init()},_getCreateOptions:function(){return{}},_getCreateEventData:V.noop,_create:V.noop,_init:V.noop,destroy:function(){var i=this;this._destroy(),V.each(this.classesElementLookup,function(t,e){i._removeClass(e,t)}),this.element.off(this.eventNamespac
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 77 69 64 67 65 74 28 29 2c 74 68 69 73 2e 77 69 64 67 65 74 46 75 6c 6c 4e 61 6d 65 2b 22 2d 64 69 73 61 62 6c 65 64 22 2c 6e 75 6c 6c 2c 21 21 74 29 2c 74 26 26 28 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 68 6f 76 65 72 61 62 6c 65 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 66 6f 63 75 73 61 62 6c 65 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 66 6f 63 75 73 22 29 29 7d 2c 65 6e 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 73 28 7b 64 69 73 61 Data Ascii: led:function(t){this._toggleClass(this.widget(),this.widgetFullName+"-disabled",null,!!t),t&&(this._removeClass(this.hoverable,null,"ui-state-hover"),this._removeClass(this.focusable,null,"ui-state-focus"))},enable:function(){return this._setOptions({disa
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 69 3d 7b 65 78 74 72 61 3a 6e 3f 65 3a 69 2c 6b 65 79 73 3a 6e 3f 74 3a 65 2c 65 6c 65 6d 65 6e 74 3a 6e 3f 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3a 74 2c 61 64 64 3a 73 3d 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 73 3f 73 3a 69 7d 3b 72 65 74 75 72 6e 20 69 2e 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 5f 63 6c 61 73 73 65 73 28 69 29 2c 73 29 2c 74 68 69 73 7d 2c 5f 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 74 29 7b 76 61 72 20 61 2c 72 3d 74 68 69 73 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 28 74 3d 6f 2c 6f 3d 6e 2c 6e 3d 21 31 29 2c 74 3f 28 6f 3d 61 3d 56 28 6f 29 2c 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 3d 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 2e 61 64 64 28 6f 29 29 3a 28 Data Ascii: i={extra:n?e:i,keys:n?t:e,element:n?this.element:t,add:s="boolean"==typeof s?s:i};return i.element.toggleClass(this._classes(i),s),this},_on:function(n,o,t){var a,r=this;"boolean"!=typeof n&&(t=o,o=n,n=!1),t?(o=a=V(o),this.bindings=this.bindings.add(o)):(
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 6e 28 74 29 7b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 66 6f 63 75 73 22 29 7d 7d 29 7d 2c 5f 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 73 2c 6e 2c 6f 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 74 5d 3b 69 66 28 69 3d 69 7c 7c 7b 7d 2c 28 65 3d 56 2e 45 76 65 6e 74 28 65 29 29 2e 74 79 70 65 3d 28 74 3d 3d 3d 74 68 69 73 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3f 74 3a 74 68 69 73 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 2b 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 65 2e 74 61 72 67 65 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2c 6e 3d 65 2e 6f 72 69 67 69 Data Ascii: n(t){this._removeClass(V(t.currentTarget),null,"ui-state-focus")}})},_trigger:function(t,e,i){var s,n,o=this.options[t];if(i=i\|\|{},(e=V.Event(e)).type=(t===this.widgetEventPrefix?t:this.widgetEventPrefix+t).toLowerCase(),e.target=this.element[0],n=e.origi
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 6e 3b 27 3e 3c 64 69 76 20 73 74 79 6c 65 3d 27 68 65 69 67 68 74 3a 33 30 30 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 27 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 29 2c 69 3d 65 2e 63 68 69 6c 64 72 65 6e 28 29 5b 30 5d 3b 72 65 74 75 72 6e 20 56 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 65 29 2c 74 3d 69 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 65 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 22 2c 22 73 63 72 6f 6c 6c 22 29 2c 74 3d 3d 3d 28 69 3d 69 2e 6f 66 66 73 65 74 57 69 64 74 68 29 26 26 28 69 3d 65 5b 30 5d 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 2c 65 2e 72 65 6d 6f 76 65 28 29 2c 73 3d 74 2d 69 7d 2c 67 65 74 53 63 72 6f 6c 6c 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 69 73 57 69 6e 64 6f 77 7c 7c 74 2e 69 73 Data Ascii: n;'><div style='height:300px;width:auto;'></div></div>"),i=e.children()[0];return V("body").append(e),t=i.offsetWidth,e.css("overflow","scroll"),t===(i=i.offsetWidth)&&(i=e[0].clientWidth),e.remove(),s=t-i},getScrollInfo:function(t){var e=t.isWindow\|\|t.is
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 65 2e 6f 66 66 73 65 74 28 29 7d 3b 72 65 74 75 72 6e 20 5f 5b 30 5d 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 28 75 2e 61 74 3d 22 6c 65 66 74 20 74 6f 70 22 29 2c 70 3d 65 2e 77 69 64 74 68 2c 66 3d 65 2e 68 65 69 67 68 74 2c 6d 3d 56 2e 65 78 74 65 6e 64 28 7b 7d 2c 67 3d 65 2e 6f 66 66 73 65 74 29 2c 56 2e 65 61 63 68 28 5b 22 6d 79 22 2c 22 61 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 69 3d 28 75 5b 74 68 69 73 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 28 69 3d 31 3d 3d 3d 69 2e 6c 65 6e 67 74 68 3f 6f 2e 74 65 73 74 28 69 5b 30 5d 29 3f 69 2e 63 6f 6e 63 61 74 28 5b 22 63 65 6e 74 65 72 22 5d 29 3a 6c 2e 74 65 73 74 28 69 5b 30 5d 29 3f 5b 22 63 65 6e 74 65 72 Data Ascii: ight(),offset:e.offset()};return _[0].preventDefault&&(u.at="left top"),p=e.width,f=e.height,m=V.extend({},g=e.offset),V.each(["my","at"],function(){var t,e,i=(u[this]\|\|"").split(" ");(i=1===i.length?o.test(i[0])?i.concat(["center"]):l.test(i[0])?["center

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49738	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:31 UTC	875	OUT	GET /admin/css/default.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:32 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:32 GMT Content-Type: text/css; charset=utf-8 Content-Length: 55497 Connection: close etag: "3745160230" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c504ac241ef-EWR
2025-01-14 15:20:32 UTC	998	IN	Data Raw: 0a 0a 2f 2a 20 50 41 47 45 20 44 45 46 41 55 4c 54 53 20 2a 2f 0a 2f 2a 20 53 65 74 74 69 6e 67 20 74 68 65 20 6d 61 69 6e 20 62 6f 64 79 2c 20 66 6f 6e 74 2c 20 63 6f 6c 6f 72 2c 20 61 6e 64 20 6c 69 6e 6b 20 64 65 66 61 75 6c 74 73 20 2a 2f 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 20 44 4f 20 4e 4f 54 20 45 44 49 54 20 54 48 49 53 20 46 49 4c 45 2e 20 20 55 53 45 20 4d 41 49 4e 20 43 53 53 20 46 49 4c 45 20 54 4f 20 4f 56 45 52 52 49 44 45 20 2a 2f 0a 0a 2f 2a 20 44 4f 20 4e 4f 54 20 45 44 49 54 20 54 48 49 53 20 46 49 4c 45 2e 20 20 55 53 45 20 4d 41 49 4e 20 43 53 53 20 46 49 4c 45 20 54 4f 20 4f 56 45 52 52 49 44 45 20 2a 2f 0a 0a 2f 2a 20 44 4f 20 4e 4f 54 20 45 44 49 54 20 54 48 49 53 20 46 49 4c 45 2e 20 20 55 53 45 20 4d 41 49 4e 20 43 53 53 Data Ascii: /* PAGE DEFAULTS // Setting the main body, font, color, and link defaults // DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE // DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE // DO NOT EDIT THIS FILE. USE MAIN CSS
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 0a 0a 09 6d 61 72 67 69 6e 3a 31 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 0a 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 35 70 78 3b 20 77 69 64 74 68 3a 33 30 30 70 78 3b 20 7d 0a 09 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 69 6d 67 20 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 20 7d 0a 09 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 61 2c 20 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 61 3a 76 69 73 69 74 65 64 7b 20 63 6f 6c 6f 72 3a 23 39 39 39 39 39 39 3b 20 7d 0a 09 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 Data Ascii: ing-bottom:20px;margin:1px;margin-bottom:0;}.ac_login_box_container{ padding-top:75px; width:300px; }.ac_login_box_container img { margin-bottom:8px; }.ac_login_box_container a, .ac_login_box_container a:visited{ color:#999999; }.ac_login_box
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 6c 65 66 74 3a 36 70 78 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 36 70 78 20 36 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 36 70 78 20 36 70 78 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 32 30 36 2c 20 32 30 36 2c 20 32 30 36 2c 20 30 2e 36 29 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 32 30 36 2c 20 32 30 36 2c 20 32 30 36 2c 20 30 2e 36 29 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 32 30 36 2c 20 32 30 36 2c 20 32 30 36 2c 20 30 2e 36 29 7d 0a 0a 2f 2a 20 43 6f 72 65 20 Data Ascii: border-radius-bottomleft:6px; -webkit-border-radius:0 0 6px 6px; border-radius:0 0 6px 6px; -webkit-box-shadow:0 1px 1px rgba(206, 206, 206, 0.6); -moz-box-shadow:0 1px 1px rgba(206, 206, 206, 0.6); box-shadow:0 1px 1px rgba(206, 206, 206, 0.6)}/* Core
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 61 63 5f 61 64 6d 69 6e 5f 73 69 64 65 20 68 32 7b 20 63 6f 6c 6f 72 3a 20 23 37 44 38 46 41 32 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 20 7d 0a 09 09 23 61 63 5f 61 64 6d 69 6e 5f 73 69 64 65 20 68 31 20 61 2c 20 23 61 63 5f 61 64 6d 69 6e 5f 73 69 64 65 20 68 31 20 61 3a 76 69 73 69 74 65 64 7b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 63 6f 6c 6f 72 Data Ascii: ac_admin_side h2{ color: #7D8FA2; font-size:11px; font-weight:normal; display:block; margin-bottom:5px; padding-bottom:3px; }#ac_admin_side h1 a, #ac_admin_side h1 a:visited{ border:none; display:inline; margin:0; padding:0; text-decoration:none; color
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 20 2e 73 74 61 72 74 75 70 5f 63 6f 6e 74 61 69 6e 65 72 7b 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 45 45 46 33 46 39 20 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 20 7d 0a 09 09 23 61 63 5f 61 64 6d 69 6e 5f 63 6f 6e 74 65 6e 74 20 2e 73 74 61 72 74 75 70 5f 63 6f 6e 74 61 69 6e 65 72 20 68 33 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 63 5f 67 6c 6f 62 61 6c 2f 6d 65 64 69 61 2f 61 63 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 2e 67 69 66 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 44 45 45 37 45 46 3b 20 70 61 64 Data Ascii: .startup_container{ border: 2px solid #EEF3F9 ; margin-bottom:15px; }#ac_admin_content .startup_container h3{ background:url(../../ac_global/media/ac_table_header.gif); background-position:top; background-repeat:repeat-x; background-color:#DEE7EF; pad
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 63 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 2e 67 69 66 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 44 45 45 37 45 46 3b 20 70 61 64 64 69 6e 67 3a 35 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 20 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 45 45 37 45 46 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 30 44 42 45 35 3b 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 45 45 37 45 46 3b 20 7d 0a 09 2e 61 63 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 20 74 64 20 61 2c 20 2e 61 63 5f 74 61 Data Ascii: c_table_header.gif); background-position:top; background-repeat:repeat-x; background-color:#DEE7EF; padding:5px; color: #666666; border-top:1px solid #DEE7EF; border-bottom:1px solid #D0DBE5; border-left:1px solid #DEE7EF; }.ac_table_header td a, .ac_ta
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 61 72 5f 6e 6f 6e 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 63 5f 67 6c 6f 62 61 6c 2f 6d 65 64 69 61 2f 61 63 5f 73 74 61 72 5f 6e 6f 6e 65 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 7d 0a 61 2e 61 63 5f 73 74 61 72 5f 68 61 6c 66 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 63 5f 67 6c 6f 62 61 6c 2f 6d 65 64 69 61 2f 61 63 5f 73 74 61 72 5f 68 61 6c 66 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 7d 0a 61 2e 61 63 5f 73 74 61 Data Ascii: ar_none { background: url(../../ac_global/media/ac_star_none.gif) no-repeat center; padding:0; border:none; margin:0; }a.ac_star_half { background: url(../../ac_global/media/ac_star_half.gif) no-repeat center; padding:0; border:none; margin:0; }a.ac_sta
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 3a 33 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 63 5f 67 6c 6f 62 61 6c 2f 6d 65 64 69 61 2f 64 72 6f 70 64 6f 77 6e 5f 64 6f 77 6e 5f 61 72 72 6f 77 2e 67 69 66 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 72 69 67 68 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 0a 0a 7d 0a 0a 2e 66 69 65 6c 64 5f 64 72 6f 70 64 6f 77 6e 5f 76 61 6c 75 65 7b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 39 39 39 3b 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 36 36 36 36 36 36 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 36 36 36 36 36 36 3b 0a 09 Data Ascii: :3px;background:url(../../ac_global/media/dropdown_down_arrow.gif);background-position:right;background-repeat:no-repeat;}.field_dropdown_value{border-left:1px solid #999999;border-right:1px solid #666666;border-bottom:1px solid #666666;
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 74 6f 70 5f 6e 61 76 5f 62 75 74 74 6f 6e 2c 0a 2e 62 6f 74 74 6f 6d 5f 6e 61 76 5f 62 75 74 74 6f 6e 20 7b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 62 6c 61 63 6b 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 0a 0a 0a 0a 2e 61 63 5f 69 63 6f 6e 5f 73 65 6c 65 63 74 20 7b 20 77 69 64 74 68 3a 20 34 31 30 70 78 3b 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 20 70 61 64 64 69 6e 67 3a 20 32 70 78 3b 20 62 6f Data Ascii: 0px;margin-right: 0;}.top_nav_button,.bottom_nav_button {border: 1px solid black;border-top: 1px solid white;border-left: 1px solid white;font-weight: bold;}.ac_icon_select { width: 410px; height: 60px; overflow: auto; padding: 2px; bo
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 53 68 61 64 6f 77 28 63 6f 6c 6f 72 3d 67 72 61 79 2c 64 69 72 65 63 74 69 6f 6e 3d 31 33 35 29 3b 0a 7d 0a 0a 23 64 68 74 6d 6c 70 6f 69 6e 74 65 72 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 6c 65 66 74 3a 20 2d 33 30 30 70 78 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 31 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 0a 0a 2e 61 63 5f 70 61 67 69 6e 61 74 6f 72 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 43 43 43 43 43 43 3b 0a 09 63 6f 6c 6f 72 3a 23 36 36 36 36 36 36 3b 0a 7d 0a 0a 2e Data Ascii: id:DXImageTransform.Microsoft.Shadow(color=gray,direction=135);}#dhtmlpointer{position:absolute;left: -300px;z-index: 101;visibility: hidden;}.ac_paginator {font-size:10px;margin-top:5px;border:1px solid #CCCCCC;color:#666666;}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49740	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:32 UTC	911	OUT	GET /node_modules/@activecampaign/camp-core-css/dist/build.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:32 UTC	450	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:32 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1856241 Connection: close etag: "345110756" last-modified: Mon, 13 Jan 2025 21:19:38 GMT CF-Cache-Status: MISS Expires: Tue, 14 Jan 2025 19:20:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c51b9584cfb-BOS
2025-01-14 15:20:32 UTC	919	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 62 2d 30 3a 30 3b 2d 2d 62 2d 31 30 30 3a 31 70 78 3b 2d 2d 62 2d 32 30 30 3a 32 70 78 3b 2d 2d 62 2d 33 30 30 3a 34 70 78 3b 2d 2d 62 2d 6e 6f 6e 65 3a 6e 6f 6e 65 3b 2d 2d 62 2d 64 61 73 68 65 64 3a 64 61 73 68 65 64 3b 2d 2d 62 2d 73 6f 6c 69 64 3a 73 6f 6c 69 64 3b 2d 2d 72 61 64 69 69 2d 30 3a 30 3b 2d 2d 72 61 64 69 69 2d 31 30 30 3a 34 70 78 3b 2d 2d 72 61 64 69 69 2d 32 30 30 3a 38 70 78 3b 2d 2d 72 61 64 69 69 2d 72 6f 75 6e 64 65 64 3a 39 39 72 65 6d 3b 2d 2d 72 61 64 69 69 2d 63 69 72 63 6c 65 3a 31 30 30 25 3b 2d 2d 73 68 61 64 6f 77 2d 35 30 3a 30 20 31 70 78 20 34 70 78 20 72 67 62 61 28 33 31 2c 33 33 2c 34 31 2c 30 2e 33 29 3b 2d 2d 73 68 61 64 6f 77 2d 31 30 30 3a 30 20 34 70 78 20 38 70 78 20 2d 32 70 78 20 72 67 Data Ascii: :root{--b-0:0;--b-100:1px;--b-200:2px;--b-300:4px;--b-none:none;--b-dashed:dashed;--b-solid:solid;--radii-0:0;--radii-100:4px;--radii-200:8px;--radii-rounded:99rem;--radii-circle:100%;--shadow-50:0 1px 4px rgba(31,33,41,0.3);--shadow-100:0 4px 8px -2px rg
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 30 3a 23 31 39 63 63 61 33 3b 2d 2d 6d 69 6e 74 2d 36 30 30 3a 23 31 31 38 36 36 66 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 61 6e 64 72 6f 69 64 3a 23 33 64 64 63 38 34 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 61 70 70 6c 65 3a 23 31 66 32 31 32 39 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 66 61 63 65 62 6f 6f 6b 3a 23 31 38 37 37 66 32 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 69 6e 73 74 61 67 72 61 6d 3a 23 31 66 32 31 32 39 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 6c 69 6e 6b 65 64 2d 69 6e 3a 23 32 38 36 37 62 32 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 74 77 69 74 74 65 72 3a 23 31 64 61 31 66 32 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 79 6f 75 2d 74 75 62 65 3a 72 65 64 3b 2d 2d 6f 63 65 61 6e 2d 31 30 30 3a 23 66 34 66 37 66 66 3b 2d 2d 6f 63 65 61 6e 2d 31 35 30 3a 23 65 61 66 30 66 66 3b 2d 2d 6f 63 Data Ascii: 0:#19cca3;--mint-600:#11866f;--network-android:#3ddc84;--network-apple:#1f2129;--network-facebook:#1877f2;--network-instagram:#1f2129;--network-linked-in:#2867b2;--network-twitter:#1da1f2;--network-you-tube:red;--ocean-100:#f4f7ff;--ocean-150:#eaf0ff;--oc
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 69 6e 73 22 2c 22 41 76 65 6e 69 72 22 2c 22 41 76 65 6e 69 72 20 4e 65 78 74 22 2c 22 46 75 74 75 72 61 22 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 66 66 2d 73 74 61 6e 64 61 72 64 3a 22 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 22 2c 22 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 22 2c 22 49 54 43 20 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 22 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 66 66 2d 6d 6f 6e 6f 73 70 61 63 65 3a 22 49 42 4d 20 50 6c 65 78 20 4d 6f 6e 6f 22 2c 6d 6f 6e 6f 73 70 61 63 65 3b 2d 2d 66 73 2d 31 30 30 3a 31 32 70 78 3b 2d 2d 66 73 2d 32 30 30 3a 31 34 70 78 3b 2d 2d 66 73 2d 33 30 30 3a 31 36 70 78 3b 2d 2d 66 73 2d 34 30 30 3a 31 38 Data Ascii: ins","Avenir","Avenir Next","Futura",helvetica,arial,sans-serif;--ff-standard:"IBM Plex Sans","Franklin Gothic","ITC Franklin Gothic",helvetica,arial,sans-serif;--ff-monospace:"IBM Plex Mono",monospace;--fs-100:12px;--fs-200:14px;--fs-300:16px;--fs-400:18
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 63 6c 69 70 3a 61 75 74 6f 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 2e 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 2d 6e 6f 6e 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 2d 61 75 74 6f 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 69 6e 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 73 74 61 74 69 63 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 7d 2e 66 69 Data Ascii: ;width:auto;height:auto;padding:0;margin:0;overflow:visible;clip:auto;white-space:normal}.pointer-events-none{pointer-events:none}.pointer-events-auto{pointer-events:auto}.visible{visibility:visible}.invisible{visibility:hidden}.static{position:static}.fi
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 72 28 2d 2d 73 70 2d 39 30 30 2c 33 32 70 78 29 3b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 39 30 30 2c 33 32 70 78 29 7d 2e 69 6e 73 65 74 2d 31 30 30 30 7b 74 6f 70 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 30 2c 34 38 70 78 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 30 2c 34 38 70 78 29 3b 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 30 2c 34 38 70 78 29 3b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 30 2c 34 38 70 78 29 7d 2e 69 6e 73 65 74 2d 31 31 30 30 7b 74 6f 70 3a 76 61 72 28 2d 2d 73 70 2d 31 31 30 30 2c 36 34 70 78 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 31 31 30 30 2c 36 34 70 78 29 3b 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 73 70 2d 31 31 30 30 2c 36 34 70 78 29 3b 6c 65 66 74 3a 76 61 72 28 2d 2d Data Ascii: r(--sp-900,32px);left:var(--sp-900,32px)}.inset-1000{top:var(--sp-1000,48px);right:var(--sp-1000,48px);bottom:var(--sp-1000,48px);left:var(--sp-1000,48px)}.inset-1100{top:var(--sp-1100,64px);right:var(--sp-1100,64px);bottom:var(--sp-1100,64px);left:var(--
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 31 29 3b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 33 30 30 2c 20 38 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 34 30 30 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 3b 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 3b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 35 30 30 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 35 30 30 2c 20 31 36 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 35 30 30 2c Data Ascii: 1);left:calc(var(--sp-300, 8px)-1)}.-inset-400{top:calc(var(--sp-400, 12px)-1);right:calc(var(--sp-400, 12px)-1);bottom:calc(var(--sp-400, 12px)-1);left:calc(var(--sp-400, 12px)-1)}.-inset-500{top:calc(var(--sp-500, 16px)-1);right:calc(var(--sp-500,
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 32 30 30 2c 20 38 30 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 31 33 30 30 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 33 30 30 2c 20 31 32 38 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 33 30 30 2c 20 31 32 38 70 78 29 2a 2d 31 29 3b 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 33 30 30 2c 20 31 32 38 70 78 29 2a 2d 31 29 3b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 33 30 30 2c 20 31 32 38 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 31 34 30 30 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 34 30 30 2c 20 32 30 30 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d Data Ascii: t:calc(var(--sp-1200, 80px)-1)}.-inset-1300{top:calc(var(--sp-1300, 128px)-1);right:calc(var(--sp-1300, 128px)-1);bottom:calc(var(--sp-1300, 128px)-1);left:calc(var(--sp-1300, 128px)-1)}.-inset-1400{top:calc(var(--sp-1400, 200px)-1);right:calc(var(-
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 6c 7b 74 6f 70 3a 2d 31 30 30 25 3b 72 69 67 68 74 3a 2d 31 30 30 25 3b 62 6f 74 74 6f 6d 3a 2d 31 30 30 25 3b 6c 65 66 74 3a 2d 31 30 30 25 7d 2e 69 6e 73 65 74 2d 78 2d 30 7b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 30 2c 30 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 30 2c 30 29 7d 2e 69 6e 73 65 74 2d 78 2d 31 30 30 7b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 2c 32 70 78 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 2c 32 70 78 29 7d 2e 69 6e 73 65 74 2d 78 2d 32 30 30 7b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 32 30 30 2c 34 70 78 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 32 30 30 2c 34 70 78 29 7d 2e 69 6e 73 65 74 2d 78 2d 33 30 30 7b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 33 30 30 2c 38 70 78 29 3b 72 Data Ascii: l{top:-100%;right:-100%;bottom:-100%;left:-100%}.inset-x-0{left:var(--sp-0,0);right:var(--sp-0,0)}.inset-x-100{left:var(--sp-100,2px);right:var(--sp-100,2px)}.inset-x-200{left:var(--sp-200,4px);right:var(--sp-200,4px)}.inset-x-300{left:var(--sp-300,8px);r
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 73 70 2d 33 30 30 2c 20 38 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 33 30 30 2c 20 38 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 78 2d 34 30 30 7b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 78 2d 35 30 30 7b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 35 30 30 2c 20 31 36 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 35 30 30 2c 20 31 36 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 78 2d 36 30 30 7b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 Data Ascii: var(--sp-300, 8px)-1);right:calc(var(--sp-300, 8px)-1)}.-inset-x-400{left:calc(var(--sp-400, 12px)-1);right:calc(var(--sp-400, 12px)-1)}.-inset-x-500{left:calc(var(--sp-500, 16px)-1);right:calc(var(--sp-500, 16px)-1)}.-inset-x-600{left:calc(var(--sp
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 30 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 31 5c 2f 32 7b 6c 65 66 74 3a 2d 35 30 25 3b 72 69 67 68 74 3a 2d 35 30 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 31 5c 2f 33 7b 6c 65 66 74 3a 2d 33 33 2e 33 33 33 33 33 33 25 3b 72 69 67 68 74 3a 2d 33 33 2e 33 33 33 33 33 33 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 32 5c 2f 33 7b 6c 65 66 74 3a 2d 36 36 2e 36 36 36 36 36 37 25 3b 72 69 67 68 74 3a 2d 36 36 2e 36 36 36 36 36 37 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 31 5c 2f 34 7b 6c 65 66 74 3a 2d 32 35 25 3b 72 69 67 68 74 3a 2d 32 35 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 32 5c 2f 34 7b 6c 65 66 74 3a 2d 35 30 25 3b 72 69 67 68 74 3a 2d 35 30 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 33 5c 2f 34 7b 6c 65 66 74 3a 2d 37 35 25 3b 72 69 67 68 74 3a 2d 37 35 25 7d 2e 2d 69 6e 73 65 74 2d Data Ascii: 0%}.-inset-x-1\/2{left:-50%;right:-50%}.-inset-x-1\/3{left:-33.333333%;right:-33.333333%}.-inset-x-2\/3{left:-66.666667%;right:-66.666667%}.-inset-x-1\/4{left:-25%;right:-25%}.-inset-x-2\/4{left:-50%;right:-50%}.-inset-x-3\/4{left:-75%;right:-75%}.-inset-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49739	18.245.45.143	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:32 UTC	367	OUT	GET /media/logo.png HTTP/1.1 Host: d3rxaij56vjege.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:32 UTC	459	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 14241 Connection: close Last-Modified: Fri, 08 Oct 2021 14:59:03 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 07:01:49 GMT ETag: "cc61aa0476fa8cde02bfd796601a1842" X-Cache: Hit from cloudfront Via: 1.1 e47c87f8fd9c4c08ac7559d0bcc2b4c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 0acJhIu8hXR32EFsay0mHP-T2CDX2Q0Bw7vhpPeE4juvzQ9gxYi-0Q== Age: 30138
2025-01-14 15:20:32 UTC	14241	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 01 6a 08 06 00 00 00 45 c4 f7 d8 00 00 00 09 70 48 59 73 00 00 2c 4b 00 00 2c 4b 01 a5 3d 96 a9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 37 36 49 44 41 54 78 01 ed dd fd 95 e4 c4 f5 30 e0 bb bf e3 ff bd 8e c0 22 02 43 04 6e 22 f0 3a 02 86 08 58 22 a0 89 80 25 82 1d 47 00 44 30 ed 08 58 22 e8 26 02 70 04 f5 aa 56 9a 77 9b 65 3e aa f4 dd 33 cf 73 8e ce 0c 6c 4d b7 5a 2d 95 4a b7 6e 55 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRjEpHYs,K,K=sRGBgAMAa76IDATx0"Cn":X"%GD0X"&pVwe>3slMZ-JnUE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49741	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:32 UTC	880	OUT	GET /admin/css/css_camp.min.css?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:32 UTC	372	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:32 GMT Content-Type: text/css; charset=utf-8 Content-Length: 120803 Connection: close etag: "2730981040" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c529c030cbe-EWR
2025-01-14 15:20:32 UTC	997	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 70 72 65 7b 66 6f 6e 74 2d 66 61 6d Data Ascii: /! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%;line-height:1.15}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-fam
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 2e 30 36 32 35 72 65 6d 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 Data Ascii: ype=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:.0625rem dotted ButtonText}fieldset{padding:.35em .75em
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 42 4d 20 50 6c 65 78 20 53 61 6e 73 2c 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 2c 49 54 43 20 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 30 7d 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 32 32 44 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 3a 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 32 32 44 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 67 2d 63 65 6e 74 65 72 7b Data Ascii: BM Plex Sans,Franklin Gothic,ITC Franklin Gothic,helvetica,arial,sans-serif;font-size:1.125rem;line-height:1.75rem;margin:0}::-moz-selection{background-color:#0022D2;color:#fff}::selection{background-color:#0022D2;color:#fff}img{max-width:100%}.bg-center{
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 6c 2d 2d 62 67 2d 74 6f 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 7d 2e 6c 2d 2d 62 67 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 7d 2e 6c 2d 2d 62 67 2d 62 6f 74 74 6f 6d 2c 2e 6c 2d 2d 62 67 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 6c 2d 2d 62 67 2d 62 6f 74 74 6f 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 7d 2e 6c 2d 2d 62 67 2d 6c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 7d 40 6d 65 64 69 61 20 73 Data Ascii: peat:no-repeat}.l--bg-top{background-position:top}.l--bg-right{background-position:100%}.l--bg-bottom,.l--bg-right{background-repeat:no-repeat}.l--bg-bottom{background-position:bottom}.l--bg-left{background-position:0;background-repeat:no-repeat}}@media s
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 2d 72 61 64 69 75 73 3a 30 7d 2e 62 72 2d 31 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 74 6f 70 2d 31 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 72 69 67 68 74 2d 31 2c 2e 62 72 2d 74 6f 70 2d 31 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 62 6f 74 74 6f 6d 2d 31 2c 2e 62 72 2d 72 69 67 68 74 2d 31 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 62 6f 74 74 6f 6d 2d 31 2c 2e 62 72 2d 6c 65 66 74 2d 31 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 6c 65 66 74 2d Data Ascii: -radius:0}.br-1{border-radius:.25rem}.br-top-1{border-top-left-radius:.25rem}.br-right-1,.br-top-1{border-top-right-radius:.25rem}.br-bottom-1,.br-right-1{border-bottom-right-radius:.25rem}.br-bottom-1,.br-left-1{border-bottom-left-radius:.25rem}.br-left-
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 68 74 2d 72 61 64 69 75 73 3a 36 32 34 39 39 39 39 39 2e 39 33 37 35 72 65 6d 7d 2e 62 72 2d 62 6f 74 74 6f 6d 2d 70 69 6c 6c 2c 2e 62 72 2d 6c 65 66 74 2d 70 69 6c 6c 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 32 34 39 39 39 39 39 2e 39 33 37 35 72 65 6d 7d 2e 62 72 2d 6c 65 66 74 2d 70 69 6c 6c 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 32 34 39 39 39 39 39 2e 39 33 37 35 72 65 6d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 30 72 65 6d 29 7b 2e 73 2d 2d 62 72 2d 30 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 73 2d 2d 62 72 2d 31 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 73 2d 2d 62 72 2d 32 7b 62 Data Ascii: ht-radius:62499999.9375rem}.br-bottom-pill,.br-left-pill{border-bottom-left-radius:62499999.9375rem}.br-left-pill{border-top-left-radius:62499999.9375rem}@media screen and (min-width:30rem){.s--br-0{border-radius:0}.s--br-1{border-radius:.25rem}.s--br-2{b
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 73 2d 2d 62 62 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 73 2d 2d 62 6c 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 35 72 65 6d 29 7b 2e 6d 2d 2d 62 73 2d 6e 6f 6e 65 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6d 2d 2d 62 73 2d 73 6f 6c 69 64 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 6d 2d 2d 62 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 6d 2d 2d 62 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 6d 2d 2d 62 62 7b Data Ascii: rder-right-style:solid}.s--bb{border-bottom-style:solid}.s--bl{border-left-style:solid}}@media screen and (min-width:45rem){.m--bs-none{border-style:none}.m--bs-solid{border-style:solid}.m--bt{border-top-style:solid}.m--br{border-right-style:solid}.m--bb{
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 2e 6a 73 2d 65 6e 64 7b 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 65 6e 64 7d 2e 6a 73 2d 63 65 6e 74 65 72 7b 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 6a 73 2d 73 74 72 65 74 63 68 7b 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 73 74 72 65 74 63 68 7d 2e 6a 63 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 74 61 72 74 7d 2e 6a 63 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 65 6e 64 7d 2e 6a 63 2d 66 6c 65 78 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d Data Ascii: .js-end{justify-self:end}.js-center{justify-self:center}.js-stretch{justify-self:stretch}.jc-start{-ms-flex-pack:start;-webkit-box-pack:start;justify-content:start}.jc-end{-ms-flex-pack:end;-webkit-box-pack:end;justify-content:end}.jc-flex-start{-ms-flex-
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 61 72 74 7d 2e 61 69 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 65 6e 64 7d 2e 61 69 2d 66 6c 65 78 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 61 69 2d 66 6c 65 78 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 61 6c 69 67 6e 2d Data Ascii: tart;-webkit-box-align:start;align-items:start}.ai-end{-ms-flex-align:end;-webkit-box-align:end;align-items:end}.ai-flex-start{-ms-flex-align:start;-webkit-box-align:start;align-items:flex-start}.ai-flex-end{-ms-flex-align:end;-webkit-box-align:end;align-
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 61 63 6b 3a 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 65 6e 64 7d 2e 73 2d 2d 6a 63 2d 66 6c 65 78 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 73 2d 2d 6a 63 2d 66 6c 65 78 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 73 2d 2d 6a 63 2d 63 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b Data Ascii: ack:end;justify-content:end}.s--jc-flex-start{-ms-flex-pack:start;-webkit-box-pack:start;justify-content:flex-start}.s--jc-flex-end{-ms-flex-pack:end;-webkit-box-pack:end;justify-content:flex-end}.s--jc-center{-ms-flex-pack:center;-webkit-box-pack:center;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49742	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:32 UTC	850	OUT	GET /admin/js/jq/csrf_protection.js HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:32 UTC	379	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:32 GMT Content-Type: application/javascript Content-Length: 4364 Connection: close etag: "1132611470" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: HIT Age: 7185 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c529dd54339-EWR
2025-01-14 15:20:32 UTC	990	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4d 6f 6e 6b 65 79 20 70 61 74 63 68 20 6a 51 75 65 72 79 20 73 6f 20 74 68 61 74 20 66 6f 72 20 65 61 63 68 20 41 4a 41 58 20 72 65 71 75 65 73 74 2c 20 69 74 20 67 72 61 62 73 20 74 68 65 20 43 53 52 46 20 74 6f 6b 65 6e 20 0a 20 2a 20 64 69 72 65 63 74 6c 79 20 66 72 6f 6d 20 74 68 65 20 63 6f 6f 6b 69 65 20 61 6e 64 20 73 65 74 73 20 69 74 20 61 73 20 61 20 68 65 61 64 65 72 2e 20 54 68 69 73 20 77 61 79 2c 20 69 74 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 0a 20 2a 20 73 65 6e 64 20 74 68 65 20 6e 65 77 65 73 74 20 74 6f 6b 65 6e 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 6c 6c 54 68 65 4a 51 75 65 72 69 65 73 29 20 7b 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 55 72 6c 28 75 72 6c 29 20 7b 0a 09 09 69 66 20 Data Ascii: /** * Monkey patch jQuery so that for each AJAX request, it grabs the CSRF token * directly from the cookie and sets it as a header. This way, it will always * send the newest token. */(function(allTheJQueries) {function validateUrl(url) {if
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 3f 20 6f 70 74 69 6f 6e 73 2e 68 65 61 64 65 72 73 20 3a 20 7b 7d 3b 0a 09 09 6f 70 74 69 6f 6e 73 2e 68 65 61 64 65 72 73 5b 63 73 72 66 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 4e 61 6d 65 5d 20 3d 20 67 65 74 43 53 52 46 54 6f 6b 65 6e 28 29 3b 0a 09 7d 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 4d 6f 64 69 66 79 20 74 68 65 20 67 69 76 65 6e 20 76 65 72 73 69 6f 6e 20 6f 66 20 6a 71 75 65 72 79 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 50 72 65 66 69 6c 74 65 72 28 6a 51 75 65 72 79 29 20 7b 0a 09 09 69 66 20 28 74 79 70 65 6f 66 20 6a 51 75 65 72 79 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 0a 09 09 09 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 Data Ascii: === 'object' ? options.headers : {};options.headers[csrfResponseHeaderName] = getCSRFToken();}/** * Modify the given version of jquery */function modifyPrefilter(jQuery) {if (typeof jQuery === "undefined"\|\|typeof jQuery.ajaxPrefilter
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 6c 29 20 7b 0a 09 09 6d 6f 64 69 66 79 50 72 65 66 69 6c 74 65 72 28 6a 51 75 65 72 79 49 6d 70 6c 29 3b 0a 09 09 69 66 20 28 21 63 73 72 66 46 6f 72 6d 49 6e 74 65 72 63 65 70 74 6f 72 52 65 67 69 73 74 65 72 65 64 29 20 7b 0a 09 09 09 63 73 72 66 46 6f 72 6d 49 6e 74 65 72 63 65 70 74 6f 72 52 65 67 69 73 74 65 72 65 64 20 3d 20 61 70 70 65 6e 64 43 53 52 46 54 6f 6b 65 6e 4f 6e 46 6f 72 6d 53 75 62 6d 69 74 28 6a 51 75 65 72 79 49 6d 70 6c 29 3b 0a 09 09 7d 0a 09 7d 29 3b 0a 0a 7d 29 28 5b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 20 77 69 6e 64 6f 77 2e 24 4a 2c 20 77 69 6e 64 6f 77 2e 24 5d 29 3b 0a 0a 2f 2a 2a 0a 20 2a 20 45 78 74 72 61 63 74 73 20 43 53 52 46 20 70 72 6f 74 65 63 74 69 6f 6e 20 74 6f 6b 65 6e 20 66 72 6f 6d 20 74 68 65 20 63 61 72 Data Ascii: l) {modifyPrefilter(jQueryImpl);if (!csrfFormInterceptorRegistered) {csrfFormInterceptorRegistered = appendCSRFTokenOnFormSubmit(jQueryImpl);}});})([window.jQuery, window.$J, window.$]);/** * Extracts CSRF protection token from the car
2025-01-14 15:20:32 UTC	636	IN	Data Raw: 0a 09 09 63 73 72 66 49 6e 70 75 74 20 3d 20 61 74 74 61 63 68 4e 65 77 43 53 52 46 49 6e 70 75 74 46 69 65 6c 64 54 6f 46 6f 72 6d 28 66 6f 72 6d 29 3b 0a 09 7d 0a 0a 09 63 73 72 66 49 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 20 67 65 74 43 53 52 46 54 6f 6b 65 6e 28 29 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 74 72 69 65 76 65 73 20 61 20 63 73 72 66 20 76 61 6c 69 64 61 74 69 6f 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 20 66 72 6f 6d 20 74 68 65 20 66 6f 72 6d 0a 20 2a 0a 20 2a 20 40 70 61 72 61 6d 20 6d 79 46 6f 72 6d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 2a 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 53 52 46 49 6e 70 75 74 46 69 65 6c 64 28 6d 79 46 6f 72 6d 29 20 7b 0a 09 72 65 74 75 72 6e 20 Data Ascii: csrfInput = attachNewCSRFInputFieldToForm(form);}csrfInput.setAttribute("value", getCSRFToken());}/** * Retrieves a csrf validation input field from the form * * @param myForm * @returns {} /function getCSRFInputField(myForm) {return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49744	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:32 UTC	890	OUT	GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:32 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:32 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c53796e904d-BOS
2025-01-14 15:20:32 UTC	1072	IN	Data Raw: 37 65 37 31 0d 0a 2f 2f 20 61 63 2e 6a 73 0a 2f 2f 20 4c 6f 61 64 69 6e 67 2e 2e 2e 0a 0a 2f 2f 20 61 6a 61 78 2e 6a 73 0a 0a 76 61 72 20 61 63 5f 61 6a 61 78 5f 64 65 62 75 67 20 3d 20 74 72 75 65 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 72 65 71 75 65 73 74 5f 6f 62 6a 65 63 74 28 29 20 7b 0a 20 20 20 20 76 61 72 20 68 72 65 71 3b 0a 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 68 72 65 71 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 09 09 68 72 65 71 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 68 72 65 71 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 63 61 6c 6c 5f 75 72 6c 28 75 72 Data Ascii: 7e71// ac.js// Loading...// ajax.jsvar ac_ajax_debug = true;function ac_ajax_request_object() { var hreq; try { hreq = new XMLHttpRequest(); } catch (e) {hreq = null; } return hreq;}function ac_ajax_call_url(ur
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 20 28 20 70 6f 73 74 54 79 70 65 20 21 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 0a 09 09 20 20 20 20 20 20 20 20 20 20 20 20 09 70 6f 73 74 41 72 72 2e 70 75 73 68 28 69 20 2b 20 27 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 6f 73 74 5b 69 5d 29 29 3b 0a 09 09 09 09 20 20 20 20 7d 0a 09 09 09 20 20 20 20 7d 0a 09 09 09 20 20 20 20 70 6f 73 74 20 3d 20 70 6f 73 74 41 72 72 2e 6a 6f 69 6e 28 27 26 27 29 3b 0a 09 09 20 20 20 20 7d 0a 09 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 68 72 65 71 2e 6f 70 65 6e 28 6d 65 74 68 6f 64 2c 20 75 72 6c 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 68 72 65 71 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 58 2d 58 53 52 46 2d 54 4f 4b 45 4e 22 2c 20 67 65 74 43 53 52 Data Ascii: ( postType != 'function' ) { postArr.push(i + '=' + encodeURIComponent(post[i])); } } post = postArr.join('&'); } } hreq.open(method, url, true); hreq.setRequestHeader("X-XSRF-TOKEN", getCSR
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 63 61 6c 6c 5f 63 62 28 75 72 6c 2c 20 66 75 6e 63 2c 20 63 62 29 20 7b 0a 20 20 20 20 69 66 20 28 66 75 6e 63 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 72 6c 2e 6d 61 74 63 68 28 2f 5c 3f 2f 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 20 2b 20 22 26 66 3d 22 20 2b 20 66 75 6e 63 3b 0a 20 20 20 20 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 20 2b 20 22 3f 66 3d 22 20 2b 20 66 75 6e 63 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 75 72 6c 20 2b 3d 20 22 26 72 61 6e 64 3d 22 20 2b 20 61 63 5f 62 36 34 5f 65 6e 63 6f 64 65 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 0a 0a 20 20 20 20 69 66 20 28 61 72 Data Ascii: nction ac_ajax_call_cb(url, func, cb) { if (func) { if (url.match(/\?/)) url = url + "&f=" + func; else url = url + "?f=" + func; } url += "&rand=" + ac_b64_encode(Math.random().toString()); if (ar
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 6c 65 5f 74 65 78 74 28 68 72 65 71 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 2f 2a 0a 09 09 09 09 09 76 61 72 20 72 6f 6f 74 4e 6f 64 65 20 3d 20 28 20 78 6d 6c 20 21 3d 3d 20 6e 75 6c 6c 20 3f 20 78 6d 6c 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 3a 20 6e 75 6c 6c 20 29 3b 0a 09 09 09 09 09 69 66 20 28 63 62 20 3d 3d 3d 20 6e 75 6c 6c 20 26 26 20 72 6f 6f 74 4e 6f 64 65 29 20 7b 0a 09 09 09 09 09 09 63 62 20 3d 20 65 76 61 6c 28 22 63 62 5f 22 20 2b 20 72 6f 6f 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 69 66 20 28 74 79 70 65 6f 66 20 63 62 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 0a 09 09 09 09 09 09 63 62 28 72 6f 6f 74 4e 6f 64 Data Ascii: le_text(hreq.responseText);}}/*var rootNode = ( xml !== null ? xml.documentElement : null );if (cb === null && rootNode) {cb = eval("cb_" + rootNode.nodeName);}if (typeof cb == "function")cb(rootNod
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 64 4e 6f 64 65 73 5b 69 5d 3b 0a 0a 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 63 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 33 3a 20 20 20 20 20 2f 2f 20 54 45 58 54 5f 4e 4f 44 45 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 79 5b 22 5f 5f 74 65 78 74 22 5d 20 3d 20 63 6e 6f 64 65 2e 6e 6f 64 65 56 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 34 3a 20 20 20 20 20 2f 2f 20 43 44 41 54 41 5f 53 45 43 54 49 4f 4e 5f 4e 4f 44 45 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 79 5b 22 5f 5f 63 64 61 74 61 22 5d 20 3d 20 63 6e 6f 64 65 2e 6e 6f 64 65 56 61 6c 75 65 3b 0a 20 20 20 20 Data Ascii: dNodes[i]; switch (cnode.nodeType) { case 3: // TEXT_NODE ary["__text"] = cnode.nodeValue; break; case 4: // CDATA_SECTION_NODE ary["__cdata"] = cnode.nodeValue;
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 5d 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0a 09 09 09 09 09 09 09 76 61 72 20 74 6d 70 20 3d 20 61 72 79 5b 69 64 78 5d 3b 0a 09 09 09 09 09 09 09 61 72 79 5b 69 64 78 5d 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0a 09 09 09 09 09 09 09 61 72 79 5b 69 64 78 5d 2e 70 75 73 68 28 74 6d 70 29 3b 0a 09 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 61 72 72 61 79 22 20 26 26 20 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 09 09 09 09 09 09 09 61 6c 65 72 74 28 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 29 3b 0a 09 09 09 09 09 09 09 2f 2f 63 6f 6e 74 69 6e 75 65 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 61 72 79 5b 69 64 78 Data Ascii: ]) == "string") {var tmp = ary[idx];ary[idx] = new Array();ary[idx].push(tmp);} else if (typeof(ary[idx]) != "array" && typeof(ary[idx]) != "object") {alert(typeof(ary[idx]));//continue;}ary[idx
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 20 20 20 20 6e 6f 64 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 28 6e 6f 64 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 20 76 61 6c 29 20 3f 20 22 6e 6f 6e 65 22 20 3a 20 76 61 6c 3b 0a 7d 0a 2a 2f 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 64 69 73 70 6c 61 79 5f 62 6c 6f 63 6b 28 69 64 29 20 7b 0a 09 24 28 69 64 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 64 69 73 70 6c 61 79 5f 69 6e 6c 69 6e 65 62 6c 6f 63 6b 28 69 64 29 20 7b 0a 09 24 28 69 64 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 64 69 73 70 6c 61 79 5f 6e 6f 6e Data Ascii: node.style.display = (node.style.display == val) ? "none" : val;}*/function ac_dom_display_block(id) {$(id).style.display = "block";}function ac_dom_display_inlineblock(id) {$(id).style.display = "inline-block";}function ac_dom_display_non
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 31 29 20 7b 0a 09 09 2f 2f 20 74 68 65 79 20 70 61 73 73 65 64 20 61 20 66 69 6c 74 65 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 69 6c 74 65 72 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 0a 09 7d 0a 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 69 20 3e 3d 20 30 3b 20 69 2d 2d 29 20 7b 0a 09 09 69 66 20 28 74 79 70 65 6f 66 20 66 69 6c 74 65 72 20 21 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 0a 09 09 09 6e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 29 3b 0a 09 09 65 6c 73 65 20 69 66 20 28 66 69 6c 74 65 72 28 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 29 29 0a 09 09 09 6e 6f 64 65 2e 72 65 6d Data Ascii: 1) {// they passed a filter functionfilter = arguments[1];} for (var i = node.childNodes.length - 1; i >= 0; i--) {if (typeof filter != "function")node.removeChild(node.childNodes[i]);else if (filter(node.childNodes[i]))node.rem
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 63 6c 69 63 6b 5f 68 6f 6f 6b 28 66 75 6e 63 29 20 7b 0a 09 76 61 72 20 6f 6c 64 6f 6e 63 6c 69 63 6b 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 3b 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 20 21 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 3b 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 09 6f 6c 64 6f 6e 63 6c 69 63 6b 28 65 29 3b 0a 09 09 09 66 75 6e 63 28 65 29 3b 0a 09 09 7d 0a 09 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 68 6f 6f 6b 28 66 75 6e 63 31 2c 20 66 75 6e 63 32 29 20 7b 0a 09 2f 2f Data Ascii: click_hook(func) {var oldonclick = document.onclick;if ( typeof document.onclick != 'function' ) {document.onclick = func;} else {document.onclick = function(e) {oldonclick(e);func(e);}}}function ac_dom_hook(func1, func2) {//
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 69 6e 61 6c 20 3d 20 6e 6f 64 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 6c 65 6d 29 5b 65 6c 65 6d 65 6e 74 49 6e 64 65 78 5d 3b 0a 20 20 20 20 76 61 72 20 6e 65 77 5f 6e 6f 64 65 20 3d 20 6f 72 69 67 69 6e 61 6c 2e 63 6c 6f 6e 65 4e 6f 64 65 28 74 72 75 65 29 3b 0a 20 20 20 20 69 66 20 28 20 63 6c 65 61 72 49 6e 70 75 74 73 20 29 20 7b 0a 09 20 20 20 20 76 61 72 20 6e 65 77 69 6e 70 75 74 20 3d 20 6e 65 77 5f 6e 6f 64 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 69 6e 70 75 74 27 29 3b 0a 09 20 20 20 20 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6e 65 77 69 6e 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 20 20 20 20 20 20 20 20 69 66 20 28 6e 65 77 69 6e 70 75 Data Ascii: inal = node.getElementsByTagName(elem)[elementIndex]; var new_node = original.cloneNode(true); if ( clearInputs ) { var newinput = new_node.getElementsByTagName('input'); for ( var i = 0; i < newinput.length; i++ ) { if (newinpu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49745	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:32 UTC	855	OUT	GET /admin/jsc/ac.js?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:32 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:32 GMT Content-Type: application/javascript Content-Length: 54805 Connection: close etag: "1296578929" last-modified: Mon, 13 Jan 2025 21:19:56 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c54f9e942c1-EWR
2025-01-14 15:20:32 UTC	999	IN	Data Raw: 76 61 72 20 61 63 3d 7b 72 61 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 63 2e 73 74 72 2e 63 61 73 74 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 2c 72 61 6e 64 48 65 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 63 2e 72 61 6e 64 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 73 70 72 69 6e 74 66 28 22 25 78 22 2c 61 5b 31 5d 29 7d 2c 68 69 64 64 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 6e 6f 6e 65 22 3d 3d 24 4a 28 61 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 5b 63 5d 29 72 65 74 75 72 6e 21 31 Data Ascii: var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 64 3d 24 4a 28 74 68 69 73 29 3b 0a 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 64 2e 62 6c 75 72 28 29 3b 63 28 64 29 7d 7d 29 3b 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 65 61 63 68 28 24 4a 28 22 2e 63 6c 69 63 6b 2d 74 6f 2d 65 64 69 74 2e 22 2b 65 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 24 4a 28 61 29 3b 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6c 69 63 6b 2d 74 6f 2d 65 64 69 74 20 22 2b 65 29 3b 63 28 61 29 7d 29 7d 29 7d 2c 64 65 63 6f 64 65 42 61 73 65 36 34 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 61 74 6f 62 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 61 74 6f 62 28 61 Data Ascii: d=$J(this);a.preventDefault();d.blur();c(d)}});$J(document).on("click",function(a){_.each($J(".click-to-edit."+e),function(a){a=$J(a);a.removeClass("click-to-edit "+e);c(a)})})},decodeBase64:function(a){return window.atob?decodeURIComponent(window.atob(a
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 28 61 2e 6f 6b 6c 61 62 65 6c 3d 73 74 72 4f 4b 29 3b 61 2e 6f 6b 63 6c 61 73 73 7c 7c 28 61 2e 6f 6b 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 29 3b 61 2e 63 6c 6f 73 65 6c 61 62 65 6c 7c 7c 28 61 2e 63 6c 6f 73 65 6c 61 62 65 6c 3d 61 2e 68 69 64 65 6f 6b 3f 73 74 72 43 6c 6f 73 65 3a 73 74 72 43 61 6e 63 65 6c 29 3b 61 2e 63 6c 61 73 73 65 73 7c 7c 28 61 2e 63 6c 61 73 73 65 73 3d 22 22 29 3b 61 2e 64 6f 6e 74 5f 62 6c 75 72 7c 7c 24 4a 28 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 2e 62 6c 75 72 28 29 3b 63 3d 63 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 0a 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 22 29 2e 72 65 6d 6f 76 65 28 29 3b 76 61 72 20 64 3d 22 22 2b 28 27 3c 64 69 76 20 69 64 3d 22 61 63 5f 61 75 74 6f 6d Data Ascii: (a.oklabel=strOK);a.okclass\|\|(a.okclass="green");a.closelabel\|\|(a.closelabel=a.hideok?strClose:strCancel);a.classes\|\|(a.classes="");a.dont_blur\|\|$J(document.activeElement).blur();c=c\|\|function(){};$J("#ac_automodal").remove();var d=""+('<div id="ac_autom
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 65 5d 2e 76 61 6c 75 65 3d 3d 66 2e 64 65 66 61 75 6c 74 3f 22 73 65 6c 65 63 74 65 64 22 3a 22 22 2c 66 2e 6f 70 74 69 6f 6e 73 5b 65 5d 2e 76 61 6c 75 65 2c 66 2e 6f 70 74 69 6f 6e 73 5b 65 5d 2e 6c 61 62 65 6c 29 3b 64 2b 3d 22 3c 2f 73 65 6c 65 63 74 3e 22 3b 64 2b 3d 22 3c 2f 66 69 65 6c 64 73 65 74 3e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 74 65 78 74 61 72 65 61 22 3a 66 2e 72 6f 77 73 3d 66 2e 72 6f 77 73 7c 7c 38 3b 66 2e 63 6f 6c 73 3d 66 2e 63 6f 6c 73 7c 7c 34 30 3b 64 2b 3d 73 70 72 69 6e 74 66 28 27 3c 66 69 65 6c 64 73 65 74 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 25 73 22 3e 27 2c 66 2e 63 6c 61 73 73 4e 61 6d 65 29 3b 64 2b 3d 73 70 72 69 6e 74 66 28 22 3c 6c 61 62 65 6c 3e 25 73 3c 2f 6c 61 62 65 6c 3e 22 2c 66 2e 6c 61 62 65 6c 3f Data Ascii: e].value==f.default?"selected":"",f.options[e].value,f.options[e].label);d+="</select>";d+="</fieldset>";break;case "textarea":f.rows=f.rows\|\|8;f.cols=f.cols\|\|40;d+=sprintf('<fieldset class="input %s">',f.className);d+=sprintf("<label>%s</label>",f.label?
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 7b 69 66 28 61 2e 6f 6b 29 7b 76 61 72 20 64 3d 0a 7b 7d 3b 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 69 6e 70 75 74 2c 20 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 74 65 78 74 61 72 65 61 2c 20 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 73 65 6c 65 63 74 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 64 5b 63 2e 6e 61 6d 65 5d 3d 63 2e 76 61 6c 75 65 7d 29 3b 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 64 69 76 2e 6f 70 74 69 6f 6e 2d 75 69 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 5b 5b 24 4a 28 74 68 69 73 29 2e 64 61 74 61 28 22 6e 61 6d 65 22 29 5d 5d 3d 24 4a 28 22 2e 73 65 6c 65 63 74 65 64 22 2c 74 68 69 73 29 Data Ascii: {if(a.ok){var d={};$J("#ac_automodal fieldset input, #ac_automodal fieldset textarea, #ac_automodal fieldset select").each(function(a,c){d[c.name]=c.value});$J("#ac_automodal div.option-ui").each(function(){d[[$J(this).data("name")]]=$J(".selected",this)
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 6c 6f 61 64 65 72 22 29 2e 6c 65 6e 67 74 68 26 26 24 4a 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 20 6c 6f 61 64 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 69 6e 67 5f 62 61 72 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 3a 20 30 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 61 6d 70 61 69 67 6e 2f 73 74 72 69 70 6f 2f 69 63 6f 6e 73 2f 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 2e 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 6f 76 65 72 6c 61 79 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e Data Ascii: loader").length&&$J("body").append('<div class="ac loader"><div class="loading_bar" style="display: flex;justify-content: center;border: 0;"><img src="/campaign/stripo/icons/loading-indicator.svg" width="32"></div><div class="loadoverlay" style="backgroun
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 63 3a 63 2c 64 61 74 61 3a 66 7d 29 7d 3b 61 63 2e 61 70 69 2e 63 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 26 26 63 2e 65 72 72 6f 72 3f 63 6f 6e 73 6f 6c 65 5f 6c 6f 67 28 63 2e 65 72 72 6f 72 29 3a 61 28 63 29 7d 7d 3b 61 63 2e 61 70 69 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 76 61 72 20 64 3d 21 31 2c 67 3d 21 31 3b 63 7c 7c 28 63 3d 7b 65 72 72 6f 72 3a 22 45 72 72 6f 72 3a 20 55 6e 72 65 63 6f 67 6e 69 7a 65 64 20 72 65 73 70 6f 6e 73 65 20 72 65 63 65 69 76 65 64 2e 22 7d 29 3b 21 63 2e 6d 65 73 73 61 67 65 26 26 63 2e 65 72 72 6f 72 26 26 28 63 2e 6d 65 73 73 61 67 65 3d 0a 63 2e 65 72 72 6f 72 2c 64 3d 21 30 29 3b 69 66 28 63 2e 6d 65 73 73 61 67 Data Ascii: c:c,data:f})};ac.api.callback=function(a){return function(c){c&&c.error?console_log(c.error):a(c)}};ac.api.error=function(c,e){var d=!1,g=!1;c\|\|(c={error:"Error: Unrecognized response received."});!c.message&&c.error&&(c.message=c.error,d=!0);if(c.messag
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 20 64 3b 31 3d 3d 63 2e 6c 65 6e 67 74 68 26 26 22 46 4f 52 4d 22 21 3d 63 5b 30 5d 2e 74 61 67 4e 61 6d 65 26 26 28 63 3d 61 28 22 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 22 29 2e 68 74 6d 6c 28 63 2e 68 74 6d 6c 28 29 29 29 3b 61 2e 65 61 63 68 28 63 2e 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 2e 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5c 5b 5d 24 2f 29 3f 28 66 5b 63 2e 6e 61 6d 65 5d 7c 7c 28 66 5b 63 2e 6e 61 6d 65 5d 3d 30 29 2c 64 5b 63 2e 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 5d 24 2f 2c 73 70 72 69 6e 74 66 28 22 5b 25 64 5d 22 2c 66 5b 63 2e 6e 61 6d 65 5d 29 29 5d 3d 63 2e 76 61 6c 75 65 2c 66 5b 63 2e 6e 61 6d 65 5d 2b 2b 29 3a 64 5b 63 2e 6e 61 6d 65 5d 3d 63 2e 76 61 6c 75 65 7d 29 Data Ascii: d;1==c.length&&"FORM"!=c[0].tagName&&(c=a("<form></form>").html(c.html()));a.each(c.serializeArray(),function(a,c){c.name.match(/\[]$/)?(f[c.name]\|\|(f[c.name]=0),d[c.name.replace(/\[]$/,sprintf("[%d]",f[c.name]))]=c.value,f[c.name]++):d[c.name]=c.value})
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 2c 31 3a 22 42 22 2c 32 3a 22 43 22 2c 33 3a 22 44 22 2c 34 3a 22 45 22 2c 35 3a 22 46 22 2c 36 3a 22 47 22 2c 37 3a 22 48 22 2c 38 3a 22 49 22 2c 39 3a 22 4a 22 2c 31 30 3a 22 4b 22 2c 31 31 3a 22 4c 22 2c 31 32 3a 22 4d 22 2c 31 33 3a 22 4e 22 2c 31 34 3a 22 4f 22 2c 31 35 3a 22 50 22 2c 31 36 3a 22 51 22 2c 31 37 3a 22 52 22 2c 31 38 3a 22 53 22 2c 31 39 3a 22 54 22 2c 32 30 3a 22 55 22 2c 32 31 3a 22 56 22 2c 32 32 3a 22 57 22 2c 32 33 3a 22 58 22 2c 32 34 3a 22 59 22 2c 32 35 3a 22 5a 22 2c 32 36 3a 22 61 22 2c 32 37 3a 22 62 22 2c 32 38 3a 22 63 22 2c 32 39 3a 22 64 22 2c 33 30 3a 22 65 22 2c 33 31 3a 22 66 22 2c 33 32 3a 22 67 22 2c 33 33 3a 22 68 22 2c 33 34 3a 22 69 22 2c 33 35 3a 22 6a 22 2c 33 36 3a 22 6b 22 2c 33 37 3a 22 6c 22 2c 33 38 3a 22 Data Ascii: ,1:"B",2:"C",3:"D",4:"E",5:"F",6:"G",7:"H",8:"I",9:"J",10:"K",11:"L",12:"M",13:"N",14:"O",15:"P",16:"Q",17:"R",18:"S",19:"T",20:"U",21:"V",22:"W",23:"X",24:"Y",25:"Z",26:"a",27:"b",28:"c",29:"d",30:"e",31:"f",32:"g",33:"h",34:"i",35:"j",36:"k",37:"l",38:"
2025-01-14 15:20:32 UTC	1369	IN	Data Raw: 28 66 2b 32 29 2c 32 29 29 3b 69 66 28 22 5f 22 3d 3d 64 2e 63 68 61 72 41 74 28 66 2b 33 29 29 62 72 65 61 6b 3b 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 28 64 2e 63 68 61 72 41 74 28 66 2b 0a 32 29 2c 36 29 7c 63 28 64 2e 63 68 61 72 41 74 28 66 2b 33 29 2c 30 29 29 7d 72 65 74 75 72 6e 20 65 7d 7d 29 28 29 3b 61 63 2e 62 72 6f 77 73 65 72 3d 7b 7d 3b 0a 76 61 72 20 42 72 6f 77 73 65 72 44 65 74 65 63 74 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 62 72 6f 77 73 65 72 3d 74 68 69 73 2e 73 65 61 72 63 68 53 74 72 69 6e 67 28 74 68 69 73 2e 64 61 74 61 42 72 6f 77 73 65 72 29 7c 7c 22 41 6e 20 75 6e 6b 6e 6f 77 6e 20 62 72 6f 77 73 65 72 22 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 73 Data Ascii: (f+2),2));if("_"==d.charAt(f+3))break;e+=String.fromCharCode(a(d.charAt(f+2),6)\|c(d.charAt(f+3),0))}return e}})();ac.browser={};var BrowserDetect={init:function(){this.browser=this.searchString(this.dataBrowser)\|\|"An unknown browser";this.version=this.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49746	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:32 UTC	861	OUT	GET /admin/js/functions.js?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:33 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: application/javascript Content-Length: 47585 Connection: close etag: "1230197873" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c5628c38d1b-BOS
2025-01-14 15:20:33 UTC	999	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 6f 6c 65 5f 6c 6f 67 28 29 20 7b 0a 09 2f 2f 20 61 74 74 65 6d 70 74 20 74 6f 20 73 65 6e 64 20 61 20 6d 65 73 73 61 67 65 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 0a 09 74 72 79 20 7b 0a 09 09 66 6f 72 28 76 61 72 20 69 20 3d 30 3b 20 69 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 0a 09 09 7d 0a 09 7d 20 63 61 74 63 68 28 65 29 20 7b 7d 20 2f 2f 20 66 61 69 6c 20 67 72 61 63 65 66 75 6c 6c 79 20 69 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 0a 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 62 72 61 6e 64 69 6e 67 5f 64 65 6c 65 74 65 28 70 6c 61 6e 2c 20 72 73 69 64 Data Ascii: function console_log() {// attempt to send a message to the consoletry {for(var i =0; i < arguments.length; i++) {console.log(arguments[i]);}} catch(e) {} // fail gracefully if it does not exist}function form_branding_delete(plan, rsid
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 2d 31 3b 0a 09 7d 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 5f 61 72 65 61 73 28 6e 6f 64 65 29 20 7b 0a 09 24 4a 28 27 74 65 78 74 61 72 65 61 27 2c 20 6e 6f 64 65 29 2e 68 74 6d 6c 28 27 27 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 5f 65 6c 65 6d 65 6e 74 28 6e 6f 64 65 29 20 7b 0a 09 76 61 72 20 6d 65 20 3d 20 24 4a 28 6e 6f 64 65 29 3b 0a 09 76 61 72 20 64 61 64 20 3d 20 6d 65 2e 70 61 72 65 6e 74 28 29 3b 0a 09 69 66 20 28 20 24 4a 28 22 3e 20 64 69 76 22 2c 20 64 61 64 29 2e 6c 65 6e 67 74 68 20 3e 20 31 20 29 20 7b 0a 09 09 6d 65 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 63 6c 65 61 72 5f 69 6e 70 75 74 73 28 6e 6f 64 65 29 3b 0a 09 09 63 6c 65 61 72 5f 73 65 6c 65 63 74 73 28 6e 6f Data Ascii: -1;});}function clear_areas(node) {$J('textarea', node).html('');}function remove_element(node) {var me = $J(node);var dad = me.parent();if ( $J("> div", dad).length > 1 ) {me.remove();} else {clear_inputs(node);clear_selects(no
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 5d 29 3b 0a 0a 09 24 4a 28 27 23 27 20 2b 20 69 64 20 2b 20 27 45 64 69 74 6f 72 4c 69 6e 6b 44 65 66 61 75 6c 74 27 29 2e 74 6f 67 67 6c 65 28 29 3b 0a 09 61 63 5f 6a 73 5f 61 64 6d 69 6e 2e 68 74 6d 6c 65 64 69 74 6f 72 20 3d 20 28 20 69 73 45 64 69 74 6f 72 20 3f 20 31 20 3a 20 30 20 29 3b 0a 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f 70 75 73 68 28 6e 6f 64 65 73 2c 20 69 64 29 20 7b 0a 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0a 09 09 24 4a 28 27 23 27 20 2b 20 69 64 29 2e 61 70 70 65 6e 64 28 6e 6f 64 65 73 5b 69 5d 29 3b 0a 7d 0a 0a 0a 0a 66 75 Data Ascii: ]);$J('#' + id + 'EditorLinkDefault').toggle();ac_js_admin.htmleditor = ( isEditor ? 1 : 0 );return false;}function form_editor_personalization_push(nodes, id) {for (var i = 0; i < nodes.length; i++)$J('#' + id).append(nodes[i]);}fu
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 66 78 20 2b 20 27 66 6f 72 6d 61 74 46 69 65 6c 64 27 29 2e 76 61 6c 28 29 29 3b 0a 7d 0a 0a 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 65 78 70 6f 72 74 5f 6c 69 6e 6b 5f 62 75 69 6c 64 28 63 6f 6e 74 65 78 74 2c 20 61 72 79 29 20 7b 0a 09 76 61 72 20 6c 69 6e 6b 20 3d 20 27 65 78 70 6f 72 74 2e 70 68 70 3f 61 63 74 69 6f 6e 3d 27 20 2b 20 63 6f 6e 74 65 78 74 3b 0a 09 66 6f 72 20 28 20 76 61 72 20 69 20 69 6e 20 61 72 79 20 29 20 7b 0a 09 09 6c 69 6e 6b 20 2b 3d 20 27 26 27 20 2b 20 69 20 2b 20 27 3d 27 20 2b 20 61 72 79 5b 69 5d 3b 0a 09 7d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 28 6f 75 72 66 6c 61 67 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 70 72 6f 6d 70 74 28 27 47 6f 20 74 6f 20 74 68 69 73 20 65 78 70 6f 72 74 20 55 52 4c 3f 27 2c Data Ascii: fx + 'formatField').val());}function export_link_build(context, ary) {var link = 'export.php?action=' + context;for ( var i in ary ) {link += '&' + i + '=' + ary[i];}if ( typeof(ourflag) == 'undefined' \|\| prompt('Go to this export URL?',
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 6f 6e 74 65 78 74 0a 09 09 76 61 72 20 66 75 6e 63 20 3d 20 6e 75 6c 6c 3b 0a 09 09 74 72 79 20 7b 0a 09 09 09 76 61 72 20 66 75 6e 63 20 3d 20 65 76 61 6c 28 61 63 5f 61 63 74 69 6f 6e 20 2b 20 22 5f 6c 69 73 74 5f 73 65 61 72 63 68 22 29 3b 0a 09 09 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 09 09 09 2f 2f 20 64 6f 20 6e 6f 74 68 69 6e 67 2c 20 6e 6f 6e 65 20 66 6f 75 6e 64 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 66 75 6e 63 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 29 20 7b 0a 09 09 09 66 75 6e 63 28 29 3b 0a 09 09 7d 0a 09 7d 0a 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 70 61 72 65 6e 74 73 5f 6c 69 73 74 5f 73 65 6c 65 63 74 28 61 6c 6c 2c 20 66 69 72 73 74 49 73 41 6c 6c 29 20 7b 0a 09 69 66 20 28 20 61 6c 6c 20 29 20 7b 0a 09 09 61 Data Ascii: ontextvar func = null;try {var func = eval(ac_action + "_list_search");} catch (e) {// do nothing, none found}if ( typeof func == "function" ) {func();}}}function parents_list_select(all, firstIsAll) {if ( all ) {a
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 22 29 3b 0a 09 2f 2f 20 6f 70 65 6e 20 6d 6f 64 61 6c 0a 09 24 4a 28 27 23 6d 65 73 73 61 67 65 5f 61 63 74 69 76 65 72 73 73 27 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 61 63 74 69 76 65 72 73 73 5f 69 6e 73 65 72 74 28 29 20 7b 0a 09 2f 2f 20 62 75 69 6c 64 20 74 68 65 20 63 6f 64 65 0a 09 76 61 72 20 63 6f 64 65 20 3d 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 61 63 74 69 76 65 72 73 73 5f 62 75 69 6c 64 28 29 3b 0a 09 69 66 20 28 20 63 6f 64 65 20 3d 3d 20 27 27 20 29 20 72 65 74 75 72 6e 3b 0a 0a 09 2f 2f 20 70 75 73 68 20 69 74 20 69 6e 74 6f 20 6e 65 65 64 65 64 20 65 64 69 74 6f 72 0a 09 61 63 5f 65 64 69 74 6f 72 5f 69 6e 73 65 72 74 28 24 4a 28 27 23 61 63 74 69 76 65 Data Ascii: ");// open modal$J('#message_activerss').modal("show");}function form_editor_activerss_insert() {// build the codevar code = form_editor_activerss_build();if ( code == '' ) return;// push it into needed editorac_editor_insert($J('#active
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 20 27 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 73 74 61 72 74 20 66 65 65 64 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 43 48 41 4e 4e 45 4c 3a 54 49 54 4c 45 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 70 72 69 6e 74 20 6f 75 74 20 74 69 74 6c 65 0a 09 09 27 25 52 53 53 2d 4c 4f 4f 50 7c 4c 49 4d 49 54 3a 27 20 2b 20 6c 6f 6f 70 20 2b 20 27 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 73 74 61 72 74 20 69 74 65 6d 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 44 41 54 45 25 5c 6e 27 20 2b 20 2f 2f 20 77 69 74 68 69 6e 20 61 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 54 49 54 4c 45 25 5c 6e 27 20 2b 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 53 55 4d 4d 41 52 59 25 5c 6e 27 20 2b 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 4c 49 Data Ascii: '%\n\n' + // start feed section'%RSS:CHANNEL:TITLE%\n\n' + // print out title'%RSS-LOOP\|LIMIT:' + loop + '%\n\n' + // start item section'%RSS:ITEM:DATE%\n' + // within a section'%RSS:ITEM:TITLE%\n' +'%RSS:ITEM:SUMMARY%\n' +'%RSS:ITEM:LI
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 0a 0a 09 2f 2f 20 63 6c 65 61 72 20 61 6e 79 20 73 65 74 54 69 6d 65 6f 75 74 73 20 72 75 6e 6e 69 6e 67 2e 20 28 6f 6e 65 20 69 73 20 75 73 65 64 20 66 6f 72 20 53 75 72 76 65 79 4d 6f 6e 6b 65 79 20 69 6e 74 65 67 72 61 74 69 6f 6e 29 0a 09 61 63 2e 73 74 6f 70 28 22 63 61 6d 70 61 69 67 6e 5f 73 65 72 76 69 63 65 5f 67 65 74 22 29 3b 0a 0a 09 69 66 20 28 75 73 65 5f 64 65 73 69 67 6e 65 72 29 20 7b 0a 09 09 69 66 20 28 61 63 2e 62 72 6f 77 73 65 72 2e 69 73 49 45 28 29 29 20 7b 0a 09 09 09 2f 2f 22 69 6e 73 65 72 74 48 54 4d 4c 22 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 49 45 20 28 67 72 72 72 29 2e 20 53 6f 20 77 65 20 68 61 76 65 20 74 6f 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 64 69 66 66 65 72 65 6e Data Ascii: // clear any setTimeouts running. (one is used for SurveyMonkey integration)ac.stop("campaign_service_get");if (use_designer) {if (ac.browser.isIE()) {//"insertHTML" command is not supported by IE (grrr). So we have to do something differen
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 78 74 2c 20 74 65 78 74 29 20 7c 7c 20 27 27 3b 20 2f 2f 20 43 6f 65 72 63 65 20 6e 75 6c 6c 20 74 6f 20 62 6c 61 6e 6b 20 73 74 72 69 6e 67 20 69 66 20 75 73 65 72 20 63 61 6e 63 65 6c 73 0a 09 09 69 66 20 28 20 65 6e 74 65 72 65 64 2e 74 72 69 6d 28 29 20 3d 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 65 6e 74 65 72 65 64 20 3d 20 74 65 78 74 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 65 78 74 6f 6e 6c 79 20 29 20 7b 0a 09 09 09 76 61 6c 20 3d 20 65 6e 74 65 72 65 64 20 2b 20 27 20 28 27 20 2b 20 73 74 72 53 75 72 76 65 79 54 65 78 74 32 20 2b 20 27 3a 20 27 20 2b 20 73 70 6c 69 74 5f 76 61 6c 75 65 5b 32 5d 20 2b 20 27 20 2d 2d 20 27 20 2b 20 6c 69 6e 6b 5f 68 72 65 66 20 2b 20 27 29 27 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 76 61 6c 20 3d 20 27 3c Data Ascii: xt, text) \|\| ''; // Coerce null to blank string if user cancelsif ( entered.trim() === '' ) {entered = text;}if ( textonly ) {val = entered + ' (' + strSurveyText2 + ': ' + split_value[2] + ' -- ' + link_href + ')';} else {val = '<
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 09 09 69 66 20 28 20 65 6e 74 65 72 65 64 2e 74 72 69 6d 28 29 20 3d 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 65 6e 74 65 72 65 64 20 3d 20 74 65 78 74 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 65 78 74 6f 6e 6c 79 20 29 20 7b 0a 09 09 09 76 61 6c 20 3d 20 65 6e 74 65 72 65 64 20 2b 20 27 20 3c 27 20 2b 20 76 61 6c 20 2b 20 27 3e 27 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 76 61 6c 20 3d 20 27 3c 61 20 68 72 65 66 3d 22 27 20 2b 20 76 61 6c 20 2b 20 27 22 3e 27 20 2b 20 65 6e 74 65 72 65 64 20 2b 20 27 3c 2f 61 3e 27 3b 0a 09 09 7d 0a 09 7d 0a 09 72 65 74 75 72 6e 20 76 61 6c 3b 0a 7d 0a 0a 0a 2f 2f 20 43 61 6d 70 61 69 67 6e 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 0a 66 75 6e 63 74 69 6f 6e 20 63 61 6d 70 61 69 67 6e 5f 70 65 72 73 6f 6e 61 Data Ascii: if ( entered.trim() === '' ) {entered = text;}if ( textonly ) {val = entered + ' <' + val + '>';} else {val = '<a href="' + val + '">' + entered + '</a>';}}return val;}// Campaign Personalizationfunction campaign_persona

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49747	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:32 UTC	856	OUT	GET /admin/mainjs.php?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:33 UTC	450	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 7040 Connection: close Cache-Control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache x-request-id: 72f074bf24c8e4964d7685b20969c15e CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c569b404393-EWR
2025-01-14 15:20:33 UTC	919	IN	Data Raw: 76 61 72 20 61 63 5f 6a 73 5f 61 64 6d 69 6e 20 3d 20 7b 20 22 69 64 22 20 3a 20 30 2c 20 22 75 73 65 72 6e 61 6d 65 22 20 3a 20 22 22 2c 20 22 66 69 72 73 74 5f 6e 61 6d 65 22 20 3a 20 22 22 2c 20 22 6c 61 73 74 5f 6e 61 6d 65 22 20 3a 20 22 22 2c 20 22 65 6d 61 69 6c 22 20 3a 20 22 22 2c 20 22 6c 61 73 74 5f 6c 6f 67 69 6e 22 20 3a 20 6e 75 6c 6c 2c 20 22 73 6f 75 72 63 65 69 64 22 20 3a 20 30 2c 20 22 73 6f 75 72 63 65 75 70 64 61 74 65 64 22 20 3a 20 6e 75 6c 6c 2c 20 22 70 72 6f 64 75 63 74 73 65 74 22 20 3a 20 6e 75 6c 6c 2c 20 22 61 62 73 69 64 22 20 3a 20 30 2c 20 22 70 61 72 65 6e 74 69 64 22 20 3a 20 30 2c 20 22 61 70 70 72 6f 76 65 64 22 20 3a 20 31 2c 20 22 73 61 6c 74 22 20 3a 20 22 22 2c 20 22 70 68 6f 6e 65 22 20 3a 20 22 22 2c 20 22 73 69 Data Ascii: var ac_js_admin = { "id" : 0, "username" : "", "first_name" : "", "last_name" : "", "email" : "", "last_login" : null, "sourceid" : 0, "sourceupdated" : null, "productset" : null, "absid" : 0, "parentid" : 0, "approved" : 1, "salt" : "", "phone" : "", "si
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 5f 73 65 6e 74 22 20 3a 20 30 2c 20 22 67 72 6f 75 70 73 22 20 3a 20 7b 20 31 20 3a 20 31 20 7d 2c 20 22 6c 69 73 74 73 22 20 3a 20 7b 20 38 20 3a 20 38 2c 20 31 30 20 3a 20 31 30 2c 20 31 33 20 3a 20 31 33 2c 20 31 35 20 3a 20 31 35 2c 20 31 39 20 3a 20 31 39 2c 20 32 37 20 3a 20 32 37 2c 20 33 34 20 3a 20 33 34 2c 20 34 31 20 3a 20 34 31 2c 20 35 31 20 3a 20 35 31 2c 20 35 35 20 3a 20 35 35 2c 20 35 37 20 3a 20 35 37 2c 20 35 38 20 3a 20 35 38 2c 20 36 31 20 3a 20 36 31 2c 20 36 32 20 3a 20 36 32 2c 20 36 35 20 3a 20 36 35 2c 20 36 36 20 3a 20 36 36 2c 20 36 37 20 3a 20 36 37 2c 20 36 38 20 3a 20 36 38 2c 20 36 39 20 3a 20 36 39 2c 20 37 30 20 3a 20 37 30 2c 20 37 31 20 3a 20 37 31 2c 20 37 32 20 3a 20 37 32 2c 20 37 33 20 3a 20 37 33 2c 20 37 34 20 3a Data Ascii: _sent" : 0, "groups" : { 1 : 1 }, "lists" : { 8 : 8, 10 : 10, 13 : 13, 15 : 15, 19 : 19, 27 : 27, 34 : 34, 41 : 41, 51 : 51, 55 : 55, 57 : 57, 58 : 58, 61 : 61, 62 : 62, 65 : 65, 66 : 66, 67 : 67, 68 : 68, 69 : 69, 70 : 70, 71 : 71, 72 : 72, 73 : 73, 74 :
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 5f 73 74 61 72 74 75 70 5f 72 65 70 6f 72 74 73 22 20 3a 20 30 2c 20 22 70 67 5f 73 74 61 72 74 75 70 5f 67 65 74 74 69 6e 67 73 74 61 72 74 65 64 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 61 64 64 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 65 64 69 74 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 64 65 6c 65 74 65 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 6d 61 6e 61 67 65 5f 63 75 73 74 6f 6d 5f 66 69 65 6c 64 22 20 3a 20 30 2c 20 22 70 67 5f 64 65 61 6c 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c 5f 64 65 6c 65 74 65 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c 5f 72 65 61 73 73 69 67 6e 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c 5f 66 69 65 6c 64 73 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c Data Ascii: _startup_reports" : 0, "pg_startup_gettingstarted" : 0, "pg_account_add" : 0, "pg_account_edit" : 0, "pg_account_delete" : 0, "pg_account_manage_custom_field" : 0, "pg_deal" : 1, "pg_deal_delete" : 1, "pg_deal_reassign" : 1, "pg_deal_fields" : 1, "pg_deal
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 64 6d 69 6e 5f 74 65 6d 70 6c 61 74 65 5f 63 73 73 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 61 64 6d 69 6e 5f 74 65 6d 70 6c 61 74 65 5f 63 73 73 5f 62 61 63 6b 75 70 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 70 75 62 6c 69 63 5f 74 65 6d 70 6c 61 74 65 5f 68 74 6d 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 70 75 62 6c 69 63 5f 74 65 6d 70 6c 61 74 65 5f 63 73 73 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 66 61 76 69 63 6f 6e 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 7a 65 6e 64 65 73 6b 5f 77 69 64 67 65 74 5f 65 6e 61 62 6c 65 64 22 20 3a 20 30 20 7d 3b 0d 0a 76 61 72 20 61 63 5f 6a 73 5f 73 69 74 65 20 3d 20 7b 20 22 69 64 22 20 3a 20 31 2c 20 22 6c 61 6e 67 22 20 3a 20 22 65 6e 67 6c 69 73 68 22 2c 20 22 61 Data Ascii: dmin_template_css" : null, "brand_admin_template_css_backup" : null, "brand_public_template_htm" : null, "brand_public_template_css" : null, "brand_favicon" : null, "brand_zendesk_widget_enabled" : 0 };var ac_js_site = { "id" : 1, "lang" : "english", "a
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 6d 61 69 6c 5f 74 65 73 74 5f 6d 69 6e 5f 63 6f 75 6e 74 22 20 3a 20 31 2c 20 22 73 65 6e 74 5f 65 6d 61 69 6c 5f 74 65 73 74 5f 6d 69 6e 5f 64 61 74 65 22 20 3a 20 22 32 30 32 34 2d 31 32 2d 33 31 20 30 37 3a 35 38 3a 34 31 22 2c 20 22 73 65 6e 74 5f 65 6d 61 69 6c 5f 74 65 73 74 5f 68 72 5f 63 6f 75 6e 74 22 20 3a 20 32 2c 20 22 73 65 6e 74 5f 65 6d 61 69 6c 5f 74 65 73 74 5f 68 72 5f 64 61 74 65 22 20 3a 20 22 32 30 32 34 2d 31 32 2d 33 31 20 30 37 3a 35 34 3a 34 35 22 2c 20 22 64 6b 69 6d 5f 69 64 22 20 3a 20 22 61 63 64 6b 69 6d 31 22 2c 20 22 67 6f 6f 67 6c 65 5f 61 6e 61 6c 79 74 69 63 73 5f 65 6e 61 62 6c 65 64 22 20 3a 20 30 2c 20 22 69 73 5f 74 72 69 61 6c 22 20 3a 20 66 61 6c 73 65 2c 20 22 69 73 5f 66 72 65 65 22 20 3a 20 66 61 6c 73 65 2c 20 Data Ascii: mail_test_min_count" : 1, "sent_email_test_min_date" : "2024-12-31 07:58:41", "sent_email_test_hr_count" : 2, "sent_email_test_hr_date" : "2024-12-31 07:54:45", "dkim_id" : "acdkim1", "google_analytics_enabled" : 0, "is_trial" : false, "is_free" : false,
2025-01-14 15:20:33 UTC	645	IN	Data Raw: 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 68 65 61 64 65 72 5f 74 65 78 74 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 68 65 61 64 65 72 5f 68 74 6d 6c 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 68 65 61 64 65 72 5f 68 74 6d 6c 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 74 65 78 74 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 74 65 78 74 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 6c 69 6e 6b 73 22 20 3a 20 31 2c 20 22 62 72 61 6e 64 5f 61 64 6d 69 6e 5f 74 65 6d 70 6c Data Ascii: " : 0, "brand_header_text_value" : null, "brand_header_html" : 0, "brand_header_html_value" : null, "brand_footer_text" : 0, "brand_footer_text_value" : null, "brand_footer_html" : 0, "brand_footer_html_value" : null, "brand_links" : 1, "brand_admin_templ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49748	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:33 UTC	652	OUT	GET /admin/js/jq/csrf_protection.js HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:33 UTC	379	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: application/javascript Content-Length: 4364 Connection: close etag: "1132611470" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: HIT Age: 7186 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c56da1b4344-EWR
2025-01-14 15:20:33 UTC	990	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4d 6f 6e 6b 65 79 20 70 61 74 63 68 20 6a 51 75 65 72 79 20 73 6f 20 74 68 61 74 20 66 6f 72 20 65 61 63 68 20 41 4a 41 58 20 72 65 71 75 65 73 74 2c 20 69 74 20 67 72 61 62 73 20 74 68 65 20 43 53 52 46 20 74 6f 6b 65 6e 20 0a 20 2a 20 64 69 72 65 63 74 6c 79 20 66 72 6f 6d 20 74 68 65 20 63 6f 6f 6b 69 65 20 61 6e 64 20 73 65 74 73 20 69 74 20 61 73 20 61 20 68 65 61 64 65 72 2e 20 54 68 69 73 20 77 61 79 2c 20 69 74 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 0a 20 2a 20 73 65 6e 64 20 74 68 65 20 6e 65 77 65 73 74 20 74 6f 6b 65 6e 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 6c 6c 54 68 65 4a 51 75 65 72 69 65 73 29 20 7b 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 55 72 6c 28 75 72 6c 29 20 7b 0a 09 09 69 66 20 Data Ascii: /** * Monkey patch jQuery so that for each AJAX request, it grabs the CSRF token * directly from the cookie and sets it as a header. This way, it will always * send the newest token. */(function(allTheJQueries) {function validateUrl(url) {if
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 3f 20 6f 70 74 69 6f 6e 73 2e 68 65 61 64 65 72 73 20 3a 20 7b 7d 3b 0a 09 09 6f 70 74 69 6f 6e 73 2e 68 65 61 64 65 72 73 5b 63 73 72 66 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 4e 61 6d 65 5d 20 3d 20 67 65 74 43 53 52 46 54 6f 6b 65 6e 28 29 3b 0a 09 7d 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 4d 6f 64 69 66 79 20 74 68 65 20 67 69 76 65 6e 20 76 65 72 73 69 6f 6e 20 6f 66 20 6a 71 75 65 72 79 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 50 72 65 66 69 6c 74 65 72 28 6a 51 75 65 72 79 29 20 7b 0a 09 09 69 66 20 28 74 79 70 65 6f 66 20 6a 51 75 65 72 79 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 0a 09 09 09 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 Data Ascii: === 'object' ? options.headers : {};options.headers[csrfResponseHeaderName] = getCSRFToken();}/** * Modify the given version of jquery */function modifyPrefilter(jQuery) {if (typeof jQuery === "undefined"\|\|typeof jQuery.ajaxPrefilter
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 6c 29 20 7b 0a 09 09 6d 6f 64 69 66 79 50 72 65 66 69 6c 74 65 72 28 6a 51 75 65 72 79 49 6d 70 6c 29 3b 0a 09 09 69 66 20 28 21 63 73 72 66 46 6f 72 6d 49 6e 74 65 72 63 65 70 74 6f 72 52 65 67 69 73 74 65 72 65 64 29 20 7b 0a 09 09 09 63 73 72 66 46 6f 72 6d 49 6e 74 65 72 63 65 70 74 6f 72 52 65 67 69 73 74 65 72 65 64 20 3d 20 61 70 70 65 6e 64 43 53 52 46 54 6f 6b 65 6e 4f 6e 46 6f 72 6d 53 75 62 6d 69 74 28 6a 51 75 65 72 79 49 6d 70 6c 29 3b 0a 09 09 7d 0a 09 7d 29 3b 0a 0a 7d 29 28 5b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 20 77 69 6e 64 6f 77 2e 24 4a 2c 20 77 69 6e 64 6f 77 2e 24 5d 29 3b 0a 0a 2f 2a 2a 0a 20 2a 20 45 78 74 72 61 63 74 73 20 43 53 52 46 20 70 72 6f 74 65 63 74 69 6f 6e 20 74 6f 6b 65 6e 20 66 72 6f 6d 20 74 68 65 20 63 61 72 Data Ascii: l) {modifyPrefilter(jQueryImpl);if (!csrfFormInterceptorRegistered) {csrfFormInterceptorRegistered = appendCSRFTokenOnFormSubmit(jQueryImpl);}});})([window.jQuery, window.$J, window.$]);/** * Extracts CSRF protection token from the car
2025-01-14 15:20:33 UTC	636	IN	Data Raw: 0a 09 09 63 73 72 66 49 6e 70 75 74 20 3d 20 61 74 74 61 63 68 4e 65 77 43 53 52 46 49 6e 70 75 74 46 69 65 6c 64 54 6f 46 6f 72 6d 28 66 6f 72 6d 29 3b 0a 09 7d 0a 0a 09 63 73 72 66 49 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 20 67 65 74 43 53 52 46 54 6f 6b 65 6e 28 29 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 74 72 69 65 76 65 73 20 61 20 63 73 72 66 20 76 61 6c 69 64 61 74 69 6f 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 20 66 72 6f 6d 20 74 68 65 20 66 6f 72 6d 0a 20 2a 0a 20 2a 20 40 70 61 72 61 6d 20 6d 79 46 6f 72 6d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 2a 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 53 52 46 49 6e 70 75 74 46 69 65 6c 64 28 6d 79 46 6f 72 6d 29 20 7b 0a 09 72 65 74 75 72 6e 20 Data Ascii: csrfInput = attachNewCSRFInputFieldToForm(form);}csrfInput.setAttribute("value", getCSRFToken());}/** * Retrieves a csrf validation input field from the form * * @param myForm * @returns {} /function getCSRFInputField(myForm) {return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49751	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:33 UTC	692	OUT	GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:33 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c594847c466-EWR
2025-01-14 15:20:33 UTC	1071	IN	Data Raw: 34 32 38 0d 0a 2f 2f 20 61 63 2e 6a 73 0a 2f 2f 20 4c 6f 61 64 69 6e 67 2e 2e 2e 0a 0a 2f 2f 20 61 6a 61 78 2e 6a 73 0a 0a 76 61 72 20 61 63 5f 61 6a 61 78 5f 64 65 62 75 67 20 3d 20 74 72 75 65 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 72 65 71 75 65 73 74 5f 6f 62 6a 65 63 74 28 29 20 7b 0a 20 20 20 20 76 61 72 20 68 72 65 71 3b 0a 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 68 72 65 71 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 09 09 68 72 65 71 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 68 72 65 71 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 63 61 6c 6c 5f 75 72 6c 28 75 72 6c Data Ascii: 428// ac.js// Loading...// ajax.jsvar ac_ajax_debug = true;function ac_ajax_request_object() { var hreq; try { hreq = new XMLHttpRequest(); } catch (e) {hreq = null; } return hreq;}function ac_ajax_call_url(url
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 62 64 32 0d 0a 69 66 20 28 20 70 6f 73 74 54 79 70 65 20 21 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 0a 09 09 20 20 20 20 20 20 20 20 20 20 20 20 09 70 6f 73 74 41 72 72 2e 70 75 73 68 28 69 20 2b 20 27 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 6f 73 74 5b 69 5d 29 29 3b 0a 09 09 09 09 20 20 20 20 7d 0a 09 09 09 20 20 20 20 7d 0a 09 09 09 20 20 20 20 70 6f 73 74 20 3d 20 70 6f 73 74 41 72 72 2e 6a 6f 69 6e 28 27 26 27 29 3b 0a 09 09 20 20 20 20 7d 0a 09 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 68 72 65 71 2e 6f 70 65 6e 28 6d 65 74 68 6f 64 2c 20 75 72 6c 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 68 72 65 71 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 58 2d 58 53 52 46 2d 54 4f 4b 45 4e 22 2c Data Ascii: bd2if ( postType != 'function' ) { postArr.push(i + '=' + encodeURIComponent(post[i])); } } post = postArr.join('&'); } } hreq.open(method, url, true); hreq.setRequestHeader("X-XSRF-TOKEN",
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 63 61 6c 6c 5f 63 62 28 75 72 6c 2c 20 66 75 6e 63 2c 20 63 62 29 20 7b 0a 20 20 20 20 69 66 20 28 66 75 6e 63 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 72 6c 2e 6d 61 74 63 68 28 2f 5c 3f 2f 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 20 2b 20 22 26 66 3d 22 20 2b 20 66 75 6e 63 3b 0a 20 20 20 20 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 20 2b 20 22 3f 66 3d 22 20 2b 20 66 75 6e 63 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 75 72 6c 20 2b 3d 20 22 26 72 61 6e 64 3d 22 20 2b 20 61 63 5f 62 36 34 5f 65 6e 63 6f 64 65 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 0a 0a 20 20 20 Data Ascii: }}function ac_ajax_call_cb(url, func, cb) { if (func) { if (url.match(/\?/)) url = url + "&f=" + func; else url = url + "?f=" + func; } url += "&rand=" + ac_b64_encode(Math.random().toString());
2025-01-14 15:20:33 UTC	295	IN	Data Raw: 61 78 5f 68 61 6e 64 6c 65 5f 74 65 78 74 28 68 72 65 71 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 2f 2a 0a 09 09 09 09 09 76 61 72 20 72 6f 6f 74 4e 6f 64 65 20 3d 20 28 20 78 6d 6c 20 21 3d 3d 20 6e 75 6c 6c 20 3f 20 78 6d 6c 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 3a 20 6e 75 6c 6c 20 29 3b 0a 09 09 09 09 09 69 66 20 28 63 62 20 3d 3d 3d 20 6e 75 6c 6c 20 26 26 20 72 6f 6f 74 4e 6f 64 65 29 20 7b 0a 09 09 09 09 09 09 63 62 20 3d 20 65 76 61 6c 28 22 63 62 5f 22 20 2b 20 72 6f 6f 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 69 66 20 28 74 79 70 65 6f 66 20 63 62 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 0a 09 09 09 09 09 09 63 62 28 Data Ascii: ax_handle_text(hreq.responseText);}}/*var rootNode = ( xml !== null ? xml.documentElement : null );if (cb === null && rootNode) {cb = eval("cb_" + rootNode.nodeName);}if (typeof cb == "function")cb(
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 31 66 66 61 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 09 09 09 09 09 61 6c 65 72 74 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 63 62 28 63 62 66 29 20 7b 0a 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 78 6d 6c 2c 20 74 65 78 74 29 20 7b 0a 09 09 77 69 6e 64 6f 77 2e 74 5f 78 6d 6c 20 20 3d 20 78 6d 6c 3b 0a 09 09 77 69 6e 64 6f 77 2e 74 5f 74 65 78 74 20 3d 20 74 65 78 74 3b 0a 09 09 76 61 72 20 61 72 79 20 20 20 20 20 20 20 3d 20 61 63 5f 64 6f 6d 5f 72 65 61 64 5f 6e 6f 64 65 28 78 6d 6c 2c 20 6e 75 6c 6c 29 3b 0a 09 09 Data Ascii: 1ffa } catch (e) {alert(e); } } } }}function ac_ajax_cb(cbf) {return function(xml, text) {window.t_xml = xml;window.t_text = text;var ary = ac_dom_read_node(xml, null);
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 63 61 73 65 20 31 3a 20 20 20 20 20 2f 2f 20 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 63 5f 64 6f 6d 5f 69 73 6e 75 6c 6c 28 63 6e 6f 64 65 2e 66 69 72 73 74 43 68 69 6c 64 29 29 20 7b 0a 09 09 09 09 09 76 61 72 20 69 64 78 20 3d 20 63 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 61 72 79 5b 69 64 78 5d 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 28 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 73 74 72 69 6e 67 22 20 26 26 20 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 61 72 72 61 79 22 20 26 26 20 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 Data Ascii: case 1: // ELEMENT_NODE if (ac_dom_isnull(cnode.firstChild)) {var idx = cnode.nodeName.toLowerCase();if (ary[idx] === undefined \|\| (typeof(ary[idx]) != "string" && typeof(ary[idx]) != "array" && typeof(ary[idx]) != "
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 3f 20 6e 6f 64 65 64 61 74 61 20 3a 20 66 69 6c 74 65 72 28 6e 6f 64 65 64 61 74 61 29 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 64 78 20 3d 20 63 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 61 72 79 5b 69 64 78 5d 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 28 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 73 74 72 69 6e 67 22 20 26 26 20 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 61 72 72 61 79 22 20 26 26 20 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 6f 62 6a 65 63 74 22 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ? nodedata : filter(nodedata));}} else { var idx = cnode.nodeName.toLowerCase();if (ary[idx] === undefined \|\| (typeof(ary[idx]) != "string" && typeof(ary[idx]) != "array" && typeof(ary[idx]) != "object")) {
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 74 6f 67 67 6c 65 5f 63 6c 61 73 73 28 69 64 2c 20 63 6c 61 73 73 4e 61 6d 65 31 2c 20 63 6c 61 73 73 4e 61 6d 65 32 29 20 7b 0a 09 76 61 72 20 6e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 64 29 3b 0a 09 69 66 20 28 20 21 6e 6f 64 65 20 29 20 72 65 74 75 72 6e 3b 0a 09 6e 6f 64 65 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 28 20 6e 6f 64 65 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 3d 20 63 6c 61 73 73 4e 61 6d 65 31 20 3f 20 63 6c 61 73 73 4e 61 6d 65 32 20 3a 20 63 6c 61 73 73 4e 61 6d 65 31 20 29 3b 0a 7d 0a 0a 2f 2f 20 57 65 20 64 6f 6e 27 74 20 72 65 63 75 72 73 65 20 74 6f 20 74 68 65 20 63 68 69 6c 64 20 6e 6f Data Ascii: lay = "none";}function ac_dom_toggle_class(id, className1, className2) {var node = document.getElementById(id);if ( !node ) return;node.className = ( node.className == className1 ? className2 : className1 );}// We don't recurse to the child no
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 69 5d 29 3b 0a 09 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 61 70 70 65 6e 64 5f 63 68 69 6c 64 74 65 78 74 28 6e 6f 64 65 2c 20 74 65 78 74 29 20 7b 0a 20 20 20 20 6e 6f 64 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 74 65 78 74 29 29 3b 0a 7d 0a 0a 2f 2f 20 43 72 65 61 74 65 20 61 20 6e 65 77 20 3c 6f 70 74 69 6f 6e 3e 20 65 6c 65 6d 65 6e 74 2e 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 6e 65 77 5f 6f 70 74 69 6f 6e 28 76 61 6c 2c 20 6c 61 62 65 6c 29 20 7b 0a 20 20 20 20 76 61 72 20 6f 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 3b 0a 20 20 20 20 6f 70 74 2e 76 61 6c 75 65 20 3d 20 76 Data Ascii: i]);}}function ac_dom_append_childtext(node, text) { node.appendChild(document.createTextNode(text));}// Create a new <option> element.function ac_dom_new_option(val, label) { var opt = document.createElement("option"); opt.value = v
2025-01-14 15:20:33 UTC	1349	IN	Data Raw: 6c 28 27 76 61 72 20 6f 6c 64 66 75 6e 63 20 3d 20 27 20 2b 20 66 75 6e 63 31 20 2b 20 27 3b 27 29 3b 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 6f 6c 64 66 75 6e 63 20 21 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 0a 09 09 65 76 61 6c 28 66 75 6e 63 31 20 2b 20 27 20 3d 20 66 75 6e 63 32 3b 27 29 3b 0a 09 09 2f 2f 66 75 6e 63 31 20 3d 20 66 75 6e 63 32 3b 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 65 76 61 6c 28 66 75 6e 63 31 20 2b 20 27 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 6f 6c 64 66 75 6e 63 28 29 3b 20 66 75 6e 63 32 28 29 3b 20 7d 27 29 3b 0a 09 09 2f 2a 66 75 6e 63 31 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 6f 6c 64 66 75 6e 63 28 29 3b 0a 09 09 09 66 75 6e 63 32 28 29 3b 0a 09 09 7d 2a 2f 0a 09 7d 0a 7d 0a 0a 66 75 6e Data Ascii: l('var oldfunc = ' + func1 + ';');if ( typeof oldfunc != 'function' ) {eval(func1 + ' = func2;');//func1 = func2;} else {eval(func1 + ' = function() { oldfunc(); func2(); }');/func1 = function() {oldfunc();func2();}/}}fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49749	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:33 UTC	882	OUT	GET /node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:33 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: application/javascript Content-Length: 186349 Connection: close etag: "3352805550" last-modified: Mon, 13 Jan 2025 21:19:38 GMT CF-Cache-Status: MISS Expires: Tue, 14 Jan 2025 19:20:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c596d45de9b-EWR
2025-01-14 15:20:33 UTC	920	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 72 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 Data Ascii: ):Promise.resolve(l).then(r,o)}function o(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function i(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 65 29 3b 76 61 72 20 6f 3d 6e 65 77 28 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 74 2c 72 29 29 3b 72 65 74 75 72 6e 20 6e 26 26 75 28 6f 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6f 7d 2c 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 61 70 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 7c 7c 28 6e 3d 74 2c 2d 31 3d 3d 3d 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6e 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 29 29 72 65 74 75 72 6e 20 74 Data Ascii: e);var o=new(Function.bind.apply(t,r));return n&&u(o,n.prototype),o},d.apply(null,arguments)}function f(t){var e="function"==typeof Map?new Map:void 0;return f=function(t){if(null===t\|\|(n=t,-1===Function.toString.call(n).indexOf("[native code]")))return t
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 74 2e 73 6c 69 63 65 28 30 29 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 7b 72 61 77 3a 7b 76 61 6c 75 65 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 65 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 77 28 74 29 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 Data Ascii: .apply(this,arguments)}function _(t,e){return e\|\|(e=t.slice(0)),Object.freeze(Object.defineProperties(t,{raw:{value:Object.freeze(e)}}))}function g(t){return function(t){if(Array.isArray(t))return w(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 6e 2e 63 61 6c 6c 28 74 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 61 3d 74 2e 64 6f 6e 65 2c 74 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 3d 21 30 2c 69 3d 74 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 61 7c 7c 6e 75 6c 6c 3d 3d 6e 2e 72 65 74 75 72 6e 7c 7c 6e 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 73 29 74 68 72 6f 77 20 69 7d 7d 7d 7d 0a 2f 2a 2a 0a 20 20 40 6c 69 63 65 6e 73 65 20 40 6e 6f 63 6f 6d 70 69 6c 65 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 Data Ascii: unction(){n=n.call(t)},n:function(){var t=n.next();return a=t.done,t},e:function(t){s=!0,i=t},f:function(){try{a\|\|null==n.return\|\|n.return()}finally{if(s)throw i}}}}/** @license @nocompile Copyright (c) 2018 The Polymer Project Authors. All rights re
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 74 68 69 73 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 69 66 28 65 29 74 3a 7b 76 61 72 20 6e 3d 69 3b 74 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 2d 31 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 74 5b 6f 5d 3b 69 66 28 21 28 61 20 69 6e 20 6e 29 29 62 72 65 61 6b 20 74 3b 6e 3d 6e 5b 61 5d 7d 28 65 3d 65 28 6f 3d 6e 5b 74 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 5d 29 29 21 3d 6f 26 26 6e 75 6c 6c 21 3d 65 26 26 72 28 6e 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 72 65 74 75 72 6e 28 74 3d 7b 6e 65 78 74 3a 74 7d 29 Data Ascii: bal object")}(this);function a(t,e){if(e)t:{var n=i;t=t.split(".");for(var o=0;o<t.length-1;o++){var a=t[o];if(!(a in n))break t;n=n[a]}(e=e(o=n[t=t[t.length-1]]))!=o&&null!=e&&r(n,t,{configurable:!0,writable:!0,value:e})}}function s(t){return(t={next:t})
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 3b 62 72 65 61 6b 20 74 7d 63 61 74 63 68 28 41 29 7b 7d 75 3d 21 31 7d 6f 3d 75 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 2c 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 74 7d 3a 6e 75 6c 6c 7d 76 61 72 20 64 3d 6f 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 74 68 69 73 2e 75 3d 21 31 2c 74 68 69 73 2e 68 3d 6e 75 6c 6c 2c 74 68 69 73 2e 4b 61 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 67 3d 31 2c 74 68 69 73 2e 64 61 3d 30 2c 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 69 66 28 74 2e 75 29 74 68 72 6f 77 20 6e 65 77 20 54 Data Ascii: ;break t}catch(A){}u=!1}o=u?function(t,e){if(t.__proto__=e,t.__proto__!==e)throw new TypeError(t+" is not extensible");return t}:null}var d=o;function f(){this.u=!1,this.h=null,this.Ka=void 0,this.g=1,this.da=0,this.i=null}function p(t){if(t.u)throw new T
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 65 29 29 2c 64 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 64 28 65 2c 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 65 7d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 4b 61 3d 74 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 69 3d 7b 72 65 74 75 72 6e 3a 74 7d 2c 74 68 69 73 2e 67 3d 74 68 69 73 2e 64 61 7d 2c 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 28 41 72 72 61 79 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e Data Ascii: e)),d&&t.prototype&&d(e,t.prototype),e}f.prototype.O=function(t){this.Ka=t},f.prototype.return=function(t){this.i={return:t},this.g=this.da},Array.from\|\|(Array.from=function(t){return[].slice.call(t)}),Object.assign\|\|(Object.assign=function(t){for(var e,n
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 20 52 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 2e 49 29 7d 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 6e 3d 74 2e 62 61 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 4e 28 74 2c 74 2e 62 61 5b 65 5d 29 3b 74 2e 62 61 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 65 2c 6e 29 7b 74 68 69 73 2e 62 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 6e 75 6c 6c 2c 74 68 69 73 2e 63 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 78 28 65 2c 74 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: Rejection:",t.I)}));for(var e=0,n=t.ba.length;e<n;e++)N(t,t.ba[e]);t.ba=null}function k(t,e,n){this.bb="function"==typeof t?t:null,this.cb="function"==typeof e?e:null,this.promise=n}function P(t,e){var n=!1;try{t((function(t){n\|\|(n=!0,x(e,t))}),(function
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 44 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 43 2e 72 65 73 6f 6c 76 65 3d 44 2c 43 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 3b 76 61 72 20 49 3d 64 6f 63 75 6d 65 6e Data Ascii: ction(t){return new C((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError("Promise.race accepts an array"));for(var r=0,o=t.length;r<o;r++)D(t[r]).then(e,n)}))},C.resolve=D,C.reject=function(t){return new C((function(e,n){n(t)}))};var I=documen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49750	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:33 UTC	867	OUT	GET /admin/js/jq/notification.js?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:33 UTC	369	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: application/javascript Content-Length: 1406 Connection: close etag: "2781588083" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c596a0543a0-EWR
2025-01-14 15:20:33 UTC	1000	IN	Data Raw: 2f 2f 0a 2f 2f 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 0a 2f 2f 20 55 73 61 67 65 3a 20 24 4a 28 27 23 79 6f 75 72 2d 63 6f 6e 74 61 69 6e 65 72 27 29 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 28 7b 74 65 78 74 3a 20 27 53 75 63 63 65 73 73 66 75 6c 6c 79 20 73 65 6e 74 27 2c 20 74 79 70 65 3a 20 27 73 75 63 63 65 73 73 27 7d 29 0a 2f 2f 0a 2f 2f 20 44 6f 63 73 3a 0a 2f 2f 20 0a 2f 2f 20 74 79 70 65 3a 20 73 74 72 69 6e 67 20 28 73 75 63 63 65 73 73 2c 20 65 72 72 6f 72 2c 20 77 61 72 6e 69 6e 67 2c 20 6e 6f 74 69 63 65 29 0a 2f 2f 20 74 65 78 74 3a 20 73 74 72 69 6e 67 20 28 61 6c 65 72 74 20 74 65 78 74 29 0a 2f 2f 20 70 65 72 73 69 73 74 3a 20 62 6f 6f 6c 65 61 6e 20 28 73 68 6f 75 6c 64 20 74 68 65 20 61 6c 65 72 74 20 72 65 6d 61 69 6e 20 6f 6e 20 73 63 Data Ascii: //// Notification// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'})//// Docs:// // type: string (success, error, warning, notice)// text: string (alert text)// persist: boolean (should the alert remain on sc
2025-01-14 15:20:33 UTC	406	IN	Data Raw: 75 74 29 3b 0a 09 09 09 09 74 69 6d 65 6f 75 74 20 3d 20 66 61 6c 73 65 3b 0a 09 09 09 7d 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 65 78 69 73 74 69 6e 67 20 3d 20 24 28 74 65 6d 70 6c 61 74 65 29 3b 0a 09 09 09 5f 74 68 69 73 2e 70 72 65 70 65 6e 64 28 65 78 69 73 74 69 6e 67 29 3b 0a 09 09 7d 0a 0a 09 09 69 66 20 28 73 65 74 74 69 6e 67 73 2e 70 65 72 73 69 73 74 20 21 3d 20 74 72 75 65 29 20 7b 0a 09 09 09 76 61 72 20 74 69 6d 65 6f 75 74 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 5f 74 68 69 73 2e 66 69 6e 64 28 27 2e 6e 6f 74 69 66 79 27 29 2e 61 6e 69 6d 61 74 65 28 7b 20 6f 70 61 63 69 74 79 3a 20 30 7d 2c 20 35 30 30 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 5f 74 68 69 73 2e Data Ascii: ut);timeout = false;}} else {existing = $(template);_this.prepend(existing);}if (settings.persist != true) {var timeout = setTimeout(function() {_this.find('.notify').animate({ opacity: 0}, 500, function() {_this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	49753	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:33 UTC	657	OUT	GET /admin/jsc/ac.js?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:33 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: application/javascript Content-Length: 54805 Connection: close etag: "1296578929" last-modified: Mon, 13 Jan 2025 21:19:56 GMT CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c5a785943c7-EWR
2025-01-14 15:20:33 UTC	992	IN	Data Raw: 76 61 72 20 61 63 3d 7b 72 61 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 63 2e 73 74 72 2e 63 61 73 74 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 2c 72 61 6e 64 48 65 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 63 2e 72 61 6e 64 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 73 70 72 69 6e 74 66 28 22 25 78 22 2c 61 5b 31 5d 29 7d 2c 68 69 64 64 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 6e 6f 6e 65 22 3d 3d 24 4a 28 61 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 5b 63 5d 29 72 65 74 75 72 6e 21 31 Data Ascii: var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 68 29 7b 76 61 72 20 64 3d 24 4a 28 74 68 69 73 29 3b 0a 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 64 2e 62 6c 75 72 28 29 3b 63 28 64 29 7d 7d 29 3b 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 65 61 63 68 28 24 4a 28 22 2e 63 6c 69 63 6b 2d 74 6f 2d 65 64 69 74 2e 22 2b 65 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 24 4a 28 61 29 3b 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6c 69 63 6b 2d 74 6f 2d 65 64 69 74 20 22 2b 65 29 3b 63 28 61 29 7d 29 7d 29 7d 2c 64 65 63 6f 64 65 42 61 73 65 36 34 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 61 74 6f 62 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 Data Ascii: h){var d=$J(this);a.preventDefault();d.blur();c(d)}});$J(document).on("click",function(a){_.each($J(".click-to-edit."+e),function(a){a=$J(a);a.removeClass("click-to-edit "+e);c(a)})})},decodeBase64:function(a){return window.atob?decodeURIComponent(window
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 7c 7c 28 61 2e 6f 6b 6c 61 62 65 6c 3d 73 74 72 4f 4b 29 3b 61 2e 6f 6b 63 6c 61 73 73 7c 7c 28 61 2e 6f 6b 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 29 3b 61 2e 63 6c 6f 73 65 6c 61 62 65 6c 7c 7c 28 61 2e 63 6c 6f 73 65 6c 61 62 65 6c 3d 61 2e 68 69 64 65 6f 6b 3f 73 74 72 43 6c 6f 73 65 3a 73 74 72 43 61 6e 63 65 6c 29 3b 61 2e 63 6c 61 73 73 65 73 7c 7c 28 61 2e 63 6c 61 73 73 65 73 3d 22 22 29 3b 61 2e 64 6f 6e 74 5f 62 6c 75 72 7c 7c 24 4a 28 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 2e 62 6c 75 72 28 29 3b 63 3d 63 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 0a 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 22 29 2e 72 65 6d 6f 76 65 28 29 3b 76 61 72 20 64 3d 22 22 2b 28 27 3c 64 69 76 20 69 64 3d 22 61 Data Ascii: label\|\|(a.oklabel=strOK);a.okclass\|\|(a.okclass="green");a.closelabel\|\|(a.closelabel=a.hideok?strClose:strCancel);a.classes\|\|(a.classes="");a.dont_blur\|\|$J(document.activeElement).blur();c=c\|\|function(){};$J("#ac_automodal").remove();var d=""+('<div id="a
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 5b 65 5d 2e 76 61 6c 75 65 3d 3d 66 2e 64 65 66 61 75 6c 74 3f 22 73 65 6c 65 63 74 65 64 22 3a 22 22 2c 66 2e 6f 70 74 69 6f 6e 73 5b 65 5d 2e 76 61 6c 75 65 2c 66 2e 6f 70 74 69 6f 6e 73 5b 65 5d 2e 6c 61 62 65 6c 29 3b 64 2b 3d 22 3c 2f 73 65 6c 65 63 74 3e 22 3b 64 2b 3d 22 3c 2f 66 69 65 6c 64 73 65 74 3e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 74 65 78 74 61 72 65 61 22 3a 66 2e 72 6f 77 73 3d 66 2e 72 6f 77 73 7c 7c 38 3b 66 2e 63 6f 6c 73 3d 66 2e 63 6f 6c 73 7c 7c 34 30 3b 64 2b 3d 73 70 72 69 6e 74 66 28 27 3c 66 69 65 6c 64 73 65 74 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 25 73 22 3e 27 2c 66 2e 63 6c 61 73 73 4e 61 6d 65 29 3b 64 2b 3d 73 70 72 69 6e 74 66 28 22 3c 6c 61 62 65 6c 3e 25 73 3c 2f 6c 61 62 65 6c 3e 22 2c 66 Data Ascii: ptions[e].value==f.default?"selected":"",f.options[e].value,f.options[e].label);d+="</select>";d+="</fieldset>";break;case "textarea":f.rows=f.rows\|\|8;f.cols=f.cols\|\|40;d+=sprintf('<fieldset class="input %s">',f.className);d+=sprintf("<label>%s</label>",f
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 63 29 7b 69 66 28 61 2e 6f 6b 29 7b 76 61 72 20 64 3d 0a 7b 7d 3b 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 69 6e 70 75 74 2c 20 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 74 65 78 74 61 72 65 61 2c 20 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 73 65 6c 65 63 74 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 64 5b 63 2e 6e 61 6d 65 5d 3d 63 2e 76 61 6c 75 65 7d 29 3b 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 64 69 76 2e 6f 70 74 69 6f 6e 2d 75 69 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 5b 5b 24 4a 28 74 68 69 73 29 2e 64 61 74 61 28 22 6e 61 6d 65 22 29 5d 5d 3d 24 4a 28 22 2e 73 65 6c 65 63 74 65 64 Data Ascii: tion(c){if(a.ok){var d={};$J("#ac_automodal fieldset input, #ac_automodal fieldset textarea, #ac_automodal fieldset select").each(function(a,c){d[c.name]=c.value});$J("#ac_automodal div.option-ui").each(function(){d[[$J(this).data("name")]]=$J(".selected
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 4a 28 22 2e 61 63 2e 6c 6f 61 64 65 72 22 29 2e 6c 65 6e 67 74 68 26 26 24 4a 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 20 6c 6f 61 64 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 69 6e 67 5f 62 61 72 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 3a 20 30 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 61 6d 70 61 69 67 6e 2f 73 74 72 69 70 6f 2f 69 63 6f 6e 73 2f 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 2e 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 6f 76 65 72 6c 61 79 22 20 73 74 79 6c 65 3d 22 62 61 Data Ascii: J(".ac.loader").length&&$J("body").append('<div class="ac loader"><div class="loading_bar" style="display: flex;justify-content: center;border: 0;"><img src="/campaign/stripo/icons/loading-indicator.svg" width="32"></div><div class="loadoverlay" style="ba
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 74 3a 61 2c 66 75 6e 63 3a 63 2c 64 61 74 61 3a 66 7d 29 7d 3b 61 63 2e 61 70 69 2e 63 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 26 26 63 2e 65 72 72 6f 72 3f 63 6f 6e 73 6f 6c 65 5f 6c 6f 67 28 63 2e 65 72 72 6f 72 29 3a 61 28 63 29 7d 7d 3b 61 63 2e 61 70 69 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 76 61 72 20 64 3d 21 31 2c 67 3d 21 31 3b 63 7c 7c 28 63 3d 7b 65 72 72 6f 72 3a 22 45 72 72 6f 72 3a 20 55 6e 72 65 63 6f 67 6e 69 7a 65 64 20 72 65 73 70 6f 6e 73 65 20 72 65 63 65 69 76 65 64 2e 22 7d 29 3b 21 63 2e 6d 65 73 73 61 67 65 26 26 63 2e 65 72 72 6f 72 26 26 28 63 2e 6d 65 73 73 61 67 65 3d 0a 63 2e 65 72 72 6f 72 2c 64 3d 21 30 29 3b 69 66 28 63 Data Ascii: t:a,func:c,data:f})};ac.api.callback=function(a){return function(c){c&&c.error?console_log(c.error):a(c)}};ac.api.error=function(c,e){var d=!1,g=!1;c\|\|(c={error:"Error: Unrecognized response received."});!c.message&&c.error&&(c.message=c.error,d=!0);if(c
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 20 64 3b 31 3d 3d 63 2e 6c 65 6e 67 74 68 26 26 22 46 4f 52 4d 22 21 3d 63 5b 30 5d 2e 74 61 67 4e 61 6d 65 26 26 28 63 3d 61 28 22 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 22 29 2e 68 74 6d 6c 28 63 2e 68 74 6d 6c 28 29 29 29 3b 61 2e 65 61 63 68 28 63 2e 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 2e 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5c 5b 5d 24 2f 29 3f 28 66 5b 63 2e 6e 61 6d 65 5d 7c 7c 28 66 5b 63 2e 6e 61 6d 65 5d 3d 30 29 2c 64 5b 63 2e 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 5d 24 2f 2c 73 70 72 69 6e 74 66 28 22 5b 25 64 5d 22 2c 66 5b 63 2e 6e 61 6d 65 5d 29 29 5d 3d 63 2e 76 61 6c 75 65 2c 66 5b 63 2e 6e 61 6d 65 5d 2b 2b 29 3a 64 5b 63 2e 6e 61 6d 65 5d 3d 63 2e Data Ascii: )return d;1==c.length&&"FORM"!=c[0].tagName&&(c=a("<form></form>").html(c.html()));a.each(c.serializeArray(),function(a,c){c.name.match(/\[]$/)?(f[c.name]\|\|(f[c.name]=0),d[c.name.replace(/\[]$/,sprintf("[%d]",f[c.name]))]=c.value,f[c.name]++):d[c.name]=c.
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 3d 7b 30 3a 22 41 22 2c 31 3a 22 42 22 2c 32 3a 22 43 22 2c 33 3a 22 44 22 2c 34 3a 22 45 22 2c 35 3a 22 46 22 2c 36 3a 22 47 22 2c 37 3a 22 48 22 2c 38 3a 22 49 22 2c 39 3a 22 4a 22 2c 31 30 3a 22 4b 22 2c 31 31 3a 22 4c 22 2c 31 32 3a 22 4d 22 2c 31 33 3a 22 4e 22 2c 31 34 3a 22 4f 22 2c 31 35 3a 22 50 22 2c 31 36 3a 22 51 22 2c 31 37 3a 22 52 22 2c 31 38 3a 22 53 22 2c 31 39 3a 22 54 22 2c 32 30 3a 22 55 22 2c 32 31 3a 22 56 22 2c 32 32 3a 22 57 22 2c 32 33 3a 22 58 22 2c 32 34 3a 22 59 22 2c 32 35 3a 22 5a 22 2c 32 36 3a 22 61 22 2c 32 37 3a 22 62 22 2c 32 38 3a 22 63 22 2c 32 39 3a 22 64 22 2c 33 30 3a 22 65 22 2c 33 31 3a 22 66 22 2c 33 32 3a 22 67 22 2c 33 33 3a 22 68 22 2c 33 34 3a 22 69 22 2c 33 35 3a 22 6a 22 2c 33 36 3a 22 6b 22 2c 33 37 3a 22 Data Ascii: ={0:"A",1:"B",2:"C",3:"D",4:"E",5:"F",6:"G",7:"H",8:"I",9:"J",10:"K",11:"L",12:"M",13:"N",14:"O",15:"P",16:"Q",17:"R",18:"S",19:"T",20:"U",21:"V",22:"W",23:"X",24:"Y",25:"Z",26:"a",27:"b",28:"c",29:"d",30:"e",31:"f",32:"g",33:"h",34:"i",35:"j",36:"k",37:"
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 2e 63 68 61 72 41 74 28 66 2b 32 29 2c 32 29 29 3b 69 66 28 22 5f 22 3d 3d 64 2e 63 68 61 72 41 74 28 66 2b 33 29 29 62 72 65 61 6b 3b 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 28 64 2e 63 68 61 72 41 74 28 66 2b 0a 32 29 2c 36 29 7c 63 28 64 2e 63 68 61 72 41 74 28 66 2b 33 29 2c 30 29 29 7d 72 65 74 75 72 6e 20 65 7d 7d 29 28 29 3b 61 63 2e 62 72 6f 77 73 65 72 3d 7b 7d 3b 0a 76 61 72 20 42 72 6f 77 73 65 72 44 65 74 65 63 74 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 62 72 6f 77 73 65 72 3d 74 68 69 73 2e 73 65 61 72 63 68 53 74 72 69 6e 67 28 74 68 69 73 2e 64 61 74 61 42 72 6f 77 73 65 72 29 7c 7c 22 41 6e 20 75 6e 6b 6e 6f 77 6e 20 62 72 6f 77 73 65 72 22 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e Data Ascii: .charAt(f+2),2));if("_"==d.charAt(f+3))break;e+=String.fromCharCode(a(d.charAt(f+2),6)\|c(d.charAt(f+3),0))}return e}})();ac.browser={};var BrowserDetect={init:function(){this.browser=this.searchString(this.dataBrowser)\|\|"An unknown browser";this.version

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	49752	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:33 UTC	843	OUT	GET /admin/js/EHawkTalon6.js HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:33 UTC	380	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: application/javascript Content-Length: 98648 Connection: close etag: "1047980094" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: HIT Age: 3425 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c5a7d1c15d7-EWR
2025-01-14 15:20:33 UTC	989	IN	Data Raw: 2f 2a 0a 20 20 2a 20 45 2d 48 41 57 4b 20 54 61 6c 6f 6e 20 76 36 2e 30 2e 36 20 46 72 69 2c 20 31 33 20 4f 63 74 20 32 30 32 33 20 30 38 3a 32 31 3a 34 31 20 47 4d 54 0a 20 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 74 68 65 20 70 72 6f 70 65 72 74 79 20 6f 66 20 45 2d 48 41 57 4b 2c 20 4c 4c 43 2e 20 54 68 69 73 20 66 69 6c 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 62 79 20 61 63 74 69 76 65 20 73 75 62 73 63 72 69 62 65 64 20 63 75 73 74 6f 6d 65 72 73 20 6f 66 20 45 2d 48 41 57 4b 20 64 75 72 69 6e 67 20 61 20 76 65 74 74 69 6e 67 20 41 50 49 20 63 61 6c 6c 2e 20 55 73 65 20 66 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 70 75 72 70 6f 73 65 20 69 73 20 73 74 72 69 63 74 6c 79 20 70 72 6f 68 69 62 69 74 65 64 2e 0a 20 20 2a 20 49 74 20 Data Ascii: /* * E-HAWK Talon v6.0.6 Fri, 13 Oct 2023 08:21:41 GMT * This file is the property of E-HAWK, LLC. This file may only be used by active subscribed customers of E-HAWK during a vetting API call. Use for any other purpose is strictly prohibited. * It
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 38 35 33 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 30 39 32 29 2e 66 6f 72 45 61 63 68 2c 6f 3d 6e 28 39 33 34 31 29 28 22 66 6f 72 45 61 63 68 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 3f 5b 5d 2e 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 2c 38 34 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 39 37 34 29 2c 6f 3d 6e 28 36 39 31 36 29 2c 69 Data Ascii: t)+" is not an object")}},8533:function(t,e,n){"use strict";var r=n(2092).forEach,o=n(9341)("forEach");t.exports=o?[].forEach:function(t){return r(this,t,arguments.length>1?arguments[1]:void 0)}},8457:function(t,e,n){"use strict";var r=n(9974),o=n(6916),i
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 65 74 75 72 6e 21 30 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 67 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 4c 3b 63 61 73 65 20 32 3a 73 28 6a 2c 67 29 7d 65 6c 73 65 20 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 20 37 3a 73 28 6a 2c 67 29 7d 72 65 74 75 72 6e 20 6c 3f 2d 31 3a 6f 7c 7c 66 3f 66 3a 6a 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 66 6f 72 45 61 63 68 3a 66 28 30 29 2c 6d 61 70 3a 66 28 31 29 2c 66 69 6c 74 65 72 3a 66 28 32 29 2c 73 6f 6d 65 3a 66 28 33 29 2c 65 76 65 72 79 3a 66 28 34 29 2c 66 69 6e 64 3a 66 28 35 29 2c 66 69 6e 64 49 6e 64 65 78 3a 66 28 36 29 2c 66 69 6c 74 65 72 52 65 6a 65 63 74 3a 66 28 37 29 7d 7d 2c 31 31 39 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 Data Ascii: eturn!0;case 5:return g;case 6:return L;case 2:s(j,g)}else switch(t){case 4:return!1;case 7:s(j,g)}return l?-1:o\|\|f?f:j}};t.exports={forEach:f(0),map:f(1),filter:f(2),some:f(3),every:f(4),find:f(5),findIndex:f(6),filterReject:f(7)}},1194:function(t,e,n){v
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 6e 67 74 68 3d 65 7d 7d 2c 31 35 38 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 34 30 30 29 2c 6f 3d 6e 28 36 32 34 34 29 2c 69 3d 6e 28 36 31 33 35 29 2c 61 3d 41 72 72 61 79 2c 63 3d 4d 61 74 68 2e 6d 61 78 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 75 3d 6f 28 74 29 2c 73 3d 72 28 65 2c 75 29 2c 66 3d 72 28 76 6f 69 64 20 30 3d 3d 3d 6e 3f 75 3a 6e 2c 75 29 2c 6c 3d 61 28 63 28 66 2d 73 2c 30 29 29 2c 64 3d 30 3b 73 3c 66 3b 73 2b 2b 2c 64 2b 2b 29 69 28 6c 2c 64 2c 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 64 2c 6c 7d 7d 2c 32 30 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 3b 74 2e Data Ascii: ngth=e}},1589:function(t,e,n){var r=n(1400),o=n(6244),i=n(6135),a=Array,c=Math.max;t.exports=function(t,e,n){for(var u=o(t),s=r(e,u),f=r(void 0===n?u:n,u),l=a(c(f-s,0)),d=0;s<f;s++,d++)i(l,d,t[s]);return l.length=d,l}},206:function(t,e,n){var r=n(1702);t.
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 69 66 28 21 65 26 26 21 6f 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 76 61 72 20 69 3d 7b 7d 3b 69 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 6e 3d 21 30 7d 7d 7d 7d 2c 74 28 69 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 34 33 32 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 34 29 2c 6f 3d 72 28 7b 7d 2e 74 6f 53 74 72 69 6e 67 29 2c 69 3d 72 28 22 22 2e 73 6c 69 63 65 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 6f 28 74 29 2c 38 2c 2d 31 29 7d 7d 2c 36 34 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b Data Ascii: if(!e&&!o)return!1;var n=!1;try{var i={};i[r]=function(){return{next:function(){return{done:n=!0}}}},t(i)}catch(t){}return n}},4326:function(t,e,n){var r=n(84),o=r({}.toString),i=r("".slice);t.exports=function(t){return i(o(t),8,-1)}},648:function(t,e,n){
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 65 7d 7d 7d 2c 36 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 39 34 38 29 2c 6f 3d 6e 28 33 30 37 30 29 2c 69 3d 6e 28 39 31 31 34 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 72 28 65 29 3b 61 20 69 6e 20 74 3f 6f 2e 66 28 74 2c 61 2c 69 28 30 2c 6e 29 29 3a 74 5b 61 5d 3d 6e 7d 7d 2c 38 30 35 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 31 34 29 2c 6f 3d 6e 28 33 30 37 30 29 2c 69 3d 6e 28 36 33 33 39 29 2c 61 3d 6e 28 33 30 37 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c Data Ascii: ),writable:!(4&t),value:e}}},6135:function(t,e,n){"use strict";var r=n(4948),o=n(3070),i=n(9114);t.exports=function(t,e,n){var a=r(e);a in t?o.f(t,a,i(0,n)):t[a]=n}},8052:function(t,e,n){var r=n(614),o=n(3070),i=n(6339),a=n(3072);t.exports=function(t,e,n,
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 74 2e 65 78 70 6f 72 74 73 3d 7b 43 53 53 52 75 6c 65 4c 69 73 74 3a 30 2c 43 53 53 53 74 79 6c 65 44 65 63 6c 61 72 61 74 69 6f 6e 3a 30 2c 43 53 53 56 61 6c 75 65 4c 69 73 74 3a 30 2c 43 6c 69 65 6e 74 52 65 63 74 4c 69 73 74 3a 30 2c 44 4f 4d 52 65 63 74 4c 69 73 74 3a 30 2c 44 4f 4d 53 74 72 69 6e 67 4c 69 73 74 3a 30 2c 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 3a 31 2c 44 61 74 61 54 72 61 6e 73 66 65 72 49 74 65 6d 4c 69 73 74 3a 30 2c 46 69 6c 65 4c 69 73 74 3a 30 2c 48 54 4d 4c 41 6c 6c 43 6f 6c 6c 65 63 74 69 6f 6e 3a 30 2c 48 54 4d 4c 43 6f 6c 6c 65 63 74 69 6f 6e 3a 30 2c 48 54 4d 4c 46 6f 72 6d 45 6c 65 6d 65 6e 74 3a 30 2c 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 3a 30 2c 4d 65 64 69 61 4c 69 73 74 3a 30 2c 4d 69 6d 65 54 79 70 65 41 72 Data Ascii: t.exports={CSSRuleList:0,CSSStyleDeclaration:0,CSSValueList:0,ClientRectList:0,DOMRectList:0,DOMStringList:0,DOMTokenList:1,DataTransferItemList:0,FileList:0,HTMLAllCollection:0,HTMLCollection:0,HTMLFormElement:0,HTMLSelectElement:0,MediaList:0,MimeTypeAr
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 2c 22 74 6f 53 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 4f 66 22 5d 7d 2c 32 31 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 31 32 33 36 29 2e 66 2c 69 3d 6e 28 38 38 38 30 29 2c 61 3d 6e 28 38 30 35 32 29 2c 63 3d 6e 28 33 30 37 32 29 2c 75 3d 6e 28 39 39 32 30 29 2c 73 3d 6e 28 34 37 30 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 66 2c 6c 2c 64 2c 70 2c 76 3d 74 2e 74 61 72 67 65 74 2c 68 3d 74 2e 67 6c 6f 62 61 6c 2c 6d 3d 74 2e 73 74 61 74 3b 69 66 28 6e 3d 68 3f 72 3a 6d 3f 72 5b 76 Data Ascii: rototypeOf","propertyIsEnumerable","toLocaleString","toString","valueOf"]},2109:function(t,e,n){var r=n(7854),o=n(1236).f,i=n(8880),a=n(8052),c=n(3072),u=n(9920),s=n(4705);t.exports=function(t,e){var n,f,l,d,p,v=t.target,h=t.global,m=t.stat;if(n=h?r:m?r[v
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 72 61 62 6c 65 29 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 45 58 49 53 54 53 3a 63 2c 50 52 4f 50 45 52 3a 75 2c 43 4f 4e 46 49 47 55 52 41 42 4c 45 3a 73 7d 7d 2c 38 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 33 37 34 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 6f 2e 63 61 6c 6c 2c 61 3d 72 26 26 6f 2e 62 69 6e 64 2e 62 69 6e 64 28 69 2c 69 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 31 37 30 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 33 32 36 29 2c 6f 3d 6e 28 38 34 29 Data Ascii: rable);t.exports={EXISTS:c,PROPER:u,CONFIGURABLE:s}},84:function(t,e,n){var r=n(4374),o=Function.prototype,i=o.call,a=r&&o.bind.bind(i,i);t.exports=r?a:function(t){return function(){return i.apply(t,arguments)}}},1702:function(t,e,n){var r=n(4326),o=n(84)
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 72 3d 6e 28 35 30 30 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 28 22 64 6f 63 75 6d 65 6e 74 22 2c 22 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 22 29 7d 2c 34 36 36 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 37 38 31 29 2c 6f 3d 6e 28 37 32 39 33 29 2c 69 3d 6e 28 33 31 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 7d 2c 38 33 36 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 Data Ascii: ){var r=n(5005);t.exports=r("document","documentElement")},4664:function(t,e,n){var r=n(9781),o=n(7293),i=n(317);t.exports=!r&&!o((function(){return 7!=Object.defineProperty(i("div"),"a",{get:function(){return 7}}).a}))},8361:function(t,e,n){var r=n(1702)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49754	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:33 UTC	658	OUT	GET /admin/mainjs.php?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:34 UTC	450	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 7040 Connection: close Cache-Control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache x-request-id: d4268e8de5a7688b48052009a3a66424 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c5b1c514361-EWR
2025-01-14 15:20:34 UTC	919	IN	Data Raw: 76 61 72 20 61 63 5f 6a 73 5f 61 64 6d 69 6e 20 3d 20 7b 20 22 69 64 22 20 3a 20 30 2c 20 22 75 73 65 72 6e 61 6d 65 22 20 3a 20 22 22 2c 20 22 66 69 72 73 74 5f 6e 61 6d 65 22 20 3a 20 22 22 2c 20 22 6c 61 73 74 5f 6e 61 6d 65 22 20 3a 20 22 22 2c 20 22 65 6d 61 69 6c 22 20 3a 20 22 22 2c 20 22 6c 61 73 74 5f 6c 6f 67 69 6e 22 20 3a 20 6e 75 6c 6c 2c 20 22 73 6f 75 72 63 65 69 64 22 20 3a 20 30 2c 20 22 73 6f 75 72 63 65 75 70 64 61 74 65 64 22 20 3a 20 6e 75 6c 6c 2c 20 22 70 72 6f 64 75 63 74 73 65 74 22 20 3a 20 6e 75 6c 6c 2c 20 22 61 62 73 69 64 22 20 3a 20 30 2c 20 22 70 61 72 65 6e 74 69 64 22 20 3a 20 30 2c 20 22 61 70 70 72 6f 76 65 64 22 20 3a 20 31 2c 20 22 73 61 6c 74 22 20 3a 20 22 22 2c 20 22 70 68 6f 6e 65 22 20 3a 20 22 22 2c 20 22 73 69 Data Ascii: var ac_js_admin = { "id" : 0, "username" : "", "first_name" : "", "last_name" : "", "email" : "", "last_login" : null, "sourceid" : 0, "sourceupdated" : null, "productset" : null, "absid" : 0, "parentid" : 0, "approved" : 1, "salt" : "", "phone" : "", "si
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 5f 73 65 6e 74 22 20 3a 20 30 2c 20 22 67 72 6f 75 70 73 22 20 3a 20 7b 20 31 20 3a 20 31 20 7d 2c 20 22 6c 69 73 74 73 22 20 3a 20 7b 20 38 20 3a 20 38 2c 20 31 30 20 3a 20 31 30 2c 20 31 33 20 3a 20 31 33 2c 20 31 35 20 3a 20 31 35 2c 20 31 39 20 3a 20 31 39 2c 20 32 37 20 3a 20 32 37 2c 20 33 34 20 3a 20 33 34 2c 20 34 31 20 3a 20 34 31 2c 20 35 31 20 3a 20 35 31 2c 20 35 35 20 3a 20 35 35 2c 20 35 37 20 3a 20 35 37 2c 20 35 38 20 3a 20 35 38 2c 20 36 31 20 3a 20 36 31 2c 20 36 32 20 3a 20 36 32 2c 20 36 35 20 3a 20 36 35 2c 20 36 36 20 3a 20 36 36 2c 20 36 37 20 3a 20 36 37 2c 20 36 38 20 3a 20 36 38 2c 20 36 39 20 3a 20 36 39 2c 20 37 30 20 3a 20 37 30 2c 20 37 31 20 3a 20 37 31 2c 20 37 32 20 3a 20 37 32 2c 20 37 33 20 3a 20 37 33 2c 20 37 34 20 3a Data Ascii: _sent" : 0, "groups" : { 1 : 1 }, "lists" : { 8 : 8, 10 : 10, 13 : 13, 15 : 15, 19 : 19, 27 : 27, 34 : 34, 41 : 41, 51 : 51, 55 : 55, 57 : 57, 58 : 58, 61 : 61, 62 : 62, 65 : 65, 66 : 66, 67 : 67, 68 : 68, 69 : 69, 70 : 70, 71 : 71, 72 : 72, 73 : 73, 74 :
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 5f 73 74 61 72 74 75 70 5f 72 65 70 6f 72 74 73 22 20 3a 20 30 2c 20 22 70 67 5f 73 74 61 72 74 75 70 5f 67 65 74 74 69 6e 67 73 74 61 72 74 65 64 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 61 64 64 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 65 64 69 74 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 64 65 6c 65 74 65 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 6d 61 6e 61 67 65 5f 63 75 73 74 6f 6d 5f 66 69 65 6c 64 22 20 3a 20 30 2c 20 22 70 67 5f 64 65 61 6c 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c 5f 64 65 6c 65 74 65 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c 5f 72 65 61 73 73 69 67 6e 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c 5f 66 69 65 6c 64 73 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c Data Ascii: _startup_reports" : 0, "pg_startup_gettingstarted" : 0, "pg_account_add" : 0, "pg_account_edit" : 0, "pg_account_delete" : 0, "pg_account_manage_custom_field" : 0, "pg_deal" : 1, "pg_deal_delete" : 1, "pg_deal_reassign" : 1, "pg_deal_fields" : 1, "pg_deal
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 64 6d 69 6e 5f 74 65 6d 70 6c 61 74 65 5f 63 73 73 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 61 64 6d 69 6e 5f 74 65 6d 70 6c 61 74 65 5f 63 73 73 5f 62 61 63 6b 75 70 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 70 75 62 6c 69 63 5f 74 65 6d 70 6c 61 74 65 5f 68 74 6d 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 70 75 62 6c 69 63 5f 74 65 6d 70 6c 61 74 65 5f 63 73 73 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 66 61 76 69 63 6f 6e 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 7a 65 6e 64 65 73 6b 5f 77 69 64 67 65 74 5f 65 6e 61 62 6c 65 64 22 20 3a 20 30 20 7d 3b 0d 0a 76 61 72 20 61 63 5f 6a 73 5f 73 69 74 65 20 3d 20 7b 20 22 69 64 22 20 3a 20 31 2c 20 22 6c 61 6e 67 22 20 3a 20 22 65 6e 67 6c 69 73 68 22 2c 20 22 61 Data Ascii: dmin_template_css" : null, "brand_admin_template_css_backup" : null, "brand_public_template_htm" : null, "brand_public_template_css" : null, "brand_favicon" : null, "brand_zendesk_widget_enabled" : 0 };var ac_js_site = { "id" : 1, "lang" : "english", "a
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 6d 61 69 6c 5f 74 65 73 74 5f 6d 69 6e 5f 63 6f 75 6e 74 22 20 3a 20 31 2c 20 22 73 65 6e 74 5f 65 6d 61 69 6c 5f 74 65 73 74 5f 6d 69 6e 5f 64 61 74 65 22 20 3a 20 22 32 30 32 34 2d 31 32 2d 33 31 20 30 37 3a 35 38 3a 34 31 22 2c 20 22 73 65 6e 74 5f 65 6d 61 69 6c 5f 74 65 73 74 5f 68 72 5f 63 6f 75 6e 74 22 20 3a 20 32 2c 20 22 73 65 6e 74 5f 65 6d 61 69 6c 5f 74 65 73 74 5f 68 72 5f 64 61 74 65 22 20 3a 20 22 32 30 32 34 2d 31 32 2d 33 31 20 30 37 3a 35 34 3a 34 35 22 2c 20 22 64 6b 69 6d 5f 69 64 22 20 3a 20 22 61 63 64 6b 69 6d 31 22 2c 20 22 67 6f 6f 67 6c 65 5f 61 6e 61 6c 79 74 69 63 73 5f 65 6e 61 62 6c 65 64 22 20 3a 20 30 2c 20 22 69 73 5f 74 72 69 61 6c 22 20 3a 20 66 61 6c 73 65 2c 20 22 69 73 5f 66 72 65 65 22 20 3a 20 66 61 6c 73 65 2c 20 Data Ascii: mail_test_min_count" : 1, "sent_email_test_min_date" : "2024-12-31 07:58:41", "sent_email_test_hr_count" : 2, "sent_email_test_hr_date" : "2024-12-31 07:54:45", "dkim_id" : "acdkim1", "google_analytics_enabled" : 0, "is_trial" : false, "is_free" : false,
2025-01-14 15:20:34 UTC	645	IN	Data Raw: 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 68 65 61 64 65 72 5f 74 65 78 74 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 68 65 61 64 65 72 5f 68 74 6d 6c 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 68 65 61 64 65 72 5f 68 74 6d 6c 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 74 65 78 74 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 74 65 78 74 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 6c 69 6e 6b 73 22 20 3a 20 31 2c 20 22 62 72 61 6e 64 5f 61 64 6d 69 6e 5f 74 65 6d 70 6c Data Ascii: " : 0, "brand_header_text_value" : null, "brand_header_html" : 0, "brand_header_html_value" : null, "brand_footer_text" : 0, "brand_footer_text_value" : null, "brand_footer_html" : 0, "brand_footer_html_value" : null, "brand_links" : 1, "brand_admin_templ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49755	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:33 UTC	663	OUT	GET /admin/js/functions.js?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:33 UTC	369	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:33 GMT Content-Type: application/javascript Content-Length: 47585 Connection: close etag: "1230197873" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c5b8f1d0c9c-EWR
2025-01-14 15:20:33 UTC	1000	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 6f 6c 65 5f 6c 6f 67 28 29 20 7b 0a 09 2f 2f 20 61 74 74 65 6d 70 74 20 74 6f 20 73 65 6e 64 20 61 20 6d 65 73 73 61 67 65 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 0a 09 74 72 79 20 7b 0a 09 09 66 6f 72 28 76 61 72 20 69 20 3d 30 3b 20 69 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 0a 09 09 7d 0a 09 7d 20 63 61 74 63 68 28 65 29 20 7b 7d 20 2f 2f 20 66 61 69 6c 20 67 72 61 63 65 66 75 6c 6c 79 20 69 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 0a 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 62 72 61 6e 64 69 6e 67 5f 64 65 6c 65 74 65 28 70 6c 61 6e 2c 20 72 73 69 64 Data Ascii: function console_log() {// attempt to send a message to the consoletry {for(var i =0; i < arguments.length; i++) {console.log(arguments[i]);}} catch(e) {} // fail gracefully if it does not exist}function form_branding_delete(plan, rsid
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 31 3b 0a 09 7d 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 5f 61 72 65 61 73 28 6e 6f 64 65 29 20 7b 0a 09 24 4a 28 27 74 65 78 74 61 72 65 61 27 2c 20 6e 6f 64 65 29 2e 68 74 6d 6c 28 27 27 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 5f 65 6c 65 6d 65 6e 74 28 6e 6f 64 65 29 20 7b 0a 09 76 61 72 20 6d 65 20 3d 20 24 4a 28 6e 6f 64 65 29 3b 0a 09 76 61 72 20 64 61 64 20 3d 20 6d 65 2e 70 61 72 65 6e 74 28 29 3b 0a 09 69 66 20 28 20 24 4a 28 22 3e 20 64 69 76 22 2c 20 64 61 64 29 2e 6c 65 6e 67 74 68 20 3e 20 31 20 29 20 7b 0a 09 09 6d 65 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 63 6c 65 61 72 5f 69 6e 70 75 74 73 28 6e 6f 64 65 29 3b 0a 09 09 63 6c 65 61 72 5f 73 65 6c 65 63 74 73 28 6e 6f 64 Data Ascii: 1;});}function clear_areas(node) {$J('textarea', node).html('');}function remove_element(node) {var me = $J(node);var dad = me.parent();if ( $J("> div", dad).length > 1 ) {me.remove();} else {clear_inputs(node);clear_selects(nod
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 29 3b 0a 0a 09 24 4a 28 27 23 27 20 2b 20 69 64 20 2b 20 27 45 64 69 74 6f 72 4c 69 6e 6b 44 65 66 61 75 6c 74 27 29 2e 74 6f 67 67 6c 65 28 29 3b 0a 09 61 63 5f 6a 73 5f 61 64 6d 69 6e 2e 68 74 6d 6c 65 64 69 74 6f 72 20 3d 20 28 20 69 73 45 64 69 74 6f 72 20 3f 20 31 20 3a 20 30 20 29 3b 0a 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f 70 75 73 68 28 6e 6f 64 65 73 2c 20 69 64 29 20 7b 0a 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0a 09 09 24 4a 28 27 23 27 20 2b 20 69 64 29 2e 61 70 70 65 6e 64 28 6e 6f 64 65 73 5b 69 5d 29 3b 0a 7d 0a 0a 0a 0a 66 75 6e Data Ascii: );$J('#' + id + 'EditorLinkDefault').toggle();ac_js_admin.htmleditor = ( isEditor ? 1 : 0 );return false;}function form_editor_personalization_push(nodes, id) {for (var i = 0; i < nodes.length; i++)$J('#' + id).append(nodes[i]);}fun
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 78 20 2b 20 27 66 6f 72 6d 61 74 46 69 65 6c 64 27 29 2e 76 61 6c 28 29 29 3b 0a 7d 0a 0a 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 65 78 70 6f 72 74 5f 6c 69 6e 6b 5f 62 75 69 6c 64 28 63 6f 6e 74 65 78 74 2c 20 61 72 79 29 20 7b 0a 09 76 61 72 20 6c 69 6e 6b 20 3d 20 27 65 78 70 6f 72 74 2e 70 68 70 3f 61 63 74 69 6f 6e 3d 27 20 2b 20 63 6f 6e 74 65 78 74 3b 0a 09 66 6f 72 20 28 20 76 61 72 20 69 20 69 6e 20 61 72 79 20 29 20 7b 0a 09 09 6c 69 6e 6b 20 2b 3d 20 27 26 27 20 2b 20 69 20 2b 20 27 3d 27 20 2b 20 61 72 79 5b 69 5d 3b 0a 09 7d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 28 6f 75 72 66 6c 61 67 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 70 72 6f 6d 70 74 28 27 47 6f 20 74 6f 20 74 68 69 73 20 65 78 70 6f 72 74 20 55 52 4c 3f 27 2c 20 Data Ascii: x + 'formatField').val());}function export_link_build(context, ary) {var link = 'export.php?action=' + context;for ( var i in ary ) {link += '&' + i + '=' + ary[i];}if ( typeof(ourflag) == 'undefined' \|\| prompt('Go to this export URL?',
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 6e 74 65 78 74 0a 09 09 76 61 72 20 66 75 6e 63 20 3d 20 6e 75 6c 6c 3b 0a 09 09 74 72 79 20 7b 0a 09 09 09 76 61 72 20 66 75 6e 63 20 3d 20 65 76 61 6c 28 61 63 5f 61 63 74 69 6f 6e 20 2b 20 22 5f 6c 69 73 74 5f 73 65 61 72 63 68 22 29 3b 0a 09 09 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 09 09 09 2f 2f 20 64 6f 20 6e 6f 74 68 69 6e 67 2c 20 6e 6f 6e 65 20 66 6f 75 6e 64 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 66 75 6e 63 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 29 20 7b 0a 09 09 09 66 75 6e 63 28 29 3b 0a 09 09 7d 0a 09 7d 0a 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 70 61 72 65 6e 74 73 5f 6c 69 73 74 5f 73 65 6c 65 63 74 28 61 6c 6c 2c 20 66 69 72 73 74 49 73 41 6c 6c 29 20 7b 0a 09 69 66 20 28 20 61 6c 6c 20 29 20 7b 0a 09 09 61 63 Data Ascii: ntextvar func = null;try {var func = eval(ac_action + "_list_search");} catch (e) {// do nothing, none found}if ( typeof func == "function" ) {func();}}}function parents_list_select(all, firstIsAll) {if ( all ) {ac
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 29 3b 0a 09 2f 2f 20 6f 70 65 6e 20 6d 6f 64 61 6c 0a 09 24 4a 28 27 23 6d 65 73 73 61 67 65 5f 61 63 74 69 76 65 72 73 73 27 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 61 63 74 69 76 65 72 73 73 5f 69 6e 73 65 72 74 28 29 20 7b 0a 09 2f 2f 20 62 75 69 6c 64 20 74 68 65 20 63 6f 64 65 0a 09 76 61 72 20 63 6f 64 65 20 3d 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 61 63 74 69 76 65 72 73 73 5f 62 75 69 6c 64 28 29 3b 0a 09 69 66 20 28 20 63 6f 64 65 20 3d 3d 20 27 27 20 29 20 72 65 74 75 72 6e 3b 0a 0a 09 2f 2f 20 70 75 73 68 20 69 74 20 69 6e 74 6f 20 6e 65 65 64 65 64 20 65 64 69 74 6f 72 0a 09 61 63 5f 65 64 69 74 6f 72 5f 69 6e 73 65 72 74 28 24 4a 28 27 23 61 63 74 69 76 65 72 Data Ascii: );// open modal$J('#message_activerss').modal("show");}function form_editor_activerss_insert() {// build the codevar code = form_editor_activerss_build();if ( code == '' ) return;// push it into needed editorac_editor_insert($J('#activer
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 27 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 73 74 61 72 74 20 66 65 65 64 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 43 48 41 4e 4e 45 4c 3a 54 49 54 4c 45 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 70 72 69 6e 74 20 6f 75 74 20 74 69 74 6c 65 0a 09 09 27 25 52 53 53 2d 4c 4f 4f 50 7c 4c 49 4d 49 54 3a 27 20 2b 20 6c 6f 6f 70 20 2b 20 27 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 73 74 61 72 74 20 69 74 65 6d 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 44 41 54 45 25 5c 6e 27 20 2b 20 2f 2f 20 77 69 74 68 69 6e 20 61 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 54 49 54 4c 45 25 5c 6e 27 20 2b 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 53 55 4d 4d 41 52 59 25 5c 6e 27 20 2b 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 4c 49 4e Data Ascii: '%\n\n' + // start feed section'%RSS:CHANNEL:TITLE%\n\n' + // print out title'%RSS-LOOP\|LIMIT:' + loop + '%\n\n' + // start item section'%RSS:ITEM:DATE%\n' + // within a section'%RSS:ITEM:TITLE%\n' +'%RSS:ITEM:SUMMARY%\n' +'%RSS:ITEM:LIN
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 0a 09 2f 2f 20 63 6c 65 61 72 20 61 6e 79 20 73 65 74 54 69 6d 65 6f 75 74 73 20 72 75 6e 6e 69 6e 67 2e 20 28 6f 6e 65 20 69 73 20 75 73 65 64 20 66 6f 72 20 53 75 72 76 65 79 4d 6f 6e 6b 65 79 20 69 6e 74 65 67 72 61 74 69 6f 6e 29 0a 09 61 63 2e 73 74 6f 70 28 22 63 61 6d 70 61 69 67 6e 5f 73 65 72 76 69 63 65 5f 67 65 74 22 29 3b 0a 0a 09 69 66 20 28 75 73 65 5f 64 65 73 69 67 6e 65 72 29 20 7b 0a 09 09 69 66 20 28 61 63 2e 62 72 6f 77 73 65 72 2e 69 73 49 45 28 29 29 20 7b 0a 09 09 09 2f 2f 22 69 6e 73 65 72 74 48 54 4d 4c 22 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 49 45 20 28 67 72 72 72 29 2e 20 53 6f 20 77 65 20 68 61 76 65 20 74 6f 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 64 69 66 66 65 72 65 6e 74 Data Ascii: // clear any setTimeouts running. (one is used for SurveyMonkey integration)ac.stop("campaign_service_get");if (use_designer) {if (ac.browser.isIE()) {//"insertHTML" command is not supported by IE (grrr). So we have to do something different
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 74 2c 20 74 65 78 74 29 20 7c 7c 20 27 27 3b 20 2f 2f 20 43 6f 65 72 63 65 20 6e 75 6c 6c 20 74 6f 20 62 6c 61 6e 6b 20 73 74 72 69 6e 67 20 69 66 20 75 73 65 72 20 63 61 6e 63 65 6c 73 0a 09 09 69 66 20 28 20 65 6e 74 65 72 65 64 2e 74 72 69 6d 28 29 20 3d 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 65 6e 74 65 72 65 64 20 3d 20 74 65 78 74 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 65 78 74 6f 6e 6c 79 20 29 20 7b 0a 09 09 09 76 61 6c 20 3d 20 65 6e 74 65 72 65 64 20 2b 20 27 20 28 27 20 2b 20 73 74 72 53 75 72 76 65 79 54 65 78 74 32 20 2b 20 27 3a 20 27 20 2b 20 73 70 6c 69 74 5f 76 61 6c 75 65 5b 32 5d 20 2b 20 27 20 2d 2d 20 27 20 2b 20 6c 69 6e 6b 5f 68 72 65 66 20 2b 20 27 29 27 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 76 61 6c 20 3d 20 27 3c 61 Data Ascii: t, text) \|\| ''; // Coerce null to blank string if user cancelsif ( entered.trim() === '' ) {entered = text;}if ( textonly ) {val = entered + ' (' + strSurveyText2 + ': ' + split_value[2] + ' -- ' + link_href + ')';} else {val = '<a
2025-01-14 15:20:33 UTC	1369	IN	Data Raw: 09 69 66 20 28 20 65 6e 74 65 72 65 64 2e 74 72 69 6d 28 29 20 3d 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 65 6e 74 65 72 65 64 20 3d 20 74 65 78 74 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 65 78 74 6f 6e 6c 79 20 29 20 7b 0a 09 09 09 76 61 6c 20 3d 20 65 6e 74 65 72 65 64 20 2b 20 27 20 3c 27 20 2b 20 76 61 6c 20 2b 20 27 3e 27 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 76 61 6c 20 3d 20 27 3c 61 20 68 72 65 66 3d 22 27 20 2b 20 76 61 6c 20 2b 20 27 22 3e 27 20 2b 20 65 6e 74 65 72 65 64 20 2b 20 27 3c 2f 61 3e 27 3b 0a 09 09 7d 0a 09 7d 0a 09 72 65 74 75 72 6e 20 76 61 6c 3b 0a 7d 0a 0a 0a 2f 2f 20 43 61 6d 70 61 69 67 6e 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 0a 66 75 6e 63 74 69 6f 6e 20 63 61 6d 70 61 69 67 6e 5f 70 65 72 73 6f 6e 61 6c Data Ascii: if ( entered.trim() === '' ) {entered = text;}if ( textonly ) {val = entered + ' <' + val + '>';} else {val = '<a href="' + val + '">' + entered + '</a>';}}return val;}// Campaign Personalizationfunction campaign_personal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49758	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:34 UTC	669	OUT	GET /admin/js/jq/notification.js?v=v1027121471506941 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:34 UTC	376	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:34 GMT Content-Type: application/javascript Content-Length: 1406 Connection: close etag: "2781588083" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c5dfe270f90-EWR
2025-01-14 15:20:34 UTC	993	IN	Data Raw: 2f 2f 0a 2f 2f 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 0a 2f 2f 20 55 73 61 67 65 3a 20 24 4a 28 27 23 79 6f 75 72 2d 63 6f 6e 74 61 69 6e 65 72 27 29 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 28 7b 74 65 78 74 3a 20 27 53 75 63 63 65 73 73 66 75 6c 6c 79 20 73 65 6e 74 27 2c 20 74 79 70 65 3a 20 27 73 75 63 63 65 73 73 27 7d 29 0a 2f 2f 0a 2f 2f 20 44 6f 63 73 3a 0a 2f 2f 20 0a 2f 2f 20 74 79 70 65 3a 20 73 74 72 69 6e 67 20 28 73 75 63 63 65 73 73 2c 20 65 72 72 6f 72 2c 20 77 61 72 6e 69 6e 67 2c 20 6e 6f 74 69 63 65 29 0a 2f 2f 20 74 65 78 74 3a 20 73 74 72 69 6e 67 20 28 61 6c 65 72 74 20 74 65 78 74 29 0a 2f 2f 20 70 65 72 73 69 73 74 3a 20 62 6f 6f 6c 65 61 6e 20 28 73 68 6f 75 6c 64 20 74 68 65 20 61 6c 65 72 74 20 72 65 6d 61 69 6e 20 6f 6e 20 73 63 Data Ascii: //// Notification// Usage: $J('#your-container').notification({text: 'Successfully sent', type: 'success'})//// Docs:// // type: string (success, error, warning, notice)// text: string (alert text)// persist: boolean (should the alert remain on sc
2025-01-14 15:20:34 UTC	413	IN	Data Raw: 74 28 74 69 6d 65 6f 75 74 29 3b 0a 09 09 09 09 74 69 6d 65 6f 75 74 20 3d 20 66 61 6c 73 65 3b 0a 09 09 09 7d 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 65 78 69 73 74 69 6e 67 20 3d 20 24 28 74 65 6d 70 6c 61 74 65 29 3b 0a 09 09 09 5f 74 68 69 73 2e 70 72 65 70 65 6e 64 28 65 78 69 73 74 69 6e 67 29 3b 0a 09 09 7d 0a 0a 09 09 69 66 20 28 73 65 74 74 69 6e 67 73 2e 70 65 72 73 69 73 74 20 21 3d 20 74 72 75 65 29 20 7b 0a 09 09 09 76 61 72 20 74 69 6d 65 6f 75 74 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 5f 74 68 69 73 2e 66 69 6e 64 28 27 2e 6e 6f 74 69 66 79 27 29 2e 61 6e 69 6d 61 74 65 28 7b 20 6f 70 61 63 69 74 79 3a 20 30 7d 2c 20 35 30 30 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 Data Ascii: t(timeout);timeout = false;}} else {existing = $(template);_this.prepend(existing);}if (settings.persist != true) {var timeout = setTimeout(function() {_this.find('.notify').animate({ opacity: 0}, 500, function() {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49757	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:34 UTC	840	OUT	GET /admin/js/ac-pendo.js HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:34 UTC	378	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:34 GMT Content-Type: application/javascript Content-Length: 797 Connection: close etag: "1817909463" last-modified: Mon, 13 Jan 2025 20:43:47 GMT CF-Cache-Status: HIT Age: 6619 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c5e3c048f93-BOS
2025-01-14 15:20:34 UTC	797	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 70 65 6e 64 6f 43 6f 6e 66 69 67 29 20 7b 0a 09 28 66 75 6e 63 74 69 6f 6e 28 61 70 69 4b 65 79 29 7b 0a 09 09 69 66 20 28 21 61 70 69 4b 65 79 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 09 09 7d 0a 0a 09 09 28 66 75 6e 63 74 69 6f 6e 28 70 2c 65 2c 6e 2c 64 2c 6f 29 7b 76 61 72 20 76 2c 77 2c 78 2c 79 2c 7a 3b 6f 3d 70 5b 64 5d 3d 70 5b 64 5d 7c 7c 7b 7d 3b 6f 2e 5f 71 3d 5b 5d 3b 0a 09 09 09 76 3d 5b 27 69 6e 69 74 69 61 6c 69 7a 65 27 2c 27 69 64 65 6e 74 69 66 79 27 2c 27 75 70 64 61 74 65 4f 70 74 69 6f 6e 73 27 2c 27 70 61 67 65 4c 6f 61 64 27 5d 3b 66 6f 72 28 77 3d 30 2c 78 3d 76 2e 6c 65 6e 67 74 68 3b 77 3c 78 3b 2b 2b 77 29 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 0a 09 09 09 09 6f 5b 6d 5d 3d 6f Data Ascii: (function (pendoConfig) {(function(apiKey){if (!apiKey) {return null;}(function(p,e,n,d,o){var v,w,x,y,z;o=p[d]=p[d]\|\|{};o._q=[];v=['initialize','identify','updateOptions','pageLoad'];for(w=0,x=v.length;w<x;++w)(function(m){o[m]=o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49759	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:34 UTC	645	OUT	GET /admin/js/EHawkTalon6.js HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:34 UTC	380	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:34 GMT Content-Type: application/javascript Content-Length: 98648 Connection: close etag: "1047980094" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: HIT Age: 3426 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c5fa8494262-EWR
2025-01-14 15:20:34 UTC	989	IN	Data Raw: 2f 2a 0a 20 20 2a 20 45 2d 48 41 57 4b 20 54 61 6c 6f 6e 20 76 36 2e 30 2e 36 20 46 72 69 2c 20 31 33 20 4f 63 74 20 32 30 32 33 20 30 38 3a 32 31 3a 34 31 20 47 4d 54 0a 20 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 74 68 65 20 70 72 6f 70 65 72 74 79 20 6f 66 20 45 2d 48 41 57 4b 2c 20 4c 4c 43 2e 20 54 68 69 73 20 66 69 6c 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 62 79 20 61 63 74 69 76 65 20 73 75 62 73 63 72 69 62 65 64 20 63 75 73 74 6f 6d 65 72 73 20 6f 66 20 45 2d 48 41 57 4b 20 64 75 72 69 6e 67 20 61 20 76 65 74 74 69 6e 67 20 41 50 49 20 63 61 6c 6c 2e 20 55 73 65 20 66 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 70 75 72 70 6f 73 65 20 69 73 20 73 74 72 69 63 74 6c 79 20 70 72 6f 68 69 62 69 74 65 64 2e 0a 20 20 2a 20 49 74 20 Data Ascii: /* * E-HAWK Talon v6.0.6 Fri, 13 Oct 2023 08:21:41 GMT * This file is the property of E-HAWK, LLC. This file may only be used by active subscribed customers of E-HAWK during a vetting API call. Use for any other purpose is strictly prohibited. * It
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 38 35 33 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 30 39 32 29 2e 66 6f 72 45 61 63 68 2c 6f 3d 6e 28 39 33 34 31 29 28 22 66 6f 72 45 61 63 68 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 3f 5b 5d 2e 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 2c 38 34 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 39 37 34 29 2c 6f 3d 6e 28 36 39 31 36 29 2c 69 Data Ascii: t)+" is not an object")}},8533:function(t,e,n){"use strict";var r=n(2092).forEach,o=n(9341)("forEach");t.exports=o?[].forEach:function(t){return r(this,t,arguments.length>1?arguments[1]:void 0)}},8457:function(t,e,n){"use strict";var r=n(9974),o=n(6916),i
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 65 74 75 72 6e 21 30 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 67 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 4c 3b 63 61 73 65 20 32 3a 73 28 6a 2c 67 29 7d 65 6c 73 65 20 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 20 37 3a 73 28 6a 2c 67 29 7d 72 65 74 75 72 6e 20 6c 3f 2d 31 3a 6f 7c 7c 66 3f 66 3a 6a 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 66 6f 72 45 61 63 68 3a 66 28 30 29 2c 6d 61 70 3a 66 28 31 29 2c 66 69 6c 74 65 72 3a 66 28 32 29 2c 73 6f 6d 65 3a 66 28 33 29 2c 65 76 65 72 79 3a 66 28 34 29 2c 66 69 6e 64 3a 66 28 35 29 2c 66 69 6e 64 49 6e 64 65 78 3a 66 28 36 29 2c 66 69 6c 74 65 72 52 65 6a 65 63 74 3a 66 28 37 29 7d 7d 2c 31 31 39 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 Data Ascii: eturn!0;case 5:return g;case 6:return L;case 2:s(j,g)}else switch(t){case 4:return!1;case 7:s(j,g)}return l?-1:o\|\|f?f:j}};t.exports={forEach:f(0),map:f(1),filter:f(2),some:f(3),every:f(4),find:f(5),findIndex:f(6),filterReject:f(7)}},1194:function(t,e,n){v
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 6e 67 74 68 3d 65 7d 7d 2c 31 35 38 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 34 30 30 29 2c 6f 3d 6e 28 36 32 34 34 29 2c 69 3d 6e 28 36 31 33 35 29 2c 61 3d 41 72 72 61 79 2c 63 3d 4d 61 74 68 2e 6d 61 78 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 75 3d 6f 28 74 29 2c 73 3d 72 28 65 2c 75 29 2c 66 3d 72 28 76 6f 69 64 20 30 3d 3d 3d 6e 3f 75 3a 6e 2c 75 29 2c 6c 3d 61 28 63 28 66 2d 73 2c 30 29 29 2c 64 3d 30 3b 73 3c 66 3b 73 2b 2b 2c 64 2b 2b 29 69 28 6c 2c 64 2c 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 64 2c 6c 7d 7d 2c 32 30 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 3b 74 2e Data Ascii: ngth=e}},1589:function(t,e,n){var r=n(1400),o=n(6244),i=n(6135),a=Array,c=Math.max;t.exports=function(t,e,n){for(var u=o(t),s=r(e,u),f=r(void 0===n?u:n,u),l=a(c(f-s,0)),d=0;s<f;s++,d++)i(l,d,t[s]);return l.length=d,l}},206:function(t,e,n){var r=n(1702);t.
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 69 66 28 21 65 26 26 21 6f 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 76 61 72 20 69 3d 7b 7d 3b 69 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 6e 3d 21 30 7d 7d 7d 7d 2c 74 28 69 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 34 33 32 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 34 29 2c 6f 3d 72 28 7b 7d 2e 74 6f 53 74 72 69 6e 67 29 2c 69 3d 72 28 22 22 2e 73 6c 69 63 65 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 6f 28 74 29 2c 38 2c 2d 31 29 7d 7d 2c 36 34 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b Data Ascii: if(!e&&!o)return!1;var n=!1;try{var i={};i[r]=function(){return{next:function(){return{done:n=!0}}}},t(i)}catch(t){}return n}},4326:function(t,e,n){var r=n(84),o=r({}.toString),i=r("".slice);t.exports=function(t){return i(o(t),8,-1)}},648:function(t,e,n){
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 65 7d 7d 7d 2c 36 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 39 34 38 29 2c 6f 3d 6e 28 33 30 37 30 29 2c 69 3d 6e 28 39 31 31 34 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 72 28 65 29 3b 61 20 69 6e 20 74 3f 6f 2e 66 28 74 2c 61 2c 69 28 30 2c 6e 29 29 3a 74 5b 61 5d 3d 6e 7d 7d 2c 38 30 35 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 31 34 29 2c 6f 3d 6e 28 33 30 37 30 29 2c 69 3d 6e 28 36 33 33 39 29 2c 61 3d 6e 28 33 30 37 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c Data Ascii: ),writable:!(4&t),value:e}}},6135:function(t,e,n){"use strict";var r=n(4948),o=n(3070),i=n(9114);t.exports=function(t,e,n){var a=r(e);a in t?o.f(t,a,i(0,n)):t[a]=n}},8052:function(t,e,n){var r=n(614),o=n(3070),i=n(6339),a=n(3072);t.exports=function(t,e,n,
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 74 2e 65 78 70 6f 72 74 73 3d 7b 43 53 53 52 75 6c 65 4c 69 73 74 3a 30 2c 43 53 53 53 74 79 6c 65 44 65 63 6c 61 72 61 74 69 6f 6e 3a 30 2c 43 53 53 56 61 6c 75 65 4c 69 73 74 3a 30 2c 43 6c 69 65 6e 74 52 65 63 74 4c 69 73 74 3a 30 2c 44 4f 4d 52 65 63 74 4c 69 73 74 3a 30 2c 44 4f 4d 53 74 72 69 6e 67 4c 69 73 74 3a 30 2c 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 3a 31 2c 44 61 74 61 54 72 61 6e 73 66 65 72 49 74 65 6d 4c 69 73 74 3a 30 2c 46 69 6c 65 4c 69 73 74 3a 30 2c 48 54 4d 4c 41 6c 6c 43 6f 6c 6c 65 63 74 69 6f 6e 3a 30 2c 48 54 4d 4c 43 6f 6c 6c 65 63 74 69 6f 6e 3a 30 2c 48 54 4d 4c 46 6f 72 6d 45 6c 65 6d 65 6e 74 3a 30 2c 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 3a 30 2c 4d 65 64 69 61 4c 69 73 74 3a 30 2c 4d 69 6d 65 54 79 70 65 41 72 Data Ascii: t.exports={CSSRuleList:0,CSSStyleDeclaration:0,CSSValueList:0,ClientRectList:0,DOMRectList:0,DOMStringList:0,DOMTokenList:1,DataTransferItemList:0,FileList:0,HTMLAllCollection:0,HTMLCollection:0,HTMLFormElement:0,HTMLSelectElement:0,MediaList:0,MimeTypeAr
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 2c 22 74 6f 53 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 4f 66 22 5d 7d 2c 32 31 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 31 32 33 36 29 2e 66 2c 69 3d 6e 28 38 38 38 30 29 2c 61 3d 6e 28 38 30 35 32 29 2c 63 3d 6e 28 33 30 37 32 29 2c 75 3d 6e 28 39 39 32 30 29 2c 73 3d 6e 28 34 37 30 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 66 2c 6c 2c 64 2c 70 2c 76 3d 74 2e 74 61 72 67 65 74 2c 68 3d 74 2e 67 6c 6f 62 61 6c 2c 6d 3d 74 2e 73 74 61 74 3b 69 66 28 6e 3d 68 3f 72 3a 6d 3f 72 5b 76 Data Ascii: rototypeOf","propertyIsEnumerable","toLocaleString","toString","valueOf"]},2109:function(t,e,n){var r=n(7854),o=n(1236).f,i=n(8880),a=n(8052),c=n(3072),u=n(9920),s=n(4705);t.exports=function(t,e){var n,f,l,d,p,v=t.target,h=t.global,m=t.stat;if(n=h?r:m?r[v
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 72 61 62 6c 65 29 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 45 58 49 53 54 53 3a 63 2c 50 52 4f 50 45 52 3a 75 2c 43 4f 4e 46 49 47 55 52 41 42 4c 45 3a 73 7d 7d 2c 38 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 33 37 34 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 6f 2e 63 61 6c 6c 2c 61 3d 72 26 26 6f 2e 62 69 6e 64 2e 62 69 6e 64 28 69 2c 69 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 31 37 30 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 33 32 36 29 2c 6f 3d 6e 28 38 34 29 Data Ascii: rable);t.exports={EXISTS:c,PROPER:u,CONFIGURABLE:s}},84:function(t,e,n){var r=n(4374),o=Function.prototype,i=o.call,a=r&&o.bind.bind(i,i);t.exports=r?a:function(t){return function(){return i.apply(t,arguments)}}},1702:function(t,e,n){var r=n(4326),o=n(84)
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 72 3d 6e 28 35 30 30 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 28 22 64 6f 63 75 6d 65 6e 74 22 2c 22 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 22 29 7d 2c 34 36 36 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 37 38 31 29 2c 6f 3d 6e 28 37 32 39 33 29 2c 69 3d 6e 28 33 31 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 7d 2c 38 33 36 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 Data Ascii: ){var r=n(5005);t.exports=r("document","documentElement")},4664:function(t,e,n){var r=n(9781),o=n(7293),i=n(317);t.exports=!r&&!o((function(){return 7!=Object.defineProperty(i("div"),"a",{get:function(){return 7}}).a}))},8361:function(t,e,n){var r=n(1702)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49760	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:34 UTC	684	OUT	GET /node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:34 UTC	448	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:34 GMT Content-Type: application/javascript Content-Length: 186349 Connection: close etag: "3352805550" last-modified: Mon, 13 Jan 2025 21:19:38 GMT CF-Cache-Status: HIT Expires: Tue, 14 Jan 2025 19:20:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c60ebd38fdf-BOS
2025-01-14 15:20:34 UTC	921	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 72 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 Data Ascii: :Promise.resolve(l).then(r,o)}function o(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function i(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0)
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 6f 3d 6e 65 77 28 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 74 2c 72 29 29 3b 72 65 74 75 72 6e 20 6e 26 26 75 28 6f 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6f 7d 2c 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 61 70 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 7c 7c 28 6e 3d 74 2c 2d 31 3d 3d 3d 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6e 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 29 29 72 65 74 75 72 6e 20 74 3b Data Ascii: );var o=new(Function.bind.apply(t,r));return n&&u(o,n.prototype),o},d.apply(null,arguments)}function f(t){var e="function"==typeof Map?new Map:void 0;return f=function(t){if(null===t\|\|(n=t,-1===Function.toString.call(n).indexOf("[native code]")))return t;
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 74 2e 73 6c 69 63 65 28 30 29 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 7b 72 61 77 3a 7b 76 61 6c 75 65 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 65 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 77 28 74 29 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d Data Ascii: apply(this,arguments)}function _(t,e){return e\|\|(e=t.slice(0)),Object.freeze(Object.defineProperties(t,{raw:{value:Object.freeze(e)}}))}function g(t){return function(t){if(Array.isArray(t))return w(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 6e 3d 6e 2e 63 61 6c 6c 28 74 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 61 3d 74 2e 64 6f 6e 65 2c 74 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 3d 21 30 2c 69 3d 74 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 61 7c 7c 6e 75 6c 6c 3d 3d 6e 2e 72 65 74 75 72 6e 7c 7c 6e 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 73 29 74 68 72 6f 77 20 69 7d 7d 7d 7d 0a 2f 2a 2a 0a 20 20 40 6c 69 63 65 6e 73 65 20 40 6e 6f 63 6f 6d 70 69 6c 65 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 Data Ascii: nction(){n=n.call(t)},n:function(){var t=n.next();return a=t.done,t},e:function(t){s=!0,i=t},f:function(){try{a\|\|null==n.return\|\|n.return()}finally{if(s)throw i}}}}/** @license @nocompile Copyright (c) 2018 The Polymer Project Authors. All rights res
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 74 68 69 73 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 69 66 28 65 29 74 3a 7b 76 61 72 20 6e 3d 69 3b 74 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 2d 31 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 74 5b 6f 5d 3b 69 66 28 21 28 61 20 69 6e 20 6e 29 29 62 72 65 61 6b 20 74 3b 6e 3d 6e 5b 61 5d 7d 28 65 3d 65 28 6f 3d 6e 5b 74 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 5d 29 29 21 3d 6f 26 26 6e 75 6c 6c 21 3d 65 26 26 72 28 6e 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 72 65 74 75 72 6e 28 74 3d 7b 6e 65 78 74 3a 74 7d 29 5b Data Ascii: al object")}(this);function a(t,e){if(e)t:{var n=i;t=t.split(".");for(var o=0;o<t.length-1;o++){var a=t[o];if(!(a in n))break t;n=n[a]}(e=e(o=n[t=t[t.length-1]]))!=o&&null!=e&&r(n,t,{configurable:!0,writable:!0,value:e})}}function s(t){return(t={next:t})[
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 62 72 65 61 6b 20 74 7d 63 61 74 63 68 28 41 29 7b 7d 75 3d 21 31 7d 6f 3d 75 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 2c 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 74 7d 3a 6e 75 6c 6c 7d 76 61 72 20 64 3d 6f 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 74 68 69 73 2e 75 3d 21 31 2c 74 68 69 73 2e 68 3d 6e 75 6c 6c 2c 74 68 69 73 2e 4b 61 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 67 3d 31 2c 74 68 69 73 2e 64 61 3d 30 2c 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 69 66 28 74 2e 75 29 74 68 72 6f 77 20 6e 65 77 20 54 79 Data Ascii: break t}catch(A){}u=!1}o=u?function(t,e){if(t.__proto__=e,t.__proto__!==e)throw new TypeError(t+" is not extensible");return t}:null}var d=o;function f(){this.u=!1,this.h=null,this.Ka=void 0,this.g=1,this.da=0,this.i=null}function p(t){if(t.u)throw new Ty
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 29 29 2c 64 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 64 28 65 2c 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 65 7d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 4b 61 3d 74 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 69 3d 7b 72 65 74 75 72 6e 3a 74 7d 2c 74 68 69 73 2e 67 3d 74 68 69 73 2e 64 61 7d 2c 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 28 41 72 72 61 79 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 3d Data Ascii: )),d&&t.prototype&&d(e,t.prototype),e}f.prototype.O=function(t){this.Ka=t},f.prototype.return=function(t){this.i={return:t},this.g=this.da},Array.from\|\|(Array.from=function(t){return[].slice.call(t)}),Object.assign\|\|(Object.assign=function(t){for(var e,n=
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 52 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 2e 49 29 7d 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 6e 3d 74 2e 62 61 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 4e 28 74 2c 74 2e 62 61 5b 65 5d 29 3b 74 2e 62 61 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 65 2c 6e 29 7b 74 68 69 73 2e 62 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 6e 75 6c 6c 2c 74 68 69 73 2e 63 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 78 28 65 2c 74 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: Rejection:",t.I)}));for(var e=0,n=t.ba.length;e<n;e++)N(t,t.ba[e]);t.ba=null}function k(t,e,n){this.bb="function"==typeof t?t:null,this.cb="function"==typeof e?e:null,this.promise=n}function P(t,e){var n=!1;try{t((function(t){n\|\|(n=!0,x(e,t))}),(function(
2025-01-14 15:20:34 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 44 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 43 2e 72 65 73 6f 6c 76 65 3d 44 2c 43 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 3b 76 61 72 20 49 3d 64 6f 63 75 6d 65 6e 74 Data Ascii: tion(t){return new C((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError("Promise.race accepts an array"));for(var r=0,o=t.length;r<o;r++)D(t[r]).then(e,n)}))},C.resolve=D,C.reject=function(t){return new C((function(e,n){n(t)}))};var I=document

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	49769	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:34 UTC	642	OUT	GET /admin/js/ac-pendo.js HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:34 UTC	378	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:34 GMT Content-Type: application/javascript Content-Length: 797 Connection: close etag: "1909558403" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: HIT Age: 5023 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9c621e7fc411-EWR
2025-01-14 15:20:34 UTC	797	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 70 65 6e 64 6f 43 6f 6e 66 69 67 29 20 7b 0a 09 28 66 75 6e 63 74 69 6f 6e 28 61 70 69 4b 65 79 29 7b 0a 09 09 69 66 20 28 21 61 70 69 4b 65 79 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 09 09 7d 0a 0a 09 09 28 66 75 6e 63 74 69 6f 6e 28 70 2c 65 2c 6e 2c 64 2c 6f 29 7b 76 61 72 20 76 2c 77 2c 78 2c 79 2c 7a 3b 6f 3d 70 5b 64 5d 3d 70 5b 64 5d 7c 7c 7b 7d 3b 6f 2e 5f 71 3d 5b 5d 3b 0a 09 09 09 76 3d 5b 27 69 6e 69 74 69 61 6c 69 7a 65 27 2c 27 69 64 65 6e 74 69 66 79 27 2c 27 75 70 64 61 74 65 4f 70 74 69 6f 6e 73 27 2c 27 70 61 67 65 4c 6f 61 64 27 5d 3b 66 6f 72 28 77 3d 30 2c 78 3d 76 2e 6c 65 6e 67 74 68 3b 77 3c 78 3b 2b 2b 77 29 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 0a 09 09 09 09 6f 5b 6d 5d 3d 6f Data Ascii: (function (pendoConfig) {(function(apiKey){if (!apiKey) {return null;}(function(p,e,n,d,o){var v,w,x,y,z;o=p[d]=p[d]\|\|{};o._q=[];v=['initialize','identify','updateOptions','pageLoad'];for(w=0,x=v.length;w<x;++w)(function(m){o[m]=o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	49761	143.204.215.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:34 UTC	583	OUT	GET /ac-frontend/maestro/assets/zendesk-widget.js HTTP/1.1 Host: platform-cdn.app-us1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:35 UTC	541	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4871 Connection: close Date: Tue, 14 Jan 2025 15:20:36 GMT Last-Modified: Thu, 09 Jan 2025 18:09:36 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=0, must-revalidate Accept-Ranges: bytes Server: AmazonS3 ETag: "d585776b166fe428bbe3201bb1138a61" X-Cache: Miss from cloudfront Via: 1.1 15d3b4db3728feaae1780610a1bac86e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA53-C1 X-Amz-Cf-Id: 5MV_OQpQTf21lVpRF-i-BZDasFbSqFvqRS0zX71Z43uvQBJj9MuGAQ==
2025-01-14 15:20:35 UTC	4871	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 22 7a 65 2d 73 6e 69 70 70 65 74 22 2c 74 3d 22 63 61 30 62 37 34 32 30 2d 38 33 65 65 2d 34 30 64 37 2d 39 31 37 62 2d 65 35 64 34 38 62 62 34 63 61 31 36 22 2c 6e 3d 22 64 63 64 35 62 34 38 34 2d 61 62 66 36 2d 34 37 65 33 2d 61 64 61 64 2d 62 63 37 62 37 64 61 37 31 36 63 34 22 2c 61 3d 22 33 31 38 36 39 32 38 37 22 2c 6f 3d 22 69 73 43 68 61 74 4f 70 65 6e 65 64 22 2c 64 3d 7b 69 64 3a 22 63 75 73 74 6f 6d 2d 77 69 64 67 65 74 2d 62 75 62 62 6c 65 22 2c 6f 66 66 73 65 74 59 3a 22 32 30 70 78 22 2c 6f 66 66 73 65 74 58 3a 22 32 30 70 78 22 2c 65 78 61 63 74 50 61 74 74 65 72 6e 73 3a 5b 22 2f 61 64 6d 69 6e 2f 69 6e 64 65 78 2e 70 68 70 22 2c 22 2f 61 64 6d 69 6e 22 2c 22 2f 63 61 6d 70 61 69 Data Ascii: !function(){const e="ze-snippet",t="ca0b7420-83ee-40d7-917b-e5d48bb4ca16",n="dcd5b484-abf6-47e3-adad-bc7b7da716c4",a="31869287",o="isChatOpened",d={id:"custom-widget-bubble",offsetY:"20px",offsetX:"20px",exactPatterns:["/admin/index.php","/admin","/campai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49772	34.36.213.229	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:34 UTC	585	OUT	GET /agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo.js HTTP/1.1 Host: cdn.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:35 UTC	962	IN	HTTP/1.1 200 OK X-GUploader-UploadID: AFIdbgSvlQneQ6HdlxIBbXvVpAS28wJptuEwppe_RVlZVDNTXw8X2Jv40w5pY502v034RIoDmLzgL-w x-goog-generation: 1736806344332399 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 199928 x-goog-hash: crc32c=Zdb01A== x-goog-hash: md5=437UrWX7Fc44MioBctc/UQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Date: Tue, 14 Jan 2025 14:06:34 GMT Last-Modified: Mon, 13 Jan 2025 22:12:24 GMT ETag: W/"e37ed4ad65fb15ce38322a0172d73f51" Content-Type: application/javascript; charset=utf-8 Vary: Accept-Encoding Age: 4441 Cache-Control: public,max-age=450 Strict-Transport-Security: max-age=63072000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-14 15:20:35 UTC	428	IN	Data Raw: 38 30 30 30 0d 0a 2f 2f 20 50 65 6e 64 6f 20 41 67 65 6e 74 20 57 72 61 70 70 65 72 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 35 20 50 65 6e 64 6f 2e 69 6f 2c 20 49 6e 63 2e 0a 2f 2f 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 20 20 20 20 70 72 6f 64 75 63 74 69 6f 6e 0a 2f 2f 20 41 67 65 6e 74 20 56 65 72 73 69 6f 6e 3a 20 20 32 2e 32 36 30 2e 31 0a 2f 2f 20 49 6e 73 74 61 6c 6c 65 64 3a 20 20 20 20 20 20 32 30 32 35 2d 30 31 2d 31 33 54 32 32 3a 31 32 3a 32 33 5a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 50 65 6e 64 6f 43 6f 6e 66 69 67 29 20 7b 0a 2f 2a 0a 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f 61 67 65 6e 74 2e 70 65 6e 64 6f 2e 69 6f 2f 6c 69 63 65 6e 73 65 73 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 45 77 2c 78 77 2c 43 77 29 7b 21 66 75 Data Ascii: 8000// Pendo Agent Wrapper// Copyright 2025 Pendo.io, Inc.// Environment: production// Agent Version: 2.260.1// Installed: 2025-01-13T22:12:23Z(function (PendoConfig) {/@license https://agent.pendo.io/licenses/!function(Ew,xw,Cw){!fu
2025-01-14 15:20:35 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 29 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6f 3d 65 7c 7c 30 2c 61 3d 28 74 3c 30 3f 72 2b 74 3a 74 7c 7c 72 29 2d 28 6f 3d 30 3c 3d 6f 3f 6f 3a 72 2b 6f 29 3b 69 66 28 30 3c 61 29 69 66 28 69 3d 6e 65 77 20 41 72 72 61 79 28 61 29 2c 74 68 69 73 2e 63 68 61 72 41 74 29 66 6f 72 28 6e 3d 30 3b 6e 3c 61 3b 6e 2b 2b 29 69 5b 6e 5d 3d 74 68 69 73 2e 63 68 61 72 41 74 28 6f 2b 6e 29 3b 65 6c 73 65 20 66 6f 72 28 6e 3d 30 3b 6e 3c 61 3b 6e 2b 2b 29 69 5b 6e 5d 3d 74 68 69 73 5b 6f 2b 6e 5d 3b 72 65 74 75 72 6e 20 69 7d 7d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 Data Ascii: totype.toString.call(this))return d.call(this,e,t);var n,i=[],r=this.length,o=e\|\|0,a=(t<0?r+t:t\|\|r)-(o=0<=o?o:r+o);if(0<a)if(i=new Array(a),this.charAt)for(n=0;n<a;n++)i[n]=this.charAt(o+n);else for(n=0;n<a;n++)i[n]=this[o+n];return i}}String.prototype.tr
2025-01-14 15:20:35 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6c 28 21 30 29 2e 75 70 64 61 74 65 28 65 29 5b 74 5d 28 29 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 28 22 68 65 78 22 29 3b 28 74 3d 69 3f 63 28 74 29 3a 74 29 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6c 7d 2c 74 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 72 65 61 74 65 28 29 2e 75 70 64 61 74 65 28 65 29 7d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 2b 2b 65 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 74 5b 6e 5d 3d 61 28 6e 29 7d 72 65 74 75 72 6e 20 74 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ction(t){return function(e){return new l(!0).update(e)[t]()}},d=function(){var t=a("hex");(t=i?c(t):t).create=function(){return new l},t.update=function(e){return t.create().update(e)};for(var e=0;e<r.length;++e){var n=r[e];t[n]=a(n)}return t},c=function(
2025-01-14 15:20:35 UTC	1390	IN	Data Raw: 32 30 34 38 3f 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 39 32 7c 74 3e 3e 36 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 3a 28 74 3c 35 35 32 39 36 7c 7c 35 37 33 34 34 3c 3d 74 3f 61 5b 6e 3e 3e 32 5d 7c 3d 28 32 32 34 7c 74 3e 3e 31 32 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 3a 28 74 3d 36 35 35 33 36 2b 28 28 31 30 32 33 26 74 29 3c 3c 31 30 7c 31 30 32 33 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 72 29 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 32 34 30 7c 74 3e 3e 31 38 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 74 3e 3e 31 32 26 36 33 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 74 3e 3e 36 26 36 33 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 36 33 26 74 29 3c 3c 75 5b Data Ascii: 2048?a[n>>2]\|=(192\|t>>6)<<u[3&n++]:(t<55296\|\|57344<=t?a[n>>2]\|=(224\|t>>12)<<u[3&n++]:(t=65536+((1023&t)<<10\|1023&e.charCodeAt(++r)),a[n>>2]\|=(240\|t>>18)<<u[3&n++],a[n>>2]\|=(128\|t>>12&63)<<u[3&n++]),a[n>>2]\|=(128\|t>>6&63)<<u[3&n++]),a[n>>2]\|=(128\|63&t)<<u[
2025-01-14 15:20:35 UTC	1390	IN	Data Raw: 3b 73 2b 3d 35 29 74 3d 28 65 3d 28 6e 3d 28 65 3d 28 69 3d 28 65 3d 28 72 3d 28 65 3d 28 6f 3d 28 65 3d 74 3c 3c 35 7c 74 3e 3e 3e 32 37 29 2b 28 6e 5e 69 5e 72 29 2b 6f 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 5d 3c 3c 30 29 3c 3c 35 7c 6f 3e 3e 3e 32 37 29 2b 28 74 5e 28 6e 3d 6e 3c 3c 33 30 7c 6e 3e 3e 3e 32 29 5e 69 29 2b 72 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 31 5d 3c 3c 30 29 3c 3c 35 7c 72 3e 3e 3e 32 37 29 2b 28 6f 5e 28 74 3d 74 3c 3c 33 30 7c 74 3e 3e 3e 32 29 5e 6e 29 2b 69 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 32 5d 3c 3c 30 29 3c 3c 35 7c 69 3e 3e 3e 32 37 29 2b 28 72 5e 28 6f 3d 6f 3c 3c 33 30 7c 6f 3e 3e 3e 32 29 5e 74 29 2b 6e 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 33 5d 3c 3c 30 29 3c 3c 35 7c 6e 3e 3e Data Ascii: ;s+=5)t=(e=(n=(e=(i=(e=(r=(e=(o=(e=t<<5\|t>>>27)+(n^i^r)+o+1859775393+a[s]<<0)<<5\|o>>>27)+(t^(n=n<<30\|n>>>2)^i)+r+1859775393+a[s+1]<<0)<<5\|r>>>27)+(o^(t=t<<30\|t>>>2)^n)+i+1859775393+a[s+2]<<0)<<5\|i>>>27)+(r^(o=o<<30\|o>>>2)^t)+n+1859775393+a[s+3]<<0)<<5\|n>>
2025-01-14 15:20:35 UTC	1390	IN	Data Raw: 6f 5b 6e 3e 3e 32 38 26 31 35 5d 2b 6f 5b 6e 3e 3e 32 34 26 31 35 5d 2b 6f 5b 6e 3e 3e 32 30 26 31 35 5d 2b 6f 5b 6e 3e 3e 31 36 26 31 35 5d 2b 6f 5b 6e 3e 3e 31 32 26 31 35 5d 2b 6f 5b 6e 3e 3e 38 26 31 35 5d 2b 6f 5b 6e 3e 3e 34 26 31 35 5d 2b 6f 5b 31 35 26 6e 5d 2b 6f 5b 69 3e 3e 32 38 26 31 35 5d 2b 6f 5b 69 3e 3e 32 34 26 31 35 5d 2b 6f 5b 69 3e 3e 32 30 26 31 35 5d 2b 6f 5b 69 3e 3e 31 36 26 31 35 5d 2b 6f 5b 69 3e 3e 31 32 26 31 35 5d 2b 6f 5b 69 3e 3e 38 26 31 35 5d 2b 6f 5b 69 3e 3e 34 26 31 35 5d 2b 6f 5b 31 35 26 69 5d 2b 6f 5b 72 3e 3e 32 38 26 31 35 5d 2b 6f 5b 72 3e 3e 32 34 26 31 35 5d 2b 6f 5b 72 3e 3e 32 30 26 31 35 5d 2b 6f 5b 72 3e 3e 31 36 26 31 35 5d 2b 6f 5b 72 3e 3e 31 32 26 31 35 5d 2b 6f 5b 72 3e 3e 38 26 31 35 5d 2b 6f 5b 72 3e Data Ascii: o[n>>28&15]+o[n>>24&15]+o[n>>20&15]+o[n>>16&15]+o[n>>12&15]+o[n>>8&15]+o[n>>4&15]+o[15&n]+o[i>>28&15]+o[i>>24&15]+o[i>>20&15]+o[i>>16&15]+o[i>>12&15]+o[i>>8&15]+o[i>>4&15]+o[15&i]+o[r>>28&15]+o[r>>24&15]+o[r>>20&15]+o[r>>16&15]+o[r>>12&15]+o[r>>8&15]+o[r>
2025-01-14 15:20:35 UTC	1390	IN	Data Raw: 20 4d 28 65 29 7b 72 65 74 75 72 6e 22 65 78 74 65 6e 73 69 6f 6e 22 3d 3d 3d 65 2e 69 6e 73 74 61 6c 6c 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 21 4d 28 65 29 26 26 21 4f 28 65 29 26 26 42 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 4d 28 65 29 26 26 4e 28 65 29 26 26 74 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 5b 5d 29 3b 66 6f 72 28 76 61 72 20 74 3d 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 5b 5c 77 5c 2d 2e 5d 2a 63 64 6e 5b 5c 77 5c 2d 2e 5d 2a 5c 2e 28 70 65 6e 64 6f 2d 64 65 76 5c 2e 63 6f 6d 7c 70 65 6e 64 6f 5c 2e 69 6f 29 5c 2f 61 67 65 6e 74 5c 2f 73 74 61 74 69 63 5c 2f 28 5b 5c 77 5d 7b 38 7d 2d 5b 5c 77 5d 7b 34 7d 2d 5b 5c 77 Data Ascii: M(e){return"extension"===e.installType}function F(e){return!M(e)&&!O(e)&&B(e)}function D(e,t){return!M(e)&&N(e)&&t}function U(e){void 0===e&&(e=[]);for(var t=/^https:\/\/[\w\-.]cdn[\w\-.]\.(pendo-dev\.com\|pendo\.io)\/agent\/static\/([\w]{8}-[\w]{4}-[\w
2025-01-14 15:20:35 UTC	1390	IN	Data Raw: 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 4a 28 74 29 2c 63 65 28 65 2c 74 29 2c 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 65 2c 74 2c 6e 29 7b 69 66 28 44 28 65 2c 6e 29 29 7b 65 3d 47 28 65 2c 21 31 2c 6e 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 4a 28 74 29 2c 63 65 28 65 2c 74 29 2c 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 74 2c 6e 29 7c 7c 75 65 28 65 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 78 77 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 74 3d 28 6e 5b 22 61 73 79 6e 63 22 5d 3d 21 30 2c 6e 2e 73 72 63 3d 78 65 28 74 29 2e 63 72 65 61 74 65 53 63 72 69 70 74 Data Ascii: );if(e)return J(t),ce(e,t),!0}return!1}function ue(e,t,n){if(D(e,n)){e=G(e,!1,n);if(e)return J(t),ce(e,t),!0}return!1}function de(e,t,n){return V(e,t,n)\|\|ue(e,t,n)}function ce(e,t){var n=xw.createElement("script"),t=(n["async"]=!0,n.src=xe(t).createScript
2025-01-14 15:20:35 UTC	1390	IN	Data Raw: 74 6f 53 74 72 69 6e 67 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 5d 2c 56 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 35 33 29 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 28 72 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 6e 75 6c 6c 3d 3d 6f 3f 72 2e 6c 65 6e 67 74 68 2d 31 3a 2b 6f 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 4d 61 74 68 2e 6d 61 78 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 6f 2c 30 29 2c 74 3d 41 72 72 61 79 28 65 29 2c 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 2b 6f 5d 3b 73 77 69 74 63 68 28 6f 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 72 2e Data Ascii: toString","propertyIsEnumerable","hasOwnProperty","toLocaleString"],V=Math.pow(2,53)-1;function c(r,o){return o=null==o?r.length-1:+o,function(){for(var e=Math.max(arguments.length-o,0),t=Array(e),n=0;n<e;n++)t[n]=arguments[n+o];switch(o){case 0:return r.
2025-01-14 15:20:35 UTC	1390	IN	Data Raw: 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 30 3c 3d 65 26 26 65 3c 3d 56 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 74 5d 7d 7d 76 61 72 20 6d 3d 63 65 28 22 62 79 74 65 4c 65 6e 67 74 68 22 29 2c 6c 65 3d 64 65 28 6d 29 2c 66 65 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 28 49 7c 55 69 29 6e 74 28 38 7c 31 36 7c 33 32 29 7c 46 6c 6f 61 74 28 33 32 7c 36 34 29 7c 55 69 6e 74 38 43 6c 61 6d 70 65 64 7c 42 69 67 28 49 7c 55 69 29 6e 74 36 34 29 41 72 72 61 79 5c 5d 2f 3b 76 61 72 20 70 65 Data Ascii: ion de(t){return function(e){e=t(e);return"number"==typeof e&&0<=e&&e<=V}}function ce(t){return function(e){return null==e?void 0:e[t]}}var m=ce("byteLength"),le=de(m),fe=/\[object ((I\|Ui)nt(8\|16\|32)\|Float(32\|64)\|Uint8Clamped\|Big(I\|Ui)nt64)Array\]/;var pe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49765	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:35 UTC	624	OUT	GET /dh5u5fb9y_funnel.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:35 UTC	456	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 872 Connection: close Date: Tue, 14 Jan 2025 13:18:29 GMT Last-Modified: Thu, 02 Sep 2021 18:08:54 GMT ETag: "3a2e925fd41f6b32a435dba0b094daa7" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 46546eb404789d29bf372f6a3fe43876.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: qCpD3uAjgb7VQmbM-5-iCl_OxcexHqEGpeTBk3kr58v6BkIWEU17AA== Age: 7327
2025-01-14 15:20:35 UTC	872	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 c6 50 4c 54 45 00 00 00 36 6a e6 34 6a e5 37 68 e7 35 6a e5 40 70 df 35 68 df 34 6b e7 35 6a e6 34 6a e5 34 68 e3 c9 d6 fd 30 70 df c1 d1 f7 34 69 e6 34 69 e4 c1 d2 fa 34 69 e6 c1 d1 f7 e4 eb fd e3 eb fd bf cf f4 35 65 e4 df e7 f7 33 69 e5 c1 d1 f7 36 6a e6 e4 ec fd c1 d1 f7 35 6a e5 e1 ea fb e2 e9 fb c1 d2 f6 36 6a e5 bf cf f6 d1 df f9 e3 eb fb bf cf f5 e4 ea fa e3 eb fc 34 6a e6 c0 d2 f7 c2 d0 f7 e2 e9 fb c2 d2 f8 35 6a e7 bf cf f6 e1 eb fa bf d2 f4 ff ff ff 35 6a e6 c1 d1 f7 e3 eb fc 9a b4 f2 42 73 e8 d9 e3 fb b3 c7 f5 e6 ed fc 81 a2 ef a7 be f4 b3 c7 f6 67 8f ec f2 f6 fe cc da f9 75 98 ee 4e 7c e9 50 b6 65 ca 00 00 00 31 74 52 4e 53 00 df 80 20 Data Ascii: PNGIHDR``FPLTE6j4j7h5j@p5h4k5j4j4h0p4i4i4i5e3i6j5j6j4j5j5jBsguN\|Pe1tRNS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	49763	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:35 UTC	625	OUT	GET /bvkaul0w_wavehand.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:35 UTC	458	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1796 Connection: close Date: Mon, 13 Jan 2025 18:48:29 GMT Last-Modified: Thu, 02 Sep 2021 18:08:35 GMT ETag: "208168d40490072301ffcc83606cce03" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2fc0d20914c32e5cd76477ed042298d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: _x4cZikwTixx1X6XSb7KuloTWJqryIds_zG2Et3ubyQ8oaDKFhFzkw== Age: 73927
2025-01-14 15:20:35 UTC	1796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 d2 50 4c 54 45 00 00 00 35 6a e6 33 68 e4 34 6a e7 34 6a e6 c1 d1 f7 bf cf f6 34 70 df bf cf f7 bf cf f5 35 6a e6 34 69 e5 34 68 e3 34 6a e4 c0 d1 f7 35 69 e5 c1 d1 f7 bf cf ff c1 d1 f7 35 66 e4 34 6a e6 35 69 e6 35 6a e5 c1 d0 f7 35 6a e5 35 6a e6 c1 d1 f8 33 69 e5 bf cf f4 c1 d1 f6 34 69 e7 bf cf f6 c1 d1 f6 c2 d2 f7 c1 d0 f6 bf d1 f6 bf cf ef c1 d1 f8 34 69 e4 34 6a e6 36 68 e6 35 6a e7 bf cf fa 30 65 e4 c0 d1 f7 ff ff ff 35 6a e6 c1 d1 f7 e5 ec fd 9a b5 f3 f3 f7 fe 4e 7d e9 42 73 e8 b3 c7 f6 cc da f9 a7 be f4 5a 86 eb d9 e3 fb 8d ab f1 81 a2 ef fa fc ff ef f4 fd 74 98 ee 67 8f ec 80 a2 ef 68 8f ec eb f1 fd c0 d1 f8 42 74 e8 da e3 fb e4 55 25 0f Data Ascii: PNGIHDR``FPLTE5j3h4j4j4p5j4i4h4j5i5f4j5i5j5j5j3i4i4i4j6h5j0e5jN}BsZtghBtU%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	49767	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:35 UTC	622	OUT	GET /vxd0ariod_gift.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:35 UTC	457	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 600 Connection: close Date: Mon, 13 Jan 2025 22:06:44 GMT Last-Modified: Thu, 02 Sep 2021 18:12:34 GMT ETag: "5bb4bf932bd8470dedadc94b24f860fa" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 910fc18161f0602555cc5b6397ca26f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: Jf1OI1M8zc_UjWYVnInUjzqm65Zc9Z0gja4-rH2CT9l999GkbK5rXg== Age: 62032
2025-01-14 15:20:35 UTC	600	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 48 50 4c 54 45 00 00 00 34 6a e5 35 6a e6 35 6a e7 33 70 df 35 68 e2 35 6a e6 34 6a e6 34 68 e3 34 65 e4 34 69 e7 35 69 e5 30 68 e7 34 6a e6 34 6a e5 33 69 e4 35 6a e6 35 6a e7 35 69 e7 35 69 e5 35 6a e6 e3 eb fc 8c aa f1 60 8a eb a1 3c cc db 00 00 00 14 74 52 4e 53 00 80 df bf 10 20 ef cf 40 30 70 60 20 ef 90 50 9f 7f af a0 81 f8 f9 cf 00 00 01 ab 49 44 41 54 68 de ec 96 cb 8e 9c 30 10 45 cb 6f 1b 02 74 d3 27 f3 ff 9f 9a 01 b7 8c b0 66 d1 b2 43 b2 e1 2c af c4 bd e5 aa b2 85 fc 7f e2 1c a6 c9 8c ee ac 2e 66 62 5a a3 74 f3 cb 90 d1 cb 4f ea c3 49 1f c3 44 e1 79 f8 eb 22 ea 24 3d 3c f7 2a a3 d8 71 b3 1c 0f 7f bc b2 e2 14 e0 53 a7 7f c8 4d b0 01 bc cb Data Ascii: PNGIHDR``FHPLTE4j5j5j3p5h5j4j4h4e4i5i0h4j4j3i5j5j5i5i5j`<tRNS @0p` PIDATh0Eot'fC,.fbZtOIDy"$=<*qSM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	49764	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:35 UTC	634	OUT	GET /ckke9g3gf_browserwindowapp.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:35 UTC	457	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 370 Connection: close Date: Mon, 13 Jan 2025 22:21:17 GMT Last-Modified: Thu, 02 Sep 2021 18:08:43 GMT ETag: "fe8aa2bb56bdbf2fcc808f8fd32eb5a8" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 b3dc72c60418e8887de31f772538f118.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: RNsnMXEtOJw6zJPWtpxCMJi2f2S6fJaNN4EmPxLTY3qhODL9lz8j1Q== Age: 61159
2025-01-14 15:20:35 UTC	370	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 45 50 4c 54 45 00 00 00 34 6a e5 34 6a e6 34 69 e6 35 6a e6 34 69 e6 35 65 e4 3a 6b e5 ff ff ff c1 d1 f7 35 6a e6 e3 eb fc e0 e8 fb 58 84 ea 9a b4 f2 ab c1 f4 a2 bb f4 a1 bb f3 ef f3 fd cd db f9 4b 7a e9 d5 e0 fa 8c aa f1 93 40 5e 85 00 00 00 08 74 52 4e 53 00 80 ef c7 8f 70 30 18 ae 37 45 57 00 00 00 d4 49 44 41 54 68 de ed d8 cb 0e 82 30 10 85 e1 52 b9 c8 b4 4a cb c5 f7 7f 54 03 69 e2 46 c8 68 38 48 cd f9 57 b3 fb 92 32 40 52 c3 18 3b a8 c2 0a 20 5b 9a 54 29 a0 8a 04 58 01 65 13 20 22 0e 90 88 10 f8 14 08 c1 b9 e1 31 cc 03 04 08 22 c1 8d 32 2e 03 02 88 22 71 06 96 01 01 b8 18 d3 11 c5 98 e9 43 26 b0 0e 60 fa 33 e0 0a 88 00 01 4d ed db fc 06 30 75 Data Ascii: PNGIHDR``FEPLTE4j4j4i5j4i5e:k5jXKz@^tRNSp07EWIDATh0RJTiFh8HW2@R; [T)Xe "1"2."qC&`3M0u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	49766	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:35 UTC	631	OUT	GET /gpcxgatc_buttonctaclick.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:35 UTC	457	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 786 Connection: close Date: Tue, 14 Jan 2025 07:19:57 GMT Last-Modified: Thu, 02 Sep 2021 18:09:28 GMT ETag: "7e33aa8c72fc5b80f81df51e4f3f400b" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4874e0c922f34c928345f4c183ea11b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: Z9d0Gw9f0Hy0qq6clBpduZvIoS5L9cJvL787qDXWDqHaSPsAba6gwQ== Age: 28839
2025-01-14 15:20:35 UTC	786	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 ab 50 4c 54 45 00 00 00 c1 d1 f7 34 6a e5 ff ff ff bf cf f4 bf cf f7 c1 d1 f7 c1 d1 f7 ff ff ff ff ff ff 34 68 e3 35 6a e6 ff ff ff 35 6a e6 ff ff ff bf cf f7 bf cf f3 34 6a e6 35 6a e6 c1 d1 f6 ff ff ff ff ff ff 35 69 e5 ff ff ff 35 69 e4 33 69 e5 34 68 e3 ff ff ff 30 70 df 85 a5 f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 eb fc 35 6a e6 ff ff ff 8c aa f1 c1 d1 f7 e7 ee fd cc da f9 4e 7d e9 f2 f6 fe 81 a2 f0 b7 cb f7 b1 c6 f6 fb fc ff 9a b4 f3 f6 f9 fe d8 e3 fb 56 82 ea ed f2 fd 4d 7b e9 42 73 e8 3f 72 e8 74 98 ee 30 59 25 56 00 00 00 23 74 52 4e 53 00 80 80 40 30 20 ef df 1f ef 40 ef df 9f 50 40 40 ef df cf bf 80 70 60 60 50 20 10 10 ef cf Data Ascii: PNGIHDR``FPLTE4j4h5j5j4j5j5i5i3i4h0p5jN}VM{Bs?rt0Y%V#tRNS@0 @P@@p``P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	49762	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:35 UTC	623	OUT	GET /jhynp592_idcard.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:35 UTC	456	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 675 Connection: close Date: Tue, 14 Jan 2025 13:18:29 GMT Last-Modified: Thu, 02 Sep 2021 18:10:06 GMT ETag: "5b8ccf123779cf06a364a3124bbea0b3" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 df7c0ba7857d5300ae11e7566c926f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: w7UWOp6aUn0DxzY6JX0ARq2D21esRIfUqjvjvMIYodRysbTfeJTYSw== Age: 7327
2025-01-14 15:20:35 UTC	675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 96 50 4c 54 45 00 00 00 35 6a e6 e4 ea fd e4 ea fc e3 eb fd 34 6b e6 e3 eb fc e2 eb fb e2 ea fc 35 69 e4 df e7 f7 df e7 ff 30 70 df 35 6b e7 35 69 e6 36 6a e5 36 6a e7 30 68 e7 30 68 df ff ff ff 35 6a e6 c1 d1 f7 e3 eb fc 92 af f1 e0 e8 fb c8 d7 f8 f2 f6 fe 9a b5 f3 4e 7d e9 b3 c7 f6 67 8f ec fa fc ff 5b 86 eb e5 ec fc a5 bd f4 42 73 e8 c5 d4 f7 a8 bf f4 d2 de fa e7 ee fd c1 d2 f7 ae c4 f5 a0 b9 f3 95 b1 f1 8c ab f0 86 a6 f0 f3 f7 fe f3 f6 fe bb cc f6 6f 95 ed 25 22 17 6e 00 00 00 13 74 52 4e 53 00 df df df cf cf bf 80 60 60 20 10 10 bf bf 80 7f 20 20 5d 20 11 06 00 00 01 a9 49 44 41 54 68 de ed d8 d7 6e dc 30 10 85 e1 71 dc 4b 2a 0f 39 14 a9 b6 d5 Data Ascii: PNGIHDR``FPLTE5j4k5i0p5k5i6j6j0h0h5jN}g[Bso%"ntRNS`` ] IDAThn0qK*9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	49774	216.198.54.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	589	OUT	GET /ekr/snippet.js?key=dcd5b484-abf6-47e3-adad-bc7b7da716c4 HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	1154	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:36 GMT Content-Type: application/javascript Content-Length: 10215 Connection: close x-amz-id-2: uDt3fpl82DY/3a3+XqGYXOLHbVAFEMaOB+CHfwPWuQu20jLNRel1hS/wj8ZM/VgmWSps4csmI54bd5VYVAuXUlNJxJCvGA8O x-amz-request-id: YERV0SK9T118Q2MY x-amz-replication-status: COMPLETED Last-Modified: Mon, 04 Nov 2024 09:45:04 GMT ETag: "c88d625098ddb649cf216dba2e52435c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600, s-maxage=60 x-amz-version-id: C4qpYKgeT8.DeRlre_wbz3El4DCj0uok CF-Cache-Status: HIT Age: 45 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JQRIdVhIDvSKugPIGCkVj9H%2BE6BSHt9mDBuSmQlaGAZ6IeiGUR5Lcy95bzNZinHSMfR8EAetc1JCry2Aa5tD%2Bp2Ro3AXYpYdE%2FQa%2BjpmDgplIUVVv4Z4FB7%2Bu7YXaQZ6wASHA2w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c69f912f795-EWR
2025-01-14 15:20:36 UTC	215	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 37 31 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2c 74 2e 73 65 61 72 63 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 53 74 72 69 6e 67 3a 74 2c 70 61 72 73 65 55 72 6c 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 72 3f 7b 7d 3a 72 2e 73 70 6c 69 74 Data Ascii: (()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 28 22 26 22 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 5b 72 5b 30 5d 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 29 2c 65 7d 29 2c 7b 7d 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 22 53 63 72 69 70 74 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 22 29 Data Ascii: ("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load")
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 7b 61 3d 70 3b 62 72 65 61 6b 7d 7d 61 7c 7c 28 63 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 74 2b 6f 29 2c 61 2e 73 72 63 3d 72 29 2c 65 5b 72 5d 3d 5b 6e 5d 3b 76 61 72 20 6c 3d 28 74 2c 6e 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 3b 76 61 72 20 73 3d 65 5b 72 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 72 5d Data Ascii: {a=p;break}}a\|\|(c=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",t+o),a.src=r),e[r]=[n];var l=(t,n)=>{a.onerror=a.onload=null,clearTimeout(h);var s=e[r];if(delete e[r]
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 70 7c 7c 5b 5d 3b 72 2e 66 6f 72 45 61 63 68 28 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 22 22 2c 74 3d 7b 7d 2c 72 3d 21 31 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 3d 45 72 72 6f 72 28 74 68 69 73 2e 6d 65 73 73 61 67 65 29 2c 74 68 69 73 2e 69 73 55 73 65 72 45 72 72 6f 72 3d 72 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 7d 63 6f 6e 73 74 20 74 3d 7b 7d 2c 72 3d 7b 7d 2c 6e 3d 7b 7d Data Ascii: p\|\|[];r.forEach(t.bind(null,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";class e{constructor(e="",t={},r=!1){this.message=e,this.props=t,this.error=Error(this.message),this.isUserError=r,this.fingerprint=this.message}}const t={},r={},n={}
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 76 61 69 6c 61 62 6c 65 22 29 29 7d 29 29 7d 29 29 7d 63 72 65 61 74 65 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 52 65 61 64 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 73 65 74 2e 70 72 6f 64 75 63 74 3d 74 68 69 73 2e 6e 61 6d 65 2c 65 2e 74 69 74 6c 65 3d 22 4e 6f 20 63 6f 6e 74 65 6e 74 22 2c 65 2e 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 61 6c 6c 6f 77 3d 22 6d 69 63 72 6f 70 68 6f 6e 65 20 2a 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: vailable"))}))}))}createIframeElement(){return this.parentDocumentReady().then((()=>{const e=this.doc.createElement("iframe");return e.dataset.product=this.name,e.title="No content",e.role="presentation",e.tabIndex=-1,e.allow="microphone *",e.setAttribute
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 69 6f 6e 22 3b 63 6c 61 73 73 20 75 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 28 65 29 2c 74 68 69 73 2e 62 61 73 65 55 72 6c 3d 60 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 63 6f 6d 70 6f 73 65 2f 24 7b 74 7d 60 2c 74 68 69 73 2e 73 6e 69 70 70 65 74 4b 65 79 3d 74 7d 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 73 65 55 72 6c 28 65 3d 21 31 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 61 73 65 55 72 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 26 26 28 74 2b 3d 60 3f 24 7b 74 68 69 73 2e 67 65 74 53 65 72 69 61 6c 69 7a 65 64 56 65 72 73 69 6f 6e 51 75 65 72 79 50 61 72 61 6d 28 29 7d 60 2c 74 68 69 73 2e 64 69 73 70 6c Data Ascii: ion";class u{constructor(e,t){this.version=this.getVersion(e),this.baseUrl=`https://ekr.zdassets.com/compose/${t}`,this.snippetKey=t}resolveComposeUrl(e=!1){let t=this.baseUrl;return this.version&&(t+=`?${this.getSerializedVersionQueryParam()}`,this.displ
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 68 61 74 22 3d 3d 3d 65 2e 6e 61 6d 65 3f 6e 65 77 20 63 28 65 2e 69 64 2c 74 29 3a 6e 65 77 20 69 28 65 2c 74 29 29 29 7d 65 72 72 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 22 63 6f 6d 70 6f 73 65 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 7b 6b 65 79 3a 74 7d 29 7d 7d 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 77 69 6e 3d 65 2c 74 68 69 73 2e 64 6f 63 3d 65 2e 64 6f 63 75 6d 65 6e 74 7d 67 65 74 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 72 29 3d 3e 72 28 6e 65 77 20 65 28 22 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 73 6e 69 70 70 65 74 22 2c 7b 7d 2c 21 30 29 29 29 29 7d 67 65 74 5a 45 51 75 65 75 65 28 29 7b 72 65 74 75 72 6e Data Ascii: hat"===e.name?new c(e.id,t):new i(e,t)))}error(t){return new e("compose request failed",{key:t})}}class l{constructor(e){this.win=e,this.doc=e.document}getKey(){return new Promise(((t,r)=>r(new e("Key is missing from snippet",{},!0))))}getZEQueue(){return
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 73 53 74 72 69 6e 67 29 28 67 2e 67 65 74 53 63 72 69 70 74 53 72 63 28 74 68 69 73 2e 77 69 6e 29 29 7d 60 29 29 29 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 69 70 74 53 72 63 28 65 29 7b 69 66 28 65 2e 24 7a 6f 70 69 6d 26 26 65 2e 24 7a 6f 70 69 6d 2e 73 29 72 65 74 75 72 6e 20 65 2e 24 7a 6f 70 69 6d 2e 73 2e 73 72 63 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 2f 2e 2a 7a 6f 70 69 6d 2e 28 63 6f 6d 7c 6e 65 74 7c 6f 72 67 29 5c 2f 2f 3b 6c 65 74 20 6e 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 73 3b 65 2b 2b 29 69 66 28 6e 3d 74 5b 65 5d 2e 73 72 63 7c 7c 22 22 2c 72 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 Data Ascii: sString)(g.getScriptSrc(this.win))}`)))}static getScriptSrc(e){if(e.$zopim&&e.$zopim.s)return e.$zopim.s.src;const t=document.getElementsByTagName("script"),r=/.*zopim.(com\|net\|org)\//;let n;for(let e=0,s=t.length;e<s;e++)if(n=t[e].src\|\|"",r.test(n))retur
2025-01-14 15:20:36 UTC	417	IN	Data Raw: 65 2e 6e 6f 77 28 29 2c 74 7d 28 29 3b 77 69 6e 64 6f 77 2e 7a 45 3d 65 2c 77 69 6e 64 6f 77 2e 7a 45 6d 62 65 64 3d 65 7d 69 66 28 77 69 6e 64 6f 77 2e 7a 45 41 43 4c 6f 61 64 65 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 6d 28 65 29 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 65 6e 64 65 73 6b 48 6f 73 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 45 51 75 65 75 65 3f 6e 65 77 20 68 28 65 29 3a 67 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 67 28 65 29 3a 6e 65 77 20 6d 28 65 29 7d 28 77 69 6e 64 6f 77 29 2c 74 3d 6e 65 77 20 70 28 65 29 2c 72 3d 21 31 3b 65 2e 67 65 74 4b 65 79 28 29 2e Data Ascii: e.now(),t}();window.zE=e,window.zEmbed=e}if(window.zEACLoaded)return;const e=function(e){return m.isSnippetPresent(e)?new m(e):e.document.zendeskHost&&e.document.zEQueue?new h(e):g.isSnippetPresent(e)?new g(e):new m(e)}(window),t=new p(e),r=!1;e.getKey().

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49783	34.36.213.229	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	394	OUT	GET /agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo.js HTTP/1.1 Host: cdn.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	952	IN	HTTP/1.1 200 OK X-GUploader-UploadID: AFIdbgRZ9afQcc3dszbQeh-r06I5S3yZCcId4T-u-ooM5cfSwaRcoFJcd1rBitHcpSbiTt7r x-goog-generation: 1736806344332399 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 199928 x-goog-hash: crc32c=Zdb01A== x-goog-hash: md5=437UrWX7Fc44MioBctc/UQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Date: Tue, 14 Jan 2025 15:20:35 GMT Last-Modified: Mon, 13 Jan 2025 22:12:24 GMT ETag: W/"e37ed4ad65fb15ce38322a0172d73f51" Content-Type: application/javascript; charset=utf-8 Vary: Accept-Encoding Age: 1 Cache-Control: public,max-age=450 Strict-Transport-Security: max-age=63072000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-14 15:20:36 UTC	438	IN	Data Raw: 38 30 30 30 0d 0a 2f 2f 20 50 65 6e 64 6f 20 41 67 65 6e 74 20 57 72 61 70 70 65 72 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 35 20 50 65 6e 64 6f 2e 69 6f 2c 20 49 6e 63 2e 0a 2f 2f 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 20 20 20 20 70 72 6f 64 75 63 74 69 6f 6e 0a 2f 2f 20 41 67 65 6e 74 20 56 65 72 73 69 6f 6e 3a 20 20 32 2e 32 36 30 2e 31 0a 2f 2f 20 49 6e 73 74 61 6c 6c 65 64 3a 20 20 20 20 20 20 32 30 32 35 2d 30 31 2d 31 33 54 32 32 3a 31 32 3a 32 33 5a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 50 65 6e 64 6f 43 6f 6e 66 69 67 29 20 7b 0a 2f 2a 0a 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f 61 67 65 6e 74 2e 70 65 6e 64 6f 2e 69 6f 2f 6c 69 63 65 6e 73 65 73 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 45 77 2c 78 77 2c 43 77 29 7b 21 66 75 Data Ascii: 8000// Pendo Agent Wrapper// Copyright 2025 Pendo.io, Inc.// Environment: production// Agent Version: 2.260.1// Installed: 2025-01-13T22:12:23Z(function (PendoConfig) {/@license https://agent.pendo.io/licenses/!function(Ew,xw,Cw){!fu
2025-01-14 15:20:36 UTC	1390	IN	Data Raw: 74 72 69 6e 67 2e 63 61 6c 6c 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 29 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6f 3d 65 7c 7c 30 2c 61 3d 28 74 3c 30 3f 72 2b 74 3a 74 7c 7c 72 29 2d 28 6f 3d 30 3c 3d 6f 3f 6f 3a 72 2b 6f 29 3b 69 66 28 30 3c 61 29 69 66 28 69 3d 6e 65 77 20 41 72 72 61 79 28 61 29 2c 74 68 69 73 2e 63 68 61 72 41 74 29 66 6f 72 28 6e 3d 30 3b 6e 3c 61 3b 6e 2b 2b 29 69 5b 6e 5d 3d 74 68 69 73 2e 63 68 61 72 41 74 28 6f 2b 6e 29 3b 65 6c 73 65 20 66 6f 72 28 6e 3d 30 3b 6e 3c 61 3b 6e 2b 2b 29 69 5b 6e 5d 3d 74 68 69 73 5b 6f 2b 6e 5d 3b 72 65 74 75 72 6e 20 69 7d 7d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 7c 7c 28 53 74 72 69 6e Data Ascii: tring.call(this))return d.call(this,e,t);var n,i=[],r=this.length,o=e\|\|0,a=(t<0?r+t:t\|\|r)-(o=0<=o?o:r+o);if(0<a)if(i=new Array(a),this.charAt)for(n=0;n<a;n++)i[n]=this.charAt(o+n);else for(n=0;n<a;n++)i[n]=this[o+n];return i}}String.prototype.trim\|\|(Strin
2025-01-14 15:20:36 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6c 28 21 30 29 2e 75 70 64 61 74 65 28 65 29 5b 74 5d 28 29 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 28 22 68 65 78 22 29 3b 28 74 3d 69 3f 63 28 74 29 3a 74 29 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6c 7d 2c 74 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 72 65 61 74 65 28 29 2e 75 70 64 61 74 65 28 65 29 7d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 2b 2b 65 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 74 5b 6e 5d 3d 61 28 6e 29 7d 72 65 74 75 72 6e 20 74 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 Data Ascii: eturn function(e){return new l(!0).update(e)[t]()}},d=function(){var t=a("hex");(t=i?c(t):t).create=function(){return new l},t.update=function(e){return t.create().update(e)};for(var e=0;e<r.length;++e){var n=r[e];t[n]=a(n)}return t},c=function(t){var n=e
2025-01-14 15:20:36 UTC	1390	IN	Data Raw: 32 5d 7c 3d 28 31 39 32 7c 74 3e 3e 36 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 3a 28 74 3c 35 35 32 39 36 7c 7c 35 37 33 34 34 3c 3d 74 3f 61 5b 6e 3e 3e 32 5d 7c 3d 28 32 32 34 7c 74 3e 3e 31 32 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 3a 28 74 3d 36 35 35 33 36 2b 28 28 31 30 32 33 26 74 29 3c 3c 31 30 7c 31 30 32 33 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 72 29 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 32 34 30 7c 74 3e 3e 31 38 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 74 3e 3e 31 32 26 36 33 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 74 3e 3e 36 26 36 33 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 36 33 26 74 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 3b 74 68 Data Ascii: 2]\|=(192\|t>>6)<<u[3&n++]:(t<55296\|\|57344<=t?a[n>>2]\|=(224\|t>>12)<<u[3&n++]:(t=65536+((1023&t)<<10\|1023&e.charCodeAt(++r)),a[n>>2]\|=(240\|t>>18)<<u[3&n++],a[n>>2]\|=(128\|t>>12&63)<<u[3&n++]),a[n>>2]\|=(128\|t>>6&63)<<u[3&n++]),a[n>>2]\|=(128\|63&t)<<u[3&n++]);th
2025-01-14 15:20:36 UTC	1390	IN	Data Raw: 3d 28 6e 3d 28 65 3d 28 69 3d 28 65 3d 28 72 3d 28 65 3d 28 6f 3d 28 65 3d 74 3c 3c 35 7c 74 3e 3e 3e 32 37 29 2b 28 6e 5e 69 5e 72 29 2b 6f 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 5d 3c 3c 30 29 3c 3c 35 7c 6f 3e 3e 3e 32 37 29 2b 28 74 5e 28 6e 3d 6e 3c 3c 33 30 7c 6e 3e 3e 3e 32 29 5e 69 29 2b 72 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 31 5d 3c 3c 30 29 3c 3c 35 7c 72 3e 3e 3e 32 37 29 2b 28 6f 5e 28 74 3d 74 3c 3c 33 30 7c 74 3e 3e 3e 32 29 5e 6e 29 2b 69 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 32 5d 3c 3c 30 29 3c 3c 35 7c 69 3e 3e 3e 32 37 29 2b 28 72 5e 28 6f 3d 6f 3c 3c 33 30 7c 6f 3e 3e 3e 32 29 5e 74 29 2b 6e 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 33 5d 3c 3c 30 29 3c 3c 35 7c 6e 3e 3e 3e 32 37 29 2b 28 69 5e 28 72 Data Ascii: =(n=(e=(i=(e=(r=(e=(o=(e=t<<5\|t>>>27)+(n^i^r)+o+1859775393+a[s]<<0)<<5\|o>>>27)+(t^(n=n<<30\|n>>>2)^i)+r+1859775393+a[s+1]<<0)<<5\|r>>>27)+(o^(t=t<<30\|t>>>2)^n)+i+1859775393+a[s+2]<<0)<<5\|i>>>27)+(r^(o=o<<30\|o>>>2)^t)+n+1859775393+a[s+3]<<0)<<5\|n>>>27)+(i^(r
2025-01-14 15:20:36 UTC	1390	IN	Data Raw: 5d 2b 6f 5b 6e 3e 3e 32 34 26 31 35 5d 2b 6f 5b 6e 3e 3e 32 30 26 31 35 5d 2b 6f 5b 6e 3e 3e 31 36 26 31 35 5d 2b 6f 5b 6e 3e 3e 31 32 26 31 35 5d 2b 6f 5b 6e 3e 3e 38 26 31 35 5d 2b 6f 5b 6e 3e 3e 34 26 31 35 5d 2b 6f 5b 31 35 26 6e 5d 2b 6f 5b 69 3e 3e 32 38 26 31 35 5d 2b 6f 5b 69 3e 3e 32 34 26 31 35 5d 2b 6f 5b 69 3e 3e 32 30 26 31 35 5d 2b 6f 5b 69 3e 3e 31 36 26 31 35 5d 2b 6f 5b 69 3e 3e 31 32 26 31 35 5d 2b 6f 5b 69 3e 3e 38 26 31 35 5d 2b 6f 5b 69 3e 3e 34 26 31 35 5d 2b 6f 5b 31 35 26 69 5d 2b 6f 5b 72 3e 3e 32 38 26 31 35 5d 2b 6f 5b 72 3e 3e 32 34 26 31 35 5d 2b 6f 5b 72 3e 3e 32 30 26 31 35 5d 2b 6f 5b 72 3e 3e 31 36 26 31 35 5d 2b 6f 5b 72 3e 3e 31 32 26 31 35 5d 2b 6f 5b 72 3e 3e 38 26 31 35 5d 2b 6f 5b 72 3e 3e 34 26 31 35 5d 2b 6f 5b 31 Data Ascii: ]+o[n>>24&15]+o[n>>20&15]+o[n>>16&15]+o[n>>12&15]+o[n>>8&15]+o[n>>4&15]+o[15&n]+o[i>>28&15]+o[i>>24&15]+o[i>>20&15]+o[i>>16&15]+o[i>>12&15]+o[i>>8&15]+o[i>>4&15]+o[15&i]+o[r>>28&15]+o[r>>24&15]+o[r>>20&15]+o[r>>16&15]+o[r>>12&15]+o[r>>8&15]+o[r>>4&15]+o[1
2025-01-14 15:20:36 UTC	1390	IN	Data Raw: 72 6e 22 65 78 74 65 6e 73 69 6f 6e 22 3d 3d 3d 65 2e 69 6e 73 74 61 6c 6c 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 21 4d 28 65 29 26 26 21 4f 28 65 29 26 26 42 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 4d 28 65 29 26 26 4e 28 65 29 26 26 74 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 5b 5d 29 3b 66 6f 72 28 76 61 72 20 74 3d 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 5b 5c 77 5c 2d 2e 5d 2a 63 64 6e 5b 5c 77 5c 2d 2e 5d 2a 5c 2e 28 70 65 6e 64 6f 2d 64 65 76 5c 2e 63 6f 6d 7c 70 65 6e 64 6f 5c 2e 69 6f 29 5c 2f 61 67 65 6e 74 5c 2f 73 74 61 74 69 63 5c 2f 28 5b 5c 77 5d 7b 38 7d 2d 5b 5c 77 5d 7b 34 7d 2d 5b 5c 77 5d 7b 34 7d 2d 5b 5c 77 5d 7b Data Ascii: rn"extension"===e.installType}function F(e){return!M(e)&&!O(e)&&B(e)}function D(e,t){return!M(e)&&N(e)&&t}function U(e){void 0===e&&(e=[]);for(var t=/^https:\/\/[\w\-.]cdn[\w\-.]\.(pendo-dev\.com\|pendo\.io)\/agent\/static\/([\w]{8}-[\w]{4}-[\w]{4}-[\w]{
2025-01-14 15:20:36 UTC	1390	IN	Data Raw: 75 72 6e 20 4a 28 74 29 2c 63 65 28 65 2c 74 29 2c 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 65 2c 74 2c 6e 29 7b 69 66 28 44 28 65 2c 6e 29 29 7b 65 3d 47 28 65 2c 21 31 2c 6e 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 4a 28 74 29 2c 63 65 28 65 2c 74 29 2c 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 74 2c 6e 29 7c 7c 75 65 28 65 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 78 77 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 74 3d 28 6e 5b 22 61 73 79 6e 63 22 5d 3d 21 30 2c 6e 2e 73 72 63 3d 78 65 28 74 29 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 65 29 2c 78 77 2e Data Ascii: urn J(t),ce(e,t),!0}return!1}function ue(e,t,n){if(D(e,n)){e=G(e,!1,n);if(e)return J(t),ce(e,t),!0}return!1}function de(e,t,n){return V(e,t,n)\|\|ue(e,t,n)}function ce(e,t){var n=xw.createElement("script"),t=(n["async"]=!0,n.src=xe(t).createScriptURL(e),xw.
2025-01-14 15:20:36 UTC	1390	IN	Data Raw: 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 5d 2c 56 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 35 33 29 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 28 72 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 6e 75 6c 6c 3d 3d 6f 3f 72 2e 6c 65 6e 67 74 68 2d 31 3a 2b 6f 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 4d 61 74 68 2e 6d 61 78 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 6f 2c 30 29 2c 74 3d 41 72 72 61 79 28 65 29 2c 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 2b 6f 5d 3b 73 77 69 74 63 68 28 6f 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: "propertyIsEnumerable","hasOwnProperty","toLocaleString"],V=Math.pow(2,53)-1;function c(r,o){return o=null==o?r.length-1:+o,function(){for(var e=Math.max(arguments.length-o,0),t=Array(e),n=0;n<e;n++)t[n]=arguments[n+o];switch(o){case 0:return r.call(this,
2025-01-14 15:20:36 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 30 3c 3d 65 26 26 65 3c 3d 56 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 74 5d 7d 7d 76 61 72 20 6d 3d 63 65 28 22 62 79 74 65 4c 65 6e 67 74 68 22 29 2c 6c 65 3d 64 65 28 6d 29 2c 66 65 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 28 49 7c 55 69 29 6e 74 28 38 7c 31 36 7c 33 32 29 7c 46 6c 6f 61 74 28 33 32 7c 36 34 29 7c 55 69 6e 74 38 43 6c 61 6d 70 65 64 7c 42 69 67 28 49 7c 55 69 29 6e 74 36 34 29 41 72 72 61 79 5c 5d 2f 3b 76 61 72 20 70 65 3d 74 3f 66 75 6e 63 74 69 6f Data Ascii: return function(e){e=t(e);return"number"==typeof e&&0<=e&&e<=V}}function ce(t){return function(e){return null==e?void 0:e[t]}}var m=ce("byteLength"),le=de(m),fe=/\[object ((I\|Ui)nt(8\|16\|32)\|Float(32\|64)\|Uint8Clamped\|Big(I\|Ui)nt64)Array\]/;var pe=t?functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	49782	143.204.215.65	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	392	OUT	GET /ac-frontend/maestro/assets/zendesk-widget.js HTTP/1.1 Host: platform-cdn.app-us1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	548	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4871 Connection: close Date: Tue, 14 Jan 2025 15:20:36 GMT Last-Modified: Thu, 09 Jan 2025 18:09:36 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=0, must-revalidate Accept-Ranges: bytes Server: AmazonS3 ETag: "d585776b166fe428bbe3201bb1138a61" X-Cache: Hit from cloudfront Via: 1.1 73f3a23156999272233949c078c30858.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA53-C1 X-Amz-Cf-Id: CxSNsthe0agXNbI2p4jV-p271IPGNLlDBL0dcUFY1NuOjMnMbuHsHg== Age: 1
2025-01-14 15:20:36 UTC	3198	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 22 7a 65 2d 73 6e 69 70 70 65 74 22 2c 74 3d 22 63 61 30 62 37 34 32 30 2d 38 33 65 65 2d 34 30 64 37 2d 39 31 37 62 2d 65 35 64 34 38 62 62 34 63 61 31 36 22 2c 6e 3d 22 64 63 64 35 62 34 38 34 2d 61 62 66 36 2d 34 37 65 33 2d 61 64 61 64 2d 62 63 37 62 37 64 61 37 31 36 63 34 22 2c 61 3d 22 33 31 38 36 39 32 38 37 22 2c 6f 3d 22 69 73 43 68 61 74 4f 70 65 6e 65 64 22 2c 64 3d 7b 69 64 3a 22 63 75 73 74 6f 6d 2d 77 69 64 67 65 74 2d 62 75 62 62 6c 65 22 2c 6f 66 66 73 65 74 59 3a 22 32 30 70 78 22 2c 6f 66 66 73 65 74 58 3a 22 32 30 70 78 22 2c 65 78 61 63 74 50 61 74 74 65 72 6e 73 3a 5b 22 2f 61 64 6d 69 6e 2f 69 6e 64 65 78 2e 70 68 70 22 2c 22 2f 61 64 6d 69 6e 22 2c 22 2f 63 61 6d 70 61 69 Data Ascii: !function(){const e="ze-snippet",t="ca0b7420-83ee-40d7-917b-e5d48bb4ca16",n="dcd5b484-abf6-47e3-adad-bc7b7da716c4",a="31869287",o="isChatOpened",d={id:"custom-widget-bubble",offsetY:"20px",offsetX:"20px",exactPatterns:["/admin/index.php","/admin","/campai
2025-01-14 15:20:36 UTC	1673	IN	Data Raw: 66 6f 72 65 74 68 6f 75 67 68 74 57 69 64 67 65 74 54 72 61 63 6b 69 6e 67 45 76 65 6e 74 22 3d 3d 3d 74 26 26 22 77 69 64 67 65 74 2d 64 69 73 61 62 6c 65 64 2d 62 79 2d 6c 6f 63 61 6c 2d 73 74 6f 72 61 67 65 22 3d 3d 3d 6e 26 26 66 28 21 30 29 2c 22 66 6f 72 65 74 68 6f 75 67 68 74 57 69 64 67 65 74 43 6c 6f 73 65 64 22 3d 3d 3d 74 26 26 70 28 29 7d 2c 45 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 5b 73 72 63 2a 3d 22 7a 65 6e 64 65 73 6b 2d 77 69 64 67 65 74 2e 6a 73 22 5d 27 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 Data Ascii: forethoughtWidgetTrackingEvent"===t&&"widget-disabled-by-local-storage"===n&&f(!0),"forethoughtWidgetClosed"===t&&p()},E=()=>{const o=document.currentScript\|\|document.querySelector('script[src*="zendesk-widget.js"]');if(!o)return void console.error("Could

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	49779	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	373	OUT	GET /dh5u5fb9y_funnel.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	456	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 872 Connection: close Date: Tue, 14 Jan 2025 13:18:29 GMT Last-Modified: Thu, 02 Sep 2021 18:08:54 GMT ETag: "3a2e925fd41f6b32a435dba0b094daa7" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 58c21e16c9e093deb494fbb4de260efa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: sh7dLg3VMiHj1jVZTsMkPxwVTmVs9-jaAJrHB7yx38ZY645EWmySog== Age: 7328
2025-01-14 15:20:36 UTC	872	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 c6 50 4c 54 45 00 00 00 36 6a e6 34 6a e5 37 68 e7 35 6a e5 40 70 df 35 68 df 34 6b e7 35 6a e6 34 6a e5 34 68 e3 c9 d6 fd 30 70 df c1 d1 f7 34 69 e6 34 69 e4 c1 d2 fa 34 69 e6 c1 d1 f7 e4 eb fd e3 eb fd bf cf f4 35 65 e4 df e7 f7 33 69 e5 c1 d1 f7 36 6a e6 e4 ec fd c1 d1 f7 35 6a e5 e1 ea fb e2 e9 fb c1 d2 f6 36 6a e5 bf cf f6 d1 df f9 e3 eb fb bf cf f5 e4 ea fa e3 eb fc 34 6a e6 c0 d2 f7 c2 d0 f7 e2 e9 fb c2 d2 f8 35 6a e7 bf cf f6 e1 eb fa bf d2 f4 ff ff ff 35 6a e6 c1 d1 f7 e3 eb fc 9a b4 f2 42 73 e8 d9 e3 fb b3 c7 f5 e6 ed fc 81 a2 ef a7 be f4 b3 c7 f6 67 8f ec f2 f6 fe cc da f9 75 98 ee 4e 7c e9 50 b6 65 ca 00 00 00 31 74 52 4e 53 00 df 80 20 Data Ascii: PNGIHDR``FPLTE6j4j7h5j@p5h4k5j4j4h0p4i4i4i5e3i6j5j6j4j5j5jBsguN\|Pe1tRNS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	49781	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	374	OUT	GET /bvkaul0w_wavehand.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	458	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1796 Connection: close Date: Mon, 13 Jan 2025 18:48:29 GMT Last-Modified: Thu, 02 Sep 2021 18:08:35 GMT ETag: "208168d40490072301ffcc83606cce03" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 95e0c26862caa0a0aa5e9580919524f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: p8sx8Jno77gRLP6wWDt5LxiI0B8WgAiaNkdyJRCA3AMPXNQd8pKTAQ== Age: 73928
2025-01-14 15:20:36 UTC	1796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 d2 50 4c 54 45 00 00 00 35 6a e6 33 68 e4 34 6a e7 34 6a e6 c1 d1 f7 bf cf f6 34 70 df bf cf f7 bf cf f5 35 6a e6 34 69 e5 34 68 e3 34 6a e4 c0 d1 f7 35 69 e5 c1 d1 f7 bf cf ff c1 d1 f7 35 66 e4 34 6a e6 35 69 e6 35 6a e5 c1 d0 f7 35 6a e5 35 6a e6 c1 d1 f8 33 69 e5 bf cf f4 c1 d1 f6 34 69 e7 bf cf f6 c1 d1 f6 c2 d2 f7 c1 d0 f6 bf d1 f6 bf cf ef c1 d1 f8 34 69 e4 34 6a e6 36 68 e6 35 6a e7 bf cf fa 30 65 e4 c0 d1 f7 ff ff ff 35 6a e6 c1 d1 f7 e5 ec fd 9a b5 f3 f3 f7 fe 4e 7d e9 42 73 e8 b3 c7 f6 cc da f9 a7 be f4 5a 86 eb d9 e3 fb 8d ab f1 81 a2 ef fa fc ff ef f4 fd 74 98 ee 67 8f ec 80 a2 ef 68 8f ec eb f1 fd c0 d1 f8 42 74 e8 da e3 fb e4 55 25 0f Data Ascii: PNGIHDR``FPLTE5j3h4j4j4p5j4i4h4j5i5f4j5i5j5j5j3i4i4i4j6h5j0e5jN}BsZtghBtU%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	49780	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	371	OUT	GET /vxd0ariod_gift.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	457	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 600 Connection: close Date: Mon, 13 Jan 2025 22:06:44 GMT Last-Modified: Thu, 02 Sep 2021 18:12:34 GMT ETag: "5bb4bf932bd8470dedadc94b24f860fa" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 5ab5e654a3dc7079aad7ac64ec697d82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: K8piVx7GfdIkkanaJbGvGLSN2vj6OUrJ0FIClWugsaUiaDLJyDruWw== Age: 62033
2025-01-14 15:20:36 UTC	600	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 48 50 4c 54 45 00 00 00 34 6a e5 35 6a e6 35 6a e7 33 70 df 35 68 e2 35 6a e6 34 6a e6 34 68 e3 34 65 e4 34 69 e7 35 69 e5 30 68 e7 34 6a e6 34 6a e5 33 69 e4 35 6a e6 35 6a e7 35 69 e7 35 69 e5 35 6a e6 e3 eb fc 8c aa f1 60 8a eb a1 3c cc db 00 00 00 14 74 52 4e 53 00 80 df bf 10 20 ef cf 40 30 70 60 20 ef 90 50 9f 7f af a0 81 f8 f9 cf 00 00 01 ab 49 44 41 54 68 de ec 96 cb 8e 9c 30 10 45 cb 6f 1b 02 74 d3 27 f3 ff 9f 9a 01 b7 8c b0 66 d1 b2 43 b2 e1 2c af c4 bd e5 aa b2 85 fc 7f e2 1c a6 c9 8c ee ac 2e 66 62 5a a3 74 f3 cb 90 d1 cb 4f ea c3 49 1f c3 44 e1 79 f8 eb 22 ea 24 3d 3c f7 2a a3 d8 71 b3 1c 0f 7f bc b2 e2 14 e0 53 a7 7f c8 4d b0 01 bc cb Data Ascii: PNGIHDR``FHPLTE4j5j5j3p5h5j4j4h4e4i5i0h4j4j3i5j5j5i5i5j`<tRNS @0p` PIDATh0Eot'fC,.fbZtOIDy"$=<*qSM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	49778	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	383	OUT	GET /ckke9g3gf_browserwindowapp.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	457	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 370 Connection: close Date: Mon, 13 Jan 2025 22:21:17 GMT Last-Modified: Thu, 02 Sep 2021 18:08:43 GMT ETag: "fe8aa2bb56bdbf2fcc808f8fd32eb5a8" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 47a7b8b932d91b0edbfc42f1ba94ebc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: TOpDKwI1qcpj4X3sOkok3xFkzzkdWMR7sX99hat1ecFWF1-BkKZzvQ== Age: 61160
2025-01-14 15:20:36 UTC	370	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 45 50 4c 54 45 00 00 00 34 6a e5 34 6a e6 34 69 e6 35 6a e6 34 69 e6 35 65 e4 3a 6b e5 ff ff ff c1 d1 f7 35 6a e6 e3 eb fc e0 e8 fb 58 84 ea 9a b4 f2 ab c1 f4 a2 bb f4 a1 bb f3 ef f3 fd cd db f9 4b 7a e9 d5 e0 fa 8c aa f1 93 40 5e 85 00 00 00 08 74 52 4e 53 00 80 ef c7 8f 70 30 18 ae 37 45 57 00 00 00 d4 49 44 41 54 68 de ed d8 cb 0e 82 30 10 85 e1 52 b9 c8 b4 4a cb c5 f7 7f 54 03 69 e2 46 c8 68 38 48 cd f9 57 b3 fb 92 32 40 52 c3 18 3b a8 c2 0a 20 5b 9a 54 29 a0 8a 04 58 01 65 13 20 22 0e 90 88 10 f8 14 08 c1 b9 e1 31 cc 03 04 08 22 c1 8d 32 2e 03 02 88 22 71 06 96 01 01 b8 18 d3 11 c5 98 e9 43 26 b0 0e 60 fa 33 e0 0a 88 00 01 4d ed db fc 06 30 75 Data Ascii: PNGIHDR``FEPLTE4j4j4i5j4i5e:k5jXKz@^tRNSp07EWIDATh0RJTiFh8HW2@R; [T)Xe "1"2."qC&`3M0u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	49777	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	372	OUT	GET /jhynp592_idcard.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	456	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 675 Connection: close Date: Tue, 14 Jan 2025 13:18:29 GMT Last-Modified: Thu, 02 Sep 2021 18:10:06 GMT ETag: "5b8ccf123779cf06a364a3124bbea0b3" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6165dcc1fdf84ac65e8204c05709f1ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: IinTdKjjMMAT0lyuFQCoLTXkh3osf1dytryUAqAsPMjw0URowIklcA== Age: 7328
2025-01-14 15:20:36 UTC	675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 96 50 4c 54 45 00 00 00 35 6a e6 e4 ea fd e4 ea fc e3 eb fd 34 6b e6 e3 eb fc e2 eb fb e2 ea fc 35 69 e4 df e7 f7 df e7 ff 30 70 df 35 6b e7 35 69 e6 36 6a e5 36 6a e7 30 68 e7 30 68 df ff ff ff 35 6a e6 c1 d1 f7 e3 eb fc 92 af f1 e0 e8 fb c8 d7 f8 f2 f6 fe 9a b5 f3 4e 7d e9 b3 c7 f6 67 8f ec fa fc ff 5b 86 eb e5 ec fc a5 bd f4 42 73 e8 c5 d4 f7 a8 bf f4 d2 de fa e7 ee fd c1 d2 f7 ae c4 f5 a0 b9 f3 95 b1 f1 8c ab f0 86 a6 f0 f3 f7 fe f3 f6 fe bb cc f6 6f 95 ed 25 22 17 6e 00 00 00 13 74 52 4e 53 00 df df df cf cf bf 80 60 60 20 10 10 bf bf 80 7f 20 20 5d 20 11 06 00 00 01 a9 49 44 41 54 68 de ed d8 d7 6e dc 30 10 85 e1 71 dc 4b 2a 0f 39 14 a9 b6 d5 Data Ascii: PNGIHDR``FPLTE5j4k5i0p5k5i6j6j0h0h5jN}g[Bso%"ntRNS`` ] IDAThn0qK*9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	49776	65.9.7.19	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	380	OUT	GET /gpcxgatc_buttonctaclick.png HTTP/1.1 Host: d226aj4ao1t61q.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	457	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 786 Connection: close Date: Tue, 14 Jan 2025 07:19:57 GMT Last-Modified: Thu, 02 Sep 2021 18:09:28 GMT ETag: "7e33aa8c72fc5b80f81df51e4f3f400b" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6def1f0ddc805dce17407cce01d5b32c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: 1RSzQVgc2-88n51xrDooIr6iuAWLPYptpNIuwMTovMg8UR-mifz73Q== Age: 28840
2025-01-14 15:20:36 UTC	786	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 ab 50 4c 54 45 00 00 00 c1 d1 f7 34 6a e5 ff ff ff bf cf f4 bf cf f7 c1 d1 f7 c1 d1 f7 ff ff ff ff ff ff 34 68 e3 35 6a e6 ff ff ff 35 6a e6 ff ff ff bf cf f7 bf cf f3 34 6a e6 35 6a e6 c1 d1 f6 ff ff ff ff ff ff 35 69 e5 ff ff ff 35 69 e4 33 69 e5 34 68 e3 ff ff ff 30 70 df 85 a5 f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 eb fc 35 6a e6 ff ff ff 8c aa f1 c1 d1 f7 e7 ee fd cc da f9 4e 7d e9 f2 f6 fe 81 a2 f0 b7 cb f7 b1 c6 f6 fb fc ff 9a b4 f3 f6 f9 fe d8 e3 fb 56 82 ea ed f2 fd 4d 7b e9 42 73 e8 3f 72 e8 74 98 ee 30 59 25 56 00 00 00 23 74 52 4e 53 00 80 80 40 30 20 ef df 1f ef 40 ef df 9f 50 40 40 ef df cf bf 80 70 60 60 50 20 10 10 ef cf Data Ascii: PNGIHDR``FPLTE4j4h5j5j4j5j5i5i3i4h0p5jN}VM{Bs?rt0Y%V#tRNS@0 @P@@p``P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	49785	216.198.53.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	620	OUT	GET /compose/dcd5b484-abf6-47e3-adad-bc7b7da716c4 HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yourexcellency.activehosted.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	1312	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:36 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-expose-headers: access-control-max-age: 7200 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"bbdcf1bd76250df99c30cae03f7f5af7" x-request-id: 901dcb207902ef2d-SEA X-Request-ID: 901dcb207902ef2d-SEA X-Request-ID: 901dcb207902ef2d-SEA x-runtime: 0.004606 X-Zendesk-Zorg: yes X-Zendesk-Zorg: yes CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MR8ocPM6ZoTwQkxjl0n2g9Uzkqe4%2FozYV0Dq3kME71oXHbm2SX%2BQg1eBG1AyK%2FDOjczchkxZl3%2FuT%2B3HaHcRykYcjnfJcYmWGMBFnwXaI5s%2B1OennODcTWrnyiKQyp6PDiI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 901e9c6ded685e6d-EWR
2025-01-14 15:20:36 UTC	57	IN	Data Raw: 35 31 34 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 70 72 6f 64 68 6f 73 74 65 64 74 65 Data Ascii: 514{"products":[{"name":"web_widget","id":"prodhostedte
2025-01-14 15:20:36 UTC	1250	IN	Data Raw: 73 74 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 6d 75 6c 74 69 43 6f 6e 76 6f 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 2c 22 70 72 69 76 61 74 65 41 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 54 69 63 6b 65 74 4d 65 74 61 64 61 74 61 22 3a 74 72 75 65 7d 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 7b 22 63 61 6e 55 73 65 72 43 72 65 61 74 65 4d 6f 72 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 63 6f 6c 6f 72 22 3a 7b 22 6d 65 73 73 61 67 65 22 3a 22 23 30 30 33 36 33 64 22 2c 22 61 63 74 69 6f 6e 22 3a 22 23 30 30 30 63 Data Ascii: st.zendesk.com","bootstrap":{"config":{"features":{"multiConvoEnabled":true,"fastLoad":true,"privateAttachmentsEnabled":true,"conversationTicketMetadata":true},"messenger":{"canUserCreateMoreConversations":true,"color":{"message":"#00363d","action":"#000c
2025-01-14 15:20:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	49786	216.198.53.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	398	OUT	GET /ekr/snippet.js?key=dcd5b484-abf6-47e3-adad-bc7b7da716c4 HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	1150	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:36 GMT Content-Type: application/javascript Content-Length: 10215 Connection: close x-amz-id-2: uDt3fpl82DY/3a3+XqGYXOLHbVAFEMaOB+CHfwPWuQu20jLNRel1hS/wj8ZM/VgmWSps4csmI54bd5VYVAuXUlNJxJCvGA8O x-amz-request-id: YERV0SK9T118Q2MY x-amz-replication-status: COMPLETED Last-Modified: Mon, 04 Nov 2024 09:45:04 GMT ETag: "c88d625098ddb649cf216dba2e52435c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600, s-maxage=60 x-amz-version-id: C4qpYKgeT8.DeRlre_wbz3El4DCj0uok CF-Cache-Status: HIT Age: 45 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nAvlzhN7aC3a200OCNNlJk5TQaC8BBba5Puj25%2Fbw9mlynFRkA9wO7vq6jSoB9JfHAz1HvGTLfK8FbkZIozd0UT92kze7tgSagSY5TbC6Qz%2FYbhNaJ%2B3BqE8iBlfNbbp1xliZTM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c6e2c0d41a3-EWR
2025-01-14 15:20:36 UTC	219	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 37 31 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2c 74 2e 73 65 61 72 63 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 53 74 72 69 6e 67 3a 74 2c 70 61 72 73 65 55 72 6c 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 72 3f 7b 7d 3a 72 2e 73 70 6c 69 74 28 22 26 22 Data Ascii: (()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&"
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 5b 72 5b 30 5d 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 29 2c 65 7d 29 2c 7b 7d 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 22 53 63 72 69 70 74 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 22 29 29 7d 2c 72 Data Ascii: ).reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 3b 62 72 65 61 6b 7d 7d 61 7c 7c 28 63 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 74 2b 6f 29 2c 61 2e 73 72 63 3d 72 29 2c 65 5b 72 5d 3d 5b 6e 5d 3b 76 61 72 20 6c 3d 28 74 2c 6e 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 3b 76 61 72 20 73 3d 65 5b 72 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 72 5d 2c 61 2e 70 Data Ascii: ;break}}a\|\|(c=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",t+o),a.src=r),e[r]=[n];var l=(t,n)=>{a.onerror=a.onload=null,clearTimeout(h);var s=e[r];if(delete e[r],a.p
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 5d 3b 72 2e 66 6f 72 45 61 63 68 28 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 22 22 2c 74 3d 7b 7d 2c 72 3d 21 31 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 3d 45 72 72 6f 72 28 74 68 69 73 2e 6d 65 73 73 61 67 65 29 2c 74 68 69 73 2e 69 73 55 73 65 72 45 72 72 6f 72 3d 72 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 7d 63 6f 6e 73 74 20 74 3d 7b 7d 2c 72 3d 7b 7d 2c 6e 3d 7b 7d 3b 63 6c 61 Data Ascii: ];r.forEach(t.bind(null,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";class e{constructor(e="",t={},r=!1){this.message=e,this.props=t,this.error=Error(this.message),this.isUserError=r,this.fingerprint=this.message}}const t={},r={},n={};cla
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 61 62 6c 65 22 29 29 7d 29 29 7d 29 29 7d 63 72 65 61 74 65 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 52 65 61 64 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 73 65 74 2e 70 72 6f 64 75 63 74 3d 74 68 69 73 2e 6e 61 6d 65 2c 65 2e 74 69 74 6c 65 3d 22 4e 6f 20 63 6f 6e 74 65 6e 74 22 2c 65 2e 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 61 6c 6c 6f 77 3d 22 6d 69 63 72 6f 70 68 6f 6e 65 20 2a 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 Data Ascii: able"))}))}))}createIframeElement(){return this.parentDocumentReady().then((()=>{const e=this.doc.createElement("iframe");return e.dataset.product=this.name,e.title="No content",e.role="presentation",e.tabIndex=-1,e.allow="microphone *",e.setAttribute("ar
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 3b 63 6c 61 73 73 20 75 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 28 65 29 2c 74 68 69 73 2e 62 61 73 65 55 72 6c 3d 60 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 63 6f 6d 70 6f 73 65 2f 24 7b 74 7d 60 2c 74 68 69 73 2e 73 6e 69 70 70 65 74 4b 65 79 3d 74 7d 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 73 65 55 72 6c 28 65 3d 21 31 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 61 73 65 55 72 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 26 26 28 74 2b 3d 60 3f 24 7b 74 68 69 73 2e 67 65 74 53 65 72 69 61 6c 69 7a 65 64 56 65 72 73 69 6f 6e 51 75 65 72 79 50 61 72 61 6d 28 29 7d 60 2c 74 68 69 73 2e 64 69 73 70 6c 61 79 57 61 Data Ascii: ;class u{constructor(e,t){this.version=this.getVersion(e),this.baseUrl=`https://ekr.zdassets.com/compose/${t}`,this.snippetKey=t}resolveComposeUrl(e=!1){let t=this.baseUrl;return this.version&&(t+=`?${this.getSerializedVersionQueryParam()}`,this.displayWa
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 3d 3d 3d 65 2e 6e 61 6d 65 3f 6e 65 77 20 63 28 65 2e 69 64 2c 74 29 3a 6e 65 77 20 69 28 65 2c 74 29 29 29 7d 65 72 72 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 22 63 6f 6d 70 6f 73 65 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 7b 6b 65 79 3a 74 7d 29 7d 7d 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 77 69 6e 3d 65 2c 74 68 69 73 2e 64 6f 63 3d 65 2e 64 6f 63 75 6d 65 6e 74 7d 67 65 74 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 72 29 3d 3e 72 28 6e 65 77 20 65 28 22 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 73 6e 69 70 70 65 74 22 2c 7b 7d 2c 21 30 29 29 29 29 7d 67 65 74 5a 45 51 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: ===e.name?new c(e.id,t):new i(e,t)))}error(t){return new e("compose request failed",{key:t})}}class l{constructor(e){this.win=e,this.doc=e.document}getKey(){return new Promise(((t,r)=>r(new e("Key is missing from snippet",{},!0))))}getZEQueue(){return nul
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 69 6e 67 29 28 67 2e 67 65 74 53 63 72 69 70 74 53 72 63 28 74 68 69 73 2e 77 69 6e 29 29 7d 60 29 29 29 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 69 70 74 53 72 63 28 65 29 7b 69 66 28 65 2e 24 7a 6f 70 69 6d 26 26 65 2e 24 7a 6f 70 69 6d 2e 73 29 72 65 74 75 72 6e 20 65 2e 24 7a 6f 70 69 6d 2e 73 2e 73 72 63 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 2f 2e 2a 7a 6f 70 69 6d 2e 28 63 6f 6d 7c 6e 65 74 7c 6f 72 67 29 5c 2f 2f 3b 6c 65 74 20 6e 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 73 3b 65 2b 2b 29 69 66 28 6e 3d 74 5b 65 5d 2e 73 72 63 7c 7c 22 22 2c 72 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 7d Data Ascii: ing)(g.getScriptSrc(this.win))}`)))}static getScriptSrc(e){if(e.$zopim&&e.$zopim.s)return e.$zopim.s.src;const t=document.getElementsByTagName("script"),r=/.*zopim.(com\|net\|org)\//;let n;for(let e=0,s=t.length;e<s;e++)if(n=t[e].src\|\|"",r.test(n))return n}
2025-01-14 15:20:36 UTC	413	IN	Data Raw: 77 28 29 2c 74 7d 28 29 3b 77 69 6e 64 6f 77 2e 7a 45 3d 65 2c 77 69 6e 64 6f 77 2e 7a 45 6d 62 65 64 3d 65 7d 69 66 28 77 69 6e 64 6f 77 2e 7a 45 41 43 4c 6f 61 64 65 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 6d 28 65 29 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 65 6e 64 65 73 6b 48 6f 73 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 45 51 75 65 75 65 3f 6e 65 77 20 68 28 65 29 3a 67 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 67 28 65 29 3a 6e 65 77 20 6d 28 65 29 7d 28 77 69 6e 64 6f 77 29 2c 74 3d 6e 65 77 20 70 28 65 29 2c 72 3d 21 31 3b 65 2e 67 65 74 4b 65 79 28 29 2e 74 68 65 6e Data Ascii: w(),t}();window.zE=e,window.zEmbed=e}if(window.zEACLoaded)return;const e=function(e){return m.isSnippetPresent(e)?new m(e):e.document.zendeskHost&&e.document.zEQueue?new h(e):g.isSnippetPresent(e)?new g(e):new m(e)}(window),t=new p(e),r=!1;e.getKey().then

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	49787	188.114.96.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:36 UTC	550	OUT	GET /embed.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:36 UTC	984	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:36 GMT Content-Type: application/javascript Content-Length: 43760 Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache ETag: "c75041def02eb73f83ad86da82a94d67" access-control-allow-methods: GET referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eXzMf98cV5DSvZaDEivadRvTj0knTnnZ0ucTgrRzSq3wXn1Q8gqTKLsLMzr4sgSLtKN3DZicLZWXFBUFtzYrZrusiE%2Bj1jNGEuBTL2IBlW0k8d8B3lRMY1x6I6jJGDnmEJGbwMlmjklx4ZxbziU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c6e5b9b20d7-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=13109&min_rtt=8591&rtt_var=6449&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1128&delivery_rate=339890&cwnd=32&unsent_bytes=0&cid=c5856851d734a0d9&ts=194&x=0"
2025-01-14 15:20:36 UTC	385	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 74 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 74 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 74 5d 3d 22 34 33 37 31 32 36 30 36 2d 64 35 35 36 2d 34 61 37 65 2d 61 62 36 64 2d 34 33 30 63 30 38 36 34 30 34 65 37 22 2c 65 2e 5f 73 65 6e Data Ascii: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="43712606-d556-4a7e-ab6d-430c086404e7",e._sen
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 36 33 33 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 74 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 35 33 29 2d 31 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: dow:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{var e={3633:e=>{e.exports=function(){var e=function(e){return"function"===typeof e},t=Math.pow(2,53)-1,n=function(e)
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 66 72 6f 6d 20 72 65 71 75 69 72 65 73 20 61 6e 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 20 2d 20 6e 6f 74 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 76 61 72 20 67 2c 68 3d 6e 28 6d 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 61 3d 65 28 73 29 3f 4f 62 6a 65 63 74 28 6e 65 77 20 73 28 68 29 29 3a 6e 65 77 20 41 72 72 61 79 28 68 29 2c 72 3d 30 3b 72 3c 68 3b 29 67 3d 6d 5b 72 5d 2c 61 5b 72 5d 3d 64 3f 64 2e 63 61 6c 6c 28 6f 2c 67 2c 72 29 3a 67 2c 72 2b 2b 3b 61 2e 6c 65 6e 67 74 68 3d 68 7d 72 65 74 75 72 6e 20 61 7d 7d 28 29 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 76 61 72 20 6f 3d 74 5b 69 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 Data Ascii: ypeError("Array.from requires an array-like object - not null or undefined");var g,h=n(m.length);for(a=e(s)?Object(new s(h)):new Array(h),r=0;r<h;)g=m[r],a[r]=d?d.call(o,g,r):g,r++;a.length=h}return a}}()}},t={};function n(i){var o=t[i];if(void 0!==o)retu
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 22 29 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 5b 67 28 29 5d 3a 77 2c 5b 68 28 29 5d 3a 22 22 2c 5b 66 5d 3a 6d 2c 5b 76 5d 3a 22 22 2c 77 65 62 6b 69 74 4d 61 73 6b 49 6d 61 67 65 3a 22 2d 77 65 62 6b 69 74 2d 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 77 68 69 74 65 2c 20 62 6c 61 63 6b 29 22 2c 77 69 64 74 68 3a 22 30 22 2c 7a 49 6e 64 65 78 3a 22 39 39 39 39 39 39 22 2c 2e 2e 2e 22 66 6c 6f 61 74 69 6e 67 5f 62 61 72 22 3d 3d 3d 69 2e 6c 61 75 6e 63 68 53 74 79 6c 65 3f 7b 6c 65 66 74 3a 22 30 22 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 22 61 75 74 6f 22 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 22 61 75 74 6f 22 2c 72 69 67 68 74 3a 22 30 22 7d 3a 7b 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e Data Ascii: "),overflow:"hidden",position:"fixed",[g()]:w,[h()]:"",[f]:m,[v]:"",webkitMaskImage:"-webkit-radial-gradient(white, black)",width:"0",zIndex:"999999",..."floating_bar"===i.launchStyle?{left:"0",marginLeft:"auto",marginRight:"auto",right:"0"}:{}});function
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 65 74 54 69 6d 65 6f 75 74 28 74 2c 65 29 29 29 3b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 30 3b 63 6f 6e 73 74 20 6e 3d 65 28 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 74 3e 34 3f 6e 75 6c 6c 3a 28 61 77 61 69 74 20 5f 28 32 2a 2a 74 2a 36 30 30 29 2c 41 28 65 2c 74 2b 31 29 29 29 7d 63 6f 6e 73 74 20 6b 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 22 2e 63 6f 6e 63 61 74 28 34 38 30 2c 22 70 78 29 22 29 29 2c 7a 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 68 65 69 67 68 74 3a Data Ascii: etTimeout(t,e)));async function A(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;const n=e();return n\|\|(t>4?null:(await _(2*t600),A(e,t+1)))}const k=window.matchMedia("(max-width: ".concat(480,"px)")),z=window.matchMedia("(max-height:
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 6e 63 65 3d 71 29 2c 74 7d 63 6f 6e 73 74 20 73 3d 72 28 22 66 74 2d 73 61 6c 65 73 66 6f 72 63 65 2d 73 74 79 6c 65 22 29 2c 64 3d 28 29 3d 3e 7b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 2c 63 3d 28 29 3d 3e 7b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 2e 65 6d 62 65 64 64 65 64 53 65 72 76 69 63 65 48 65 6c 70 42 75 74 74 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 2c 6c 3d 28 29 3d 3e 7b 6c 65 74 20 65 3d 21 30 2c 74 3d 30 3b 63 6f 6e 73 74 20 6e 3d 28 29 3d 3e 7b 69 66 28 65 26 26 74 3c 3d 31 30 29 7b 65 3d 21 31 3b 63 6f 6e 73 74 20 69 3d 49 2e 67 65 74 45 6c 65 6d Data Ascii: nce=q),t}const s=r("ft-salesforce-style"),d=()=>{s.innerHTML="",I.body.appendChild(s)},c=()=>{s.innerHTML=".embeddedServiceHelpButton { display: none !important;}",I.body.appendChild(s)},l=()=>{let e=!0,t=0;const n=()=>{if(e&&t<=10){e=!1;const i=I.getElem
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 7d 5c 6e 20 20 20 20 20 20 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 42 75 74 74 6f 6e 20 74 6f 20 6c 61 75 6e 63 68 20 6d 65 73 73 61 67 69 6e 67 20 77 69 6e 64 6f 77 22 5d 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 5c 6e 20 20 20 20 20 20 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 42 75 74 74 6f 6e 20 74 6f 20 6c 61 75 6e 63 68 20 6d 65 73 73 61 67 69 6e 67 20 77 69 6e 64 6f 77 2c 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 69 6e 20 70 72 6f 67 72 65 73 73 22 5d 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 5c 6e 20 20 20 20 20 20 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 4d 65 73 73 61 67 65 20 66 72 6f 6d 20 63 6f 6d 70 61 6e 79 22 5d 20 Data Ascii: mportant;}\n iframe[title="Button to launch messaging window"] { display: block !important;}\n iframe[title="Button to launch messaging window, conversation in progress"] { display: block !important;}\n iframe[title="Message from company"]
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 4c 3d 22 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2c 72 26 26 6f 3f 28 77 69 6e 64 6f 77 2e 49 6e 74 65 72 63 6f 6d 28 22 73 68 6f 77 53 70 61 63 65 22 2c 22 6d 65 73 73 61 67 65 73 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 49 6e 74 65 72 63 6f 6d 28 22 73 68 6f 77 4e 65 77 4d 65 73 73 61 67 65 22 2c 72 29 7d 29 2c 31 29 2c 74 26 26 74 2e 73 68 6f 75 6c 64 5f 61 75 74 6f 5f 73 65 6e 64 5f 6d 65 73 73 61 67 65 26 26 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 49 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 69 6e 74 65 72 63 6f 6d 2d 6d 65 73 73 65 6e 67 65 72 2d 66 72 61 6d 65 22 5d 27 29 3b 69 66 28 65 29 7b 76 61 72 Data Ascii: L="",I.body.appendChild(b),r&&o?(window.Intercom("showSpace","messages"),setTimeout((()=>{window.Intercom("showNewMessage",r)}),1),t&&t.should_auto_send_message&&setTimeout((()=>{const e=I.querySelector('iframe[name="intercom-messenger-frame"]');if(e){var
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 6c 62 61 63 6b 28 22 43 68 61 74 4d 65 73 73 61 67 65 52 65 63 65 69 76 65 64 22 2c 22 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 35 65 33 29 7d 7d 2c 69 3d 6e 75 6c 6c 3d 3d 3d 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 62 6f 74 5f 61 6c 69 61 73 5f 6c 69 73 74 3b 69 26 26 65 26 26 21 69 2e 69 6e 63 6c 75 64 65 73 28 65 29 26 26 28 6e 28 29 2c 77 69 6e 64 6f 77 2e 53 6e 61 70 45 6e 67 61 67 65 2e 73 65 74 43 61 6c 6c 62 61 63 6b 28 22 43 68 61 74 4d 65 73 73 61 67 65 52 65 63 65 69 76 65 64 22 2c 22 22 29 29 7d 29 29 7d 77 69 6e 64 6f 77 2e 53 6e 61 70 45 6e 67 61 67 65 26 26 77 69 6e 64 6f 77 2e 53 6e 61 70 45 6e 67 61 67 65 2e 73 65 74 43 61 6c 6c 62 61 63 6b 28 22 43 6c 6f 73 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: lback("ChatMessageReceived",""),setTimeout(n,5e3)}},i=null===t\|\|void 0===t?void 0:t.bot_alias_list;i&&e&&!i.includes(e)&&(n(),window.SnapEngage.setCallback("ChatMessageReceived",""))}))}window.SnapEngage&&window.SnapEngage.setCallback("Close",(function(){
2025-01-14 15:20:36 UTC	1369	IN	Data Raw: 6e 65 72 48 54 4d 4c 3d 22 23 67 6f 72 67 69 61 73 2d 63 68 61 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 48 29 2c 77 69 6e 64 6f 77 2e 47 6f 72 67 69 61 73 43 68 61 74 2e 68 69 64 65 43 68 61 74 28 21 31 29 2c 77 69 6e 64 6f 77 2e 47 6f 72 67 69 61 73 43 68 61 74 2e 6f 70 65 6e 28 29 2c 74 26 26 77 69 6e 64 6f 77 2e 47 6f 72 67 69 61 73 43 68 61 74 2e 73 65 6e 64 4d 65 73 73 61 67 65 28 6e 29 7d 2c 55 3d 72 28 22 66 74 2d 66 72 65 73 68 63 68 61 74 2d 73 74 79 6c 65 22 29 2c 56 3d 65 3d 3e 7b 6c 65 74 7b 63 6f 6e 76 65 72 73 61 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 3a 74 2c 65 6d 61 69 6c 3a 6e 2c 66 69 72 73 74 Data Ascii: nerHTML="#gorgias-chat-container {display: block !important;}",I.body.appendChild(H),window.GorgiasChat.hideChat(!1),window.GorgiasChat.open(),t&&window.GorgiasChat.sendMessage(n)},U=r("ft-freshchat-style"),V=e=>{let{conversationProperties:t,email:n,first

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	49790	216.198.54.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:37 UTC	537	OUT	GET /web_widget/messenger/latest/web-widget-main-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:37 UTC	1180	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:37 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 458718 Connection: close x-amz-id-2: N6avGMZg1n3iZNTaMqYUC4WuEXz8+iWdvxnxxQc5Fau+0JJ/AcMkVqfzjojgy+mGEJKJmJxJo+k= x-amz-request-id: YR1K0EKGDN9KMJ5X x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:15 GMT ETag: "3a75d4e1e7a171202302f5f4ca53f5f3" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:14 GMT x-amz-version-id: EjnlyC8wstVofsLUPKXcoT743XHEl2XZ CF-Cache-Status: HIT Age: 22555 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ELqae7PkBiyjYR7Tvp%2BCmPw0irXlmTb%2BkRK1hnGrxrUfGqD9f1hEJKbToc0IAubo0kEoVVWcgB3Iq8xKrxG9QPvk8KPqHz4EYXz%2FWOsWM06qhzfFpsTlM2cjMF0dAy18nlSpKOk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7279c51839-EWR
2025-01-14 15:20:37 UTC	189	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d 77 69 64 67 65 74 2d 73 64 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sd
2025-01-14 15:20:37 UTC	1369	IN	Data Raw: 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 32 36 34 33 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 43 69 3a 28 29 3d 3e 67 2c 44 39 3a 28 29 3d 3e 72 2e 44 39 2c 45 7a 3a 28 29 3d 3e 70 2c 47 31 3a 28 29 3d 3e 61 2c 4b 72 3a 28 29 3d 3e 63 2c 4e 48 3a 28 29 3d 3e 5f 2c 52 44 3a 28 29 3d 3e 64 2c 52 6a 3a 28 29 3d 3e 62 2c 55 74 3a 28 29 3d 3e 76 2c 5a 59 3a 28 29 3d 3e 79 2c 5f 6b 3a 28 29 3d 3e 69 2c 61 66 3a 28 29 3d 3e 6a 2c 61 7a 3a 28 29 3d 3e 73 2c 63 4b 3a 28 29 3d 3e 53 2c 67 6f 3a 28 29 3d 3e 78 2c 70 4a 3a 28 29 3d 3e 6c 2c 70 4b 3a 28 29 3d 3e 6f 2c 72 4e Data Ascii: ks/web-widget/getting-started/legal/ */(()=>{var e,t,n,r,o={26436:(e,t,n)=>{"use strict";n.d(t,{Ci:()=>g,D9:()=>r.D9,Ez:()=>p,G1:()=>a,Kr:()=>c,NH:()=>_,RD:()=>d,Rj:()=>b,Ut:()=>v,ZY:()=>y,_k:()=>i,af:()=>j,az:()=>s,cK:()=>S,go:()=>x,pJ:()=>l,pK:()=>o,rN
2025-01-14 15:20:37 UTC	1369	IN	Data Raw: 6e 73 74 20 73 3d 28 30 2c 72 2e 5a 30 29 28 7b 6e 61 6d 65 3a 22 61 74 74 61 63 68 6d 65 6e 74 73 22 2c 69 6e 69 74 69 61 6c 53 74 61 74 65 3a 7b 69 73 45 6e 61 62 6c 65 64 3a 21 30 7d 2c 72 65 64 75 63 65 72 3a 7b 7d 2c 65 78 74 72 61 52 65 64 75 63 65 72 73 3a 7b 5b 6f 2e 6c 79 5d 28 65 2c 74 29 7b 21 31 3d 3d 3d 74 2e 70 61 79 6c 6f 61 64 3f 2e 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 26 26 28 65 2e 69 73 45 6e 61 62 6c 65 64 3d 21 31 29 7d 7d 7d 29 2c 69 3d 65 3d 3e 65 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 69 73 45 6e 61 62 6c 65 64 2c 61 3d 73 2e 72 65 64 75 63 65 72 7d 2c 37 32 32 37 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 61 2c 4f 3a 28 29 3d 3e 69 7d 29 3b 76 Data Ascii: nst s=(0,r.Z0)({name:"attachments",initialState:{isEnabled:!0},reducer:{},extraReducers:{[o.ly](e,t){!1===t.payload?.attachmentsEnabled&&(e.isEnabled=!1)}}}),i=e=>e.attachments.isEnabled,a=s.reducer},72275:(e,t,n)=>{"use strict";n.d(t,{A:()=>a,O:()=>i});v
2025-01-14 15:20:37 UTC	1369	IN	Data Raw: 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 72 7d 29 3b 63 6f 6e 73 74 20 72 3d 65 3d 3e 6e 28 36 33 34 31 38 29 28 60 2e 2f 24 7b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2e 6a 73 6f 6e 60 29 2e 63 61 74 63 68 28 28 28 29 3d 3e 7b 7d 29 29 7d 2c 33 35 37 31 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 22 65 6e 2d 75 73 22 3a 31 2c 65 73 3a 32 2c 64 65 3a 38 2c 22 7a 68 2d 74 77 22 3a 39 2c 22 7a 68 2d 63 6e 22 3a 31 30 2c 70 6c 3a 31 33 2c 66 72 3a 31 36 2c 22 70 74 2d 62 72 22 3a 31 39 2c 69 74 3a 32 32 2c 72 6f 3a 32 33 2c 69 73 3a 32 34 2c 76 69 3a 32 36 2c 72 75 3a 32 37 2c 68 65 3a 33 30 2c 6e 6f 3a 33 34 2c 66 69 6c 3a 34 37 2c 61 72 3a 36 36 2c 6a 61 3a 36 37 2c 6b 6f 3a 36 39 2c 73 6c 3a 37 32 2c 68 72 3a 37 34 2c 69 64 3a 37 37 2c 63 73 Data Ascii: n.d(t,{A:()=>r});const r=e=>n(63418)(`./${e.toLowerCase()}.json`).catch((()=>{}))},35714:e=>{e.exports={"en-us":1,es:2,de:8,"zh-tw":9,"zh-cn":10,pl:13,fr:16,"pt-br":19,it:22,ro:23,is:24,vi:26,ru:27,he:30,no:34,fil:47,ar:66,ja:67,ko:69,sl:72,hr:74,id:77,cs
2025-01-14 15:20:37 UTC	1369	IN	Data Raw: 2c 6e 62 3a 31 34 31 36 2c 22 65 6e 2d 69 74 22 3a 31 34 31 37 2c 22 65 6e 2d 6c 75 22 3a 31 34 31 38 2c 22 65 6e 2d 6e 6c 22 3a 31 34 31 39 2c 22 65 6e 2d 6e 6f 22 3a 31 34 32 30 2c 22 66 72 2d 6c 75 22 3a 31 34 32 31 2c 22 65 6e 2d 6d 78 22 3a 31 34 32 32 2c 22 65 6e 2d 74 68 22 3a 31 34 32 33 2c 69 6b 74 3a 31 34 32 34 2c 69 75 3a 31 34 32 35 2c 22 65 73 2d 62 6f 22 3a 31 34 32 36 2c 22 65 73 2d 63 72 22 3a 31 34 32 37 2c 22 65 73 2d 65 63 22 3a 31 34 32 38 2c 22 61 66 2d 7a 61 22 3a 31 34 32 39 2c 22 61 72 2d 70 73 22 3a 31 34 33 30 2c 22 61 73 2d 69 6e 22 3a 31 34 33 31 2c 22 61 79 2d 62 6f 22 3a 31 34 33 32 2c 22 62 67 2d 62 67 22 3a 31 34 33 33 2c 22 62 6e 2d 69 6e 22 3a 31 34 33 34 2c 22 63 61 2d 65 73 22 3a 31 34 33 35 2c 22 63 73 2d 63 7a 22 3a Data Ascii: ,nb:1416,"en-it":1417,"en-lu":1418,"en-nl":1419,"en-no":1420,"fr-lu":1421,"en-mx":1422,"en-th":1423,ikt:1424,iu:1425,"es-bo":1426,"es-cr":1427,"es-ec":1428,"af-za":1429,"ar-ps":1430,"as-in":1431,"ay-bo":1432,"bg-bg":1433,"bn-in":1434,"ca-es":1435,"cs-cz":
2025-01-14 15:20:37 UTC	1369	IN	Data Raw: 2d 69 6e 22 3a 31 35 32 32 2c 22 66 69 6c 2d 70 68 22 3a 31 35 32 33 2c 22 74 6e 2d 7a 61 22 3a 31 35 32 34 2c 22 74 72 2d 62 67 22 3a 31 35 32 35 2c 22 74 73 2d 7a 61 22 3a 31 35 32 36 2c 22 75 6b 2d 73 6b 22 3a 31 35 32 37 2c 22 75 6b 2d 75 61 22 3a 31 35 32 38 2c 22 75 72 2d 69 6e 22 3a 31 35 32 39 2c 22 78 68 2d 7a 61 22 3a 31 35 33 30 2c 22 7a 75 2d 7a 61 22 3a 31 35 33 31 2c 22 65 73 2d 70 72 22 3a 31 35 33 32 2c 22 65 6e 2d 70 72 22 3a 31 35 33 33 2c 22 76 69 2d 76 6e 22 3a 31 35 33 34 2c 22 65 6e 2d 76 6e 22 3a 31 35 33 35 2c 22 61 72 2d 61 65 22 3a 31 35 33 36 2c 22 65 6e 2d 61 65 22 3a 31 35 33 37 2c 22 61 6a 70 2d 70 73 22 3a 31 35 33 38 2c 22 61 70 63 2d 70 73 22 3a 31 35 33 39 2c 22 6d 73 2d 6d 79 22 3a 31 35 34 30 2c 22 64 65 2d 64 65 22 3a Data Ascii: -in":1522,"fil-ph":1523,"tn-za":1524,"tr-bg":1525,"ts-za":1526,"uk-sk":1527,"uk-ua":1528,"ur-in":1529,"xh-za":1530,"zu-za":1531,"es-pr":1532,"en-pr":1533,"vi-vn":1534,"en-vn":1535,"ar-ae":1536,"en-ae":1537,"ajp-ps":1538,"apc-ps":1539,"ms-my":1540,"de-de":
2025-01-14 15:20:37 UTC	1369	IN	Data Raw: 74 20 65 3d 69 2e 67 4d 3b 72 65 74 75 72 6e 20 65 2e 6c 61 6e 67 75 61 67 65 73 26 26 65 2e 6c 61 6e 67 75 61 67 65 73 5b 30 5d 7c 7c 65 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 65 2e 6c 61 6e 67 75 61 67 65 7c 7c 22 65 6e 2d 55 53 22 7d 2c 76 3d 7b 73 65 74 4c 6f 63 61 6c 65 3a 28 65 3d 22 65 6e 2d 75 73 22 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 66 28 65 2c 67 28 29 29 3b 69 66 28 74 29 72 65 74 75 72 6e 20 68 3d 74 2c 28 30 2c 70 2e 41 29 28 74 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 2e 64 65 66 61 75 6c 74 2e 6c 6f 63 61 6c 65 3b 72 65 74 75 72 6e 20 68 21 3d 3d 74 2e 6c 6f 63 61 6c 65 3f 7b 73 75 63 63 65 73 73 3a 21 31 7d 3a 28 77 69 6e 64 6f 77 5b 6e 2e 67 2e 5f 5f 5a 45 4e 44 45 53 4b 5f 43 4c 49 45 4e 54 5f 49 31 Data Ascii: t e=i.gM;return e.languages&&e.languages[0]\|\|e.browserLanguage\|\|e.language\|\|"en-US"},v={setLocale:(e="en-us")=>{const t=f(e,g());if(t)return h=t,(0,p.A)(t).then((e=>{const t=e.default.locale;return h!==t.locale?{success:!1}:(window[n.g.__ZENDESK_CLIENT_I1
2025-01-14 15:20:37 UTC	1369	IN	Data Raw: 64 3f 2e 6c 61 75 6e 63 68 65 72 3f 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 26 26 28 65 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 3d 74 2e 70 61 79 6c 6f 61 64 2e 6c 61 75 6e 63 68 65 72 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 29 7d 7d 7d 29 2e 72 65 64 75 63 65 72 2c 6c 3d 65 3d 3e 21 28 65 2e 6c 61 75 6e 63 68 65 72 2e 73 68 61 70 65 3d 3d 3d 6f 2e 46 65 2e 6e 6f 6e 65 7c 7c 28 30 2c 69 2e 78 44 29 28 65 29 26 26 28 28 30 2c 73 2e 64 29 28 65 29 7c 7c 28 30 2c 73 2e 5f 29 28 65 29 29 29 2c 75 3d 65 3d 3e 65 2e 6c 61 75 6e 63 68 65 72 2e 73 68 61 70 65 2c 64 3d 65 3d 3e 65 2e 6c 61 75 6e 63 68 65 72 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 7d 2c 31 37 33 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c Data Ascii: d?.launcher?.shapeSettings&&(e.shapeSettings=t.payload.launcher.shapeSettings)}}}).reducer,l=e=>!(e.launcher.shape===o.Fe.none\|\|(0,i.xD)(e)&&((0,s.d)(e)\|\|(0,s._)(e))),u=e=>e.launcher.shape,d=e=>e.launcher.shapeSettings},17398:(e,t,n)=>{"use strict";n.d(t,
2025-01-14 15:20:37 UTC	1369	IN	Data Raw: 20 61 3d 28 65 2c 74 29 3d 3e 7b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 22 74 65 78 74 22 3a 63 61 73 65 22 65 6d 61 69 6c 22 3a 72 65 74 75 72 6e 20 74 2e 74 72 69 6d 28 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 74 7d 7d 2c 63 3d 28 30 2c 72 2e 7a 44 29 28 22 66 6f 72 6d 2f 73 75 62 6d 69 74 22 2c 28 61 73 79 6e 63 28 7b 66 6f 72 6d 49 64 3a 65 2c 66 69 65 6c 64 73 3a 74 2c 76 61 6c 75 65 73 3a 6e 7d 2c 7b 64 69 73 70 61 74 63 68 3a 72 7d 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 74 2e 6d 61 70 28 28 65 3d 3e 28 7b 74 79 70 65 3a 65 2e 74 79 70 65 2c 6e 61 6d 65 3a 65 2e 6e 61 6d 65 2c 6c 61 62 65 6c 3a 65 2e 6c 61 62 65 6c 2c 5b 65 2e 74 79 70 65 5d 3a 61 28 65 2c 6e 5b 65 2e 5f 69 64 5d 29 7d 29 29 29 2c 63 3d 28 30 2c 69 2e 75 29 Data Ascii: a=(e,t)=>{switch(e.type){case"text":case"email":return t.trim();default:return t}},c=(0,r.zD)("form/submit",(async({formId:e,fields:t,values:n},{dispatch:r})=>{const o=t.map((e=>({type:e.type,name:e.name,label:e.label,[e.type]:a(e,n[e._id])}))),c=(0,i.u)
2025-01-14 15:20:37 UTC	1369	IN	Data Raw: 24 7b 65 2e 72 65 63 65 69 76 65 64 7d 60 2c 69 73 4c 6f 63 61 6c 4d 65 73 73 61 67 65 54 79 70 65 3a 21 30 7d 29 29 28 65 29 29 2c 74 3d 65 2e 72 65 63 65 69 76 65 64 2c 6e 2e 70 75 73 68 28 65 29 7d 29 29 2c 6e 7d 2c 63 3d 7b 74 65 78 74 3a 21 30 2c 69 6d 61 67 65 3a 21 30 2c 66 69 6c 65 3a 21 30 2c 74 79 70 69 6e 67 49 6e 64 69 63 61 74 6f 72 3a 21 30 7d 2c 6c 3d 28 65 2c 74 29 3d 3e 7b 69 66 28 21 63 5b 65 2e 74 79 70 65 5d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 63 5b 74 3f 2e 74 79 70 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 28 74 3f 2e 73 74 61 74 75 73 3d 3d 3d 6f 2e 78 37 2e 66 61 69 6c 65 64 29 7d 2c 75 3d 28 65 2c 74 29 3d 3e 28 22 74 79 70 69 6e 67 49 6e 64 69 63 61 74 6f 72 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 74 79 70 69 Data Ascii: ${e.received}`,isLocalMessageType:!0}))(e)),t=e.received,n.push(e)})),n},c={text:!0,image:!0,file:!0,typingIndicator:!0},l=(e,t)=>{if(!c[e.type])return!1;if(!c[t?.type])return!1;return!(t?.status===o.x7.failed)},u=(e,t)=>("typingIndicator"===e.type\|\|"typi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.8	49791	216.198.54.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:37 UTC	384	OUT	GET /compose/dcd5b484-abf6-47e3-adad-bc7b7da716c4 HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:37 UTC	1161	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:37 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"bbdcf1bd76250df99c30cae03f7f5af7" x-request-id: 901c78c15fefab7c-SEA X-Request-ID: 901c78c15fefab7c-SEA X-Request-ID: 901c78c15fefab7c-SEA x-runtime: 0.003784 X-Zendesk-Zorg: yes X-Zendesk-Zorg: yes CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q82R2ev3W8YS6kAgwS8F8fX7m%2B2fDTxqFE2Te8cgQ9NYZW%2F2uBKHXlCG%2BBDjsmQw8W4pQw8Q1LzXp87RxRaIy8y%2B%2BJIU60JcB%2BKF2eO0xsN%2F9bSyEHDfFpoefpiIHV7Pb8o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 901e9c72cfae1906-EWR
2025-01-14 15:20:37 UTC	208	IN	Data Raw: 35 31 34 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 70 72 6f 64 68 6f 73 74 65 64 74 65 73 74 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 6d 75 6c 74 69 43 6f 6e 76 6f 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 2c 22 70 72 69 76 61 74 65 41 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 54 69 63 6b 65 74 4d 65 74 61 64 61 74 Data Ascii: 514{"products":[{"name":"web_widget","id":"prodhostedtest.zendesk.com","bootstrap":{"config":{"features":{"multiConvoEnabled":true,"fastLoad":true,"privateAttachmentsEnabled":true,"conversationTicketMetadat
2025-01-14 15:20:37 UTC	1099	IN	Data Raw: 61 22 3a 74 72 75 65 7d 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 7b 22 63 61 6e 55 73 65 72 43 72 65 61 74 65 4d 6f 72 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 63 6f 6c 6f 72 22 3a 7b 22 6d 65 73 73 61 67 65 22 3a 22 23 30 30 33 36 33 64 22 2c 22 61 63 74 69 6f 6e 22 3a 22 23 30 30 30 63 66 66 22 2c 22 70 72 69 6d 61 72 79 22 3a 22 23 30 30 30 63 66 66 22 7d 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 49 64 22 3a 22 36 35 31 65 64 64 38 66 35 66 35 65 39 62 39 38 64 37 30 37 37 66 34 66 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 48 6f 77 20 63 61 6e 20 77 65 20 68 65 6c 70 3f 22 2c 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 76 61 74 61 72 22 3a 22 68 74 74 70 73 3a 2f 2f 70 72 6f 64 68 6f Data Ascii: a":true},"messenger":{"canUserCreateMoreConversations":true,"color":{"message":"#00363d","action":"#000cff","primary":"#000cff"},"integrationId":"651edd8f5f5e9b98d7077f4f","description":"How can we help?","attachmentsEnabled":true,"avatar":"https://prodho
2025-01-14 15:20:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.8	49795	188.114.96.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	709	OUT	GET /?v=2 HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:38 UTC	1148	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, no-transform ETag: "7e6bfae3cfedc1972297e3b418672be0" Link: <https://solve-api.forethought.ai/>; rel="preconnect", <https://static.cloudflareinsights.com>; rel="preconnect", <https://cloudflareinsights.com>; rel="preconnect" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=35hGcYNtkW%2FfX0NtdLWrcvdpQ3LG6gqfEd3sx1DAi3An5r5c7%2BJOYj%2BHaqTWiBiTp5UeTTLvmR2XOTcgBC5DDKZfbdS7P5YsgtjezejsPWQiOxpidBl3KhQrrwc%2FjwsVLpAHawpPeSyQypMj2XY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c768c034269-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1668&rtt_var=630&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1287&delivery_rate=1731909&cwnd=250&unsent_bytes=0&cid=bdc3d22c908558f9&ts=244&x=0"
2025-01-14 15:20:38 UTC	221	IN	Data Raw: 35 38 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 6f 6c 76 65 2d 61 70 69 2e 66 6f 72 65 74 68 6f 75 67 68 74 2e 61 69 2f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 6f 6c 76 65 2d 61 70 69 2e 66 6f 72 65 74 68 6f 75 67 68 74 2e 61 69 2f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f Data Ascii: 589<!doctype html><html lang="en"><head><link rel="preconnect" href="https://solve-api.forethought.ai/"/><link rel="dns-prefetch" href="https://solve-api.forethought.ai/"/><link rel="preconnect" href="https://static.clo
2025-01-14 15:20:38 UTC	1203	IN	Data Raw: 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 Data Ascii: udflareinsights.com"/><link rel="dns-prefetch" href="https://static.cloudflareinsights.com"/><link rel="preconnect" href="https://cloudflareinsights.com"/><link rel="dns-prefetch" href="https://cloudflareinsights.com"/><link href="https://fonts.googleapis
2025-01-14 15:20:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.8	49796	188.114.97.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	359	OUT	GET /embed.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:38 UTC	985	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: application/javascript Content-Length: 43760 Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache ETag: "c75041def02eb73f83ad86da82a94d67" access-control-allow-methods: GET referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YO61kmiQp4rN%2F72MMGprHehtitzRfuu8NZRwDpWoxd3mLmM1Tgv6qQHShWtW1kP12xfrLCJOeBgkjgTSWCqIUpBaJqLMhJCqYnQMihVgWRntzfq%2FkXLd5yWUya8LynvhpXFiGQTxVPtj9PZVYFk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c768d2980e0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1866&min_rtt=1828&rtt_var=762&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=937&delivery_rate=1366401&cwnd=202&unsent_bytes=0&cid=96dbb4cbeca84929&ts=230&x=0"
2025-01-14 15:20:38 UTC	384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 74 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 74 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 74 5d 3d 22 34 33 37 31 32 36 30 36 2d 64 35 35 36 2d 34 61 37 65 2d 61 62 36 64 2d 34 33 30 63 30 38 36 34 30 34 65 37 22 2c 65 2e 5f 73 65 6e Data Ascii: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="43712606-d556-4a7e-ab6d-430c086404e7",e._sen
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 36 33 33 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 74 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 35 33 29 2d 31 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ndow:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{var e={3633:e=>{e.exports=function(){var e=function(e){return"function"===typeof e},t=Math.pow(2,53)-1,n=function(e
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 66 72 6f 6d 20 72 65 71 75 69 72 65 73 20 61 6e 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 20 2d 20 6e 6f 74 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 76 61 72 20 67 2c 68 3d 6e 28 6d 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 61 3d 65 28 73 29 3f 4f 62 6a 65 63 74 28 6e 65 77 20 73 28 68 29 29 3a 6e 65 77 20 41 72 72 61 79 28 68 29 2c 72 3d 30 3b 72 3c 68 3b 29 67 3d 6d 5b 72 5d 2c 61 5b 72 5d 3d 64 3f 64 2e 63 61 6c 6c 28 6f 2c 67 2c 72 29 3a 67 2c 72 2b 2b 3b 61 2e 6c 65 6e 67 74 68 3d 68 7d 72 65 74 75 72 6e 20 61 7d 7d 28 29 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 76 61 72 20 6f 3d 74 5b 69 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 Data Ascii: TypeError("Array.from requires an array-like object - not null or undefined");var g,h=n(m.length);for(a=e(s)?Object(new s(h)):new Array(h),r=0;r<h;)g=m[r],a[r]=d?d.call(o,g,r):g,r++;a.length=h}return a}}()}},t={};function n(i){var o=t[i];if(void 0!==o)ret
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 78 22 29 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 5b 67 28 29 5d 3a 77 2c 5b 68 28 29 5d 3a 22 22 2c 5b 66 5d 3a 6d 2c 5b 76 5d 3a 22 22 2c 77 65 62 6b 69 74 4d 61 73 6b 49 6d 61 67 65 3a 22 2d 77 65 62 6b 69 74 2d 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 77 68 69 74 65 2c 20 62 6c 61 63 6b 29 22 2c 77 69 64 74 68 3a 22 30 22 2c 7a 49 6e 64 65 78 3a 22 39 39 39 39 39 39 22 2c 2e 2e 2e 22 66 6c 6f 61 74 69 6e 67 5f 62 61 72 22 3d 3d 3d 69 2e 6c 61 75 6e 63 68 53 74 79 6c 65 3f 7b 6c 65 66 74 3a 22 30 22 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 22 61 75 74 6f 22 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 22 61 75 74 6f 22 2c 72 69 67 68 74 3a 22 30 22 7d 3a 7b 7d 7d 29 3b 66 75 6e 63 74 69 6f Data Ascii: x"),overflow:"hidden",position:"fixed",[g()]:w,[h()]:"",[f]:m,[v]:"",webkitMaskImage:"-webkit-radial-gradient(white, black)",width:"0",zIndex:"999999",..."floating_bar"===i.launchStyle?{left:"0",marginLeft:"auto",marginRight:"auto",right:"0"}:{}});functio
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 65 29 29 29 3b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 30 3b 63 6f 6e 73 74 20 6e 3d 65 28 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 74 3e 34 3f 6e 75 6c 6c 3a 28 61 77 61 69 74 20 5f 28 32 2a 2a 74 2a 36 30 30 29 2c 41 28 65 2c 74 2b 31 29 29 29 7d 63 6f 6e 73 74 20 6b 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 22 2e 63 6f 6e 63 61 74 28 34 38 30 2c 22 70 78 29 22 29 29 2c 7a 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 68 65 69 67 68 74 Data Ascii: setTimeout(t,e)));async function A(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;const n=e();return n\|\|(t>4?null:(await _(2*t600),A(e,t+1)))}const k=window.matchMedia("(max-width: ".concat(480,"px)")),z=window.matchMedia("(max-height
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6f 6e 63 65 3d 71 29 2c 74 7d 63 6f 6e 73 74 20 73 3d 72 28 22 66 74 2d 73 61 6c 65 73 66 6f 72 63 65 2d 73 74 79 6c 65 22 29 2c 64 3d 28 29 3d 3e 7b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 2c 63 3d 28 29 3d 3e 7b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 2e 65 6d 62 65 64 64 65 64 53 65 72 76 69 63 65 48 65 6c 70 42 75 74 74 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 2c 6c 3d 28 29 3d 3e 7b 6c 65 74 20 65 3d 21 30 2c 74 3d 30 3b 63 6f 6e 73 74 20 6e 3d 28 29 3d 3e 7b 69 66 28 65 26 26 74 3c 3d 31 30 29 7b 65 3d 21 31 3b 63 6f 6e 73 74 20 69 3d 49 2e 67 65 74 45 6c 65 Data Ascii: once=q),t}const s=r("ft-salesforce-style"),d=()=>{s.innerHTML="",I.body.appendChild(s)},c=()=>{s.innerHTML=".embeddedServiceHelpButton { display: none !important;}",I.body.appendChild(s)},l=()=>{let e=!0,t=0;const n=()=>{if(e&&t<=10){e=!1;const i=I.getEle
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 3b 7d 5c 6e 20 20 20 20 20 20 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 42 75 74 74 6f 6e 20 74 6f 20 6c 61 75 6e 63 68 20 6d 65 73 73 61 67 69 6e 67 20 77 69 6e 64 6f 77 22 5d 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 5c 6e 20 20 20 20 20 20 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 42 75 74 74 6f 6e 20 74 6f 20 6c 61 75 6e 63 68 20 6d 65 73 73 61 67 69 6e 67 20 77 69 6e 64 6f 77 2c 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 69 6e 20 70 72 6f 67 72 65 73 73 22 5d 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 5c 6e 20 20 20 20 20 20 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 4d 65 73 73 61 67 65 20 66 72 6f 6d 20 63 6f 6d 70 61 6e 79 22 5d Data Ascii: important;}\n iframe[title="Button to launch messaging window"] { display: block !important;}\n iframe[title="Button to launch messaging window, conversation in progress"] { display: block !important;}\n iframe[title="Message from company"]
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 4d 4c 3d 22 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2c 72 26 26 6f 3f 28 77 69 6e 64 6f 77 2e 49 6e 74 65 72 63 6f 6d 28 22 73 68 6f 77 53 70 61 63 65 22 2c 22 6d 65 73 73 61 67 65 73 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 49 6e 74 65 72 63 6f 6d 28 22 73 68 6f 77 4e 65 77 4d 65 73 73 61 67 65 22 2c 72 29 7d 29 2c 31 29 2c 74 26 26 74 2e 73 68 6f 75 6c 64 5f 61 75 74 6f 5f 73 65 6e 64 5f 6d 65 73 73 61 67 65 26 26 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 49 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 69 6e 74 65 72 63 6f 6d 2d 6d 65 73 73 65 6e 67 65 72 2d 66 72 61 6d 65 22 5d 27 29 3b 69 66 28 65 29 7b 76 61 Data Ascii: ML="",I.body.appendChild(b),r&&o?(window.Intercom("showSpace","messages"),setTimeout((()=>{window.Intercom("showNewMessage",r)}),1),t&&t.should_auto_send_message&&setTimeout((()=>{const e=I.querySelector('iframe[name="intercom-messenger-frame"]');if(e){va
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6c 6c 62 61 63 6b 28 22 43 68 61 74 4d 65 73 73 61 67 65 52 65 63 65 69 76 65 64 22 2c 22 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 35 65 33 29 7d 7d 2c 69 3d 6e 75 6c 6c 3d 3d 3d 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 62 6f 74 5f 61 6c 69 61 73 5f 6c 69 73 74 3b 69 26 26 65 26 26 21 69 2e 69 6e 63 6c 75 64 65 73 28 65 29 26 26 28 6e 28 29 2c 77 69 6e 64 6f 77 2e 53 6e 61 70 45 6e 67 61 67 65 2e 73 65 74 43 61 6c 6c 62 61 63 6b 28 22 43 68 61 74 4d 65 73 73 61 67 65 52 65 63 65 69 76 65 64 22 2c 22 22 29 29 7d 29 29 7d 77 69 6e 64 6f 77 2e 53 6e 61 70 45 6e 67 61 67 65 26 26 77 69 6e 64 6f 77 2e 53 6e 61 70 45 6e 67 61 67 65 2e 73 65 74 43 61 6c 6c 62 61 63 6b 28 22 43 6c 6f 73 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: llback("ChatMessageReceived",""),setTimeout(n,5e3)}},i=null===t\|\|void 0===t?void 0:t.bot_alias_list;i&&e&&!i.includes(e)&&(n(),window.SnapEngage.setCallback("ChatMessageReceived",""))}))}window.SnapEngage&&window.SnapEngage.setCallback("Close",(function()
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6e 6e 65 72 48 54 4d 4c 3d 22 23 67 6f 72 67 69 61 73 2d 63 68 61 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 48 29 2c 77 69 6e 64 6f 77 2e 47 6f 72 67 69 61 73 43 68 61 74 2e 68 69 64 65 43 68 61 74 28 21 31 29 2c 77 69 6e 64 6f 77 2e 47 6f 72 67 69 61 73 43 68 61 74 2e 6f 70 65 6e 28 29 2c 74 26 26 77 69 6e 64 6f 77 2e 47 6f 72 67 69 61 73 43 68 61 74 2e 73 65 6e 64 4d 65 73 73 61 67 65 28 6e 29 7d 2c 55 3d 72 28 22 66 74 2d 66 72 65 73 68 63 68 61 74 2d 73 74 79 6c 65 22 29 2c 56 3d 65 3d 3e 7b 6c 65 74 7b 63 6f 6e 76 65 72 73 61 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 3a 74 2c 65 6d 61 69 6c 3a 6e 2c 66 69 72 73 Data Ascii: nnerHTML="#gorgias-chat-container {display: block !important;}",I.body.appendChild(H),window.GorgiasChat.hideChat(!1),window.GorgiasChat.open(),t&&window.GorgiasChat.sendMessage(n)},U=r("ft-freshchat-style"),V=e=>{let{conversationProperties:t,email:n,firs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.8	49798	216.198.54.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	561	OUT	GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:38 UTC	1187	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 23558 Connection: close x-amz-id-2: ++fUp+qYv/Zs387iTgQHkD33df4KOf8Gnx9leHwVk3/AsjaotF8GpgBqjhAaBOSDYSFnOoAP3CY= x-amz-request-id: YR1YGPYCY6TSJS6C x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:16 GMT ETag: "0c279e1e04e4fa0f64f26c7ee021166d" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:15 GMT x-amz-version-id: KcRlhZu__s7XByY8XFOik3ZtRoYJmqTx CF-Cache-Status: HIT Age: 22556 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QsipOqfVbZLnqDR1cz%2FoecXnareIJ%2FmUV8ebS8EIVuvaG%2FW9gRJXy6vHRuXvy5Uq37HYKeKROYYR9Fs89jnIRt190hQwym%2BSHYHjHRCQZ0zGq6hWP599xj94m%2Bu%2FvohNz%2Fj7s1Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7a6f1941e0-EWR
2025-01-14 15:20:38 UTC	182	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 32 35 30 5d 2c 7b 33 33 30 33 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 6c 6f 63 61 6c 65 22 3a 7b Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[7250],{33034:e=>{e.exports=JSON.parse('{"locale":{
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 75 73 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 61 72 6f 75 73 65 6c 5f 6d 65 73 73 61 67 65 2e 61 63 74 69 6f 6e 2e 61 63 63 65 73 73 69 62 6c 65 5f 74 65 78 74 22 3a 22 7b 7b 61 63 74 69 6f 6e 7d 7d 3a 20 7b 7b 74 69 74 6c 65 7d 7d 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 61 72 6f 75 73 65 6c 5f 6d 65 73 73 61 67 65 2e 62 75 74 74 6f 6e 2e 6e 65 78 74 22 3a 22 4e 65 78 74 20 69 74 65 6d 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 61 72 6f 75 73 65 Data Ascii: "locale":"en-us","rtl":false,"translations":{"embeddable_framework.messenger.carousel_message.action.accessible_text":"{{action}}: {{title}}","embeddable_framework.messenger.carousel_message.button.next":"Next item","embeddable_framework.messenger.carouse
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 69 6e 67 2e 67 65 6e 65 72 61 74 65 5f 6e 65 77 5f 71 72 5f 63 6f 64 65 22 3a 22 47 65 6e 65 72 61 74 65 20 6e 65 77 20 51 52 20 63 6f 64 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 62 75 74 74 6f 6e 5f 64 65 73 6b 74 6f 70 2e 66 62 5f 6d 65 73 73 65 6e 67 65 72 22 3a 22 4f 70 65 6e 20 4d 65 73 73 65 6e 67 65 72 20 6f 6e 20 74 68 69 73 20 64 65 76 69 63 65 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 62 75 74 74 6f 6e 5f 64 65 73 6b 74 6f 70 2e 69 6e 73 74 61 67 72 61 6d 22 3a 22 4f 70 65 6e 20 49 6e 73 74 61 67 Data Ascii: ing.generate_new_qr_code":"Generate new QR code","embeddable_framework.messenger.channel_linking.page.button_desktop.fb_messenger":"Open Messenger on this device.","embeddable_framework.messenger.channel_linking.page.button_desktop.instagram":"Open Instag
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 69 6e 73 74 72 75 63 74 69 6f 6e 73 5f 6d 6f 62 69 6c 65 2e 69 6e 73 74 61 67 72 61 6d 22 3a 22 46 6f 6c 6c 6f 77 20 40 7b 7b 69 6e 73 74 61 67 72 61 6d 48 61 6e 64 6c 65 7d 7d 20 74 6f 20 73 65 6e 64 20 61 20 44 4d 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 69 6e 73 74 72 75 63 74 69 6f 6e 73 5f 6d 6f 62 69 6c 65 2e 77 68 61 74 73 61 70 70 22 3a 22 4f 70 65 6e 20 57 68 61 74 73 41 70 70 20 61 6e 64 20 73 65 6e 64 20 61 20 73 68 6f 72 74 20 6d 65 73 73 61 67 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 Data Ascii: instructions_mobile.instagram":"Follow @{{instagramHandle}} to send a DM.","embeddable_framework.messenger.channel_linking.page.instructions_mobile.whatsapp":"Open WhatsApp and send a short message to connect your account.","embeddable_framework.messenger
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 5f 6d 65 73 73 61 67 65 22 3a 22 49 5c 27 6d 20 63 6f 6e 74 69 6e 75 69 6e 67 20 6d 79 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 6f 6e 20 57 68 61 74 73 41 70 70 2e 20 48 65 72 65 5c 27 73 20 6d 79 20 63 6f 64 65 3a 20 7b 7b 77 68 61 74 73 61 70 70 43 6f 64 65 7d 7d 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 6f 6d 70 6f 73 65 72 2e 6c 61 62 65 6c 22 3a 22 54 79 70 65 20 61 20 6d 65 73 73 61 67 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 6f 6d 70 6f 73 65 72 2e 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 54 79 70 65 20 61 20 6d 65 73 73 61 67 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e Data Ascii: _message":"I\'m continuing my conversation on WhatsApp. Here\'s my code: {{whatsappCode}}","embeddable_framework.messenger.composer.label":"Type a message","embeddable_framework.messenger.composer.placeholder":"Type a message","embeddable_framework.messen
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 73 65 61 72 63 68 5f 6c 61 62 65 6c 22 3a 22 46 69 6e 64 20 61 6e 20 65 6d 6f 6a 69 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 73 79 6d 62 6f 6c 73 22 3a 22 53 79 6d 62 6f 6c 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 74 6f 6e 65 5f 70 69 63 6b 65 72 2e 6c 61 62 65 6c 2e 64 61 72 6b 5f 74 6f 6e 65 22 3a 22 44 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 74 6f 6e 65 5f 70 Data Ascii: ","embeddable_framework.messenger.emoji.search_label":"Find an emoji","embeddable_framework.messenger.emoji.symbols":"Symbols","embeddable_framework.messenger.emoji.tone_picker.label.dark_tone":"Dark skin tone","embeddable_framework.messenger.emoji.tone_p
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 22 3a 22 46 69 6c 65 73 20 6d 75 73 74 20 62 65 20 7b 7b 66 69 6c 65 55 70 6c 6f 61 64 53 69 7a 65 4c 69 6d 69 74 49 6e 4d 62 7d 7d 20 4d 42 20 6f 72 20 6c 65 73 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 65 72 72 6f 72 2e 66 69 6c 65 5f 74 79 70 65 5f 6c 69 6d 69 74 22 3a 22 46 69 6c 65 20 74 79 70 65 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 6f 70 65 6e 5f 69 6d 61 67 65 5f 69 6e 5f 6e 65 77 5f 74 61 62 5f 76 32 22 3a 22 4f 70 65 6e 20 69 6e 20 6e 65 77 20 74 61 62 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 Data Ascii: ":"Files must be {{fileUploadSizeLimitInMb}} MB or less","embeddable_framework.messenger.file_upload.error.file_type_limit":"File type not supported","embeddable_framework.messenger.file_upload.open_image_in_new_tab_v2":"Open in new tab","embeddable_frame
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 66 65 72 20 79 6f 75 72 20 61 67 65 6e 74 20 6d 6f 72 65 20 63 6f 6e 74 65 78 74 2c 20 69 66 20 79 6f 75 20 68 61 76 65 6e 5c 27 74 20 61 6c 72 65 61 64 79 2e 20 4f 70 65 6e 20 69 6e 20 6e 65 77 20 74 61 62 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6e 69 74 69 61 6c 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 72 65 71 75 65 73 74 5f 66 61 69 6c 65 64 22 3a 22 43 6f 75 6c 64 6e e2 80 99 74 20 6c 6f 61 64 20 6d 65 73 73 61 67 65 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6e 69 74 69 61 6c 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 72 65 74 72 79 22 3a 22 54 61 70 20 74 6f 20 72 65 74 72 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f Data Ascii: fer your agent more context, if you haven\'t already. Open in new tab.","embeddable_framework.messenger.initial_conversation_request_failed":"Couldnt load messages","embeddable_framework.messenger.initial_conversation_retry":"Tap to retry","embeddable_
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 69 6c 65 2e 73 69 7a 65 5f 69 6e 5f 6d 62 22 3a 22 7b 7b 73 69 7a 65 7d 7d 20 4d 42 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 6f 72 6d 2e 65 72 72 6f 72 5f 69 63 6f 6e 22 3a 22 45 72 72 6f 72 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 6f 72 6d 2e 66 61 69 6c 65 64 5f 74 6f 5f 73 75 62 6d 69 74 22 3a 22 44 65 74 61 69 6c 73 20 63 6f 75 6c 64 6e e2 80 99 74 20 62 65 20 73 65 6e 74 2e 20 54 72 79 20 61 67 61 69 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e Data Ascii: able_framework.messenger.message.file.size_in_mb":"{{size}} MB","embeddable_framework.messenger.message.form.error_icon":"Error","embeddable_framework.messenger.message.form.failed_to_submit":"Details couldnt be sent. Try again.","embeddable_framework.
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 72 6d 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 72 65 63 65 69 70 74 2e 72 65 63 65 69 76 65 64 5f 72 65 63 65 6e 74 6c 79 22 3a 22 4a 75 73 74 20 6e 6f 77 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 5f 62 75 62 62 6c 65 2e 61 69 5f 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 47 65 6e 65 72 61 74 65 64 20 62 79 20 41 49 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 75 6c 74 69 63 6f 6e 76 65 72 73 61 74 69 6f 6e 2e 62 61 63 6b 5f 62 75 74 74 6f 6e 22 3a 22 42 61 63 6b 20 74 6f 20 74 68 65 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 6c 69 73 74 Data Ascii: rm","embeddable_framework.messenger.message.receipt.received_recently":"Just now","embeddable_framework.messenger.message_bubble.ai_disclaimer":"Generated by AI","embeddable_framework.messenger.multiconversation.back_button":"Back to the conversation list

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.8	49802	216.198.54.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	537	OUT	GET /web_widget/messenger/latest/web-widget-9606-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:38 UTC	1176	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 137736 Connection: close x-amz-id-2: WJOtc+UWOWNJMH+v8+UCBU9vanyPeluzW1XkTQdX7ceXwDCO0a6v9xj74Ep8MAAuDaGXPjZ56/E= x-amz-request-id: YR1TE72FYHVP3VNT x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:15 GMT ETag: "4c37342db5ad594d06ebbd1c0ba47d13" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:14 GMT x-amz-version-id: uNXpww.83kTwibF1LqnpvDmj_RDLz89v CF-Cache-Status: HIT Age: 22555 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sZNhBJS1lnnSW7iN1puivEtSsTuBLRbcr908Or7wp5q28JDDRuz7LV9pYBWkSg6OtOuZHNKKXii98NLRo2uBhPHJDDW7Bf%2FOv5GUzGjm2d3hzJHTIjxEOrAGM5udk4NAggy4VLs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7a8b0041e1-EWR
2025-01-14 15:20:38 UTC	193	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/w
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 36 30 36 5d 2c 7b 33 32 36 31 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 28 6e 3d 74 28 33 32 35 36 29 28 21 31 29 29 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2f 2a 21 5c 6e 20 2a 20 43 6f 70 79 72 69 67 68 74 20 5a 65 6e 64 65 73 6b 2c 20 49 6e 63 2e 5c 6e 20 2a 5c 6e 20 2a 20 55 73 65 20 6f 66 20 74 68 69 Data Ascii: eb-widget/getting-started/legal/ /(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[9606],{3261:(e,n,t)=>{(n=t(3256)(!1)).push([e.id,'/!\n * Copyright Zendesk, Inc.\n \n Use of thi
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6f 6e 2c 73 65 6c 65 63 74 7b 5c 6e 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 5c 6e 7d 5c 6e 5c 6e 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 5c 6e 7d 5c 6e 5c 6e 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 5c 6e 20 20 62 6f 72 64 65 Data Ascii: on,select{\n text-transform:none;\n}\n\n[type=button],[type=reset],[type=submit],button{\n -webkit-appearance:button;\n}\n\n[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{\n borde
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 22 6b 65 72 6e 22 2c 20 22 6b 65 72 6e 22 3b 5c 6e 20 20 66 6f 6e 74 2d 6b 65 72 6e 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 5c 6e 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 79 73 74 65 6d 2d 75 69 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 4f 78 79 67 65 6e 2d 53 61 6e 73 2c 55 62 75 6e 74 75 2c 43 61 6e 74 61 72 65 6c 6c 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 5c 6e 7d 5c 6e 5c 6e 2a 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 20 7d 5c 6e 5c 6e 2a 2c 3a 61 66 Data Ascii: nt-feature-settings:"kern", "kern";\n font-kerning:normal;\n font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen-Sans,Ubuntu,Cantarell,Helvetica Neue,Arial,sans-serif;\n font-size:14px;\n}\n\n{ font-weight:inherit; }\n\n,:af
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 65 65 6b 3a 21 30 2c 74 69 6d 65 3a 21 30 2c 64 61 74 65 74 69 6d 65 3a 21 30 2c 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 6c 65 74 7b 73 63 6f 70 65 3a 6e 2c 72 65 6c 61 74 69 76 65 44 6f 63 75 6d 65 6e 74 3a 74 2c 63 6c 61 73 73 4e 61 6d 65 3a 6c 3d 22 67 61 72 64 65 6e 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 22 2c 64 61 74 61 41 74 74 72 69 62 75 74 65 3a 61 3d 22 64 61 74 61 2d 67 61 72 64 65 6e 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 22 7d 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 3b 69 66 28 21 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 45 72 72 6f 72 3a 20 74 68 65 20 75 73 65 46 6f 63 75 73 56 69 73 69 62 6c 65 28 29 20 68 6f 6f 6b 20 72 65 71 75 69 72 65 73 20 Data Ascii: eek:!0,time:!0,datetime:!0,"datetime-local":!0};function u(e){let{scope:n,relativeDocument:t,className:l="garden-focus-visible",dataAttribute:a="data-garden-focus-visible"}=void 0===e?{}:e;if(!n)throw new Error('Error: the useFocusVisible() hook requires
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6f 76 65 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 65 6e 64 22 2c 76 29 7d 2c 79 3d 28 29 3d 3e 7b 22 68 69 64 64 65 6e 22 3d 3d 3d 65 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 75 2e 63 75 72 72 65 6e 74 26 26 28 6f 2e 63 75 72 72 65 6e 74 3d Data Ascii: ove",v),e.removeEventListener("pointerdown",v),e.removeEventListener("pointerup",v),e.removeEventListener("touchmove",v),e.removeEventListener("touchstart",v),e.removeEventListener("touchend",v)},y=()=>{"hidden"===e.visibilityState&&u.current&&(o.current=
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 72 69 62 75 74 65 3a 22 64 61 74 61 2d 67 61 72 64 65 6e 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 22 7d 2c 73 2e 70 72 6f 70 54 79 70 65 73 3d 7b 63 68 69 6c 64 72 65 6e 3a 6f 28 29 2e 66 75 6e 63 2c 72 65 6e 64 65 72 3a 6f 28 29 2e 66 75 6e 63 2c 72 65 6c 61 74 69 76 65 44 6f 63 75 6d 65 6e 74 3a 6f 28 29 2e 6f 62 6a 65 63 74 2c 63 6c 61 73 73 4e 61 6d 65 3a 6f 28 29 2e 73 74 72 69 6e 67 2c 64 61 74 61 41 74 74 72 69 62 75 74 65 3a 6f 28 29 2e 73 74 72 69 6e 67 7d 3b 76 61 72 20 63 3d 74 28 35 38 34 39 32 29 2c 66 3d 74 28 35 30 37 30 29 3b 63 6f 6e 73 74 20 64 3d 65 3d 3e 7b 6c 65 74 7b 74 68 65 6d 65 3a 6e 2c 66 6f 63 75 73 56 69 73 69 62 6c 65 52 65 66 3a 74 2c 63 68 69 6c 64 72 65 6e 3a 61 2c 2e 2e 2e 6f 7d 3d 65 3b 63 6f 6e 73 74 20 69 3d 28 30 2c Data Ascii: ribute:"data-garden-focus-visible"},s.propTypes={children:o().func,render:o().func,relativeDocument:o().object,className:o().string,dataAttribute:o().string};var c=t(58492),f=t(5070);const d=e=>{let{theme:n,focusVisibleRef:t,children:a,...o}=e;const i=(0,
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6f 74 7c 7c 22 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 20 2a 2f 22 29 7d 29 29 3b 72 65 74 75 72 6e 5b 74 5d 2e 63 6f 6e 63 61 74 28 61 29 2e 63 6f 6e 63 61 74 28 5b 6c 5d 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 7d 76 61 72 20 6f 2c 69 2c 75 3b 72 65 74 75 72 6e 5b 74 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 7d 28 6e 2c 65 29 3b 72 65 74 75 72 6e 20 6e 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 61 74 28 6e 5b 32 5d 2c 22 20 7b 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 7d 22 29 3a 74 7d 29 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 6e 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 5b 5b 6e 75 6c 6c 2c 65 2c 22 22 5d 5d 29 3b 76 61 72 20 6c 3d 7b 7d 3b 69 66 28 72 29 66 6f 72 28 76 61 72 Data Ascii: ot\|\|"").concat(e," */")}));return[t].concat(a).concat([l]).join("\n")}var o,i,u;return[t].join("\n")}(n,e);return n[2]?"@media ".concat(n[2]," {").concat(t,"}"):t})).join("")},n.i=function(e,t,r){"string"==typeof e&&(e=[[null,e,""]]);var l={};if(r)for(var
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 67 5d 29 29 7b 76 61 72 20 79 3d 64 28 74 2c 67 29 3b 74 72 79 7b 73 28 6e 2c 67 2c 79 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 38 39 36 38 30 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 34 36 30 33 39 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 61 2e 72 65 73 65 74 57 61 72 6e 69 6e 67 43 61 63 68 65 3d 6c 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 2c 74 2c 6c 2c 61 2c 6f 29 7b 69 66 28 6f 21 3d 3d 72 29 7b 76 61 72 20 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6c 6c 69 6e 67 20 50 72 6f 70 54 79 70 65 73 20 76 61 6c 69 64 61 74 6f 72 73 20 64 69 72 65 63 Data Ascii: g])){var y=d(t,g);try{s(n,g,y)}catch(e){}}}}return n}},89680:(e,n,t)=>{"use strict";var r=t(46039);function l(){}function a(){}a.resetWarningCache=l,e.exports=function(){function e(e,n,t,l,a,o){if(o!==r){var i=new Error("Calling PropTypes validators direc
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 64 3d 2f 5e 5b 3a 41 2d 5a 5f 61 2d 7a 5c 75 30 30 43 30 2d 5c 75 30 30 44 36 5c 75 30 30 44 38 2d 5c 75 30 30 46 36 5c 75 30 30 46 38 2d 5c 75 30 32 46 46 5c 75 30 33 37 30 2d 5c 75 30 33 37 44 5c 75 30 33 37 46 2d 5c 75 31 46 46 46 5c 75 32 30 30 43 2d 5c 75 32 30 30 44 5c 75 32 30 37 30 2d 5c 75 32 31 38 46 5c 75 32 43 30 30 2d 5c 75 32 46 45 46 5c 75 33 30 30 31 2d 5c 75 44 37 46 46 5c 75 46 39 30 30 2d 5c 75 46 44 43 46 5c 75 46 44 46 30 2d 5c 75 46 46 46 44 5d 5b 3a 41 2d Data Ascii: "undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	49800	216.198.54.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	537	OUT	GET /web_widget/messenger/latest/web-widget-7437-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:38 UTC	1181	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 13846 Connection: close x-amz-id-2: vpmcy6Mk3dpyc0IV/eDV0kWaRG9Drgw25jfkgyupJXQ9aEo9Em0O3EX/w/mgqRisJVKuGRSmsY8= x-amz-request-id: YR1J6S4MFBXMS1QT x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:15 GMT ETag: "aa3fed8e69b72f1b6965afd8512f3a6a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:14 GMT x-amz-version-id: 4B8Fge9SprexpoZnyUOvsFYI3WfuZHrP CF-Cache-Status: HIT Age: 22555 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WOqEqhuGLO0I14XMtwUQhcnmSc8SSIsPZVYkP6yq7Qfos%2F1nkGxMzqcdW0Vn%2F6TReWGOQymQ4%2FpC4YczSFhdw68JGdZoQPDYA11cFC876zF1ssZEOrb5VDD8feI8kti3wP%2FS1oo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7a9e7a43c7-EWR
2025-01-14 15:20:38 UTC	188	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 34 33 37 5d 2c 7b 33 36 39 31 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4b 3a 28 29 3d 3e 67 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 38 39 31 30 29 2c 69 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[7437],{36913:(e,t,n)=>{n.d(t,{K:()=>g});var o=n(88910),i
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 3d 6e 28 32 34 37 32 36 29 2c 73 3d 6e 2e 6e 28 69 29 2c 72 3d 6e 28 33 31 38 36 39 29 2c 61 3d 6e 28 33 34 34 38 35 29 2c 64 3d 6e 28 31 30 39 34 38 29 2c 6c 3d 6e 28 36 39 39 39 29 2c 75 3d 6e 28 32 36 33 38 35 29 2c 63 3d 6e 28 35 38 34 39 32 29 2c 70 3d 6e 28 38 38 36 33 29 3b 63 6f 6e 73 74 20 68 3d 22 62 75 74 74 6f 6e 73 2e 69 63 6f 6e 5f 62 75 74 74 6f 6e 22 2c 6d 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 70 2e 76 29 28 65 29 3b 72 65 74 75 72 6e 28 30 2c 64 2e 41 48 29 28 5b 22 62 6f 72 64 65 72 3a 22 2c 22 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 22 2c 22 3b 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 22 3b 22 2c 22 3b 26 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 22 5d 2c 65 2e 69 73 Data Ascii: =n(24726),s=n.n(i),r=n(31869),a=n(34485),d=n(10948),l=n(6999),u=n(26385),c=n(58492),p=n(8863);const h="buttons.icon_button",m=e=>{const t=(0,p.v)(e);return(0,d.AH)(["border:",";padding:0;width:",";min-width:",";",";&:disabled{background-color:",";}"],e.is
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 28 29 2e 62 6f 6f 6c 7d 2c 67 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 69 73 50 69 6c 6c 3a 21 30 2c 69 73 42 61 73 69 63 3a 21 30 2c 73 69 7a 65 3a 22 6d 65 64 69 75 6d 22 7d 7d 2c 38 38 36 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4f 3a 28 29 3d 3e 62 2c 76 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 6f 3d 6e 28 31 30 39 34 38 29 2c 69 3d 6e 28 34 30 35 37 37 29 2c 73 3d 6e 28 36 39 39 39 29 2c 72 3d 6e 28 31 38 34 36 29 2c 61 3d 6e 28 32 34 35 36 31 29 2c 64 3d 6e 28 32 36 33 38 35 29 2c 6c 3d 6e 28 35 38 34 39 32 29 3b 63 6f 6e 73 74 20 75 3d 22 62 75 74 74 6f 6e 73 2e 62 75 74 74 6f 6e 5f 67 72 6f 75 70 5f 76 69 65 77 22 2c 63 3d 6f 2e 41 79 2e 64 69 76 2e 61 74 74 72 73 28 7b 22 64 61 74 61 2d 67 61 72 64 65 6e 2d 69 64 22 3a 75 2c 22 Data Ascii: ().bool},g.defaultProps={isPill:!0,isBasic:!0,size:"medium"}},8863:(e,t,n)=>{n.d(t,{O:()=>b,v:()=>f});var o=n(10948),i=n(40577),s=n(6999),r=n(1846),a=n(24561),d=n(26385),l=n(58492);const u="buttons.button_group_view",c=o.Ay.div.attrs({"data-garden-id":u,"
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 73 65 6c 65 63 74 3a 22 2c 22 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 22 2c 22 3b 26 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 22 2c 22 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 26 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 22 2c 22 3b 7d 26 3a 61 63 74 69 76 65 2c 26 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 27 74 72 75 65 27 5d 2c 26 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 27 6d 69 78 65 64 27 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 30 2e 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 31 73 Data Ascii: select:",";-webkit-touch-callout:none;",";&::-moz-focus-inner{border:0;padding:0;}","{text-decoration:none;}&:hover{text-decoration:",";}&:active,&[aria-pressed='true'],&[aria-pressed='mixed']{transition:border-color 0.1s ease-in-out,background-color 0.1s
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 61 62 6c 65 64 7c 7c 65 2e 69 73 4e 65 75 74 72 61 6c 26 26 28 65 2e 69 73 50 72 69 6d 61 72 79 7c 7c 65 2e 69 73 53 65 6c 65 63 74 65 64 29 26 26 21 65 2e 69 73 44 61 6e 67 65 72 3f 22 6e 65 75 74 72 61 6c 48 75 65 22 3a 65 2e 69 73 44 61 6e 67 65 72 3f 22 64 61 6e 67 65 72 48 75 65 22 3a 22 70 72 69 6d 61 72 79 48 75 65 22 3b 63 6f 6e 73 74 20 61 3d 36 30 30 2c 64 3d 28 30 2c 73 2e 41 29 28 6e 2c 61 2c 65 2e 74 68 65 6d 65 29 2c 6c 3d 28 30 2c 73 2e 41 29 28 6e 2c 37 30 30 2c 65 2e 74 68 65 6d 65 29 2c 75 3d 28 30 2c 73 2e 41 29 28 6e 2c 38 30 30 2c 65 2e 74 68 65 6d 65 29 2c 63 3d 28 30 2c 73 2e 41 29 28 22 70 72 69 6d 61 72 79 48 75 65 22 2c 61 2c 65 2e 74 68 65 6d 65 29 2c 68 3d 6d 28 65 29 2c 66 3d 28 30 2c 73 2e 41 29 28 6e 2c 34 30 30 2c 65 2e 74 Data Ascii: abled\|\|e.isNeutral&&(e.isPrimary\|\|e.isSelected)&&!e.isDanger?"neutralHue":e.isDanger?"dangerHue":"primaryHue";const a=600,d=(0,s.A)(n,a,e.theme),l=(0,s.A)(n,700,e.theme),u=(0,s.A)(n,800,e.theme),c=(0,s.A)("primaryHue",a,e.theme),h=m(e),f=(0,s.A)(n,400,e.t
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 22 2c 22 20 26 3a 61 63 74 69 76 65 2c 26 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 27 74 72 75 65 27 5d 2c 26 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 27 6d 69 78 65 64 27 5d 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 26 3a 64 69 73 61 62 6c 65 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 26 20 22 2c 22 7b 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 26 3a 68 6f 76 65 72 20 22 2c 22 2c 26 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 22 2c 22 Data Ascii: ckground-color:",";color:",";}"," &:active,&[aria-pressed='true'],&[aria-pressed='mixed']{border-color:",";background-color:",";color:",";}&:disabled{border-color:transparent;background-color:",";color:",";}& ","{color:",";}&:hover ",",&:focus-visible ","
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 20 30 2e 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 6d 61 72 67 69 6e 2d 22 2c 22 20 30 2e 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 20 30 2e 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 7a 2d 69 6e 64 65 78 20 30 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 62 6f 72 64 65 72 3a 22 2c 22 20 22 2c 22 3b 22 2c 22 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 22 2c 22 3b 7d 26 3a 68 6f 76 65 72 2c 26 3a 61 63 74 69 76 65 2c 22 2c 22 7b 7a 2d 69 6e 64 65 78 3a 31 3b 7d 26 3a 64 69 73 61 62 6c 65 64 7b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 26 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 Data Ascii: color 0.1s ease-in-out,margin-"," 0.1s ease-in-out,outline-color 0.1s ease-in-out,z-index 0.25s ease-in-out;border:"," ",";","{border-color:",";box-shadow:",";}&:hover,&:active,","{z-index:1;}&:disabled{z-index:-1;background-color:",";}&:not(:first-of-typ
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6e 2d 22 2b 28 65 2e 74 68 65 6d 65 2e 72 74 6c 3f 22 72 69 67 68 74 22 3a 22 6c 65 66 74 22 29 29 2c 74 26 26 28 30 2c 6f 2e 41 48 29 28 5b 22 22 2c 22 3a 22 2c 22 70 78 3b 22 5d 2c 74 2c 32 2a 65 2e 74 68 65 6d 65 2e 73 70 61 63 65 2e 62 61 73 65 29 7d 29 28 65 29 29 2c 28 65 3d 3e 28 30 2c 73 2e 41 29 28 61 2c 65 29 29 29 3b 64 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 74 68 65 6d 65 3a 72 2e 41 7d 7d 2c 33 31 38 36 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 53 3a 28 29 3d 3e 6f 7d 29 3b 63 6f 6e 73 74 20 6f 3d 5b 22 73 6d 61 6c 6c 22 2c 22 6d 65 64 69 75 6d 22 2c 22 6c 61 72 67 65 22 5d 7d 2c 37 31 32 37 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 72 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 38 39 31 30 29 3b Data Ascii: n-"+(e.theme.rtl?"right":"left")),t&&(0,o.AH)(["",":","px;"],t,2*e.theme.space.base)})(e)),(e=>(0,s.A)(a,e)));d.defaultProps={theme:r.A}},31869:(e,t,n)=>{n.d(t,{S:()=>o});const o=["small","medium","large"]},71277:(e,t,n)=>{n.d(t,{r:()=>s});var o=n(88910);
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 20 6f 3d 6e 28 38 35 39 39 31 29 2c 69 3d 6e 28 36 39 39 31 31 29 2c 73 3d 6e 28 38 38 39 31 30 29 2c 72 3d 6e 28 34 38 35 35 39 29 3b 63 6f 6e 73 74 20 61 3d 21 31 2c 64 3d 73 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 3b 76 61 72 20 6c 3d 6e 28 36 39 38 32 35 29 2c 75 3d 22 75 6e 6d 6f 75 6e 74 65 64 22 2c 63 3d 22 65 78 69 74 65 64 22 2c 70 3d 22 65 6e 74 65 72 69 6e 67 22 2c 68 3d 22 65 6e 74 65 72 65 64 22 2c 6d 3d 22 65 78 69 74 69 6e 67 22 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 76 61 72 20 6f 3b 6f 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 6e 29 7c 7c 74 68 69 73 3b 76 61 72 20 69 2c 73 3d 6e 26 26 21 6e 2e 69 73 4d 6f 75 6e 74 69 6e 67 3f 74 2e 65 6e 74 65 72 3a 74 2e 61 70 Data Ascii: o=n(85991),i=n(69911),s=n(88910),r=n(48559);const a=!1,d=s.createContext(null);var l=n(69825),u="unmounted",c="exited",p="entering",h="entered",m="exiting",f=function(e){function t(t,n){var o;o=e.call(this,t,n)\|\|this;var i,s=n&&!n.isMounting?t.enter:t.ap
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 72 6d 45 6e 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 74 68 69 73 2e 70 72 6f 70 73 2e 65 6e 74 65 72 2c 6f 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3f 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 69 73 4d 6f 75 6e 74 69 6e 67 3a 65 2c 69 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6e 6f 64 65 52 65 66 3f 5b 6f 5d 3a 5b 72 2e 66 69 6e 64 44 4f 4d 4e 6f 64 65 28 74 68 69 73 29 2c 6f 5d 2c 73 3d 69 5b 30 5d 2c 64 3d 69 5b 31 5d 2c 6c 3d 74 68 69 73 2e 67 65 74 54 69 6d 65 6f 75 74 73 28 29 2c 75 3d 6f 3f 6c 2e 61 70 70 65 61 72 3a 6c 2e 65 6e 74 65 72 3b 21 65 26 26 21 6e 7c 7c 61 3f 74 68 69 73 2e 73 61 66 65 53 65 74 53 74 61 74 65 28 7b 73 74 61 74 75 73 3a 68 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 70 72 6f 70 73 2e Data Ascii: rmEnter=function(e){var t=this,n=this.props.enter,o=this.context?this.context.isMounting:e,i=this.props.nodeRef?[o]:[r.findDOMNode(this),o],s=i[0],d=i[1],l=this.getTimeouts(),u=o?l.appear:l.enter;!e&&!n\|\|a?this.safeSetState({status:h},(function(){t.props.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.8	49801	216.198.54.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	537	OUT	GET /web_widget/messenger/latest/web-widget-3190-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:38 UTC	1185	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 14755 Connection: close x-amz-id-2: dBlE95FF/yiy7gbrP6+P8pFMK7DI23U7xafyTG81+laiFsge81Ey4k119wY0PZq1d+23e4E3D7w= x-amz-request-id: YR1P3VED0RY67EWJ x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:14 GMT ETag: "835f7cff134156384684fcc0db13880b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:13 GMT x-amz-version-id: l3e2UJKJCNISLxvRzkkegoAkElCyL9If CF-Cache-Status: HIT Age: 22556 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h2fgUgqLojuq5ljUXM%2FGFZpUqIfDAXx7F%2FL90EEz4c0jK70HfchN7YgYU7kRk7Qfqpi2pnIL7Qwipmj2YZ3Wo%2Fw9Hpbi%2BcoOKv5BWUz1%2FsRF7q4p%2BwOchpAN13v88sMBHtrtFrI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7a9d8ec407-EWR
2025-01-14 15:20:38 UTC	184	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 39 30 5d 2c 7b 33 30 33 33 39 3a 28 65 2c 72 2c 61 29 3d 3e 7b 61 2e 64 28 72 2c 7b 41 3a 28 29 3d 3e 74 7d 29 3b 76 61 72 20 6e 3d 61 28 32 30 39 31 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[3190],{30339:(e,r,a)=>{a.d(r,{A:()=>t});var n=a(2091
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 32 29 2c 73 3d 61 28 37 35 33 33 29 2c 6f 3d 61 28 32 36 39 38 33 29 3b 63 6f 6e 73 74 20 74 3d 28 29 3d 3e 28 28 30 2c 6e 2e 64 34 29 28 6f 2e 4a 4b 29 2c 73 2e 41 2e 74 72 61 6e 73 6c 61 74 65 29 7d 2c 34 33 31 39 30 3a 28 65 2c 72 2c 61 29 3d 3e 7b 61 2e 64 28 72 2c 7b 41 3a 28 29 3d 3e 76 7d 29 3b 76 61 72 20 6e 3d 61 28 32 34 37 32 36 29 2c 73 3d 61 2e 6e 28 6e 29 2c 6f 3d 61 28 38 38 39 31 30 29 2c 74 3d 61 28 32 30 39 31 32 29 2c 69 3d 61 28 31 30 39 34 38 29 2c 6d 3d 61 28 33 32 36 31 29 2c 6c 3d 61 2e 6e 28 6d 29 2c 64 3d 61 28 36 34 30 34 33 29 2c 62 3d 61 28 37 30 30 36 39 29 2c 67 3d 61 28 37 30 35 31 33 29 2c 5f 3d 61 28 32 36 34 33 36 29 2c 63 3d 61 28 37 35 33 33 29 2c 6b 3d 61 28 33 30 33 33 39 29 2c 66 3d 61 28 38 37 39 34 34 29 2c 75 3d Data Ascii: 2),s=a(7533),o=a(26983);const t=()=>((0,n.d4)(o.JK),s.A.translate)},43190:(e,r,a)=>{a.d(r,{A:()=>v});var n=a(24726),s=a.n(n),o=a(88910),t=a(20912),i=a(10948),m=a(3261),l=a.n(m),d=a(64043),b=a(70069),g=a(70513),_=a(26436),c=a(7533),k=a(30339),f=a(87944),u=
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 65 5f 6c 69 6d 69 74 22 2c 7b 66 69 6c 65 55 70 6c 6f 61 64 53 69 7a 65 4c 69 6d 69 74 49 6e 4d 62 3a 35 30 7d 29 2c 63 68 61 72 61 63 74 65 72 4c 69 6d 69 74 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 72 65 63 65 69 70 74 2e 65 78 63 65 65 64 5f 6c 69 6d 69 74 22 29 2c 66 69 6c 65 54 79 70 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 65 72 72 6f 72 2e 66 69 6c 65 5f 74 79 70 65 5f 6c 69 6d 69 74 22 29 2c 75 6e 6b 6e 6f 77 6e 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 74 61 70 5f 74 6f 5f 72 65 74 72 Data Ascii: e_limit",{fileUploadSizeLimitInMb:50}),characterLimit:m("embeddable_framework.messenger.receipt.exceed_limit"),fileType:m("embeddable_framework.messenger.file_upload.error.file_type_limit"),unknown:m("embeddable_framework.messenger.file_upload.tap_to_retr
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 6f 70 65 6e 5f 69 6d 61 67 65 5f 69 6e 5f 6e 65 77 5f 74 61 62 5f 76 32 22 29 2c 70 72 69 6d 61 72 79 50 61 72 74 69 63 69 70 61 6e 74 41 6c 74 54 65 78 74 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6d 61 67 65 5f 6d 65 73 73 61 67 65 2e 61 6c 74 5f 74 65 78 74 2e 65 6e 64 5f 75 73 65 72 5f 76 32 22 29 2c 6f 74 68 65 72 50 61 72 74 69 63 69 70 61 6e 74 41 6c 74 54 65 78 74 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6d 61 67 65 5f 6d 65 73 73 61 67 65 2e 61 6c 74 5f 74 65 78 74 2e 61 67 65 6e 74 5f 76 32 22 Data Ascii: beddable_framework.messenger.file_upload.open_image_in_new_tab_v2"),primaryParticipantAltText:m("embeddable_framework.messenger.image_message.alt_text.end_user_v2"),otherParticipantAltText:m("embeddable_framework.messenger.image_message.alt_text.agent_v2"
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 3d 3e 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 6f 72 6d 2e 73 74 65 70 5f 73 74 61 74 75 73 22 2c 7b 73 74 65 70 3a 65 2c 74 6f 74 61 6c 53 74 65 70 73 3a 72 7d 29 2c 65 72 72 6f 72 73 3a 7b 72 65 71 75 69 72 65 64 46 69 65 6c 64 3a 65 3d 3e 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 6f 72 6d 2e 66 69 65 6c 64 5f 69 73 5f 72 65 71 75 69 72 65 64 5f 76 33 22 2c 7b 66 69 65 6c 64 4c 61 62 65 6c 3a 65 7d 29 2c 72 65 71 75 69 72 65 64 4e 61 6d 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 6f 72 6d 2e Data Ascii: =>m("embeddable_framework.messenger.message.form.step_status",{step:e,totalSteps:r}),errors:{requiredField:e=>m("embeddable_framework.messenger.message.form.field_is_required_v3",{fieldLabel:e}),requiredName:m("embeddable_framework.messenger.message.form.
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 7d 3a 7b 6d 6f 6e 74 68 3a 22 6c 6f 6e 67 22 2c 64 61 79 3a 22 6e 75 6d 65 72 69 63 22 7d 2c 68 6f 75 72 3a 22 6e 75 6d 65 72 69 63 22 2c 6d 69 6e 75 74 65 3a 22 6e 75 6d 65 72 69 63 22 7d 29 7d 60 7d 2c 6d 65 73 73 61 67 65 4c 6f 67 3a 7b 69 6e 69 74 69 61 6c 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 65 71 75 65 73 74 46 61 69 6c 65 64 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6e 69 74 69 61 6c 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 72 65 71 75 65 73 74 5f 66 61 69 6c 65 64 22 29 2c 69 6e 69 74 69 61 6c 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 65 74 72 79 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6e 69 74 69 61 6c 5f 63 6f 6e Data Ascii: }:{month:"long",day:"numeric"},hour:"numeric",minute:"numeric"})}`},messageLog:{initialConversationRequestFailed:m("embeddable_framework.messenger.initial_conversation_request_failed"),initialConversationRetry:m("embeddable_framework.messenger.initial_con
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 74 69 74 6c 65 2e 77 68 61 74 73 61 70 70 22 29 2c 73 75 62 74 69 74 6c 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 73 75 62 74 69 74 6c 65 2e 77 68 61 74 73 61 70 70 22 29 2c 69 6e 73 74 72 75 63 74 69 6f 6e 73 3a 7b 64 65 73 6b 74 6f 70 3a 28 29 3d 3e 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 69 6e 73 74 72 75 63 74 69 6f 6e 73 5f 64 65 73 6b 74 6f 70 2e 77 68 61 74 73 61 70 70 22 29 2c 6d Data Ascii: ramework.messenger.channel_linking.page.title.whatsapp"),subtitle:m("embeddable_framework.messenger.channel_linking.page.subtitle.whatsapp"),instructions:{desktop:()=>m("embeddable_framework.messenger.channel_linking.page.instructions_desktop.whatsapp"),m
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 62 75 74 74 6f 6e 5f 64 65 73 6b 74 6f 70 2e 66 62 5f 6d 65 73 73 65 6e 67 65 72 22 29 2c 6d 6f 62 69 6c 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 62 75 74 74 6f 6e 5f 6d 6f 62 69 6c 65 2e 66 62 5f 6d 65 73 73 65 6e 67 65 72 22 29 7d 2c 64 69 73 63 6f 6e 6e 65 63 74 42 75 74 74 6f 6e 54 65 78 74 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 64 69 73 63 6f 6e 6e 65 63 74 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 29 2c 64 69 73 63 6f 6e 6e 65 63 74 4c 69 6e 6b 54 65 78 74 Data Ascii: inking.page.button_desktop.fb_messenger"),mobile:m("embeddable_framework.messenger.channel_linking.page.button_mobile.fb_messenger")},disconnectButtonText:m("embeddable_framework.messenger.channel_link.messenger.disconnect_button_text"),disconnectLinkText
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6d 65 3a 65 7d 29 7d 7d 2c 73 6f 75 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 3a 7b 74 6f 67 67 6c 65 45 6e 61 62 6c 65 64 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 73 6f 75 6e 64 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 74 6f 67 67 6c 65 2e 65 6e 61 62 6c 65 64 22 29 2c 74 6f 67 67 6c 65 44 69 73 61 62 6c 65 64 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 73 6f 75 6e 64 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 74 6f 67 67 6c 65 2e 64 69 73 61 62 6c 65 64 22 29 2c 68 69 64 64 65 6e 46 69 65 6c 64 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 73 6f 75 6e 64 5f 6e 6f 74 69 Data Ascii: me:e})}},soundNotifications:{toggleEnabled:m("embeddable_framework.messenger.sound_notification.toggle.enabled"),toggleDisabled:m("embeddable_framework.messenger.sound_notification.toggle.disabled"),hiddenField:m("embeddable_framework.messenger.sound_noti
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 74 6f 6e 65 5f 70 69 63 6b 65 72 2e 6c 61 62 65 6c 2e 6d 65 64 69 75 6d 5f 74 6f 6e 65 22 29 2c 74 6f 6e 65 50 69 63 6b 65 72 4c 61 62 65 6c 4d 65 64 69 75 6d 44 61 72 6b 54 6f 6e 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 74 6f 6e 65 5f 70 69 63 6b 65 72 2e 6c 61 62 65 6c 2e 6d 65 64 69 75 6d 5f 64 61 72 6b 5f 74 6f 6e 65 22 29 2c 74 6f 6e 65 50 69 63 6b 65 72 4c 61 62 65 6c 44 61 72 6b 54 6f 6e 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 74 6f 6e 65 5f 70 69 63 6b 65 72 2e 6c 61 62 65 6c 2e 64 61 72 6b 5f 74 6f 6e 65 22 29 2c 73 65 61 72 63 68 4c 61 62 65 6c 3a 6d 28 22 65 6d 62 65 64 64 61 Data Ascii: tone_picker.label.medium_tone"),tonePickerLabelMediumDarkTone:m("embeddable_framework.messenger.emoji.tone_picker.label.medium_dark_tone"),tonePickerLabelDarkTone:m("embeddable_framework.messenger.emoji.tone_picker.label.dark_tone"),searchLabel:m("embedda

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.8	49803	216.198.54.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	537	OUT	GET /web_widget/messenger/latest/web-widget-8173-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:38 UTC	1177	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 10277 Connection: close x-amz-id-2: fSOBUg7mdwekB90q4C+JpB9/eIWS/KFpobdc99Nj0PArj56eFh/ZBihzPIlZ0krnC9YHkQjOvVk= x-amz-request-id: YR1N7PCXT0KKHYPP x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:15 GMT ETag: "6ee6bafd5311611f1980bb49422bbfc9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:14 GMT x-amz-version-id: nkKtmKGFnhIyFZJKGtv6k01EXboA4S9Y CF-Cache-Status: HIT Age: 22556 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jUQp1y8zYmgASa7ijD7ltWM%2B7FkraTFrH6H94YtdbDplGwq0qbYAXrl7Ratx1j7iUJOw9aebuDAAjgFWSpgfR2c9k1VmZiMZklkUV5PvkoztgJ%2F2kNYjqG8SqOKVmWUDG05uthE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7a7cfd4361-EWR
2025-01-14 15:20:38 UTC	192	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 31 37 33 5d 2c 7b 36 36 35 31 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 38 38 39 31 30 29 3b 63 6f 6e 73 74 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[8173],{66515:(e,t,n)=>{n.d(t,{A:()=>o});var r=n(88910);const
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 20 6f 3d 28 29 3d 3e 7b 63 6f 6e 73 74 5b 65 2c 74 5d 3d 28 30 2c 72 2e 75 73 65 53 74 61 74 65 29 28 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 29 29 2c 6e 3d 28 29 3d 3e 7b 74 28 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 29 29 7d 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 6e 29 2c 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 6e 29 7d 29 29 2c 5b 5d 29 2c 7b 73 63 61 6c 65 3a 65 3e 3d 34 30 30 3f Data Ascii: o=()=>{const[e,t]=(0,r.useState)(Math.round(100window.devicePixelRatio)),n=()=>{t(Math.round(100window.devicePixelRatio))};return(0,r.useEffect)((()=>(window.addEventListener("resize",n),()=>{window.removeEventListener("resize",n)})),[]),{scale:e>=400?
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 67 2c 77 69 64 74 68 3a 66 2c 62 6f 72 64 65 72 3a 30 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 62 6f 78 53 68 61 64 6f 77 3a 61 2e 6f 67 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 22 31 30 30 25 22 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 75 6e 73 65 74 22 2c 6f 70 61 63 69 74 79 3a 30 2c 61 6c 69 67 6e 53 65 6c 66 3a 22 65 6e 64 22 7d 2c 72 65 66 3a 6e 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 68 2e 6a 73 78 73 29 28 64 2e 41 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 68 2e 6a 73 78 29 28 6d 2e 6b 2c 7b 7d 29 2c 65 5d 7d 29 7d 29 7d 29 29 7d 2c 34 34 30 32 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 67 7d 29 3b 76 61 72 20 72 3d 6e 28 38 38 39 31 Data Ascii: height:g,width:f,border:0,backgroundColor:"transparent",boxShadow:a.og,borderRadius:"100%",verticalAlign:"unset",opacity:0,alignSelf:"end"},ref:n,children:(0,h.jsxs)(d.A,{children:[(0,h.jsx)(m.k,{}),e]})})}))},44025:(e,t,n)=>{n.d(t,{A:()=>g});var r=n(8891
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 65 6c 56 69 73 69 62 6c 65 3a 65 2c 72 65 66 73 3a 74 7d 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 28 30 2c 6f 2e 64 34 29 28 61 2e 78 44 29 2c 73 3d 28 30 2c 72 2e 75 73 65 52 65 66 29 28 30 29 3b 28 30 2c 72 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 73 2e 63 75 72 72 65 6e 74 3d 44 61 74 65 2e 6e 6f 77 28 29 7d 29 2c 5b 6e 5d 29 3b 63 6f 6e 73 74 20 64 3d 28 30 2c 72 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 65 3d 3e 7b 63 6f 6e 73 74 7b 63 6c 6f 73 65 46 72 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 46 72 61 6d 65 3a 72 2c 61 76 61 74 61 72 46 72 61 6d 65 3a 6f 7d 3d 74 2e 63 75 72 72 65 6e 74 3b 69 66 28 21 72 3f 2e 61 6e 69 6d 61 74 65 29 72 65 74 75 72 6e 3b 72 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 30 22 2c 72 2e 73 Data Ascii: elVisible:e,refs:t})=>{const n=(0,o.d4)(a.xD),s=(0,r.useRef)(0);(0,r.useLayoutEffect)((()=>{s.current=Date.now()}),[n]);const d=(0,r.useCallback)((e=>{const{closeFrame:n,messageFrame:r,avatarFrame:o}=t.current;if(!r?.animate)return;r.style.opacity="0",r.s
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 2c 6f 3f 2e 61 6e 69 6d 61 74 65 28 5b 7b 6f 70 61 63 69 74 79 3a 30 7d 5d 2c 32 30 30 29 3b 72 2e 61 6e 69 6d 61 74 65 28 5b 7b 6f 70 61 63 69 74 79 3a 30 7d 5d 2c 32 30 30 29 2e 6f 6e 66 69 6e 69 73 68 3d 65 7d 7d 7d 7d 2c 37 39 33 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 72 3d 6e 28 38 38 39 31 30 29 2c 6f 3d 6e 28 32 30 39 31 32 29 2c 69 3d 6e 28 32 36 34 33 36 29 2c 73 3d 6e 28 37 30 38 37 29 2c 61 3d 6e 28 35 32 32 39 35 29 2c 63 3d 6e 28 36 32 32 33 29 3b 63 6f 6e 73 74 20 64 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 6e 65 72 57 69 64 74 68 3a 65 2c 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 7d 3d 63 2e 4a 63 3b 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 65 2c 68 65 69 67 68 74 3a 74 7d 7d 2c 6c Data Ascii: ,o?.animate([{opacity:0}],200);r.animate([{opacity:0}],200).onfinish=e}}}},79390:(e,t,n)=>{n.d(t,{A:()=>h});var r=n(88910),o=n(20912),i=n(26436),s=n(7087),a=n(52295),c=n(6223);const d=()=>{const{innerWidth:e,innerHeight:t}=c.Jc;return{width:e,height:t}},l
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 6e 28 72 29 2c 69 3d 6e 28 38 38 39 31 30 29 2c 73 3d 6e 28 31 30 39 34 38 29 3b 63 6f 6e 73 74 20 61 3d 73 2e 41 79 2e 62 75 74 74 6f 6e 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 31 65 65 39 67 74 66 2d 30 22 7d 29 28 5b 22 70 61 64 64 69 6e 67 3a 22 2c 22 3b 62 6f 72 64 65 72 3a 30 3b 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 22 2c 22 3b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 22 2c 22 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 69 74 69 61 6c 3b 26 3a 66 Data Ascii: n(r),i=n(88910),s=n(10948);const a=s.Ay.button.withConfig({componentId:"sc-1ee9gtf-0"})(["padding:",";border:0;width:max-content;max-width:",";overflow-wrap:break-word;word-break:break-word;background:",";color:",";border-radius:",";text-align:initial;&:f
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 3a 6f 2c 72 65 66 3a 6d 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 6e 2c 69 73 54 69 74 6c 65 56 69 73 69 62 6c 65 3a 42 6f 6f 6c 65 61 6e 28 65 29 2c 63 68 69 6c 64 72 65 6e 3a 5b 65 26 26 28 30 2c 6c 2e 6a 73 78 29 28 63 2c 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 2c 28 30 2c 6c 2e 6a 73 78 29 28 64 2c 7b 63 68 69 6c 64 72 65 6e 3a 74 7d 29 5d 7d 29 7d 3b 6d 2e 70 72 6f 70 54 79 70 65 73 3d 7b 74 69 74 6c 65 3a 6f 28 29 2e 6e 6f 64 65 2c 61 72 69 61 4c 61 62 65 6c 3a 6f 28 29 2e 73 74 72 69 6e 67 2c 6d 65 73 73 61 67 65 3a 6f 28 29 2e 6e 6f 64 65 2e 69 73 52 65 71 75 69 72 65 64 2c 6d 61 78 57 69 64 74 68 3a 6f 28 29 2e 6e 75 6d 62 65 72 2c 6f 6e 43 6c 69 63 6b 3a 6f 28 29 2e 66 75 6e 63 2e 69 73 52 65 71 75 69 72 65 64 2c 6f 6e 52 65 6e 64 65 72 3a 6f 28 Data Ascii: :o,ref:m,"aria-label":n,isTitleVisible:Boolean(e),children:[e&&(0,l.jsx)(c,{children:e}),(0,l.jsx)(d,{children:t})]})};m.propTypes={title:o().node,ariaLabel:o().string,message:o().node.isRequired,maxWidth:o().number,onClick:o().func.isRequired,onRender:o(
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 65 73 73 65 6e 67 65 72 2e 62 61 73 65 46 6f 6e 74 53 69 7a 65 29 29 2c 28 65 3d 3e 28 30 2c 73 2e 44 30 29 28 31 36 2c 65 2e 74 68 65 6d 65 2e 6d 65 73 73 65 6e 67 65 72 2e 62 61 73 65 46 6f 6e 74 53 69 7a 65 29 29 29 2c 6d 3d 28 7b 6f 6e 43 6c 69 63 6b 3a 65 2c 61 72 69 61 4c 61 62 65 6c 3a 74 7d 29 3d 3e 28 30 2c 61 2e 6a 73 78 29 28 64 2c 7b 6f 6e 43 6c 69 63 6b 3a 65 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 74 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 61 2e 6a 73 78 29 28 6c 2c 7b 7d 29 7d 29 3b 6d 2e 70 72 6f 70 54 79 70 65 73 3d 7b 6f 6e 43 6c 69 63 6b 3a 6f 28 29 2e 66 75 6e 63 2c 61 72 69 61 4c 61 62 65 6c 3a 6f 28 29 2e 73 74 72 69 6e 67 7d 3b 63 6f 6e 73 74 20 68 3d 28 30 2c 69 2e 41 79 29 28 6d 29 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 63 6f 6d Data Ascii: essenger.baseFontSize)),(e=>(0,s.D0)(16,e.theme.messenger.baseFontSize))),m=({onClick:e,ariaLabel:t})=>(0,a.jsx)(d,{onClick:e,"aria-label":t,children:(0,a.jsx)(l,{})});m.propTypes={onClick:o().func,ariaLabel:o().string};const h=(0,i.Ay)(m).withConfig({com
2025-01-14 15:20:38 UTC	502	IN	Data Raw: 63 6f 6e 73 74 20 79 3d 7b 63 6f 6c 6f 72 53 63 68 65 6d 65 3a 22 6c 69 67 68 74 22 2c 2e 2e 2e 6f 2e 73 74 79 6c 65 7d 3b 72 65 74 75 72 6e 20 67 26 26 70 26 26 21 72 7c 7c 28 79 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 29 2c 28 30 2c 64 2e 6a 73 78 29 28 22 69 66 72 61 6d 65 22 2c 7b 72 65 66 3a 68 2c 74 69 74 6c 65 3a 6e 2c 2e 2e 2e 6f 2c 73 74 79 6c 65 3a 79 2c 63 68 69 6c 64 72 65 6e 3a 67 26 26 70 26 26 28 30 2c 64 2e 6a 73 78 29 28 61 2e 49 44 2c 7b 74 61 72 67 65 74 3a 6d 2e 63 75 72 72 65 6e 74 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 65 61 64 22 29 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 64 2e 6a 73 78 29 28 63 2e 41 79 2c 7b 76 61 6c 75 65 3a 7b 64 6f 63 75 6d 65 6e 74 3a 6d 2e 63 75 Data Ascii: const y={colorScheme:"light",...o.style};return g&&p&&!r\|\|(y.display="none"),(0,d.jsx)("iframe",{ref:h,title:n,...o,style:y,children:g&&p&&(0,d.jsx)(a.ID,{target:m.current.contentDocument.querySelector("head"),children:(0,d.jsx)(c.Ay,{value:{document:m.cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.8	49799	216.198.54.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	537	OUT	GET /web_widget/messenger/latest/web-widget-2229-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:38 UTC	1183	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 13558 Connection: close x-amz-id-2: uro8jB83SJw/TcMg3XYh3IIpgeGJudhxaZmdb0Omb37RTyIWf9hHcFBUzQCNlwu+YlajFVj6/Uk= x-amz-request-id: 56VKHVH3E94J5KZN x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:14 GMT ETag: "bb8cbfd720c605961aae1c3d74c181ee" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:13 GMT x-amz-version-id: R2vMu55LFXiKwfjvuElsTSFzsBT40yDl CF-Cache-Status: HIT Age: 22556 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=067ORDw7%2B15jGat8HofrhoJ6QLp13h8rdKrZMZnye7ROJ2Sr1s3dal4UKDebhL6vC8zjwpuTYwLxiiNPwWnmcfTM%2BwAh29H4x1vT491D9Tr%2FH91CKQW%2BO%2FrWuL4YpMUoXqIFEe4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7ae8faf795-EWR
2025-01-14 15:20:38 UTC	186	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 32 39 5d 2c 7b 35 30 39 31 35 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 59 65 7d 29 3b Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[2229],{50915:(e,n,t)=>{t.r(n),t.d(n,{default:()=>Ye});
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 76 61 72 20 72 3d 74 28 34 38 35 35 39 29 2c 73 3d 74 28 32 30 39 31 32 29 2c 69 3d 74 28 38 38 39 31 30 29 2c 61 3d 74 28 32 34 37 32 36 29 2c 6f 3d 74 2e 6e 28 61 29 2c 64 3d 74 28 37 30 30 36 39 29 2c 6c 3d 74 28 35 34 38 39 39 29 2c 63 3d 74 28 34 33 32 32 39 29 2c 70 3d 74 28 31 30 39 34 38 29 2c 68 3d 74 28 39 34 39 39 38 29 3b 63 6f 6e 73 74 20 6d 3d 70 2e 41 79 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 31 71 39 66 77 76 79 2d 30 22 7d 29 28 5b 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 68 Data Ascii: var r=t(48559),s=t(20912),i=t(88910),a=t(24726),o=t.n(a),d=t(70069),l=t(54899),c=t(43229),p=t(10948),h=t(94998);const m=p.Ay.div.withConfig({componentId:"sc-1q9fwvy-0"})(["position:absolute;left:0px;display:flex;align-items:center;justify-content:center;h
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 32 2c 38 2e 32 33 38 35 37 36 32 35 20 34 2e 32 33 38 35 37 36 32 35 2c 36 20 37 2c 36 20 4c 37 2c 36 20 5a 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 31 32 2e 30 30 30 30 30 30 2c 20 31 34 2e 30 30 30 30 30 30 29 20 73 63 61 6c 65 28 2d 31 2c 20 31 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 2e 30 30 30 30 30 30 2c 20 2d 31 34 2e 30 30 30 30 30 30 29 20 22 7d 29 7d 29 7d 3b 62 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 77 69 64 74 68 3a 22 32 34 70 78 22 2c 68 65 69 67 68 74 3a 22 32 34 70 78 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 34 20 32 34 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 78 6d 6c 6e 73 58 6c 69 Data Ascii: 2,8.23857625 4.23857625,6 7,6 L7,6 Z",transform:"translate(12.000000, 14.000000) scale(-1, 1) translate(-12.000000, -14.000000) "})})};b.defaultProps={width:"24px",height:"24px",viewBox:"0 0 24 24",version:"1.1",xmlns:"http://www.w3.org/2000/svg",xmlnsXli
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 22 2c 22 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 26 3a 61 63 74 69 76 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 7d 26 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 7d 26 5b 64 61 74 61 2d 67 61 72 64 65 6e 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 5d 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 22 2c 22 3b 7d 7d 22 5d 2c 28 65 3d 3e 43 28 65 2e 73 68 61 70 65 2c 65 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 29 29 2c 28 65 3d 3e 65 2e 74 68 65 6d 65 2e 6d 65 73 73 65 6e 67 65 72 2e 63 6f 6c Data Ascii: tion:relative;overflow:hidden;border-radius:",";width:100%;height:100%;background-color:",";&:active{box-shadow:none;}&:focus{box-shadow:none;}&[data-garden-focus-visible]{box-shadow:inset ",";}}"],(e=>C(e.shape,e.shapeSettings)),(e=>e.theme.messenger.col
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 30 2c 73 2e 64 34 29 28 52 2e 6c 24 29 2c 6e 3d 28 30 2c 73 2e 64 34 29 28 53 2e 61 37 29 2c 74 3d 28 30 2c 73 2e 64 34 29 28 53 2e 7a 53 29 2c 5b 72 2c 61 5d 3d 28 30 2c 69 2e 75 73 65 53 74 61 74 65 29 28 30 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 65 3d 3d 3d 52 2e 68 5f 2e 53 69 6e 67 6c 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 3f 61 28 6e 29 3a 61 28 74 29 29 7d 29 2c 5b 65 2c 6e 2c 74 5d 29 2c 72 7d 3b 76 61 72 20 48 3d 74 28 34 35 38 31 32 29 2c 57 3d 74 28 39 38 35 39 37 29 2c 50 3d 74 28 35 32 38 35 39 29 2c 44 3d 74 28 39 39 30 32 38 29 2c 4d 3d 74 28 36 36 35 31 35 29 2c 5a 3d Data Ascii: 0,s.d4)(R.l$),n=(0,s.d4)(S.a7),t=(0,s.d4)(S.zS),[r,a]=(0,i.useState)(0);return(0,i.useEffect)((()=>{"number"==typeof t&&"number"==typeof n&&(e===R.h_.SingleConversation?a(n):a(t))}),[e,n,t]),r};var H=t(45812),W=t(98597),P=t(52859),D=t(99028),M=t(66515),Z=
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 33 30 25 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 70 78 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 70 78 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: rm: translateY(0px) rotate(0deg);\n }\n\n 30% {\n -webkit-transform: translateY(-5px) rotate(2deg);\n transform: translateY(-5px) rotate(2deg);\n }\n\n 60% {\n -webkit-transform:
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 73 65 6e 67 65 72 2e 6c 61 75 6e 63 68 65 72 2e 66 72 61 6d 65 2e 74 69 74 6c 65 22 29 3b 72 65 74 75 72 6e 20 66 3d 3d 3d 55 2e 76 2e 53 75 63 63 65 73 73 66 75 6c 26 26 28 65 3d 30 3d 3d 3d 78 3f 62 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6c 61 75 6e 63 68 65 72 2e 66 72 61 6d 65 2e 6e 6f 5f 6e 65 77 5f 6d 65 73 73 61 67 65 73 5f 74 69 74 6c 65 22 29 3a 31 3d 3d 3d 78 3f 62 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6c 61 75 6e 63 68 65 72 2e 66 72 61 6d 65 2e 6f 6e 65 5f 6e 65 77 5f 6d 65 73 73 61 67 65 5f 74 69 74 6c 65 22 29 3a 62 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6c 61 75 Data Ascii: senger.launcher.frame.title");return f===U.v.Successful&&(e=0===x?b("embeddable_framework.messenger.launcher.frame.no_new_messages_title"):1===x?b("embeddable_framework.messenger.launcher.frame.one_new_message_title"):b("embeddable_framework.messenger.lau
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 2c 73 65 3d 74 28 31 37 33 39 38 29 2c 69 65 3d 74 28 38 30 30 39 36 29 2c 61 65 3d 74 28 39 39 33 31 37 29 2c 6f 65 3d 74 28 33 39 34 35 33 29 2c 64 65 3d 74 28 33 31 36 35 30 29 2c 6c 65 3d 74 28 34 34 30 32 35 29 2c 63 65 3d 74 28 38 33 32 36 38 29 2c 70 65 3d 74 28 34 37 33 38 36 29 2c 68 65 3d 74 28 37 39 33 39 30 29 2c 6d 65 3d 74 28 39 33 39 30 31 29 3b 63 6f 6e 73 74 20 75 65 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 73 2e 77 41 29 28 29 2c 6e 3d 28 30 2c 73 2e 64 34 29 28 4f 2e 78 44 29 2c 74 3d 28 30 2c 73 2e 64 34 29 28 69 65 2e 48 41 29 2c 72 3d 28 30 2c 73 2e 64 34 29 28 73 65 2e 5f 36 29 2c 61 3d 28 30 2c 73 2e 64 34 29 28 48 2e 42 31 29 2c 6f 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 74 29 2c 64 3d 28 30 2c 73 2e 64 34 29 28 6d 65 Data Ascii: ,se=t(17398),ie=t(80096),ae=t(99317),oe=t(39453),de=t(31650),le=t(44025),ce=t(83268),pe=t(47386),he=t(79390),me=t(93901);const ue=()=>{const e=(0,s.wA)(),n=(0,s.d4)(O.xD),t=(0,s.d4)(ie.HA),r=(0,s.d4)(se._6),a=(0,s.d4)(H.B1),o=(0,i.useRef)(t),d=(0,s.d4)(me
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 2e 65 28 36 32 30 39 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 36 36 32 30 39 29 29 29 29 2c 66 65 3d 28 29 3d 3e 7b 63 6f 6e 73 74 5b 65 2c 6e 5d 3d 28 30 2c 69 2e 75 73 65 53 74 61 74 65 29 28 21 31 29 2c 74 3d 28 30 2c 73 2e 64 34 29 28 67 65 2e 42 48 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 74 26 26 6e 28 21 30 29 7d 29 2c 5b 74 5d 29 2c 28 30 2c 75 2e 6a 73 78 29 28 69 2e 53 75 73 70 65 6e 73 65 2c 7b 66 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 63 68 69 6c 64 72 65 6e 3a 65 26 26 28 30 2c 75 2e 6a 73 78 29 28 78 65 2c 7b 7d 29 7d 29 7d 2c 62 65 3d 70 2e 41 79 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 31 6f 38 67 6c 63 6e 2d 30 22 7d 29 28 5b Data Ascii: .e(6209).then(t.bind(t,66209)))),fe=()=>{const[e,n]=(0,i.useState)(!1),t=(0,s.d4)(ge.BH);return(0,i.useEffect)((()=>{t&&n(!0)}),[t]),(0,u.jsx)(i.Suspense,{fallback:null,children:e&&(0,u.jsx)(xe,{})})},be=p.Ay.div.withConfig({componentId:"sc-1o8glcn-0"})([
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 68 74 3a 45 2e 4b 72 2c 77 69 64 74 68 3a 45 2e 4b 72 2b 32 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 62 6f 74 74 6f 6d 3a 6c 26 26 64 3f 45 2e 5a 59 2e 62 6f 74 74 6f 6d 28 45 2e 47 31 29 3a 45 2e 5a 59 2e 62 6f 74 74 6f 6d 28 61 29 2c 5b 74 5d 3a 22 72 69 67 68 74 22 3d 3d 3d 74 3f 45 2e 5a 59 2e 72 69 67 68 74 28 6f 29 3a 45 2e 5a 59 2e 6c 65 66 74 28 6f 29 2c 62 6f 72 64 65 72 3a 30 2c 6d 61 72 67 69 6e 54 6f 70 3a 30 7d 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 75 2e 6a 73 78 29 28 56 2e 41 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 30 2c 75 2e 6a 73 78 73 29 28 75 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 75 2e 6a 73 78 29 28 6a 65 2c 7b 7d 29 2c 65 5d 7d 29 7d 29 7d 29 7d 3b 76 65 2e 70 72 6f 70 54 79 70 65 73 3d Data Ascii: ht:E.Kr,width:E.Kr+20,position:"fixed",bottom:l&&d?E.ZY.bottom(E.G1):E.ZY.bottom(a),[t]:"right"===t?E.ZY.right(o):E.ZY.left(o),border:0,marginTop:0},children:(0,u.jsx)(V.A,{children:(0,u.jsxs)(u.Fragment,{children:[(0,u.jsx)(je,{}),e]})})})};ve.propTypes=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.8	49804	104.16.79.73	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	553	OUT	GET /beacon.min.js HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:38 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 901e9c7b5a405e70-EWR
2025-01-14 15:20:38 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2025-01-14 15:20:38 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.8	49807	216.198.53.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:38 UTC	397	OUT	GET /web_widget/messenger/latest/web-widget-main-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	1188	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 458718 Connection: close x-amz-id-2: N6avGMZg1n3iZNTaMqYUC4WuEXz8+iWdvxnxxQc5Fau+0JJ/AcMkVqfzjojgy+mGEJKJmJxJo+k= x-amz-request-id: YR1K0EKGDN9KMJ5X x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:15 GMT ETag: "3a75d4e1e7a171202302f5f4ca53f5f3" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:14 GMT x-amz-version-id: EjnlyC8wstVofsLUPKXcoT743XHEl2XZ CF-Cache-Status: HIT Age: 22556 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eqtZJkDqG2KkpM35cgw5EKE7Q%2BzL6FlQVW%2BSfJ2EOXleyvwiYY%2FTV%2B3qxUsWIypk%2FkvNuZ5yS6IuM6pE0dXk8tk8W%2FA5aI%2FluvIi6qQK2SqDIyf6thZvnY4G4Xq0l5ltpinGzl0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7b980e72a7-EWR
2025-01-14 15:20:39 UTC	181	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d 77 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-w
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 32 36 34 33 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 43 69 3a 28 29 3d 3e 67 2c 44 39 3a 28 29 3d 3e 72 2e 44 39 2c 45 7a 3a 28 29 3d 3e 70 2c 47 31 3a 28 29 3d 3e 61 2c 4b 72 3a 28 29 3d 3e 63 2c 4e 48 3a 28 29 3d 3e 5f 2c 52 44 3a 28 29 3d 3e 64 2c 52 6a 3a 28 29 3d 3e 62 2c 55 74 3a 28 29 3d 3e 76 2c 5a 59 3a 28 29 3d 3e 79 2c 5f 6b 3a 28 29 3d 3e 69 2c 61 66 3a 28 29 3d 3e 6a 2c 61 7a 3a 28 29 3d 3e 73 2c 63 4b 3a 28 29 3d 3e 53 2c 67 6f 3a 28 29 3d 3e 78 2c 70 4a 3a 28 29 3d 3e 6c 2c 70 4b 3a Data Ascii: idget-sdks/web-widget/getting-started/legal/ */(()=>{var e,t,n,r,o={26436:(e,t,n)=>{"use strict";n.d(t,{Ci:()=>g,D9:()=>r.D9,Ez:()=>p,G1:()=>a,Kr:()=>c,NH:()=>_,RD:()=>d,Rj:()=>b,Ut:()=>v,ZY:()=>y,_k:()=>i,af:()=>j,az:()=>s,cK:()=>S,go:()=>x,pJ:()=>l,pK:
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 37 31 31 37 29 3b 63 6f 6e 73 74 20 73 3d 28 30 2c 72 2e 5a 30 29 28 7b 6e 61 6d 65 3a 22 61 74 74 61 63 68 6d 65 6e 74 73 22 2c 69 6e 69 74 69 61 6c 53 74 61 74 65 3a 7b 69 73 45 6e 61 62 6c 65 64 3a 21 30 7d 2c 72 65 64 75 63 65 72 3a 7b 7d 2c 65 78 74 72 61 52 65 64 75 63 65 72 73 3a 7b 5b 6f 2e 6c 79 5d 28 65 2c 74 29 7b 21 31 3d 3d 3d 74 2e 70 61 79 6c 6f 61 64 3f 2e 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 26 26 28 65 2e 69 73 45 6e 61 62 6c 65 64 3d 21 31 29 7d 7d 7d 29 2c 69 3d 65 3d 3e 65 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 69 73 45 6e 61 62 6c 65 64 2c 61 3d 73 2e 72 65 64 75 63 65 72 7d 2c 37 32 32 37 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 61 2c 4f 3a 28 Data Ascii: 7117);const s=(0,r.Z0)({name:"attachments",initialState:{isEnabled:!0},reducer:{},extraReducers:{[o.ly](e,t){!1===t.payload?.attachmentsEnabled&&(e.isEnabled=!1)}}}),i=e=>e.attachments.isEnabled,a=s.reducer},72275:(e,t,n)=>{"use strict";n.d(t,{A:()=>a,O:(
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 72 7d 29 3b 63 6f 6e 73 74 20 72 3d 65 3d 3e 6e 28 36 33 34 31 38 29 28 60 2e 2f 24 7b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2e 6a 73 6f 6e 60 29 2e 63 61 74 63 68 28 28 28 29 3d 3e 7b 7d 29 29 7d 2c 33 35 37 31 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 22 65 6e 2d 75 73 22 3a 31 2c 65 73 3a 32 2c 64 65 3a 38 2c 22 7a 68 2d 74 77 22 3a 39 2c 22 7a 68 2d 63 6e 22 3a 31 30 2c 70 6c 3a 31 33 2c 66 72 3a 31 36 2c 22 70 74 2d 62 72 22 3a 31 39 2c 69 74 3a 32 32 2c 72 6f 3a 32 33 2c 69 73 3a 32 34 2c 76 69 3a 32 36 2c 72 75 3a 32 37 2c 68 65 3a 33 30 2c 6e 6f 3a 33 34 2c 66 69 6c 3a 34 37 2c 61 72 3a 36 36 2c 6a 61 3a 36 37 2c 6b 6f 3a 36 39 2c 73 6c 3a 37 32 2c 68 72 3a 37 34 2c Data Ascii: strict";n.d(t,{A:()=>r});const r=e=>n(63418)(`./${e.toLowerCase()}.json`).catch((()=>{}))},35714:e=>{e.exports={"en-us":1,es:2,de:8,"zh-tw":9,"zh-cn":10,pl:13,fr:16,"pt-br":19,it:22,ro:23,is:24,vi:26,ru:27,he:30,no:34,fil:47,ar:66,ja:67,ko:69,sl:72,hr:74,
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 63 79 22 3a 31 34 31 35 2c 6e 62 3a 31 34 31 36 2c 22 65 6e 2d 69 74 22 3a 31 34 31 37 2c 22 65 6e 2d 6c 75 22 3a 31 34 31 38 2c 22 65 6e 2d 6e 6c 22 3a 31 34 31 39 2c 22 65 6e 2d 6e 6f 22 3a 31 34 32 30 2c 22 66 72 2d 6c 75 22 3a 31 34 32 31 2c 22 65 6e 2d 6d 78 22 3a 31 34 32 32 2c 22 65 6e 2d 74 68 22 3a 31 34 32 33 2c 69 6b 74 3a 31 34 32 34 2c 69 75 3a 31 34 32 35 2c 22 65 73 2d 62 6f 22 3a 31 34 32 36 2c 22 65 73 2d 63 72 22 3a 31 34 32 37 2c 22 65 73 2d 65 63 22 3a 31 34 32 38 2c 22 61 66 2d 7a 61 22 3a 31 34 32 39 2c 22 61 72 2d 70 73 22 3a 31 34 33 30 2c 22 61 73 2d 69 6e 22 3a 31 34 33 31 2c 22 61 79 2d 62 6f 22 3a 31 34 33 32 2c 22 62 67 2d 62 67 22 3a 31 34 33 33 2c 22 62 6e 2d 69 6e 22 3a 31 34 33 34 2c 22 63 61 2d 65 73 22 3a 31 34 33 35 2c Data Ascii: cy":1415,nb:1416,"en-it":1417,"en-lu":1418,"en-nl":1419,"en-no":1420,"fr-lu":1421,"en-mx":1422,"en-th":1423,ikt:1424,iu:1425,"es-bo":1426,"es-cr":1427,"es-ec":1428,"af-za":1429,"ar-ps":1430,"as-in":1431,"ay-bo":1432,"bg-bg":1433,"bn-in":1434,"ca-es":1435,
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 31 35 32 31 2c 22 74 65 2d 69 6e 22 3a 31 35 32 32 2c 22 66 69 6c 2d 70 68 22 3a 31 35 32 33 2c 22 74 6e 2d 7a 61 22 3a 31 35 32 34 2c 22 74 72 2d 62 67 22 3a 31 35 32 35 2c 22 74 73 2d 7a 61 22 3a 31 35 32 36 2c 22 75 6b 2d 73 6b 22 3a 31 35 32 37 2c 22 75 6b 2d 75 61 22 3a 31 35 32 38 2c 22 75 72 2d 69 6e 22 3a 31 35 32 39 2c 22 78 68 2d 7a 61 22 3a 31 35 33 30 2c 22 7a 75 2d 7a 61 22 3a 31 35 33 31 2c 22 65 73 2d 70 72 22 3a 31 35 33 32 2c 22 65 6e 2d 70 72 22 3a 31 35 33 33 2c 22 76 69 2d 76 6e 22 3a 31 35 33 34 2c 22 65 6e 2d 76 6e 22 3a 31 35 33 35 2c 22 61 72 2d 61 65 22 3a 31 35 33 36 2c 22 65 6e 2d 61 65 22 3a 31 35 33 37 2c 22 61 6a 70 2d 70 73 22 3a 31 35 33 38 2c 22 61 70 63 2d 70 73 22 3a 31 35 33 39 2c 22 6d 73 2d 6d 79 22 3a 31 35 34 30 2c Data Ascii: 1521,"te-in":1522,"fil-ph":1523,"tn-za":1524,"tr-bg":1525,"ts-za":1526,"uk-sk":1527,"uk-ua":1528,"ur-in":1529,"xh-za":1530,"zu-za":1531,"es-pr":1532,"en-pr":1533,"vi-vn":1534,"en-vn":1535,"ar-ae":1536,"en-ae":1537,"ajp-ps":1538,"apc-ps":1539,"ms-my":1540,
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 69 2e 67 4d 3b 72 65 74 75 72 6e 20 65 2e 6c 61 6e 67 75 61 67 65 73 26 26 65 2e 6c 61 6e 67 75 61 67 65 73 5b 30 5d 7c 7c 65 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 65 2e 6c 61 6e 67 75 61 67 65 7c 7c 22 65 6e 2d 55 53 22 7d 2c 76 3d 7b 73 65 74 4c 6f 63 61 6c 65 3a 28 65 3d 22 65 6e 2d 75 73 22 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 66 28 65 2c 67 28 29 29 3b 69 66 28 74 29 72 65 74 75 72 6e 20 68 3d 74 2c 28 30 2c 70 2e 41 29 28 74 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 2e 64 65 66 61 75 6c 74 2e 6c 6f 63 61 6c 65 3b 72 65 74 75 72 6e 20 68 21 3d 3d 74 2e 6c 6f 63 61 6c 65 3f 7b 73 75 63 63 65 73 73 3a 21 31 7d 3a 28 77 69 6e 64 6f 77 5b 6e 2e 67 2e 5f 5f 5a 45 4e 44 45 53 4b 5f 43 Data Ascii: )=>{const e=i.gM;return e.languages&&e.languages[0]\|\|e.browserLanguage\|\|e.language\|\|"en-US"},v={setLocale:(e="en-us")=>{const t=f(e,g());if(t)return h=t,(0,p.A)(t).then((e=>{const t=e.default.locale;return h!==t.locale?{success:!1}:(window[n.g.__ZENDESK_C
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 74 2e 70 61 79 6c 6f 61 64 3f 2e 6c 61 75 6e 63 68 65 72 3f 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 26 26 28 65 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 3d 74 2e 70 61 79 6c 6f 61 64 2e 6c 61 75 6e 63 68 65 72 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 29 7d 7d 7d 29 2e 72 65 64 75 63 65 72 2c 6c 3d 65 3d 3e 21 28 65 2e 6c 61 75 6e 63 68 65 72 2e 73 68 61 70 65 3d 3d 3d 6f 2e 46 65 2e 6e 6f 6e 65 7c 7c 28 30 2c 69 2e 78 44 29 28 65 29 26 26 28 28 30 2c 73 2e 64 29 28 65 29 7c 7c 28 30 2c 73 2e 5f 29 28 65 29 29 29 2c 75 3d 65 3d 3e 65 2e 6c 61 75 6e 63 68 65 72 2e 73 68 61 70 65 2c 64 3d 65 3d 3e 65 2e 6c 61 75 6e 63 68 65 72 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 7d 2c 31 37 33 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: t.payload?.launcher?.shapeSettings&&(e.shapeSettings=t.payload.launcher.shapeSettings)}}}).reducer,l=e=>!(e.launcher.shape===o.Fe.none\|\|(0,i.xD)(e)&&((0,s.d)(e)\|\|(0,s._)(e))),u=e=>e.launcher.shape,d=e=>e.launcher.shapeSettings},17398:(e,t,n)=>{"use strict
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 37 29 3b 63 6f 6e 73 74 20 61 3d 28 65 2c 74 29 3d 3e 7b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 22 74 65 78 74 22 3a 63 61 73 65 22 65 6d 61 69 6c 22 3a 72 65 74 75 72 6e 20 74 2e 74 72 69 6d 28 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 74 7d 7d 2c 63 3d 28 30 2c 72 2e 7a 44 29 28 22 66 6f 72 6d 2f 73 75 62 6d 69 74 22 2c 28 61 73 79 6e 63 28 7b 66 6f 72 6d 49 64 3a 65 2c 66 69 65 6c 64 73 3a 74 2c 76 61 6c 75 65 73 3a 6e 7d 2c 7b 64 69 73 70 61 74 63 68 3a 72 7d 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 74 2e 6d 61 70 28 28 65 3d 3e 28 7b 74 79 70 65 3a 65 2e 74 79 70 65 2c 6e 61 6d 65 3a 65 2e 6e 61 6d 65 2c 6c 61 62 65 6c 3a 65 2e 6c 61 62 65 6c 2c 5b 65 2e 74 79 70 65 5d 3a 61 28 65 2c 6e 5b 65 2e 5f 69 64 5d 29 7d 29 29 29 2c 63 Data Ascii: 7);const a=(e,t)=>{switch(e.type){case"text":case"email":return t.trim();default:return t}},c=(0,r.zD)("form/submit",(async({formId:e,fields:t,values:n},{dispatch:r})=>{const o=t.map((e=>({type:e.type,name:e.name,label:e.label,[e.type]:a(e,n[e._id])}))),c
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 6d 65 73 74 61 6d 70 5f 24 7b 65 2e 72 65 63 65 69 76 65 64 7d 60 2c 69 73 4c 6f 63 61 6c 4d 65 73 73 61 67 65 54 79 70 65 3a 21 30 7d 29 29 28 65 29 29 2c 74 3d 65 2e 72 65 63 65 69 76 65 64 2c 6e 2e 70 75 73 68 28 65 29 7d 29 29 2c 6e 7d 2c 63 3d 7b 74 65 78 74 3a 21 30 2c 69 6d 61 67 65 3a 21 30 2c 66 69 6c 65 3a 21 30 2c 74 79 70 69 6e 67 49 6e 64 69 63 61 74 6f 72 3a 21 30 7d 2c 6c 3d 28 65 2c 74 29 3d 3e 7b 69 66 28 21 63 5b 65 2e 74 79 70 65 5d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 63 5b 74 3f 2e 74 79 70 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 28 74 3f 2e 73 74 61 74 75 73 3d 3d 3d 6f 2e 78 37 2e 66 61 69 6c 65 64 29 7d 2c 75 3d 28 65 2c 74 29 3d 3e 28 22 74 79 70 69 6e 67 49 6e 64 69 63 61 74 6f 72 22 3d 3d 3d 65 2e 74 79 70 Data Ascii: mestamp_${e.received}`,isLocalMessageType:!0}))(e)),t=e.received,n.push(e)})),n},c={text:!0,image:!0,file:!0,typingIndicator:!0},l=(e,t)=>{if(!c[e.type])return!1;if(!c[t?.type])return!1;return!(t?.status===o.x7.failed)},u=(e,t)=>("typingIndicator"===e.typ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.8	49811	188.114.96.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	551	OUT	GET /embed.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://solve-widget.forethought.ai/?v=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	990	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: application/javascript Content-Length: 43760 Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache ETag: "c75041def02eb73f83ad86da82a94d67" access-control-allow-methods: GET referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6BFWKOepzt2hCKdjk%2BHDj1DKxAXWalrhcCXzfO%2FA9BcRVZv7w3qBfArAZ8m0F3N6cWUKCJXHQntY%2FYJEluFVqI1d2rJPLeWGbPapGS2PUxI9gfi85uY4KE3EXy6HaiqV2KynOoPw2%2BAzYHF9H98%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c7e8f2a5e80-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2082&min_rtt=1634&rtt_var=932&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1129&delivery_rate=1787025&cwnd=218&unsent_bytes=0&cid=60a214dbd2277ef3&ts=154&x=0"
2025-01-14 15:20:39 UTC	379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 74 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 74 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 74 5d 3d 22 34 33 37 31 32 36 30 36 2d 64 35 35 36 2d 34 61 37 65 2d 61 62 36 64 2d 34 33 30 63 30 38 36 34 30 34 65 37 22 2c 65 2e 5f 73 65 6e Data Ascii: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="43712606-d556-4a7e-ab6d-430c086404e7",e._sen
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 36 33 33 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 74 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 35 33 29 2d 31 2c 6e 3d 66 75 6e 63 74 Data Ascii: ow?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{var e={3633:e=>{e.exports=function(){var e=function(e){return"function"===typeof e},t=Math.pow(2,53)-1,n=funct
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 66 72 6f 6d 20 72 65 71 75 69 72 65 73 20 61 6e 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 20 2d 20 6e 6f 74 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 76 61 72 20 67 2c 68 3d 6e 28 6d 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 61 3d 65 28 73 29 3f 4f 62 6a 65 63 74 28 6e 65 77 20 73 28 68 29 29 3a 6e 65 77 20 41 72 72 61 79 28 68 29 2c 72 3d 30 3b 72 3c 68 3b 29 67 3d 6d 5b 72 5d 2c 61 5b 72 5d 3d 64 3f 64 2e 63 61 6c 6c 28 6f 2c 67 2c 72 29 3a 67 2c 72 2b 2b 3b 61 2e 6c 65 6e 67 74 68 3d 68 7d 72 65 74 75 72 6e 20 61 7d 7d 28 29 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 76 61 72 20 6f 3d 74 5b 69 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d Data Ascii: new TypeError("Array.from requires an array-like object - not null or undefined");var g,h=n(m.length);for(a=e(s)?Object(new s(h)):new Array(h),r=0;r<h;)g=m[r],a[r]=d?d.call(o,g,r):g,r++;a.length=h}return a}}()}},t={};function n(i){var o=t[i];if(void 0!==
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 39 38 2c 22 70 78 22 29 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 5b 67 28 29 5d 3a 77 2c 5b 68 28 29 5d 3a 22 22 2c 5b 66 5d 3a 6d 2c 5b 76 5d 3a 22 22 2c 77 65 62 6b 69 74 4d 61 73 6b 49 6d 61 67 65 3a 22 2d 77 65 62 6b 69 74 2d 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 77 68 69 74 65 2c 20 62 6c 61 63 6b 29 22 2c 77 69 64 74 68 3a 22 30 22 2c 7a 49 6e 64 65 78 3a 22 39 39 39 39 39 39 22 2c 2e 2e 2e 22 66 6c 6f 61 74 69 6e 67 5f 62 61 72 22 3d 3d 3d 69 2e 6c 61 75 6e 63 68 53 74 79 6c 65 3f 7b 6c 65 66 74 3a 22 30 22 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 22 61 75 74 6f 22 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 22 61 75 74 6f 22 2c 72 69 67 68 74 3a 22 30 22 7d 3a 7b 7d 7d 29 3b 66 75 Data Ascii: 98,"px"),overflow:"hidden",position:"fixed",[g()]:w,[h()]:"",[f]:m,[v]:"",webkitMaskImage:"-webkit-radial-gradient(white, black)",width:"0",zIndex:"999999",..."floating_bar"===i.launchStyle?{left:"0",marginLeft:"auto",marginRight:"auto",right:"0"}:{}});fu
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 28 28 74 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 65 29 29 29 3b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 30 3b 63 6f 6e 73 74 20 6e 3d 65 28 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 74 3e 34 3f 6e 75 6c 6c 3a 28 61 77 61 69 74 20 5f 28 32 2a 2a 74 2a 36 30 30 29 2c 41 28 65 2c 74 2b 31 29 29 29 7d 63 6f 6e 73 74 20 6b 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 22 2e 63 6f 6e 63 61 74 28 34 38 30 2c 22 70 78 29 22 29 29 2c 7a 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 68 Data Ascii: ((t=>setTimeout(t,e)));async function A(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;const n=e();return n\|\|(t>4?null:(await _(2*t600),A(e,t+1)))}const k=window.matchMedia("(max-width: ".concat(480,"px)")),z=window.matchMedia("(max-h
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 26 28 74 2e 6e 6f 6e 63 65 3d 71 29 2c 74 7d 63 6f 6e 73 74 20 73 3d 72 28 22 66 74 2d 73 61 6c 65 73 66 6f 72 63 65 2d 73 74 79 6c 65 22 29 2c 64 3d 28 29 3d 3e 7b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 2c 63 3d 28 29 3d 3e 7b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 2e 65 6d 62 65 64 64 65 64 53 65 72 76 69 63 65 48 65 6c 70 42 75 74 74 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 2c 6c 3d 28 29 3d 3e 7b 6c 65 74 20 65 3d 21 30 2c 74 3d 30 3b 63 6f 6e 73 74 20 6e 3d 28 29 3d 3e 7b 69 66 28 65 26 26 74 3c 3d 31 30 29 7b 65 3d 21 31 3b 63 6f 6e 73 74 20 69 3d 49 2e 67 Data Ascii: &(t.nonce=q),t}const s=r("ft-salesforce-style"),d=()=>{s.innerHTML="",I.body.appendChild(s)},c=()=>{s.innerHTML=".embeddedServiceHelpButton { display: none !important;}",I.body.appendChild(s)},l=()=>{let e=!0,t=0;const n=()=>{if(e&&t<=10){e=!1;const i=I.g
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 5c 6e 20 20 20 20 20 20 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 42 75 74 74 6f 6e 20 74 6f 20 6c 61 75 6e 63 68 20 6d 65 73 73 61 67 69 6e 67 20 77 69 6e 64 6f 77 22 5d 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 5c 6e 20 20 20 20 20 20 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 42 75 74 74 6f 6e 20 74 6f 20 6c 61 75 6e 63 68 20 6d 65 73 73 61 67 69 6e 67 20 77 69 6e 64 6f 77 2c 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 69 6e 20 70 72 6f 67 72 65 73 73 22 5d 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 5c 6e 20 20 20 20 20 20 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 4d 65 73 73 61 67 65 20 66 72 6f 6d 20 63 6f 6d 70 Data Ascii: ock !important;}\n iframe[title="Button to launch messaging window"] { display: block !important;}\n iframe[title="Button to launch messaging window, conversation in progress"] { display: block !important;}\n iframe[title="Message from comp
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 6e 65 72 48 54 4d 4c 3d 22 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2c 72 26 26 6f 3f 28 77 69 6e 64 6f 77 2e 49 6e 74 65 72 63 6f 6d 28 22 73 68 6f 77 53 70 61 63 65 22 2c 22 6d 65 73 73 61 67 65 73 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 49 6e 74 65 72 63 6f 6d 28 22 73 68 6f 77 4e 65 77 4d 65 73 73 61 67 65 22 2c 72 29 7d 29 2c 31 29 2c 74 26 26 74 2e 73 68 6f 75 6c 64 5f 61 75 74 6f 5f 73 65 6e 64 5f 6d 65 73 73 61 67 65 26 26 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 49 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 69 6e 74 65 72 63 6f 6d 2d 6d 65 73 73 65 6e 67 65 72 2d 66 72 61 6d 65 22 5d 27 29 3b 69 66 28 Data Ascii: nerHTML="",I.body.appendChild(b),r&&o?(window.Intercom("showSpace","messages"),setTimeout((()=>{window.Intercom("showNewMessage",r)}),1),t&&t.should_auto_send_message&&setTimeout((()=>{const e=I.querySelector('iframe[name="intercom-messenger-frame"]');if(
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 73 65 74 43 61 6c 6c 62 61 63 6b 28 22 43 68 61 74 4d 65 73 73 61 67 65 52 65 63 65 69 76 65 64 22 2c 22 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 35 65 33 29 7d 7d 2c 69 3d 6e 75 6c 6c 3d 3d 3d 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 62 6f 74 5f 61 6c 69 61 73 5f 6c 69 73 74 3b 69 26 26 65 26 26 21 69 2e 69 6e 63 6c 75 64 65 73 28 65 29 26 26 28 6e 28 29 2c 77 69 6e 64 6f 77 2e 53 6e 61 70 45 6e 67 61 67 65 2e 73 65 74 43 61 6c 6c 62 61 63 6b 28 22 43 68 61 74 4d 65 73 73 61 67 65 52 65 63 65 69 76 65 64 22 2c 22 22 29 29 7d 29 29 7d 77 69 6e 64 6f 77 2e 53 6e 61 70 45 6e 67 61 67 65 26 26 77 69 6e 64 6f 77 2e 53 6e 61 70 45 6e 67 61 67 65 2e 73 65 74 43 61 6c 6c 62 61 63 6b 28 22 43 6c 6f 73 65 22 2c 28 66 75 6e 63 74 Data Ascii: setCallback("ChatMessageReceived",""),setTimeout(n,5e3)}},i=null===t\|\|void 0===t?void 0:t.bot_alias_list;i&&e&&!i.includes(e)&&(n(),window.SnapEngage.setCallback("ChatMessageReceived",""))}))}window.SnapEngage&&window.SnapEngage.setCallback("Close",(funct
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 65 3b 48 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 23 67 6f 72 67 69 61 73 2d 63 68 61 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 22 2c 49 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 48 29 2c 77 69 6e 64 6f 77 2e 47 6f 72 67 69 61 73 43 68 61 74 2e 68 69 64 65 43 68 61 74 28 21 31 29 2c 77 69 6e 64 6f 77 2e 47 6f 72 67 69 61 73 43 68 61 74 2e 6f 70 65 6e 28 29 2c 74 26 26 77 69 6e 64 6f 77 2e 47 6f 72 67 69 61 73 43 68 61 74 2e 73 65 6e 64 4d 65 73 73 61 67 65 28 6e 29 7d 2c 55 3d 72 28 22 66 74 2d 66 72 65 73 68 63 68 61 74 2d 73 74 79 6c 65 22 29 2c 56 3d 65 3d 3e 7b 6c 65 74 7b 63 6f 6e 76 65 72 73 61 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 3a 74 2c 65 6d 61 69 6c 3a 6e Data Ascii: e;H.innerHTML="#gorgias-chat-container {display: block !important;}",I.body.appendChild(H),window.GorgiasChat.hideChat(!1),window.GorgiasChat.open(),t&&window.GorgiasChat.sendMessage(n)},U=r("ft-freshchat-style"),V=e=>{let{conversationProperties:t,email:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.8	49812	188.114.96.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	569	OUT	GET /static/js/main.64e6aab4.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://solve-widget.forethought.ai/?v=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	994	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: application/javascript Content-Length: 50664 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: "3ae67c3808b84a52adcb249ca46fa8fb" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bAHgKi1dQ0w8aE5p3%2BGKmr%2FbvONMlRcfh3bhWart4jH4Q%2FlTT9xMzgr%2Bl9Rej6kRCEg%2BQU0V8mSeSFp4Eg%2FDh7ej%2BLYi5Mx98vinPK6f2Cp%2FCggr4eXaxIWF94SD4lWhb7NrAtEMouH1%2F%2Fp7tF0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c7e98ee41e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2294&min_rtt=2097&rtt_var=1181&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1147&delivery_rate=794557&cwnd=202&unsent_bytes=0&cid=979465a025b77073&ts=165&x=0"
2025-01-14 15:20:39 UTC	375	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 72 3d 28 6e 65 77 20 74 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 72 26 26 28 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 72 5d 3d 22 30 32 65 39 38 36 63 39 2d 64 30 62 63 2d 34 38 39 32 2d 62 65 63 38 2d 64 65 39 34 36 36 65 61 35 37 61 39 22 2c 74 2e 5f 73 65 6e Data Ascii: !function(){try{var t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},r=(new t.Error).stack;r&&(t._sentryDebugIds=t._sentryDebugIds\|\|{},t._sentryDebugIds[r]="02e986c9-d0bc-4892-bec8-de9466ea57a9",t._sen
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 31 32 33 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 37 30 36 29 2c 6f 3d 65 28 35 34 36 34 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 28 74 29 29 72 65 74 75 72 Data Ascii: window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{"use strict";var t={1239:(t,r,e)=>{var n=e(4706),o=e(5464),i=TypeError;t.exports=function(t){if(n(t))retur
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 3d 41 2e 65 6e 66 6f 72 63 65 2c 4f 3d 41 2e 67 65 74 2c 53 3d 63 2e 49 6e 74 38 41 72 72 61 79 2c 49 3d 53 26 26 53 2e 70 72 6f 74 6f 74 79 70 65 2c 54 3d 63 2e 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2c 6a 3d 54 26 26 54 2e 70 72 6f 74 6f 74 79 70 65 2c 52 3d 53 26 26 62 28 53 29 2c 5f 3d 49 26 26 62 28 49 29 2c 50 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 43 3d 63 2e 54 79 70 65 45 72 72 6f 72 2c 4d 3d 77 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 46 3d 6d 28 22 54 59 50 45 44 5f 41 52 52 41 59 5f 54 41 47 22 29 2c 6b 3d 22 54 79 70 65 64 41 72 72 61 79 43 6f 6e 73 74 72 75 63 74 6f 72 22 2c 4e 3d 61 26 26 21 21 78 26 26 22 4f 70 65 72 61 22 21 3d 3d 6c 28 63 2e 6f 70 65 72 61 29 2c 55 3d 21 31 2c 4c 3d 7b 49 6e 74 38 41 72 Data Ascii: =A.enforce,O=A.get,S=c.Int8Array,I=S&&S.prototype,T=c.Uint8ClampedArray,j=T&&T.prototype,R=S&&b(S),_=I&&b(I),P=Object.prototype,C=c.TypeError,M=w("toStringTag"),F=m("TYPED_ARRAY_TAG"),k="TypedArrayConstructor",N=a&&!!x&&"Opera"!==l(c.opera),U=!1,L={Int8Ar
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 74 65 20 69 2e 70 72 6f 74 6f 74 79 70 65 5b 74 5d 7d 63 61 74 63 68 28 61 29 7b 74 72 79 7b 69 2e 70 72 6f 74 6f 74 79 70 65 5b 74 5d 3d 72 7d 63 61 74 63 68 28 66 29 7b 7d 7d 7d 5f 5b 74 5d 26 26 21 65 7c 7c 64 28 5f 2c 74 2c 65 3f 72 3a 4e 26 26 49 5b 74 5d 7c 7c 72 2c 6e 29 7d 7d 2c 65 78 70 6f 72 74 54 79 70 65 64 41 72 72 61 79 53 74 61 74 69 63 4d 65 74 68 6f 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 2c 6f 3b 69 66 28 75 29 7b 69 66 28 78 29 7b 69 66 28 65 29 66 6f 72 28 6e 20 69 6e 20 4c 29 69 66 28 28 6f 3d 63 5b 6e 5d 29 26 26 70 28 6f 2c 74 29 29 74 72 79 7b 64 65 6c 65 74 65 20 6f 5b 74 5d 7d 63 61 74 63 68 28 69 29 7b 7d 69 66 28 52 5b 74 5d 26 26 21 65 29 72 65 74 75 72 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 28 Data Ascii: te i.prototype[t]}catch(a){try{i.prototype[t]=r}catch(f){}}}_[t]&&!e\|\|d(_,t,e?r:N&&I[t]\|\|r,n)}},exportTypedArrayStaticMethod:function(t,r,e){var n,o;if(u){if(x){if(e)for(n in L)if((o=c[n])&&p(o,t))try{delete o[t]}catch(i){}if(R[t]&&!e)return;try{return d(
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 69 2b 72 3e 6f 2e 62 79 74 65 4c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 57 28 50 29 3b 76 61 72 20 75 3d 6f 2e 62 79 74 65 73 2c 63 3d 69 2b 6f 2e 62 79 74 65 4f 66 66 73 65 74 2c 66 3d 6d 28 75 2c 63 2c 63 2b 72 29 3b 72 65 74 75 72 6e 20 61 3f 66 3a 59 28 66 29 7d 2c 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 2c 6e 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 4d 28 74 29 2c 75 3d 64 28 65 29 2c 63 3d 6e 28 2b 6f 29 2c 66 3d 21 21 69 3b 69 66 28 75 2b 72 3e 61 2e 62 79 74 65 4c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 57 28 50 29 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 62 79 74 65 73 2c 70 3d 75 2b 61 2e 62 79 74 65 4f 66 66 73 65 74 2c 6c 3d 30 3b 6c 3c 72 3b 6c 2b 2b 29 73 5b 70 2b 6c 5d 3d 63 5b 66 3f 6c 3a 72 2d 6c 2d 31 5d 7d 3b 69 66 Data Ascii: i+r>o.byteLength)throw new W(P);var u=o.bytes,c=i+o.byteOffset,f=m(u,c,c+r);return a?f:Y(f)},rt=function(t,r,e,n,o,i){var a=M(t),u=d(e),c=n(+o),f=!!i;if(u+r>a.byteLength)throw new W(P);for(var s=a.bytes,p=u+a.byteOffset,l=0;l<r;l++)s[p+l]=c[f?l:r-l-1]};if
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 30 5d 7d 2c 67 65 74 49 6e 74 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 74 28 74 68 69 73 2c 32 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 3b 72 65 74 75 72 6e 28 72 5b 31 5d 3c 3c 38 7c 72 5b 30 5d 29 3c 3c 31 36 3e 3e 31 36 7d 2c 67 65 74 55 69 6e 74 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 74 28 74 68 69 73 2c 32 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 3b 72 65 74 75 72 6e 20 72 5b 31 5d 3c 3c 38 7c 72 5b 30 5d 7d 2c 67 65 74 49 6e 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 48 28 74 74 28 74 68 69 73 2c 34 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c Data Ascii: 0]},getInt16:function(t){var r=tt(this,2,t,arguments.length>1&&arguments[1]);return(r[1]<<8\|r[0])<<16>>16},getUint16:function(t){var r=tt(this,2,t,arguments.length>1&&arguments[1]);return r[1]<<8\|r[0]},getInt32:function(t){return H(tt(this,4,t,arguments.l
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 3f 65 3a 6e 28 72 29 2c 61 3d 6e 65 77 20 74 28 69 29 3b 69 3e 6f 3b 29 61 5b 6f 5d 3d 72 5b 6f 2b 2b 5d 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 39 37 32 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 36 37 37 34 29 2c 6f 3d 65 28 32 32 30 31 29 2c 69 3d 65 28 31 35 39 31 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 61 29 7b 76 61 72 20 75 3d 6e 28 72 29 2c 63 3d 69 28 75 29 3b 69 66 28 30 3d 3d 3d 63 29 72 65 74 75 72 6e 21 74 26 26 2d 31 3b 76 61 72 20 66 2c 73 3d 6f 28 61 2c 63 29 3b 69 66 28 74 26 26 65 21 3d 3d 65 29 7b 66 6f 72 28 Data Ascii: ts=function(t,r,e){for(var o=0,i=arguments.length>2?e:n(r),a=new t(i);i>o;)a[o]=r[o++];return a}},972:(t,r,e)=>{var n=e(6774),o=e(2201),i=e(1591),a=function(t){return function(r,e,a){var u=n(r),c=i(u);if(0===c)return!t&&-1;var f,s=o(a,c);if(t&&e!==e){for(
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 74 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 32 35 33 30 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 35 35 33 29 2c 6f 3d 65 28 31 30 31 32 29 2c 69 3d 65 28 36 38 32 31 29 2c 61 3d 65 28 34 33 35 32 29 28 22 73 70 65 63 69 65 73 22 29 2c 75 3d 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 6e 28 74 29 26 26 28 72 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 28 6f 28 72 29 26 26 28 72 3d 3d 3d 75 7c 7c 6e 28 72 2e 70 72 6f 74 6f 74 79 70 65 29 29 7c 7c 69 28 72 29 26 26 6e 75 6c 6c 3d 3d 3d 28 72 3d 72 5b 61 5d 29 29 26 26 28 72 3d 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 3f 75 3a 72 7d 7d 2c 35 31 38 34 3a 28 74 2c 72 2c Data Ascii: ;return t};t.exports=i},2530:(t,r,e)=>{var n=e(4553),o=e(1012),i=e(6821),a=e(4352)("species"),u=Array;t.exports=function(t){var r;return n(t)&&(r=t.constructor,(o(r)&&(r===u\|\|n(r.prototype))\|\|i(r)&&null===(r=r[a]))&&(r=void 0)),void 0===r?u:r}},5184:(t,r,
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f 74 79 70 65 7d 29 29 7d 2c 39 32 36 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 39 35 31 39 29 2c 6f 3d 65 28 33 35 37 32 29 2c 69 3d 65 28 36 33 36 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 6f 2e 66 28 74 2c 72 2c 69 28 31 2c 65 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 74 5b 72 5d 3d 65 2c 74 7d 7d 2c 36 33 36 39 3a 74 3d 3e 7b 74 2e 65 78 Data Ascii: unction(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.prototype}))},9266:(t,r,e)=>{var n=e(9519),o=e(3572),i=e(6369);t.exports=n?function(t,r,e){return o.f(t,r,i(1,e))}:function(t,r,e){return t[r]=e,t}},6369:t=>{t.ex
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 61 3d 6f 28 69 29 26 26 6f 28 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 3f 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3a 7b 7d 7d 7d 2c 36 36 37 32 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 5b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 2c 22 74 6f 53 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 4f 66 22 5d 7d 2c 34 30 35 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 39 38 29 2e 6d 61 74 63 68 28 2f 66 69 72 65 66 6f 78 5c Data Ascii: a=o(i)&&o(i.createElement);t.exports=function(t){return a?i.createElement(t):{}}},6672:t=>{t.exports=["constructor","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","toLocaleString","toString","valueOf"]},4056:(t,r,e)=>{var n=e(498).match(/firefox\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.8	49815	216.198.53.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	397	OUT	GET /web_widget/messenger/latest/web-widget-8173-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	1177	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 10277 Connection: close x-amz-id-2: fSOBUg7mdwekB90q4C+JpB9/eIWS/KFpobdc99Nj0PArj56eFh/ZBihzPIlZ0krnC9YHkQjOvVk= x-amz-request-id: YR1N7PCXT0KKHYPP x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:15 GMT ETag: "6ee6bafd5311611f1980bb49422bbfc9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:14 GMT x-amz-version-id: nkKtmKGFnhIyFZJKGtv6k01EXboA4S9Y CF-Cache-Status: HIT Age: 22557 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ikuz0AR169Hi2ZNd4X9yrRyXObb2Vpx6wy0QOIhijfeBc2EINNDwW%2BCSvob5gJvB3AYPpZDb0y5CSatjoRsCmvIboZxqamE0EeVU3xsAD4Cari1CBW%2F56UVaMGuNlbjYE32mLB4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7f682742b7-EWR
2025-01-14 15:20:39 UTC	192	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 31 37 33 5d 2c 7b 36 36 35 31 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 38 38 39 31 30 29 3b 63 6f 6e 73 74 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[8173],{66515:(e,t,n)=>{n.d(t,{A:()=>o});var r=n(88910);const
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 20 6f 3d 28 29 3d 3e 7b 63 6f 6e 73 74 5b 65 2c 74 5d 3d 28 30 2c 72 2e 75 73 65 53 74 61 74 65 29 28 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 29 29 2c 6e 3d 28 29 3d 3e 7b 74 28 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 29 29 7d 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 6e 29 2c 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 6e 29 7d 29 29 2c 5b 5d 29 2c 7b 73 63 61 6c 65 3a 65 3e 3d 34 30 30 3f Data Ascii: o=()=>{const[e,t]=(0,r.useState)(Math.round(100window.devicePixelRatio)),n=()=>{t(Math.round(100window.devicePixelRatio))};return(0,r.useEffect)((()=>(window.addEventListener("resize",n),()=>{window.removeEventListener("resize",n)})),[]),{scale:e>=400?
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 67 2c 77 69 64 74 68 3a 66 2c 62 6f 72 64 65 72 3a 30 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 62 6f 78 53 68 61 64 6f 77 3a 61 2e 6f 67 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 22 31 30 30 25 22 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 75 6e 73 65 74 22 2c 6f 70 61 63 69 74 79 3a 30 2c 61 6c 69 67 6e 53 65 6c 66 3a 22 65 6e 64 22 7d 2c 72 65 66 3a 6e 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 68 2e 6a 73 78 73 29 28 64 2e 41 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 68 2e 6a 73 78 29 28 6d 2e 6b 2c 7b 7d 29 2c 65 5d 7d 29 7d 29 7d 29 29 7d 2c 34 34 30 32 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 67 7d 29 3b 76 61 72 20 72 3d 6e 28 38 38 39 31 Data Ascii: height:g,width:f,border:0,backgroundColor:"transparent",boxShadow:a.og,borderRadius:"100%",verticalAlign:"unset",opacity:0,alignSelf:"end"},ref:n,children:(0,h.jsxs)(d.A,{children:[(0,h.jsx)(m.k,{}),e]})})}))},44025:(e,t,n)=>{n.d(t,{A:()=>g});var r=n(8891
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 65 6c 56 69 73 69 62 6c 65 3a 65 2c 72 65 66 73 3a 74 7d 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 28 30 2c 6f 2e 64 34 29 28 61 2e 78 44 29 2c 73 3d 28 30 2c 72 2e 75 73 65 52 65 66 29 28 30 29 3b 28 30 2c 72 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 73 2e 63 75 72 72 65 6e 74 3d 44 61 74 65 2e 6e 6f 77 28 29 7d 29 2c 5b 6e 5d 29 3b 63 6f 6e 73 74 20 64 3d 28 30 2c 72 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 65 3d 3e 7b 63 6f 6e 73 74 7b 63 6c 6f 73 65 46 72 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 46 72 61 6d 65 3a 72 2c 61 76 61 74 61 72 46 72 61 6d 65 3a 6f 7d 3d 74 2e 63 75 72 72 65 6e 74 3b 69 66 28 21 72 3f 2e 61 6e 69 6d 61 74 65 29 72 65 74 75 72 6e 3b 72 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 30 22 2c 72 2e 73 Data Ascii: elVisible:e,refs:t})=>{const n=(0,o.d4)(a.xD),s=(0,r.useRef)(0);(0,r.useLayoutEffect)((()=>{s.current=Date.now()}),[n]);const d=(0,r.useCallback)((e=>{const{closeFrame:n,messageFrame:r,avatarFrame:o}=t.current;if(!r?.animate)return;r.style.opacity="0",r.s
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 2c 6f 3f 2e 61 6e 69 6d 61 74 65 28 5b 7b 6f 70 61 63 69 74 79 3a 30 7d 5d 2c 32 30 30 29 3b 72 2e 61 6e 69 6d 61 74 65 28 5b 7b 6f 70 61 63 69 74 79 3a 30 7d 5d 2c 32 30 30 29 2e 6f 6e 66 69 6e 69 73 68 3d 65 7d 7d 7d 7d 2c 37 39 33 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 72 3d 6e 28 38 38 39 31 30 29 2c 6f 3d 6e 28 32 30 39 31 32 29 2c 69 3d 6e 28 32 36 34 33 36 29 2c 73 3d 6e 28 37 30 38 37 29 2c 61 3d 6e 28 35 32 32 39 35 29 2c 63 3d 6e 28 36 32 32 33 29 3b 63 6f 6e 73 74 20 64 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 6e 65 72 57 69 64 74 68 3a 65 2c 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 7d 3d 63 2e 4a 63 3b 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 65 2c 68 65 69 67 68 74 3a 74 7d 7d 2c 6c Data Ascii: ,o?.animate([{opacity:0}],200);r.animate([{opacity:0}],200).onfinish=e}}}},79390:(e,t,n)=>{n.d(t,{A:()=>h});var r=n(88910),o=n(20912),i=n(26436),s=n(7087),a=n(52295),c=n(6223);const d=()=>{const{innerWidth:e,innerHeight:t}=c.Jc;return{width:e,height:t}},l
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 6e 28 72 29 2c 69 3d 6e 28 38 38 39 31 30 29 2c 73 3d 6e 28 31 30 39 34 38 29 3b 63 6f 6e 73 74 20 61 3d 73 2e 41 79 2e 62 75 74 74 6f 6e 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 31 65 65 39 67 74 66 2d 30 22 7d 29 28 5b 22 70 61 64 64 69 6e 67 3a 22 2c 22 3b 62 6f 72 64 65 72 3a 30 3b 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 22 2c 22 3b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 22 2c 22 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 69 74 69 61 6c 3b 26 3a 66 Data Ascii: n(r),i=n(88910),s=n(10948);const a=s.Ay.button.withConfig({componentId:"sc-1ee9gtf-0"})(["padding:",";border:0;width:max-content;max-width:",";overflow-wrap:break-word;word-break:break-word;background:",";color:",";border-radius:",";text-align:initial;&:f
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 3a 6f 2c 72 65 66 3a 6d 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 6e 2c 69 73 54 69 74 6c 65 56 69 73 69 62 6c 65 3a 42 6f 6f 6c 65 61 6e 28 65 29 2c 63 68 69 6c 64 72 65 6e 3a 5b 65 26 26 28 30 2c 6c 2e 6a 73 78 29 28 63 2c 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 2c 28 30 2c 6c 2e 6a 73 78 29 28 64 2c 7b 63 68 69 6c 64 72 65 6e 3a 74 7d 29 5d 7d 29 7d 3b 6d 2e 70 72 6f 70 54 79 70 65 73 3d 7b 74 69 74 6c 65 3a 6f 28 29 2e 6e 6f 64 65 2c 61 72 69 61 4c 61 62 65 6c 3a 6f 28 29 2e 73 74 72 69 6e 67 2c 6d 65 73 73 61 67 65 3a 6f 28 29 2e 6e 6f 64 65 2e 69 73 52 65 71 75 69 72 65 64 2c 6d 61 78 57 69 64 74 68 3a 6f 28 29 2e 6e 75 6d 62 65 72 2c 6f 6e 43 6c 69 63 6b 3a 6f 28 29 2e 66 75 6e 63 2e 69 73 52 65 71 75 69 72 65 64 2c 6f 6e 52 65 6e 64 65 72 3a 6f 28 Data Ascii: :o,ref:m,"aria-label":n,isTitleVisible:Boolean(e),children:[e&&(0,l.jsx)(c,{children:e}),(0,l.jsx)(d,{children:t})]})};m.propTypes={title:o().node,ariaLabel:o().string,message:o().node.isRequired,maxWidth:o().number,onClick:o().func.isRequired,onRender:o(
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 65 73 73 65 6e 67 65 72 2e 62 61 73 65 46 6f 6e 74 53 69 7a 65 29 29 2c 28 65 3d 3e 28 30 2c 73 2e 44 30 29 28 31 36 2c 65 2e 74 68 65 6d 65 2e 6d 65 73 73 65 6e 67 65 72 2e 62 61 73 65 46 6f 6e 74 53 69 7a 65 29 29 29 2c 6d 3d 28 7b 6f 6e 43 6c 69 63 6b 3a 65 2c 61 72 69 61 4c 61 62 65 6c 3a 74 7d 29 3d 3e 28 30 2c 61 2e 6a 73 78 29 28 64 2c 7b 6f 6e 43 6c 69 63 6b 3a 65 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 74 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 61 2e 6a 73 78 29 28 6c 2c 7b 7d 29 7d 29 3b 6d 2e 70 72 6f 70 54 79 70 65 73 3d 7b 6f 6e 43 6c 69 63 6b 3a 6f 28 29 2e 66 75 6e 63 2c 61 72 69 61 4c 61 62 65 6c 3a 6f 28 29 2e 73 74 72 69 6e 67 7d 3b 63 6f 6e 73 74 20 68 3d 28 30 2c 69 2e 41 79 29 28 6d 29 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 63 6f 6d Data Ascii: essenger.baseFontSize)),(e=>(0,s.D0)(16,e.theme.messenger.baseFontSize))),m=({onClick:e,ariaLabel:t})=>(0,a.jsx)(d,{onClick:e,"aria-label":t,children:(0,a.jsx)(l,{})});m.propTypes={onClick:o().func,ariaLabel:o().string};const h=(0,i.Ay)(m).withConfig({com
2025-01-14 15:20:39 UTC	502	IN	Data Raw: 63 6f 6e 73 74 20 79 3d 7b 63 6f 6c 6f 72 53 63 68 65 6d 65 3a 22 6c 69 67 68 74 22 2c 2e 2e 2e 6f 2e 73 74 79 6c 65 7d 3b 72 65 74 75 72 6e 20 67 26 26 70 26 26 21 72 7c 7c 28 79 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 29 2c 28 30 2c 64 2e 6a 73 78 29 28 22 69 66 72 61 6d 65 22 2c 7b 72 65 66 3a 68 2c 74 69 74 6c 65 3a 6e 2c 2e 2e 2e 6f 2c 73 74 79 6c 65 3a 79 2c 63 68 69 6c 64 72 65 6e 3a 67 26 26 70 26 26 28 30 2c 64 2e 6a 73 78 29 28 61 2e 49 44 2c 7b 74 61 72 67 65 74 3a 6d 2e 63 75 72 72 65 6e 74 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 65 61 64 22 29 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 64 2e 6a 73 78 29 28 63 2e 41 79 2c 7b 76 61 6c 75 65 3a 7b 64 6f 63 75 6d 65 6e 74 3a 6d 2e 63 75 Data Ascii: const y={colorScheme:"light",...o.style};return g&&p&&!r\|\|(y.display="none"),(0,d.jsx)("iframe",{ref:h,title:n,...o,style:y,children:g&&p&&(0,d.jsx)(a.ID,{target:m.current.contentDocument.querySelector("head"),children:(0,d.jsx)(c.Ay,{value:{document:m.cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.8	49816	216.198.53.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	397	OUT	GET /web_widget/messenger/latest/web-widget-7437-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	1185	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 13846 Connection: close x-amz-id-2: vpmcy6Mk3dpyc0IV/eDV0kWaRG9Drgw25jfkgyupJXQ9aEo9Em0O3EX/w/mgqRisJVKuGRSmsY8= x-amz-request-id: YR1J6S4MFBXMS1QT x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:15 GMT ETag: "aa3fed8e69b72f1b6965afd8512f3a6a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:14 GMT x-amz-version-id: 4B8Fge9SprexpoZnyUOvsFYI3WfuZHrP CF-Cache-Status: HIT Age: 22556 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3WTorySyMHtS6azZzEMH7p4rN0t3RsHS%2BoMiAhRrTfq5dect%2BtJ%2FGruswpGqvVa4U%2FL6kLzenHgcgtcZXqSVjO%2FNQElJ2xH5%2B4ywofuHWvlQNxkGelUucAEMF3taCkFCPrRORso%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7f6d075e7e-EWR
2025-01-14 15:20:39 UTC	184	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 34 33 37 5d 2c 7b 33 36 39 31 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4b 3a 28 29 3d 3e 67 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 38 39 31 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[7437],{36913:(e,t,n)=>{n.d(t,{K:()=>g});var o=n(8891
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 30 29 2c 69 3d 6e 28 32 34 37 32 36 29 2c 73 3d 6e 2e 6e 28 69 29 2c 72 3d 6e 28 33 31 38 36 39 29 2c 61 3d 6e 28 33 34 34 38 35 29 2c 64 3d 6e 28 31 30 39 34 38 29 2c 6c 3d 6e 28 36 39 39 39 29 2c 75 3d 6e 28 32 36 33 38 35 29 2c 63 3d 6e 28 35 38 34 39 32 29 2c 70 3d 6e 28 38 38 36 33 29 3b 63 6f 6e 73 74 20 68 3d 22 62 75 74 74 6f 6e 73 2e 69 63 6f 6e 5f 62 75 74 74 6f 6e 22 2c 6d 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 70 2e 76 29 28 65 29 3b 72 65 74 75 72 6e 28 30 2c 64 2e 41 48 29 28 5b 22 62 6f 72 64 65 72 3a 22 2c 22 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 22 2c 22 3b 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 22 3b 22 2c 22 3b 26 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 22 5d 2c Data Ascii: 0),i=n(24726),s=n.n(i),r=n(31869),a=n(34485),d=n(10948),l=n(6999),u=n(26385),c=n(58492),p=n(8863);const h="buttons.icon_button",m=e=>{const t=(0,p.v)(e);return(0,d.AH)(["border:",";padding:0;width:",";min-width:",";",";&:disabled{background-color:",";}"],
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 65 64 3a 73 28 29 2e 62 6f 6f 6c 7d 2c 67 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 69 73 50 69 6c 6c 3a 21 30 2c 69 73 42 61 73 69 63 3a 21 30 2c 73 69 7a 65 3a 22 6d 65 64 69 75 6d 22 7d 7d 2c 38 38 36 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4f 3a 28 29 3d 3e 62 2c 76 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 6f 3d 6e 28 31 30 39 34 38 29 2c 69 3d 6e 28 34 30 35 37 37 29 2c 73 3d 6e 28 36 39 39 39 29 2c 72 3d 6e 28 31 38 34 36 29 2c 61 3d 6e 28 32 34 35 36 31 29 2c 64 3d 6e 28 32 36 33 38 35 29 2c 6c 3d 6e 28 35 38 34 39 32 29 3b 63 6f 6e 73 74 20 75 3d 22 62 75 74 74 6f 6e 73 2e 62 75 74 74 6f 6e 5f 67 72 6f 75 70 5f 76 69 65 77 22 2c 63 3d 6f 2e 41 79 2e 64 69 76 2e 61 74 74 72 73 28 7b 22 64 61 74 61 2d 67 61 72 64 65 6e 2d 69 64 22 Data Ascii: ed:s().bool},g.defaultProps={isPill:!0,isBasic:!0,size:"medium"}},8863:(e,t,n)=>{n.d(t,{O:()=>b,v:()=>f});var o=n(10948),i=n(40577),s=n(6999),r=n(1846),a=n(24561),d=n(26385),l=n(58492);const u="buttons.button_group_view",c=o.Ay.div.attrs({"data-garden-id"
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 73 65 72 2d 73 65 6c 65 63 74 3a 22 2c 22 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 22 2c 22 3b 26 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 22 2c 22 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 26 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 22 2c 22 3b 7d 26 3a 61 63 74 69 76 65 2c 26 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 27 74 72 75 65 27 5d 2c 26 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 27 6d 69 78 65 64 27 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 30 2e 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 Data Ascii: ser-select:",";-webkit-touch-callout:none;",";&::-moz-focus-inner{border:0;padding:0;}","{text-decoration:none;}&:hover{text-decoration:",";}&:active,&[aria-pressed='true'],&[aria-pressed='mixed']{transition:border-color 0.1s ease-in-out,background-color
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 2e 64 69 73 61 62 6c 65 64 7c 7c 65 2e 69 73 4e 65 75 74 72 61 6c 26 26 28 65 2e 69 73 50 72 69 6d 61 72 79 7c 7c 65 2e 69 73 53 65 6c 65 63 74 65 64 29 26 26 21 65 2e 69 73 44 61 6e 67 65 72 3f 22 6e 65 75 74 72 61 6c 48 75 65 22 3a 65 2e 69 73 44 61 6e 67 65 72 3f 22 64 61 6e 67 65 72 48 75 65 22 3a 22 70 72 69 6d 61 72 79 48 75 65 22 3b 63 6f 6e 73 74 20 61 3d 36 30 30 2c 64 3d 28 30 2c 73 2e 41 29 28 6e 2c 61 2c 65 2e 74 68 65 6d 65 29 2c 6c 3d 28 30 2c 73 2e 41 29 28 6e 2c 37 30 30 2c 65 2e 74 68 65 6d 65 29 2c 75 3d 28 30 2c 73 2e 41 29 28 6e 2c 38 30 30 2c 65 2e 74 68 65 6d 65 29 2c 63 3d 28 30 2c 73 2e 41 29 28 22 70 72 69 6d 61 72 79 48 75 65 22 2c 61 2c 65 2e 74 68 65 6d 65 29 2c 68 3d 6d 28 65 29 2c 66 3d 28 30 2c 73 2e 41 29 28 6e 2c 34 30 30 Data Ascii: .disabled\|\|e.isNeutral&&(e.isPrimary\|\|e.isSelected)&&!e.isDanger?"neutralHue":e.isDanger?"dangerHue":"primaryHue";const a=600,d=(0,s.A)(n,a,e.theme),l=(0,s.A)(n,700,e.theme),u=(0,s.A)(n,800,e.theme),c=(0,s.A)("primaryHue",a,e.theme),h=m(e),f=(0,s.A)(n,400
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 22 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 22 2c 22 20 26 3a 61 63 74 69 76 65 2c 26 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 27 74 72 75 65 27 5d 2c 26 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 27 6d 69 78 65 64 27 5d 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 26 3a 64 69 73 61 62 6c 65 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 26 20 22 2c 22 7b 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 26 3a 68 6f 76 65 72 20 22 2c 22 2c 26 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 Data Ascii: ";background-color:",";color:",";}"," &:active,&[aria-pressed='true'],&[aria-pressed='mixed']{border-color:",";background-color:",";color:",";}&:disabled{border-color:transparent;background-color:",";color:",";}& ","{color:",";}&:hover ",",&:focus-visible
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 6f 75 74 2c 63 6f 6c 6f 72 20 30 2e 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 6d 61 72 67 69 6e 2d 22 2c 22 20 30 2e 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 20 30 2e 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 7a 2d 69 6e 64 65 78 20 30 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 62 6f 72 64 65 72 3a 22 2c 22 20 22 2c 22 3b 22 2c 22 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 22 2c 22 3b 7d 26 3a 68 6f 76 65 72 2c 26 3a 61 63 74 69 76 65 2c 22 2c 22 7b 7a 2d 69 6e 64 65 78 3a 31 3b 7d 26 3a 64 69 73 61 62 6c 65 64 7b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 7d 26 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 6f 66 Data Ascii: out,color 0.1s ease-in-out,margin-"," 0.1s ease-in-out,outline-color 0.1s ease-in-out,z-index 0.25s ease-in-out;border:"," ",";","{border-color:",";box-shadow:",";}&:hover,&:active,","{z-index:1;}&:disabled{z-index:-1;background-color:",";}&:not(:first-of
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 22 2b 28 65 2e 74 68 65 6d 65 2e 72 74 6c 3f 22 72 69 67 68 74 22 3a 22 6c 65 66 74 22 29 29 2c 74 26 26 28 30 2c 6f 2e 41 48 29 28 5b 22 22 2c 22 3a 22 2c 22 70 78 3b 22 5d 2c 74 2c 32 2a 65 2e 74 68 65 6d 65 2e 73 70 61 63 65 2e 62 61 73 65 29 7d 29 28 65 29 29 2c 28 65 3d 3e 28 30 2c 73 2e 41 29 28 61 2c 65 29 29 29 3b 64 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 74 68 65 6d 65 3a 72 2e 41 7d 7d 2c 33 31 38 36 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 53 3a 28 29 3d 3e 6f 7d 29 3b 63 6f 6e 73 74 20 6f 3d 5b 22 73 6d 61 6c 6c 22 2c 22 6d 65 64 69 75 6d 22 2c 22 6c 61 72 67 65 22 5d 7d 2c 37 31 32 37 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 72 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 38 39 Data Ascii: argin-"+(e.theme.rtl?"right":"left")),t&&(0,o.AH)(["",":","px;"],t,2*e.theme.space.base)})(e)),(e=>(0,s.A)(a,e)));d.defaultProps={theme:r.A}},31869:(e,t,n)=>{n.d(t,{S:()=>o});const o=["small","medium","large"]},71277:(e,t,n)=>{n.d(t,{r:()=>s});var o=n(889
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 3b 76 61 72 20 6f 3d 6e 28 38 35 39 39 31 29 2c 69 3d 6e 28 36 39 39 31 31 29 2c 73 3d 6e 28 38 38 39 31 30 29 2c 72 3d 6e 28 34 38 35 35 39 29 3b 63 6f 6e 73 74 20 61 3d 21 31 2c 64 3d 73 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 3b 76 61 72 20 6c 3d 6e 28 36 39 38 32 35 29 2c 75 3d 22 75 6e 6d 6f 75 6e 74 65 64 22 2c 63 3d 22 65 78 69 74 65 64 22 2c 70 3d 22 65 6e 74 65 72 69 6e 67 22 2c 68 3d 22 65 6e 74 65 72 65 64 22 2c 6d 3d 22 65 78 69 74 69 6e 67 22 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 76 61 72 20 6f 3b 6f 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 6e 29 7c 7c 74 68 69 73 3b 76 61 72 20 69 2c 73 3d 6e 26 26 21 6e 2e 69 73 4d 6f 75 6e 74 69 6e 67 3f 74 2e 65 6e 74 65 72 3a Data Ascii: ;var o=n(85991),i=n(69911),s=n(88910),r=n(48559);const a=!1,d=s.createContext(null);var l=n(69825),u="unmounted",c="exited",p="entering",h="entered",m="exiting",f=function(e){function t(t,n){var o;o=e.call(this,t,n)\|\|this;var i,s=n&&!n.isMounting?t.enter:
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 65 72 66 6f 72 6d 45 6e 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 74 68 69 73 2e 70 72 6f 70 73 2e 65 6e 74 65 72 2c 6f 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3f 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 69 73 4d 6f 75 6e 74 69 6e 67 3a 65 2c 69 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6e 6f 64 65 52 65 66 3f 5b 6f 5d 3a 5b 72 2e 66 69 6e 64 44 4f 4d 4e 6f 64 65 28 74 68 69 73 29 2c 6f 5d 2c 73 3d 69 5b 30 5d 2c 64 3d 69 5b 31 5d 2c 6c 3d 74 68 69 73 2e 67 65 74 54 69 6d 65 6f 75 74 73 28 29 2c 75 3d 6f 3f 6c 2e 61 70 70 65 61 72 3a 6c 2e 65 6e 74 65 72 3b 21 65 26 26 21 6e 7c 7c 61 3f 74 68 69 73 2e 73 61 66 65 53 65 74 53 74 61 74 65 28 7b 73 74 61 74 75 73 3a 68 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 70 72 Data Ascii: erformEnter=function(e){var t=this,n=this.props.enter,o=this.context?this.context.isMounting:e,i=this.props.nodeRef?[o]:[r.findDOMNode(this),o],s=i[0],d=i[1],l=this.getTimeouts(),u=o?l.appear:l.enter;!e&&!n\|\|a?this.safeSetState({status:h},(function(){t.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.8	49814	216.198.53.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	397	OUT	GET /web_widget/messenger/latest/web-widget-3190-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	1193	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 14755 Connection: close x-amz-id-2: dBlE95FF/yiy7gbrP6+P8pFMK7DI23U7xafyTG81+laiFsge81Ey4k119wY0PZq1d+23e4E3D7w= x-amz-request-id: YR1P3VED0RY67EWJ x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:14 GMT ETag: "835f7cff134156384684fcc0db13880b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:13 GMT x-amz-version-id: l3e2UJKJCNISLxvRzkkegoAkElCyL9If CF-Cache-Status: HIT Age: 22557 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVZijmqnTAfpW%2BcEtFkXp%2BK%2FN2MhwKFLM92qh%2FHPTKsaTeqUPqrBDS%2BNtu0PRsc2QBt3AvhKkTkxr%2B36%2BynSzQwHwf6pGGmCpe2EFQszOaeqh9pk%2BQ62%2B0q%2FiNLaAOv3ertTvkg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7f7c5d43c8-EWR
2025-01-14 15:20:39 UTC	176	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 39 30 5d 2c 7b 33 30 33 33 39 3a 28 65 2c 72 2c 61 29 3d 3e 7b 61 2e 64 28 72 2c 7b 41 3a 28 29 3d 3e 74 7d 29 3b 76 61 72 20 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[3190],{30339:(e,r,a)=>{a.d(r,{A:()=>t});var
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 6e 3d 61 28 32 30 39 31 32 29 2c 73 3d 61 28 37 35 33 33 29 2c 6f 3d 61 28 32 36 39 38 33 29 3b 63 6f 6e 73 74 20 74 3d 28 29 3d 3e 28 28 30 2c 6e 2e 64 34 29 28 6f 2e 4a 4b 29 2c 73 2e 41 2e 74 72 61 6e 73 6c 61 74 65 29 7d 2c 34 33 31 39 30 3a 28 65 2c 72 2c 61 29 3d 3e 7b 61 2e 64 28 72 2c 7b 41 3a 28 29 3d 3e 76 7d 29 3b 76 61 72 20 6e 3d 61 28 32 34 37 32 36 29 2c 73 3d 61 2e 6e 28 6e 29 2c 6f 3d 61 28 38 38 39 31 30 29 2c 74 3d 61 28 32 30 39 31 32 29 2c 69 3d 61 28 31 30 39 34 38 29 2c 6d 3d 61 28 33 32 36 31 29 2c 6c 3d 61 2e 6e 28 6d 29 2c 64 3d 61 28 36 34 30 34 33 29 2c 62 3d 61 28 37 30 30 36 39 29 2c 67 3d 61 28 37 30 35 31 33 29 2c 5f 3d 61 28 32 36 34 33 36 29 2c 63 3d 61 28 37 35 33 33 29 2c 6b 3d 61 28 33 30 33 33 39 29 2c 66 3d 61 28 38 Data Ascii: n=a(20912),s=a(7533),o=a(26983);const t=()=>((0,n.d4)(o.JK),s.A.translate)},43190:(e,r,a)=>{a.d(r,{A:()=>v});var n=a(24726),s=a.n(n),o=a(88910),t=a(20912),i=a(10948),m=a(3261),l=a.n(m),d=a(64043),b=a(70069),g=a(70513),_=a(26436),c=a(7533),k=a(30339),f=a(8
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 66 69 6c 65 5f 73 69 7a 65 5f 6c 69 6d 69 74 22 2c 7b 66 69 6c 65 55 70 6c 6f 61 64 53 69 7a 65 4c 69 6d 69 74 49 6e 4d 62 3a 35 30 7d 29 2c 63 68 61 72 61 63 74 65 72 4c 69 6d 69 74 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 72 65 63 65 69 70 74 2e 65 78 63 65 65 64 5f 6c 69 6d 69 74 22 29 2c 66 69 6c 65 54 79 70 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 65 72 72 6f 72 2e 66 69 6c 65 5f 74 79 70 65 5f 6c 69 6d 69 74 22 29 2c 75 6e 6b 6e 6f 77 6e 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 74 61 70 Data Ascii: file_size_limit",{fileUploadSizeLimitInMb:50}),characterLimit:m("embeddable_framework.messenger.receipt.exceed_limit"),fileType:m("embeddable_framework.messenger.file_upload.error.file_type_limit"),unknown:m("embeddable_framework.messenger.file_upload.tap
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 67 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 6f 70 65 6e 5f 69 6d 61 67 65 5f 69 6e 5f 6e 65 77 5f 74 61 62 5f 76 32 22 29 2c 70 72 69 6d 61 72 79 50 61 72 74 69 63 69 70 61 6e 74 41 6c 74 54 65 78 74 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6d 61 67 65 5f 6d 65 73 73 61 67 65 2e 61 6c 74 5f 74 65 78 74 2e 65 6e 64 5f 75 73 65 72 5f 76 32 22 29 2c 6f 74 68 65 72 50 61 72 74 69 63 69 70 61 6e 74 41 6c 74 54 65 78 74 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6d 61 67 65 5f 6d 65 73 73 61 67 65 2e 61 6c 74 5f 74 65 78 74 2e 61 Data Ascii: ge:m("embeddable_framework.messenger.file_upload.open_image_in_new_tab_v2"),primaryParticipantAltText:m("embeddable_framework.messenger.image_message.alt_text.end_user_v2"),otherParticipantAltText:m("embeddable_framework.messenger.image_message.alt_text.a
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 75 73 3a 28 65 2c 72 29 3d 3e 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 6f 72 6d 2e 73 74 65 70 5f 73 74 61 74 75 73 22 2c 7b 73 74 65 70 3a 65 2c 74 6f 74 61 6c 53 74 65 70 73 3a 72 7d 29 2c 65 72 72 6f 72 73 3a 7b 72 65 71 75 69 72 65 64 46 69 65 6c 64 3a 65 3d 3e 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 6f 72 6d 2e 66 69 65 6c 64 5f 69 73 5f 72 65 71 75 69 72 65 64 5f 76 33 22 2c 7b 66 69 65 6c 64 4c 61 62 65 6c 3a 65 7d 29 2c 72 65 71 75 69 72 65 64 4e 61 6d 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 Data Ascii: us:(e,r)=>m("embeddable_framework.messenger.message.form.step_status",{step:e,totalSteps:r}),errors:{requiredField:e=>m("embeddable_framework.messenger.message.form.field_is_required_v3",{fieldLabel:e}),requiredName:m("embeddable_framework.messenger.messa
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 2c 7b 2e 2e 2e 6e 3f 7b 7d 3a 7b 6d 6f 6e 74 68 3a 22 6c 6f 6e 67 22 2c 64 61 79 3a 22 6e 75 6d 65 72 69 63 22 7d 2c 68 6f 75 72 3a 22 6e 75 6d 65 72 69 63 22 2c 6d 69 6e 75 74 65 3a 22 6e 75 6d 65 72 69 63 22 7d 29 7d 60 7d 2c 6d 65 73 73 61 67 65 4c 6f 67 3a 7b 69 6e 69 74 69 61 6c 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 65 71 75 65 73 74 46 61 69 6c 65 64 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6e 69 74 69 61 6c 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 72 65 71 75 65 73 74 5f 66 61 69 6c 65 64 22 29 2c 69 6e 69 74 69 61 6c 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 65 74 72 79 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6e 69 Data Ascii: ,{...n?{}:{month:"long",day:"numeric"},hour:"numeric",minute:"numeric"})}`},messageLog:{initialConversationRequestFailed:m("embeddable_framework.messenger.initial_conversation_request_failed"),initialConversationRetry:m("embeddable_framework.messenger.ini
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 74 69 74 6c 65 2e 77 68 61 74 73 61 70 70 22 29 2c 73 75 62 74 69 74 6c 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 73 75 62 74 69 74 6c 65 2e 77 68 61 74 73 61 70 70 22 29 2c 69 6e 73 74 72 75 63 74 69 6f 6e 73 3a 7b 64 65 73 6b 74 6f 70 3a 28 29 3d 3e 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 69 6e 73 74 72 75 63 74 69 6f 6e 73 5f 64 65 73 6b 74 6f 70 2e 77 68 61 74 Data Ascii: ddable_framework.messenger.channel_linking.page.title.whatsapp"),subtitle:m("embeddable_framework.messenger.channel_linking.page.subtitle.whatsapp"),instructions:{desktop:()=>m("embeddable_framework.messenger.channel_linking.page.instructions_desktop.what
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 62 75 74 74 6f 6e 5f 64 65 73 6b 74 6f 70 2e 66 62 5f 6d 65 73 73 65 6e 67 65 72 22 29 2c 6d 6f 62 69 6c 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 62 75 74 74 6f 6e 5f 6d 6f 62 69 6c 65 2e 66 62 5f 6d 65 73 73 65 6e 67 65 72 22 29 7d 2c 64 69 73 63 6f 6e 6e 65 63 74 42 75 74 74 6f 6e 54 65 78 74 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 64 69 73 63 6f 6e 6e 65 63 74 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 29 2c 64 69 73 63 6f 6e 6e 65 63 74 Data Ascii: hannel_linking.page.button_desktop.fb_messenger"),mobile:m("embeddable_framework.messenger.channel_linking.page.button_mobile.fb_messenger")},disconnectButtonText:m("embeddable_framework.messenger.channel_link.messenger.disconnect_button_text"),disconnect
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 61 6c 74 22 2c 7b 6e 61 6d 65 3a 65 7d 29 7d 7d 2c 73 6f 75 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 3a 7b 74 6f 67 67 6c 65 45 6e 61 62 6c 65 64 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 73 6f 75 6e 64 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 74 6f 67 67 6c 65 2e 65 6e 61 62 6c 65 64 22 29 2c 74 6f 67 67 6c 65 44 69 73 61 62 6c 65 64 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 73 6f 75 6e 64 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 74 6f 67 67 6c 65 2e 64 69 73 61 62 6c 65 64 22 29 2c 68 69 64 64 65 6e 46 69 65 6c 64 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 73 6f Data Ascii: alt",{name:e})}},soundNotifications:{toggleEnabled:m("embeddable_framework.messenger.sound_notification.toggle.enabled"),toggleDisabled:m("embeddable_framework.messenger.sound_notification.toggle.disabled"),hiddenField:m("embeddable_framework.messenger.so
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 72 2e 65 6d 6f 6a 69 2e 74 6f 6e 65 5f 70 69 63 6b 65 72 2e 6c 61 62 65 6c 2e 6d 65 64 69 75 6d 5f 74 6f 6e 65 22 29 2c 74 6f 6e 65 50 69 63 6b 65 72 4c 61 62 65 6c 4d 65 64 69 75 6d 44 61 72 6b 54 6f 6e 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 74 6f 6e 65 5f 70 69 63 6b 65 72 2e 6c 61 62 65 6c 2e 6d 65 64 69 75 6d 5f 64 61 72 6b 5f 74 6f 6e 65 22 29 2c 74 6f 6e 65 50 69 63 6b 65 72 4c 61 62 65 6c 44 61 72 6b 54 6f 6e 65 3a 6d 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 74 6f 6e 65 5f 70 69 63 6b 65 72 2e 6c 61 62 65 6c 2e 64 61 72 6b 5f 74 6f 6e 65 22 29 2c 73 65 61 72 63 68 4c 61 62 65 6c 3a 6d 28 Data Ascii: r.emoji.tone_picker.label.medium_tone"),tonePickerLabelMediumDarkTone:m("embeddable_framework.messenger.emoji.tone_picker.label.medium_dark_tone"),tonePickerLabelDarkTone:m("embeddable_framework.messenger.emoji.tone_picker.label.dark_tone"),searchLabel:m(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.8	49813	216.198.53.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	421	OUT	GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	1173	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 23558 Connection: close x-amz-id-2: ++fUp+qYv/Zs387iTgQHkD33df4KOf8Gnx9leHwVk3/AsjaotF8GpgBqjhAaBOSDYSFnOoAP3CY= x-amz-request-id: YR1YGPYCY6TSJS6C x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:16 GMT ETag: "0c279e1e04e4fa0f64f26c7ee021166d" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:15 GMT x-amz-version-id: KcRlhZu__s7XByY8XFOik3ZtRoYJmqTx CF-Cache-Status: HIT Age: 22557 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ElE6bGuVNyQinQ6mrQY8tVaV1eoxexL8qsu8OxDHmU9r7b5pY0zAPnRKXRwZpjxCARYneLH8UINTdYKZBNoM2CpxRnTpdJRD5kYBoiu9gFp6W1ILZCO3wixKE86IBSJDfgmqRk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c7f79c7432b-EWR
2025-01-14 15:20:39 UTC	196	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 32 35 30 5d 2c 7b 33 33 30 33 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 6c 6f 63 61 6c 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 75 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[7250],{33034:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-u
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 73 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 61 72 6f 75 73 65 6c 5f 6d 65 73 73 61 67 65 2e 61 63 74 69 6f 6e 2e 61 63 63 65 73 73 69 62 6c 65 5f 74 65 78 74 22 3a 22 7b 7b 61 63 74 69 6f 6e 7d 7d 3a 20 7b 7b 74 69 74 6c 65 7d 7d 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 61 72 6f 75 73 65 6c 5f 6d 65 73 73 61 67 65 2e 62 75 74 74 6f 6e 2e 6e 65 78 74 22 3a 22 4e 65 78 74 20 69 74 65 6d 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 61 72 6f 75 73 65 6c 5f 6d 65 73 73 61 67 65 2e 62 75 74 74 Data Ascii: s","rtl":false,"translations":{"embeddable_framework.messenger.carousel_message.action.accessible_text":"{{action}}: {{title}}","embeddable_framework.messenger.carousel_message.button.next":"Next item","embeddable_framework.messenger.carousel_message.butt
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 65 77 5f 71 72 5f 63 6f 64 65 22 3a 22 47 65 6e 65 72 61 74 65 20 6e 65 77 20 51 52 20 63 6f 64 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 62 75 74 74 6f 6e 5f 64 65 73 6b 74 6f 70 2e 66 62 5f 6d 65 73 73 65 6e 67 65 72 22 3a 22 4f 70 65 6e 20 4d 65 73 73 65 6e 67 65 72 20 6f 6e 20 74 68 69 73 20 64 65 76 69 63 65 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 62 75 74 74 6f 6e 5f 64 65 73 6b 74 6f 70 2e 69 6e 73 74 61 67 72 61 6d 22 3a 22 4f 70 65 6e 20 49 6e 73 74 61 67 72 61 6d 20 6f 6e 20 74 68 69 73 20 64 65 Data Ascii: ew_qr_code":"Generate new QR code","embeddable_framework.messenger.channel_linking.page.button_desktop.fb_messenger":"Open Messenger on this device.","embeddable_framework.messenger.channel_linking.page.button_desktop.instagram":"Open Instagram on this de
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 6f 62 69 6c 65 2e 69 6e 73 74 61 67 72 61 6d 22 3a 22 46 6f 6c 6c 6f 77 20 40 7b 7b 69 6e 73 74 61 67 72 61 6d 48 61 6e 64 6c 65 7d 7d 20 74 6f 20 73 65 6e 64 20 61 20 44 4d 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 6e 67 2e 70 61 67 65 2e 69 6e 73 74 72 75 63 74 69 6f 6e 73 5f 6d 6f 62 69 6c 65 2e 77 68 61 74 73 61 70 70 22 3a 22 4f 70 65 6e 20 57 68 61 74 73 41 70 70 20 61 6e 64 20 73 65 6e 64 20 61 20 73 68 6f 72 74 20 6d 65 73 73 61 67 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 68 61 6e 6e 65 6c 5f 6c 69 6e 6b 69 Data Ascii: obile.instagram":"Follow @{{instagramHandle}} to send a DM.","embeddable_framework.messenger.channel_linking.page.instructions_mobile.whatsapp":"Open WhatsApp and send a short message to connect your account.","embeddable_framework.messenger.channel_linki
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 6d 20 63 6f 6e 74 69 6e 75 69 6e 67 20 6d 79 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 6f 6e 20 57 68 61 74 73 41 70 70 2e 20 48 65 72 65 5c 27 73 20 6d 79 20 63 6f 64 65 3a 20 7b 7b 77 68 61 74 73 61 70 70 43 6f 64 65 7d 7d 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 6f 6d 70 6f 73 65 72 2e 6c 61 62 65 6c 22 3a 22 54 79 70 65 20 61 20 6d 65 73 73 61 67 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 6f 6d 70 6f 73 65 72 2e 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 54 79 70 65 20 61 20 6d 65 73 73 61 67 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 63 6f 6d 70 6f 73 65 72 2e 73 Data Ascii: m continuing my conversation on WhatsApp. Here\'s my code: {{whatsappCode}}","embeddable_framework.messenger.composer.label":"Type a message","embeddable_framework.messenger.composer.placeholder":"Type a message","embeddable_framework.messenger.composer.s
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 73 65 61 72 63 68 5f 6c 61 62 65 6c 22 3a 22 46 69 6e 64 20 61 6e 20 65 6d 6f 6a 69 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 73 79 6d 62 6f 6c 73 22 3a 22 53 79 6d 62 6f 6c 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 74 6f 6e 65 5f 70 69 63 6b 65 72 2e 6c 61 62 65 6c 2e 64 61 72 6b 5f 74 6f 6e 65 22 3a 22 44 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 65 6d 6f 6a 69 2e 74 6f 6e 65 5f 70 69 63 6b 65 72 2e 6c 61 62 65 6c 2e 64 65 Data Ascii: framework.messenger.emoji.search_label":"Find an emoji","embeddable_framework.messenger.emoji.symbols":"Symbols","embeddable_framework.messenger.emoji.tone_picker.label.dark_tone":"Dark skin tone","embeddable_framework.messenger.emoji.tone_picker.label.de
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 62 65 20 7b 7b 66 69 6c 65 55 70 6c 6f 61 64 53 69 7a 65 4c 69 6d 69 74 49 6e 4d 62 7d 7d 20 4d 42 20 6f 72 20 6c 65 73 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 65 72 72 6f 72 2e 66 69 6c 65 5f 74 79 70 65 5f 6c 69 6d 69 74 22 3a 22 46 69 6c 65 20 74 79 70 65 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 66 69 6c 65 5f 75 70 6c 6f 61 64 2e 6f 70 65 6e 5f 69 6d 61 67 65 5f 69 6e 5f 6e 65 77 5f 74 61 62 5f 76 32 22 3a 22 4f 70 65 6e 20 69 6e 20 6e 65 77 20 74 61 62 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 Data Ascii: be {{fileUploadSizeLimitInMb}} MB or less","embeddable_framework.messenger.file_upload.error.file_type_limit":"File type not supported","embeddable_framework.messenger.file_upload.open_image_in_new_tab_v2":"Open in new tab","embeddable_framework.messenger
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 20 6d 6f 72 65 20 63 6f 6e 74 65 78 74 2c 20 69 66 20 79 6f 75 20 68 61 76 65 6e 5c 27 74 20 61 6c 72 65 61 64 79 2e 20 4f 70 65 6e 20 69 6e 20 6e 65 77 20 74 61 62 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6e 69 74 69 61 6c 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 72 65 71 75 65 73 74 5f 66 61 69 6c 65 64 22 3a 22 43 6f 75 6c 64 6e e2 80 99 74 20 6c 6f 61 64 20 6d 65 73 73 61 67 65 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 69 6e 69 74 69 61 6c 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 72 65 74 72 79 22 3a 22 54 61 70 20 74 6f 20 72 65 74 72 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 Data Ascii: more context, if you haven\'t already. Open in new tab.","embeddable_framework.messenger.initial_conversation_request_failed":"Couldnt load messages","embeddable_framework.messenger.initial_conversation_retry":"Tap to retry","embeddable_framework.mess
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 69 6c 65 2e 73 69 7a 65 5f 69 6e 5f 6d 62 22 3a 22 7b 7b 73 69 7a 65 7d 7d 20 4d 42 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 6f 72 6d 2e 65 72 72 6f 72 5f 69 63 6f 6e 22 3a 22 45 72 72 6f 72 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 66 6f 72 6d 2e 66 61 69 6c 65 64 5f 74 6f 5f 73 75 62 6d 69 74 22 3a 22 44 65 74 61 69 6c 73 20 63 6f 75 6c 64 6e e2 80 99 74 20 62 65 20 73 65 6e 74 2e 20 54 72 79 20 61 67 61 69 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 Data Ascii: .messenger.message.file.size_in_mb":"{{size}} MB","embeddable_framework.messenger.message.form.error_icon":"Error","embeddable_framework.messenger.message.form.failed_to_submit":"Details couldnt be sent. Try again.","embeddable_framework.messenger.mess
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 2e 72 65 63 65 69 70 74 2e 72 65 63 65 69 76 65 64 5f 72 65 63 65 6e 74 6c 79 22 3a 22 4a 75 73 74 20 6e 6f 77 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 65 73 73 61 67 65 5f 62 75 62 62 6c 65 2e 61 69 5f 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 47 65 6e 65 72 61 74 65 64 20 62 79 20 41 49 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6d 75 6c 74 69 63 6f 6e 76 65 72 73 61 74 69 6f 6e 2e 62 61 63 6b 5f 62 75 74 74 6f 6e 22 3a 22 42 61 63 6b 20 74 6f 20 74 68 65 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 6c 69 73 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f Data Ascii: e_framework.messenger.message.receipt.received_recently":"Just now","embeddable_framework.messenger.message_bubble.ai_disclaimer":"Generated by AI","embeddable_framework.messenger.multiconversation.back_button":"Back to the conversation list","embeddable_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.8	49817	216.198.53.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	397	OUT	GET /web_widget/messenger/latest/web-widget-2229-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	1183	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 13558 Connection: close x-amz-id-2: uro8jB83SJw/TcMg3XYh3IIpgeGJudhxaZmdb0Omb37RTyIWf9hHcFBUzQCNlwu+YlajFVj6/Uk= x-amz-request-id: 56VKHVH3E94J5KZN x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:14 GMT ETag: "bb8cbfd720c605961aae1c3d74c181ee" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:13 GMT x-amz-version-id: R2vMu55LFXiKwfjvuElsTSFzsBT40yDl CF-Cache-Status: HIT Age: 22557 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5vqT9T%2Bn1OA7yR%2BQfJEZA8%2FxikESXQr89GyK965z5Srpct9Z1lbSZ1%2BRr9HT%2FzvVWZnAD1SgVQy1hPYe8Ngg0YTaxy4COKMkPDOl4BTB8ly4pfpaWePrtPrjqUSESRxJpyRWq6s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c80185a4346-EWR
2025-01-14 15:20:39 UTC	186	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 32 39 5d 2c 7b 35 30 39 31 35 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 59 65 7d 29 3b Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[2229],{50915:(e,n,t)=>{t.r(n),t.d(n,{default:()=>Ye});
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 76 61 72 20 72 3d 74 28 34 38 35 35 39 29 2c 73 3d 74 28 32 30 39 31 32 29 2c 69 3d 74 28 38 38 39 31 30 29 2c 61 3d 74 28 32 34 37 32 36 29 2c 6f 3d 74 2e 6e 28 61 29 2c 64 3d 74 28 37 30 30 36 39 29 2c 6c 3d 74 28 35 34 38 39 39 29 2c 63 3d 74 28 34 33 32 32 39 29 2c 70 3d 74 28 31 30 39 34 38 29 2c 68 3d 74 28 39 34 39 39 38 29 3b 63 6f 6e 73 74 20 6d 3d 70 2e 41 79 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 31 71 39 66 77 76 79 2d 30 22 7d 29 28 5b 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 68 Data Ascii: var r=t(48559),s=t(20912),i=t(88910),a=t(24726),o=t.n(a),d=t(70069),l=t(54899),c=t(43229),p=t(10948),h=t(94998);const m=p.Ay.div.withConfig({componentId:"sc-1q9fwvy-0"})(["position:absolute;left:0px;display:flex;align-items:center;justify-content:center;h
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 32 2c 38 2e 32 33 38 35 37 36 32 35 20 34 2e 32 33 38 35 37 36 32 35 2c 36 20 37 2c 36 20 4c 37 2c 36 20 5a 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 31 32 2e 30 30 30 30 30 30 2c 20 31 34 2e 30 30 30 30 30 30 29 20 73 63 61 6c 65 28 2d 31 2c 20 31 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 2e 30 30 30 30 30 30 2c 20 2d 31 34 2e 30 30 30 30 30 30 29 20 22 7d 29 7d 29 7d 3b 62 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 77 69 64 74 68 3a 22 32 34 70 78 22 2c 68 65 69 67 68 74 3a 22 32 34 70 78 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 34 20 32 34 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 78 6d 6c 6e 73 58 6c 69 Data Ascii: 2,8.23857625 4.23857625,6 7,6 L7,6 Z",transform:"translate(12.000000, 14.000000) scale(-1, 1) translate(-12.000000, -14.000000) "})})};b.defaultProps={width:"24px",height:"24px",viewBox:"0 0 24 24",version:"1.1",xmlns:"http://www.w3.org/2000/svg",xmlnsXli
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 22 2c 22 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 22 3b 26 3a 61 63 74 69 76 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 7d 26 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 7d 26 5b 64 61 74 61 2d 67 61 72 64 65 6e 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 5d 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 22 2c 22 3b 7d 7d 22 5d 2c 28 65 3d 3e 43 28 65 2e 73 68 61 70 65 2c 65 2e 73 68 61 70 65 53 65 74 74 69 6e 67 73 29 29 2c 28 65 3d 3e 65 2e 74 68 65 6d 65 2e 6d 65 73 73 65 6e 67 65 72 2e 63 6f 6c Data Ascii: tion:relative;overflow:hidden;border-radius:",";width:100%;height:100%;background-color:",";&:active{box-shadow:none;}&:focus{box-shadow:none;}&[data-garden-focus-visible]{box-shadow:inset ",";}}"],(e=>C(e.shape,e.shapeSettings)),(e=>e.theme.messenger.col
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 30 2c 73 2e 64 34 29 28 52 2e 6c 24 29 2c 6e 3d 28 30 2c 73 2e 64 34 29 28 53 2e 61 37 29 2c 74 3d 28 30 2c 73 2e 64 34 29 28 53 2e 7a 53 29 2c 5b 72 2c 61 5d 3d 28 30 2c 69 2e 75 73 65 53 74 61 74 65 29 28 30 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 65 3d 3d 3d 52 2e 68 5f 2e 53 69 6e 67 6c 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 3f 61 28 6e 29 3a 61 28 74 29 29 7d 29 2c 5b 65 2c 6e 2c 74 5d 29 2c 72 7d 3b 76 61 72 20 48 3d 74 28 34 35 38 31 32 29 2c 57 3d 74 28 39 38 35 39 37 29 2c 50 3d 74 28 35 32 38 35 39 29 2c 44 3d 74 28 39 39 30 32 38 29 2c 4d 3d 74 28 36 36 35 31 35 29 2c 5a 3d Data Ascii: 0,s.d4)(R.l$),n=(0,s.d4)(S.a7),t=(0,s.d4)(S.zS),[r,a]=(0,i.useState)(0);return(0,i.useEffect)((()=>{"number"==typeof t&&"number"==typeof n&&(e===R.h_.SingleConversation?a(n):a(t))}),[e,n,t]),r};var H=t(45812),W=t(98597),P=t(52859),D=t(99028),M=t(66515),Z=
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 33 30 25 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 70 78 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 70 78 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: rm: translateY(0px) rotate(0deg);\n }\n\n 30% {\n -webkit-transform: translateY(-5px) rotate(2deg);\n transform: translateY(-5px) rotate(2deg);\n }\n\n 60% {\n -webkit-transform:
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 73 65 6e 67 65 72 2e 6c 61 75 6e 63 68 65 72 2e 66 72 61 6d 65 2e 74 69 74 6c 65 22 29 3b 72 65 74 75 72 6e 20 66 3d 3d 3d 55 2e 76 2e 53 75 63 63 65 73 73 66 75 6c 26 26 28 65 3d 30 3d 3d 3d 78 3f 62 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6c 61 75 6e 63 68 65 72 2e 66 72 61 6d 65 2e 6e 6f 5f 6e 65 77 5f 6d 65 73 73 61 67 65 73 5f 74 69 74 6c 65 22 29 3a 31 3d 3d 3d 78 3f 62 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6c 61 75 6e 63 68 65 72 2e 66 72 61 6d 65 2e 6f 6e 65 5f 6e 65 77 5f 6d 65 73 73 61 67 65 5f 74 69 74 6c 65 22 29 3a 62 28 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 6d 65 73 73 65 6e 67 65 72 2e 6c 61 75 Data Ascii: senger.launcher.frame.title");return f===U.v.Successful&&(e=0===x?b("embeddable_framework.messenger.launcher.frame.no_new_messages_title"):1===x?b("embeddable_framework.messenger.launcher.frame.one_new_message_title"):b("embeddable_framework.messenger.lau
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 2c 73 65 3d 74 28 31 37 33 39 38 29 2c 69 65 3d 74 28 38 30 30 39 36 29 2c 61 65 3d 74 28 39 39 33 31 37 29 2c 6f 65 3d 74 28 33 39 34 35 33 29 2c 64 65 3d 74 28 33 31 36 35 30 29 2c 6c 65 3d 74 28 34 34 30 32 35 29 2c 63 65 3d 74 28 38 33 32 36 38 29 2c 70 65 3d 74 28 34 37 33 38 36 29 2c 68 65 3d 74 28 37 39 33 39 30 29 2c 6d 65 3d 74 28 39 33 39 30 31 29 3b 63 6f 6e 73 74 20 75 65 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 73 2e 77 41 29 28 29 2c 6e 3d 28 30 2c 73 2e 64 34 29 28 4f 2e 78 44 29 2c 74 3d 28 30 2c 73 2e 64 34 29 28 69 65 2e 48 41 29 2c 72 3d 28 30 2c 73 2e 64 34 29 28 73 65 2e 5f 36 29 2c 61 3d 28 30 2c 73 2e 64 34 29 28 48 2e 42 31 29 2c 6f 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 74 29 2c 64 3d 28 30 2c 73 2e 64 34 29 28 6d 65 Data Ascii: ,se=t(17398),ie=t(80096),ae=t(99317),oe=t(39453),de=t(31650),le=t(44025),ce=t(83268),pe=t(47386),he=t(79390),me=t(93901);const ue=()=>{const e=(0,s.wA)(),n=(0,s.d4)(O.xD),t=(0,s.d4)(ie.HA),r=(0,s.d4)(se._6),a=(0,s.d4)(H.B1),o=(0,i.useRef)(t),d=(0,s.d4)(me
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 2e 65 28 36 32 30 39 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 36 36 32 30 39 29 29 29 29 2c 66 65 3d 28 29 3d 3e 7b 63 6f 6e 73 74 5b 65 2c 6e 5d 3d 28 30 2c 69 2e 75 73 65 53 74 61 74 65 29 28 21 31 29 2c 74 3d 28 30 2c 73 2e 64 34 29 28 67 65 2e 42 48 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 74 26 26 6e 28 21 30 29 7d 29 2c 5b 74 5d 29 2c 28 30 2c 75 2e 6a 73 78 29 28 69 2e 53 75 73 70 65 6e 73 65 2c 7b 66 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 63 68 69 6c 64 72 65 6e 3a 65 26 26 28 30 2c 75 2e 6a 73 78 29 28 78 65 2c 7b 7d 29 7d 29 7d 2c 62 65 3d 70 2e 41 79 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 31 6f 38 67 6c 63 6e 2d 30 22 7d 29 28 5b Data Ascii: .e(6209).then(t.bind(t,66209)))),fe=()=>{const[e,n]=(0,i.useState)(!1),t=(0,s.d4)(ge.BH);return(0,i.useEffect)((()=>{t&&n(!0)}),[t]),(0,u.jsx)(i.Suspense,{fallback:null,children:e&&(0,u.jsx)(xe,{})})},be=p.Ay.div.withConfig({componentId:"sc-1o8glcn-0"})([
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 68 74 3a 45 2e 4b 72 2c 77 69 64 74 68 3a 45 2e 4b 72 2b 32 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 62 6f 74 74 6f 6d 3a 6c 26 26 64 3f 45 2e 5a 59 2e 62 6f 74 74 6f 6d 28 45 2e 47 31 29 3a 45 2e 5a 59 2e 62 6f 74 74 6f 6d 28 61 29 2c 5b 74 5d 3a 22 72 69 67 68 74 22 3d 3d 3d 74 3f 45 2e 5a 59 2e 72 69 67 68 74 28 6f 29 3a 45 2e 5a 59 2e 6c 65 66 74 28 6f 29 2c 62 6f 72 64 65 72 3a 30 2c 6d 61 72 67 69 6e 54 6f 70 3a 30 7d 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 75 2e 6a 73 78 29 28 56 2e 41 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 30 2c 75 2e 6a 73 78 73 29 28 75 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 75 2e 6a 73 78 29 28 6a 65 2c 7b 7d 29 2c 65 5d 7d 29 7d 29 7d 29 7d 3b 76 65 2e 70 72 6f 70 54 79 70 65 73 3d Data Ascii: ht:E.Kr,width:E.Kr+20,position:"fixed",bottom:l&&d?E.ZY.bottom(E.G1):E.ZY.bottom(a),[t]:"right"===t?E.ZY.right(o):E.ZY.left(o),border:0,marginTop:0},children:(0,u.jsx)(V.A,{children:(0,u.jsxs)(u.Fragment,{children:[(0,u.jsx)(je,{}),e]})})})};ve.propTypes=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	49819	104.16.80.73	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	366	OUT	GET /beacon.min.js HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 901e9c805d62420d-EWR
2025-01-14 15:20:39 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2025-01-14 15:20:39 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.8	49820	216.198.53.1	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	553	OUT	OPTIONS /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: prodhostedtest.zendesk.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://yourexcellency.activehosted.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	1315	IN	HTTP/1.1 204 No Content Date: Tue, 14 Jan 2025 15:20:39 GMT Connection: close access-control-allow-headers: Content-Type access-control-allow-origin: * access-control-max-age: 600 cache-control: max-age=600 vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 901e9c80acdc428e-EWR CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=ZlKBzmE8LF1usOJaK1Fsnd6CxsJO0cNMIFdAgwXHjqI-1736868039-1.0.1.1-BLBpjF1YM1AvhIE0zHVVFaqH9JN_naf6vG_Uh7QRC.L5hLLfM8UQJknnt.efZMnrEQfp4XGg9RVyIcbizM.CVQ; path=/; expires=Tue, 14-Jan-25 15:50:39 GMT; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pQUzUaI0g89Jr%2B3pAGp6FmyFztjucmxuVy%2FTfiHdjgpFd9AOqdFACQYf8SJ4RyN4u2dMLBsvYs3h4R%2BdMdajvSaHQikeDwqd2pL%2BTZHP4fBr0oEZ0kxgKTShrzGGc0nHZpXx00zFuD%2B2tUyD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=cb161d669a78bfee0c10df616d77a400307eff27-1736868039; path=/; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=u2rZvHNyHWPAO91sRj4j8syyuqGJJ7AGH3JTV7lOurw-1736868039914-0.0.1.1-604800000; path=/; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 901e9c80acdc428e-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.8	49822	216.198.53.1	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	576	OUT	GET /embeddable/messaging/custom_ticket_fields HTTP/1.1 Host: prodhostedtest.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yourexcellency.activehosted.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:40 UTC	1231	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 vary: Accept, Origin cache-control: max-age=600, public strict-transport-security: max-age=259200; etag: W/"59f5064eb2ebfe68879979e1821741f4" x-zendesk-origin-server: embeddable-app-server-6bfbc7bbf7-z8lx6 x-runtime: 0.025826 X-Zendesk-Zorg: yes X-Request-ID: 901e9c80bc21c45e-IAD X-Cached: MISS CF-Cache-Status: MISS Set-Cookie: __cf_bm=xqEPEjV7q5YmM8diQuZbCj6N9.A51r1pNJmWkzss5Bw-1736868039-1.0.1.1-7Fw8At9xTprM_AwlwdAcWAGC0xNp_UyWD_ENtkj279MhVbpXfnt3yQpCFM_YSFTrfnvvkhs7vcNi.GlQXXip3Q; path=/; expires=Tue, 14-Jan-25 15:50:39 GMT; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SlSSqK1rME80SQLluhGKCFFJtt4KJvTA84RWe1EFv9sjHmE%2FfVWI%2BjDDfeGmMn9i%2Bji6soux2mI1nBoyxFvySfEhw5IM6qIHcSSE123mwgBHdRjTC71j5DL3%2BVK8x4sl4Y1I4sPUkMx2mBtL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2025-01-14 15:20:40 UTC	377	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 72 75 69 64 3d 63 62 31 36 31 64 36 36 39 61 37 38 62 66 65 65 30 63 31 30 64 66 36 31 36 64 37 37 61 34 30 30 33 30 37 65 66 66 32 37 2d 31 37 33 36 38 36 38 30 33 39 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 70 72 6f 64 68 6f 73 74 65 64 74 65 73 74 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 67 50 35 45 6a 44 36 50 46 38 50 46 49 31 53 47 51 41 62 4b 51 63 4a 6e 39 4b 4f 39 62 50 64 6c 42 6a 42 7a 43 5a 30 52 51 77 49 2d 31 37 33 36 38 36 38 30 33 39 39 35 38 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b Data Ascii: Set-Cookie: __cfruid=cb161d669a78bfee0c10df616d77a400307eff27-1736868039; path=/; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: _cfuvid=gP5EjD6PF8PFI1SGQAbKQcJn9KO9bPdlBjBzCZ0RQwI-1736868039958-0.0.1.1-604800000; path=/;
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 5b 7b 22 69 64 22 3a 32 33 31 31 37 31 35 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 72 2d 61 63 63 6f 75 6e 74 5f 6c 6f 67 69 6e 22 2c 22 72 2d 61 63 63 6f 75 6e 74 2d 63 68 61 6e 67 65 2d 70 6c 61 6e 22 2c 22 72 2d 61 63 63 6f 75 6e 74 2d 63 68 61 6e 67 65 2d 69 6e 66 6f 22 2c 22 72 2d 61 63 63 6f 75 6e 74 2d 72 65 76 69 65 77 22 2c 22 72 2d 61 63 63 6f 75 6e 74 2d 6f 74 68 65 72 22 2c 22 72 2d 73 65 6e 64 69 6e 67 2d 64 65 6c 69 76 65 72 79 22 2c 22 72 2d 73 65 6e 64 69 6e 67 2d 73 65 67 6d 65 6e 74 73 22 2c 22 72 2d 73 65 6e 64 69 6e 67 2d 72 65 76 69 65 77 22 2c 22 72 2d 73 65 6e 64 69 6e 67 2d 6f 74 68 65 72 22 2c 22 72 2d 63 6f 6e 74 61 63 74 73 2d 61 64 64 69 6e 67 22 2c 22 72 2d 63 Data Ascii: 7ffa[{"id":23117150,"type":"tagger","options":["r-account_login","r-account-change-plan","r-account-change-info","r-account-review","r-account-other","r-sending-delivery","r-sending-segments","r-sending-review","r-sending-other","r-contacts-adding","r-c
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 6f 74 77 6f 72 6b 69 6e 67 22 2c 22 63 6f 6e 74 61 63 74 73 5f 63 75 73 74 6f 6d 66 69 65 6c 64 73 22 2c 22 63 6f 6e 74 61 63 74 73 5f 73 6f 6d 65 74 68 69 6e 67 65 6c 73 65 22 5d 7d 2c 7b 22 69 64 22 3a 32 32 38 33 35 36 34 34 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 32 32 39 39 34 36 33 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 69 6e 66 6f 22 2c 22 61 63 63 6f 75 6e 74 5f 6c 6f 67 69 6e 22 2c 22 61 63 63 6f 75 6e 74 5f 63 68 61 6e 67 65 70 6c 61 6e 22 2c 22 61 63 63 6f 75 6e 74 5f 63 61 6e 63 65 6c 22 2c 22 61 63 63 6f 75 6e 74 5f 63 68 61 6e 67 65 6e 61 6d 65 22 2c 22 61 63 63 6f 75 6e 74 5f 73 6f 6d 65 74 68 69 6e 67 65 6c 73 65 22 2c Data Ascii: otworking","contacts_customfields","contacts_somethingelse"]},{"id":22835644,"type":"text"},{"id":22994630,"type":"tagger","options":["account_billinginfo","account_login","account_changeplan","account_cancel","account_changename","account_somethingelse",
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 6e 62 6f 78 5f 64 69 73 70 6c 61 79 22 2c 22 63 61 6d 70 61 69 67 6e 73 5f 5f 68 6f 77 5f 74 6f 22 2c 22 63 61 6d 70 61 69 67 6e 73 5f 5f 6f 74 68 65 72 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 61 64 64 69 6e 67 5f 63 6f 6e 74 61 63 74 73 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 73 65 67 6d 65 6e 74 61 74 69 6f 6e 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 69 6d 70 6f 72 74 5f 74 6f 6f 6c 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 73 74 61 74 75 73 65 73 5f 5f 61 63 74 69 76 65 5f 5f 75 6e 73 75 62 73 63 72 69 62 65 64 5f 5f 65 74 63 5f 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 73 63 6f 72 69 6e 67 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 68 6f 77 5f 74 6f 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 6f 74 68 65 72 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 5f 5f 77 6f 72 64 Data Ascii: nbox_display","campaigns__how_to","campaigns__other","contacts__adding_contacts","contacts__segmentation","contacts__import_tool","contacts__statuses__active__unsubscribed__etc_","contacts__scoring","contacts__how_to","contacts__other","integrations__word
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 69 73 74 73 5f 5f 73 74 61 74 75 73 65 73 5f 5f 61 63 74 69 76 65 5f 5f 75 6e 73 75 62 73 63 72 69 62 65 64 5f 5f 65 74 63 5f 22 2c 22 6c 69 73 74 73 5f 5f 6d 61 6e 61 67 69 6e 67 22 2c 22 6c 69 73 74 73 5f 5f 68 6f 77 5f 74 6f 22 2c 22 6c 69 73 74 73 5f 5f 6f 74 68 65 72 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 5f 5f 61 75 74 6f 6d 61 74 69 6f 6e 5f 68 6f 77 5f 74 6f 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 5f 5f 63 61 6d 70 61 69 67 6e 5f 68 6f 77 5f 74 6f 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 5f 5f 63 6f 6e 74 61 63 74 73 5f 68 6f 77 5f 74 6f 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 5f 5f 69 6e 74 65 67 72 61 74 69 6f 6e 73 5f 68 6f 77 5f 74 6f 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 Data Ascii: ists__statuses__active__unsubscribed__etc_","lists__managing","lists__how_to","lists__other","getting_started__automation_how_to","getting_started__campaign_how_to","getting_started__contacts_how_to","getting_started__integrations_how_to","getting_started
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 22 3a 33 36 30 30 31 35 31 30 32 30 35 39 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 30 32 30 39 39 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 31 32 30 36 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 31 32 30 38 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 33 33 34 34 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 33 33 34 36 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 33 33 34 38 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 36 37 32 31 32 33 39 2c 22 74 Data Ascii: ":360015102059,"type":"text"},{"id":360015102099,"type":"text"},{"id":360015112060,"type":"text"},{"id":360015112080,"type":"text"},{"id":360015133440,"type":"text"},{"id":360015133460,"type":"text"},{"id":360015133480,"type":"text"},{"id":360016721239,"t
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 22 74 79 70 65 22 3a 22 74 65 78 74 61 72 65 61 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 32 33 37 35 38 36 31 39 2c 22 74 79 70 65 22 3a 22 74 65 78 74 61 72 65 61 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 32 34 38 33 39 39 30 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 64 65 61 6c 73 5f 6f 70 74 69 6f 6e 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 5f 61 6e 64 5f 61 70 69 73 22 2c 22 70 61 67 65 73 5f 6f 70 74 69 6f 6e 22 2c 22 72 65 70 6f 72 74 73 5f 61 6e 64 5f 61 6e 61 6c 79 74 69 63 73 22 2c 22 6f 74 68 65 72 5f 6f 70 74 69 6f 6e 22 5d 7d 2c 7b 22 69 64 22 3a 33 36 30 30 32 34 38 37 33 33 34 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 73 61 6d 65 5f 64 61 79 22 2c Data Ascii: "type":"textarea"},{"id":360023758619,"type":"textarea"},{"id":360024839900,"type":"tagger","options":["deals_option","integrations_and_apis","pages_option","reports_and_analytics","other_option"]},{"id":360024873340,"type":"tagger","options":["same_day",
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 72 65 71 75 65 73 74 5f 69 6e 76 6f 69 63 65 22 2c 22 66 69 6e 61 6e 63 65 5f 72 65 71 75 65 73 74 5f 6f 74 68 65 72 22 5d 7d 2c 7b 22 69 64 22 3a 34 34 37 31 38 31 34 30 39 38 39 37 32 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 34 34 37 31 38 32 31 30 33 32 38 36 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 6e 65 74 33 30 22 2c 22 64 75 65 5f 75 70 6f 6e 5f 72 65 63 65 69 70 74 22 5d 7d 2c 7b 22 69 64 22 3a 34 34 37 31 38 36 33 35 33 31 36 37 36 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 66 69 6e 61 6e 63 65 5f 72 65 71 75 65 73 74 5f 64 65 70 74 5f 73 75 63 63 65 73 73 22 2c 22 66 69 6e 61 6e 63 65 5f 72 65 71 75 65 73 74 5f 64 65 70 74 5f 73 Data Ascii: request_invoice","finance_request_other"]},{"id":4471814098972,"type":"text"},{"id":4471821032860,"type":"tagger","options":["net30","due_upon_receipt"]},{"id":4471863531676,"type":"tagger","options":["finance_request_dept_success","finance_request_dept_s
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 65 78 70 5f 66 6f 72 5f 76 61 6c 69 64 61 74 69 6f 6e 22 3a 22 5c 5c 41 28 5b 30 2d 39 5d 7b 34 7d 29 2d 28 31 5b 30 2d 32 5d 7c 30 5b 31 2d 39 5d 29 2d 28 33 5b 30 31 5d 7c 5b 31 32 5d 5b 30 2d 39 5d 7c 30 5b 31 2d 39 5d 29 5c 5c 7a 22 7d 2c 7b 22 69 64 22 3a 34 34 37 32 32 30 35 37 34 37 36 31 32 2c 22 74 79 70 65 22 3a 22 64 61 74 65 22 2c 22 72 65 67 65 78 70 5f 66 6f 72 5f 76 61 6c 69 64 61 74 69 6f 6e 22 3a 22 5c 5c 41 28 5b 30 2d 39 5d 7b 34 7d 29 2d 28 31 5b 30 2d 32 5d 7c 30 5b 31 2d 39 5d 29 2d 28 33 5b 30 31 5d 7c 5b 31 32 5d 5b 30 2d 39 5d 7c 30 5b 31 2d 39 5d 29 5c 5c 7a 22 7d 2c 7b 22 69 64 22 3a 34 34 39 34 38 30 31 32 33 39 30 36 38 2c 22 74 79 70 65 22 3a 22 63 68 65 63 6b 62 6f 78 22 7d 2c 7b 22 69 64 22 3a 34 39 36 36 34 31 30 35 31 39 Data Ascii: exp_for_validation":"\\A([0-9]{4})-(1[0-2]\|0[1-9])-(3[01]\|[12][0-9]\|0[1-9])\\z"},{"id":4472205747612,"type":"date","regexp_for_validation":"\\A([0-9]{4})-(1[0-2]\|0[1-9])-(3[01]\|[12][0-9]\|0[1-9])\\z"},{"id":4494801239068,"type":"checkbox"},{"id":4966410519
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 5f 63 6f 6d 70 6c 69 61 6e 63 65 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 6f 74 68 65 72 22 5d 7d 2c 7b 22 69 64 22 3a 35 31 30 31 32 31 36 38 31 35 36 34 34 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 61 6d 65 72 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 65 6d 65 61 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 61 70 61 63 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 6c 61 74 61 6d 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 67 6c 6f 62 61 6c 22 5d 7d 2c 7b 22 69 64 22 3a 35 31 30 31 32 33 39 34 37 34 30 37 36 2c 22 74 79 70 65 Data Ascii: _compliance","internal_submission_other"]},{"id":5101216815644,"type":"tagger","options":["internal_submission_amer","internal_submission_emea","internal_submission_apac","internal_submission_latam","internal_submission_global"]},{"id":5101239474076,"type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.8	49821	216.198.53.1	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:39 UTC	552	OUT	GET /embeddable/config HTTP/1.1 Host: prodhostedtest.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yourexcellency.activehosted.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:39 UTC	1230	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:39 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-6bfbc7bbf7-xbq6g x-runtime: 0.002432 vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 901e9b0619d79003-ATL X-Cached: STALE Last-Modified: Tue, 14 Jan 2025 15:19:39 GMT CF-Cache-Status: HIT Age: 29 Set-Cookie: __cf_bm=NaptvU_wflVAfqhiXK3GXyEvx84sCyG6JkHwkBhJtmI-1736868039-1.0.1.1-fJJzDbrs31wMMZH8PLfyRHtmihKeLAGaVxvNEaTdEuQCAbmXtXDaqfiSuCKLSWzfWv9G6DomCBx6En5REeexGA; path=/; expires=Tue, 14-Jan-25 15:50:39 GMT; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9tpix9Nu2uRlJxSA6HPYuJV3AVDOaYhCKM99LR8YjEikGQF4iWLbvLhf1b2Tr65ItlTn8FiBNyBckVAa9JwyWfcaGoadRMyyfl6zJXugHt1c5EbcUo1qEYAxkNGYQ4W8jZjWGgCic3NQeWjW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2025-01-14 15:20:39 UTC	377	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 72 75 69 64 3d 63 62 31 36 31 64 36 36 39 61 37 38 62 66 65 65 30 63 31 30 64 66 36 31 36 64 37 37 61 34 30 30 33 30 37 65 66 66 32 37 2d 31 37 33 36 38 36 38 30 33 39 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 70 72 6f 64 68 6f 73 74 65 64 74 65 73 74 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 63 76 70 6f 65 48 70 77 6c 73 48 68 6d 79 69 64 50 4a 43 6c 58 44 50 34 5a 38 6a 6c 47 5a 5a 47 71 4e 57 58 67 54 4c 54 35 32 77 2d 31 37 33 36 38 36 38 30 33 39 38 30 35 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b Data Ascii: Set-Cookie: __cfruid=cb161d669a78bfee0c10df616d77a400307eff27-1736868039; path=/; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: _cfuvid=cvpoeHpwlsHhmyidPJClXDP4Z8jlGZZGqNWXgTLT52w-1736868039805-0.0.1.1-604800000; path=/;
2025-01-14 15:20:39 UTC	967	IN	Data Raw: 33 63 30 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 54 69 63 6b 65 74 4d 65 74 61 64 61 74 61 22 3a 74 72 75 65 2c 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 2c 22 6d 75 6c 74 69 43 6f 6e 76 6f 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 69 76 61 74 65 41 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 49 64 22 3a 22 36 35 31 65 64 64 38 66 35 66 35 65 39 62 39 38 64 37 30 37 37 66 34 66 22 2c 22 61 70 70 49 64 22 3a 22 36 31 38 35 63 33 63 36 35 38 37 63 35 33 30 30 65 31 31 39 37 37 33 65 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 69 67 68 74 22 2c 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 48 69 73 74 6f Data Ascii: 3c0{"features":{"conversationTicketMetadata":true,"fastLoad":true,"multiConvoEnabled":true,"privateAttachmentsEnabled":true},"messenger":{"integrationId":"651edd8f5f5e9b98d7077f4f","appId":"6185c3c6587c5300e119773e","position":"right","conversationHisto
2025-01-14 15:20:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.8	49824	216.198.53.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:40 UTC	397	OUT	GET /web_widget/messenger/latest/web-widget-9606-b6408d4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:40 UTC	1188	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:40 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 137736 Connection: close x-amz-id-2: WJOtc+UWOWNJMH+v8+UCBU9vanyPeluzW1XkTQdX7ceXwDCO0a6v9xj74Ep8MAAuDaGXPjZ56/E= x-amz-request-id: YR1TE72FYHVP3VNT x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Jan 2025 18:04:15 GMT ETag: "4c37342db5ad594d06ebbd1c0ba47d13" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Mon, 12 Jan 2026 18:04:14 GMT x-amz-version-id: uNXpww.83kTwibF1LqnpvDmj_RDLz89v CF-Cache-Status: HIT Age: 22557 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rwMiW2lXE0SgfmObAuVJhoFwDzV8OAmTU8qSMI%2BAln9d68Ari%2FJQ%2Bx%2BHydlYSrothFglNsxZd3QW5enSZIHss2YDGBjwEAMtmS%2FSmEnKNnu4TYAsZ%2BmUD4Ci96pOH7%2BraBarrig%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 901e9c830f294295-EWR
2025-01-14 15:20:40 UTC	181	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d 77 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-w
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 6d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 36 30 36 5d 2c 7b 33 32 36 31 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 28 6e 3d 74 28 33 32 35 36 29 28 21 31 29 29 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2f 2a 21 5c 6e 20 2a 20 43 6f 70 79 72 69 67 68 74 20 5a 65 6e 64 65 73 6b 2c 20 49 6e 63 2e 5c 6e 20 2a 5c 6e 20 Data Ascii: idget-sdks/web-widget/getting-started/legal/ /(globalThis.webpackChunk_zendesk_web_widget_messenger=globalThis.webpackChunk_zendesk_web_widget_messenger\|\|[]).push([[9606],{3261:(e,n,t)=>{(n=t(3256)(!1)).push([e.id,'/!\n * Copyright Zendesk, Inc.\n *\n
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 3b 5c 6e 7d 5c 6e 5c 6e 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 5c 6e 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 5c 6e 7d 5c 6e 5c 6e 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 5c 6e 7d 5c 6e 5c 6e 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e Data Ascii: ;\n}\n\nbutton,select{\n text-transform:none;\n}\n\n[type=button],[type=reset],[type=submit],button{\n -webkit-appearance:button;\n}\n\n[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inn
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 66 33 39 34 31 3b 5c 6e 20 20 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 22 6b 65 72 6e 22 2c 20 22 6b 65 72 6e 22 3b 5c 6e 20 20 66 6f 6e 74 2d 6b 65 72 6e 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 5c 6e 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 79 73 74 65 6d 2d 75 69 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 4f 78 79 67 65 6e 2d 53 61 6e 73 2c 55 62 75 6e 74 75 2c 43 61 6e 74 61 72 65 6c 6c 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 5c 6e 7d 5c 6e 5c 6e 2a 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 Data Ascii: f3941;\n font-feature-settings:"kern", "kern";\n font-kerning:normal;\n font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen-Sans,Ubuntu,Cantarell,Helvetica Neue,Arial,sans-serif;\n font-size:14px;\n}\n\n*{ font-weight:inherit
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 30 2c 6d 6f 6e 74 68 3a 21 30 2c 77 65 65 6b 3a 21 30 2c 74 69 6d 65 3a 21 30 2c 64 61 74 65 74 69 6d 65 3a 21 30 2c 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 6c 65 74 7b 73 63 6f 70 65 3a 6e 2c 72 65 6c 61 74 69 76 65 44 6f 63 75 6d 65 6e 74 3a 74 2c 63 6c 61 73 73 4e 61 6d 65 3a 6c 3d 22 67 61 72 64 65 6e 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 22 2c 64 61 74 61 41 74 74 72 69 62 75 74 65 3a 61 3d 22 64 61 74 61 2d 67 61 72 64 65 6e 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 22 7d 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 3b 69 66 28 21 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 45 72 72 6f 72 3a 20 74 68 65 20 75 73 65 46 6f 63 75 73 56 69 73 69 62 6c 65 28 29 20 68 6f Data Ascii: 0,month:!0,week:!0,time:!0,datetime:!0,"datetime-local":!0};function u(e){let{scope:n,relativeDocument:t,className:l="garden-focus-visible",dataAttribute:a="data-garden-focus-visible"}=void 0===e?{}:e;if(!n)throw new Error('Error: the useFocusVisible() ho
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 65 72 28 22 70 6f 69 6e 74 65 72 6d 6f 76 65 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 76 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 65 6e 64 22 2c 76 29 7d 2c 79 3d 28 29 3d 3e 7b 22 68 69 64 64 65 6e 22 3d 3d 3d 65 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 75 2e 63 75 72 72 65 6e 74 26 Data Ascii: er("pointermove",v),e.removeEventListener("pointerdown",v),e.removeEventListener("pointerup",v),e.removeEventListener("touchmove",v),e.removeEventListener("touchstart",v),e.removeEventListener("touchend",v)},y=()=>{"hidden"===e.visibilityState&&u.current&
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 62 6c 65 22 2c 64 61 74 61 41 74 74 72 69 62 75 74 65 3a 22 64 61 74 61 2d 67 61 72 64 65 6e 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 22 7d 2c 73 2e 70 72 6f 70 54 79 70 65 73 3d 7b 63 68 69 6c 64 72 65 6e 3a 6f 28 29 2e 66 75 6e 63 2c 72 65 6e 64 65 72 3a 6f 28 29 2e 66 75 6e 63 2c 72 65 6c 61 74 69 76 65 44 6f 63 75 6d 65 6e 74 3a 6f 28 29 2e 6f 62 6a 65 63 74 2c 63 6c 61 73 73 4e 61 6d 65 3a 6f 28 29 2e 73 74 72 69 6e 67 2c 64 61 74 61 41 74 74 72 69 62 75 74 65 3a 6f 28 29 2e 73 74 72 69 6e 67 7d 3b 76 61 72 20 63 3d 74 28 35 38 34 39 32 29 2c 66 3d 74 28 35 30 37 30 29 3b 63 6f 6e 73 74 20 64 3d 65 3d 3e 7b 6c 65 74 7b 74 68 65 6d 65 3a 6e 2c 66 6f 63 75 73 56 69 73 69 62 6c 65 52 65 66 3a 74 2c 63 68 69 6c 64 72 65 6e 3a 61 2c 2e 2e 2e 6f 7d 3d 65 Data Ascii: ble",dataAttribute:"data-garden-focus-visible"},s.propTypes={children:o().func,render:o().func,relativeDocument:o().object,className:o().string,dataAttribute:o().string};var c=t(58492),f=t(5070);const d=e=>{let{theme:n,focusVisibleRef:t,children:a,...o}=e
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 74 28 72 2e 73 6f 75 72 63 65 52 6f 6f 74 7c 7c 22 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 20 2a 2f 22 29 7d 29 29 3b 72 65 74 75 72 6e 5b 74 5d 2e 63 6f 6e 63 61 74 28 61 29 2e 63 6f 6e 63 61 74 28 5b 6c 5d 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 7d 76 61 72 20 6f 2c 69 2c 75 3b 72 65 74 75 72 6e 5b 74 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 7d 28 6e 2c 65 29 3b 72 65 74 75 72 6e 20 6e 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 61 74 28 6e 5b 32 5d 2c 22 20 7b 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 7d 22 29 3a 74 7d 29 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 6e 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 5b 5b 6e 75 6c 6c 2c 65 2c 22 22 5d 5d 29 3b 76 61 72 20 6c 3d 7b 7d 3b Data Ascii: t(r.sourceRoot\|\|"").concat(e," */")}));return[t].concat(a).concat([l]).join("\n")}var o,i,u;return[t].join("\n")}(n,e);return n[2]?"@media ".concat(n[2]," {").concat(t,"}"):t})).join("")},n.i=function(e,t,r){"string"==typeof e&&(e=[[null,e,""]]);var l={};
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 26 6d 5b 67 5d 7c 7c 69 26 26 69 5b 67 5d 29 29 7b 76 61 72 20 79 3d 64 28 74 2c 67 29 3b 74 72 79 7b 73 28 6e 2c 67 2c 79 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 38 39 36 38 30 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 34 36 30 33 39 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 61 2e 72 65 73 65 74 57 61 72 6e 69 6e 67 43 61 63 68 65 3d 6c 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 2c 74 2c 6c 2c 61 2c 6f 29 7b 69 66 28 6f 21 3d 3d 72 29 7b 76 61 72 20 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6c 6c 69 6e 67 20 50 72 6f 70 54 79 70 65 73 20 76 61 6c 69 Data Ascii: &m[g]\|\|i&&i[g])){var y=d(t,g);try{s(n,g,y)}catch(e){}}}}return n}},89680:(e,n,t)=>{"use strict";var r=t(46039);function l(){}function a(){}a.resetWarningCache=l,e.exports=function(){function e(e,n,t,l,a,o){if(o!==r){var i=new Error("Calling PropTypes vali
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 65 5d 29 7d 76 61 72 20 66 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 64 3d 2f 5e 5b 3a 41 2d 5a 5f 61 2d 7a 5c 75 30 30 43 30 2d 5c 75 30 30 44 36 5c 75 30 30 44 38 2d 5c 75 30 30 46 36 5c 75 30 30 46 38 2d 5c 75 30 32 46 46 5c 75 30 33 37 30 2d 5c 75 30 33 37 44 5c 75 30 33 37 46 2d 5c 75 31 46 46 46 5c 75 32 30 30 43 2d 5c 75 32 30 30 44 5c 75 32 30 37 30 2d 5c 75 32 31 38 46 5c 75 32 43 30 30 2d 5c 75 32 46 45 46 5c 75 33 30 30 31 2d 5c 75 44 37 46 46 5c 75 46 39 30 30 2d 5c 75 46 44 43 46 5c 75 46 44 46 30 Data Ascii: e])}var f=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.8	49830	216.198.53.1	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:40 UTC	367	OUT	GET /embeddable/config HTTP/1.1 Host: prodhostedtest.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:40 UTC	1234	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:40 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-6bfbc7bbf7-xbq6g x-runtime: 0.002432 vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 901e9b0619d79003-ATL X-Cached: STALE Last-Modified: Tue, 14 Jan 2025 15:19:39 GMT CF-Cache-Status: HIT Age: 30 Set-Cookie: __cf_bm=eDI19cqrfePOEbjb8Rx6aK7M.YMWtJ4M55fmc6eiEHc-1736868040-1.0.1.1-MHtw3SSsqb6MaoNhRnqioSnI0W07JuU4eQXbuXmfQfvGouVIDUoFFUbSFcx9rFhiFV55xixWYChtXccheQTUyw; path=/; expires=Tue, 14-Jan-25 15:50:40 GMT; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v4mP0PHtwiGaWPcbzW4JxmO9y9yAEKV5JMv9w%2FPfghhR4hhwiOpoLalKjv5isqaUE52mikbMR75ptdoVRkiwZhvXw6a91EymCZlSaAX8soBCDi9Ta3jWxk4l7wGH4a%2BWphKUL7O87zA7yXoK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2025-01-14 15:20:40 UTC	377	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 72 75 69 64 3d 61 64 35 36 30 32 33 34 35 35 66 32 33 65 38 38 30 30 64 62 35 63 39 38 32 38 30 64 65 61 37 63 62 33 65 61 63 36 62 37 2d 31 37 33 36 38 36 38 30 34 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 70 72 6f 64 68 6f 73 74 65 64 74 65 73 74 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 2e 41 36 48 6e 65 79 45 78 65 4d 69 79 37 37 36 57 6b 6d 53 7a 59 41 69 45 47 59 68 72 46 4e 68 2e 39 6b 6a 32 6c 55 4b 2e 41 6f 2d 31 37 33 36 38 36 38 30 34 30 34 39 31 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b Data Ascii: Set-Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; path=/; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: _cfuvid=.A6HneyExeMiy776WkmSzYAiEGYhrFNh.9kj2lUK.Ao-1736868040491-0.0.1.1-604800000; path=/;
2025-01-14 15:20:40 UTC	967	IN	Data Raw: 33 63 30 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 54 69 63 6b 65 74 4d 65 74 61 64 61 74 61 22 3a 74 72 75 65 2c 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 2c 22 6d 75 6c 74 69 43 6f 6e 76 6f 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 69 76 61 74 65 41 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 49 64 22 3a 22 36 35 31 65 64 64 38 66 35 66 35 65 39 62 39 38 64 37 30 37 37 66 34 66 22 2c 22 61 70 70 49 64 22 3a 22 36 31 38 35 63 33 63 36 35 38 37 63 35 33 30 30 65 31 31 39 37 37 33 65 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 69 67 68 74 22 2c 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 48 69 73 74 6f Data Ascii: 3c0{"features":{"conversationTicketMetadata":true,"fastLoad":true,"multiConvoEnabled":true,"privateAttachmentsEnabled":true},"messenger":{"integrationId":"651edd8f5f5e9b98d7077f4f","appId":"6185c3c6587c5300e119773e","position":"right","conversationHisto
2025-01-14 15:20:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.8	49832	216.198.53.1	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:40 UTC	650	OUT	POST /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: prodhostedtest.zendesk.com Connection: keep-alive Content-Length: 548 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://yourexcellency.activehosted.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:40 UTC	548	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 79 6f 75 72 65 78 63 65 6c 6c 65 6e 63 79 2e 61 63 74 69 76 65 68 6f 73 74 65 64 2e 63 6f 6d 2f 61 64 6d 69 6e 2f 22 2c 22 62 75 69 64 22 3a 22 63 37 61 61 31 37 65 33 31 66 62 63 34 36 62 38 61 30 33 30 65 64 64 61 35 31 66 63 65 31 64 39 22 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 5f 6d 65 73 73 65 6e 67 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 62 36 34 30 38 64 34 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 35 2d 30 31 2d 31 34 54 31 35 3a 32 30 3a 33 37 2e 38 35 31 5a 22 2c 22 73 75 69 64 22 3a 22 38 36 63 66 39 63 30 32 62 62 64 33 34 61 39 33 39 33 32 34 61 64 63 62 63 34 30 34 38 33 64 66 22 2c 22 70 61 67 65 56 69 65 77 22 3a 7b 22 70 61 67 65 54 69 74 6c 65 22 3a 22 59 4f 55 52 45 Data Ascii: {"url":"https://yourexcellency.activehosted.com/admin/","buid":"c7aa17e31fbc46b8a030edda51fce1d9","channel":"web_messenger","version":"b6408d4","timestamp":"2025-01-14T15:20:37.851Z","suid":"86cf9c02bbd34a939324adcbc40483df","pageView":{"pageTitle":"YOURE
2025-01-14 15:20:40 UTC	1221	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:40 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 901e9c858fcf421d-EWR CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=mAi1U3A9sRw9OQhtWBa05t3b_taGgcQEtfSyyUHE8nw-1736868040-1.0.1.1-Wf6Cp6.I84BRL2P52NSB3H1vvU2BXj4o6O5YgyvjaIeGSDVEnZnmcuYSWzWlfnYBneTRAXXief3yltLWbk4_VQ; path=/; expires=Tue, 14-Jan-25 15:50:40 GMT; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6bNQ2QoF9UoXY61VSBPdp4cyPe%2FUGk2BWWTVCuce5FsAbyoIt8NoFvmrc9iNUyfQf7lmi7t8ZeV20QY%2BzPsFnXeicqcL5z%2FGigcNK3Zd2cZBiFfXWJr5wvVi4FKGGtXcjrn76bXIhjD10dmV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; path=/; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=IW9lPOHrNAMYExix9pY5Ol3sw6x2TQvpkDkpDxKfen0-1736868040907-0.0.1.1-604800000; path=/; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 901e9c858fcf421d-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.8	49833	216.198.53.1	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:40 UTC	391	OUT	GET /embeddable/messaging/custom_ticket_fields HTTP/1.1 Host: prodhostedtest.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:40 UTC	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:40 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 vary: Accept, Origin cache-control: max-age=600, public strict-transport-security: max-age=259200; etag: W/"59f5064eb2ebfe68879979e1821741f4" x-zendesk-origin-server: embeddable-app-server-58cb97b769-fxg95 x-runtime: 0.028713 X-Zendesk-Zorg: yes X-Request-ID: 8ccefd8d69297471-IAD X-Cached: MISS CF-Cache-Status: HIT Age: 270 Set-Cookie: __cf_bm=tamrwo5Eq.3InBVnF0QuLP9vWPNbbHzmKvQsLXvdbek-1736868040-1.0.1.1-6n_pNJwX0wr5ST5qi8PV1Kz7NN.F1f1A59XxyTpk.tZXLsMv88ZB_UZtVeIqJRR2bziLxulCPA4STyDiBlhAlQ; path=/; expires=Tue, 14-Jan-25 15:50:40 GMT; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eheAK9StYSKXlnGS9EbbE6IkH48nU1my%2FxfET%2BvgrS3M23NA679bpbpWCA2fEPyGs1K0h7NhvS8YvODVuJd3W55UUCe6z1xvZJ5yaN8Cmhqbd95ojgJps2IzceDoLO4VMZz85CyVCKvAg6kC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2025-01-14 15:20:40 UTC	377	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 72 75 69 64 3d 61 64 35 36 30 32 33 34 35 35 66 32 33 65 38 38 30 30 64 62 35 63 39 38 32 38 30 64 65 61 37 63 62 33 65 61 63 36 62 37 2d 31 37 33 36 38 36 38 30 34 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 70 72 6f 64 68 6f 73 74 65 64 74 65 73 74 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 30 41 69 50 71 44 31 77 5a 51 6d 4a 6d 5f 35 48 35 74 5a 33 67 30 41 30 72 33 6f 77 46 6c 41 71 32 42 4f 6c 61 4a 67 39 59 6c 6f 2d 31 37 33 36 38 36 38 30 34 30 37 32 39 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b Data Ascii: Set-Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; path=/; domain=.prodhostedtest.zendesk.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: _cfuvid=0AiPqD1wZQmJm_5H5tZ3g0A0r3owFlAq2BOlaJg9Ylo-1736868040729-0.0.1.1-604800000; path=/;
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 5b 7b 22 69 64 22 3a 32 33 31 31 37 31 35 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 72 2d 61 63 63 6f 75 6e 74 5f 6c 6f 67 69 6e 22 2c 22 72 2d 61 63 63 6f 75 6e 74 2d 63 68 61 6e 67 65 2d 70 6c 61 6e 22 2c 22 72 2d 61 63 63 6f 75 6e 74 2d 63 68 61 6e 67 65 2d 69 6e 66 6f 22 2c 22 72 2d 61 63 63 6f 75 6e 74 2d 72 65 76 69 65 77 22 2c 22 72 2d 61 63 63 6f 75 6e 74 2d 6f 74 68 65 72 22 2c 22 72 2d 73 65 6e 64 69 6e 67 2d 64 65 6c 69 76 65 72 79 22 2c 22 72 2d 73 65 6e 64 69 6e 67 2d 73 65 67 6d 65 6e 74 73 22 2c 22 72 2d 73 65 6e 64 69 6e 67 2d 72 65 76 69 65 77 22 2c 22 72 2d 73 65 6e 64 69 6e 67 2d 6f 74 68 65 72 22 2c 22 72 2d 63 6f 6e 74 61 63 74 73 2d 61 64 64 69 6e 67 22 2c 22 72 2d 63 Data Ascii: 7ffa[{"id":23117150,"type":"tagger","options":["r-account_login","r-account-change-plan","r-account-change-info","r-account-review","r-account-other","r-sending-delivery","r-sending-segments","r-sending-review","r-sending-other","r-contacts-adding","r-c
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 6f 74 77 6f 72 6b 69 6e 67 22 2c 22 63 6f 6e 74 61 63 74 73 5f 63 75 73 74 6f 6d 66 69 65 6c 64 73 22 2c 22 63 6f 6e 74 61 63 74 73 5f 73 6f 6d 65 74 68 69 6e 67 65 6c 73 65 22 5d 7d 2c 7b 22 69 64 22 3a 32 32 38 33 35 36 34 34 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 32 32 39 39 34 36 33 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 69 6e 66 6f 22 2c 22 61 63 63 6f 75 6e 74 5f 6c 6f 67 69 6e 22 2c 22 61 63 63 6f 75 6e 74 5f 63 68 61 6e 67 65 70 6c 61 6e 22 2c 22 61 63 63 6f 75 6e 74 5f 63 61 6e 63 65 6c 22 2c 22 61 63 63 6f 75 6e 74 5f 63 68 61 6e 67 65 6e 61 6d 65 22 2c 22 61 63 63 6f 75 6e 74 5f 73 6f 6d 65 74 68 69 6e 67 65 6c 73 65 22 2c Data Ascii: otworking","contacts_customfields","contacts_somethingelse"]},{"id":22835644,"type":"text"},{"id":22994630,"type":"tagger","options":["account_billinginfo","account_login","account_changeplan","account_cancel","account_changename","account_somethingelse",
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 6e 62 6f 78 5f 64 69 73 70 6c 61 79 22 2c 22 63 61 6d 70 61 69 67 6e 73 5f 5f 68 6f 77 5f 74 6f 22 2c 22 63 61 6d 70 61 69 67 6e 73 5f 5f 6f 74 68 65 72 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 61 64 64 69 6e 67 5f 63 6f 6e 74 61 63 74 73 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 73 65 67 6d 65 6e 74 61 74 69 6f 6e 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 69 6d 70 6f 72 74 5f 74 6f 6f 6c 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 73 74 61 74 75 73 65 73 5f 5f 61 63 74 69 76 65 5f 5f 75 6e 73 75 62 73 63 72 69 62 65 64 5f 5f 65 74 63 5f 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 73 63 6f 72 69 6e 67 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 68 6f 77 5f 74 6f 22 2c 22 63 6f 6e 74 61 63 74 73 5f 5f 6f 74 68 65 72 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 5f 5f 77 6f 72 64 Data Ascii: nbox_display","campaigns__how_to","campaigns__other","contacts__adding_contacts","contacts__segmentation","contacts__import_tool","contacts__statuses__active__unsubscribed__etc_","contacts__scoring","contacts__how_to","contacts__other","integrations__word
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 69 73 74 73 5f 5f 73 74 61 74 75 73 65 73 5f 5f 61 63 74 69 76 65 5f 5f 75 6e 73 75 62 73 63 72 69 62 65 64 5f 5f 65 74 63 5f 22 2c 22 6c 69 73 74 73 5f 5f 6d 61 6e 61 67 69 6e 67 22 2c 22 6c 69 73 74 73 5f 5f 68 6f 77 5f 74 6f 22 2c 22 6c 69 73 74 73 5f 5f 6f 74 68 65 72 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 5f 5f 61 75 74 6f 6d 61 74 69 6f 6e 5f 68 6f 77 5f 74 6f 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 5f 5f 63 61 6d 70 61 69 67 6e 5f 68 6f 77 5f 74 6f 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 5f 5f 63 6f 6e 74 61 63 74 73 5f 68 6f 77 5f 74 6f 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 5f 5f 69 6e 74 65 67 72 61 74 69 6f 6e 73 5f 68 6f 77 5f 74 6f 22 2c 22 67 65 74 74 69 6e 67 5f 73 74 61 72 74 65 64 Data Ascii: ists__statuses__active__unsubscribed__etc_","lists__managing","lists__how_to","lists__other","getting_started__automation_how_to","getting_started__campaign_how_to","getting_started__contacts_how_to","getting_started__integrations_how_to","getting_started
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 22 3a 33 36 30 30 31 35 31 30 32 30 35 39 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 30 32 30 39 39 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 31 32 30 36 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 31 32 30 38 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 33 33 34 34 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 33 33 34 36 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 35 31 33 33 34 38 30 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 31 36 37 32 31 32 33 39 2c 22 74 Data Ascii: ":360015102059,"type":"text"},{"id":360015102099,"type":"text"},{"id":360015112060,"type":"text"},{"id":360015112080,"type":"text"},{"id":360015133440,"type":"text"},{"id":360015133460,"type":"text"},{"id":360015133480,"type":"text"},{"id":360016721239,"t
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 22 74 79 70 65 22 3a 22 74 65 78 74 61 72 65 61 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 32 33 37 35 38 36 31 39 2c 22 74 79 70 65 22 3a 22 74 65 78 74 61 72 65 61 22 7d 2c 7b 22 69 64 22 3a 33 36 30 30 32 34 38 33 39 39 30 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 64 65 61 6c 73 5f 6f 70 74 69 6f 6e 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 5f 61 6e 64 5f 61 70 69 73 22 2c 22 70 61 67 65 73 5f 6f 70 74 69 6f 6e 22 2c 22 72 65 70 6f 72 74 73 5f 61 6e 64 5f 61 6e 61 6c 79 74 69 63 73 22 2c 22 6f 74 68 65 72 5f 6f 70 74 69 6f 6e 22 5d 7d 2c 7b 22 69 64 22 3a 33 36 30 30 32 34 38 37 33 33 34 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 73 61 6d 65 5f 64 61 79 22 2c Data Ascii: "type":"textarea"},{"id":360023758619,"type":"textarea"},{"id":360024839900,"type":"tagger","options":["deals_option","integrations_and_apis","pages_option","reports_and_analytics","other_option"]},{"id":360024873340,"type":"tagger","options":["same_day",
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 72 65 71 75 65 73 74 5f 69 6e 76 6f 69 63 65 22 2c 22 66 69 6e 61 6e 63 65 5f 72 65 71 75 65 73 74 5f 6f 74 68 65 72 22 5d 7d 2c 7b 22 69 64 22 3a 34 34 37 31 38 31 34 30 39 38 39 37 32 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 7b 22 69 64 22 3a 34 34 37 31 38 32 31 30 33 32 38 36 30 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 6e 65 74 33 30 22 2c 22 64 75 65 5f 75 70 6f 6e 5f 72 65 63 65 69 70 74 22 5d 7d 2c 7b 22 69 64 22 3a 34 34 37 31 38 36 33 35 33 31 36 37 36 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 66 69 6e 61 6e 63 65 5f 72 65 71 75 65 73 74 5f 64 65 70 74 5f 73 75 63 63 65 73 73 22 2c 22 66 69 6e 61 6e 63 65 5f 72 65 71 75 65 73 74 5f 64 65 70 74 5f 73 Data Ascii: request_invoice","finance_request_other"]},{"id":4471814098972,"type":"text"},{"id":4471821032860,"type":"tagger","options":["net30","due_upon_receipt"]},{"id":4471863531676,"type":"tagger","options":["finance_request_dept_success","finance_request_dept_s
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 65 78 70 5f 66 6f 72 5f 76 61 6c 69 64 61 74 69 6f 6e 22 3a 22 5c 5c 41 28 5b 30 2d 39 5d 7b 34 7d 29 2d 28 31 5b 30 2d 32 5d 7c 30 5b 31 2d 39 5d 29 2d 28 33 5b 30 31 5d 7c 5b 31 32 5d 5b 30 2d 39 5d 7c 30 5b 31 2d 39 5d 29 5c 5c 7a 22 7d 2c 7b 22 69 64 22 3a 34 34 37 32 32 30 35 37 34 37 36 31 32 2c 22 74 79 70 65 22 3a 22 64 61 74 65 22 2c 22 72 65 67 65 78 70 5f 66 6f 72 5f 76 61 6c 69 64 61 74 69 6f 6e 22 3a 22 5c 5c 41 28 5b 30 2d 39 5d 7b 34 7d 29 2d 28 31 5b 30 2d 32 5d 7c 30 5b 31 2d 39 5d 29 2d 28 33 5b 30 31 5d 7c 5b 31 32 5d 5b 30 2d 39 5d 7c 30 5b 31 2d 39 5d 29 5c 5c 7a 22 7d 2c 7b 22 69 64 22 3a 34 34 39 34 38 30 31 32 33 39 30 36 38 2c 22 74 79 70 65 22 3a 22 63 68 65 63 6b 62 6f 78 22 7d 2c 7b 22 69 64 22 3a 34 39 36 36 34 31 30 35 31 39 Data Ascii: exp_for_validation":"\\A([0-9]{4})-(1[0-2]\|0[1-9])-(3[01]\|[12][0-9]\|0[1-9])\\z"},{"id":4472205747612,"type":"date","regexp_for_validation":"\\A([0-9]{4})-(1[0-2]\|0[1-9])-(3[01]\|[12][0-9]\|0[1-9])\\z"},{"id":4494801239068,"type":"checkbox"},{"id":4966410519
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 5f 63 6f 6d 70 6c 69 61 6e 63 65 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 6f 74 68 65 72 22 5d 7d 2c 7b 22 69 64 22 3a 35 31 30 31 32 31 36 38 31 35 36 34 34 2c 22 74 79 70 65 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 61 6d 65 72 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 65 6d 65 61 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 61 70 61 63 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 6c 61 74 61 6d 22 2c 22 69 6e 74 65 72 6e 61 6c 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 67 6c 6f 62 61 6c 22 5d 7d 2c 7b 22 69 64 22 3a 35 31 30 31 32 33 39 34 37 34 30 37 36 2c 22 74 79 70 65 Data Ascii: _compliance","internal_submission_other"]},{"id":5101216815644,"type":"tagger","options":["internal_submission_amer","internal_submission_emea","internal_submission_apac","internal_submission_latam","internal_submission_global"]},{"id":5101239474076,"type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.8	49834	188.114.97.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:40 UTC	410	OUT	GET /embed.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c75041def02eb73f83ad86da82a94d67"
2025-01-14 15:20:40 UTC	861	IN	HTTP/1.1 304 Not Modified Date: Tue, 14 Jan 2025 15:20:40 GMT Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache access-control-allow-methods: GET referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oi2Ju7rMI%2FcQFXGeVxo8cWvN6G0K5Kek1YFMGu9rSWf1PUlZvAsjJBhAn8pZirrvE14RNSCcHoaAbqTUn3T4VOJtMn%2BMQtslXuCba7Om%2Fm2HugmwNr8YoC6v3SuJoaVDK0dAxZtg4N5ewQ7TDio%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c866eec18f2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1518&min_rtt=1506&rtt_var=589&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=988&delivery_rate=1818181&cwnd=232&unsent_bytes=0&cid=e288970d4dd4c716&ts=139&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.8	49835	188.114.96.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:40 UTC	594	OUT	GET /static/js/polyfill-with-resolvers.42c0e97c.chunk.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://solve-widget.forethought.ai/?v=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:40 UTC	986	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:40 GMT Content-Type: application/javascript Content-Length: 811 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: "82c8472603cb789703ed69c179a294e3" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tQjtu5cftt52LA%2FTpG64%2BtXmo2TPumrB2OTq1SvtwKFJecH%2FbeQXUPSY7LWS3hrEUlFHdos%2FvUJ9cObyy28GxYfMXo%2BABTBGGVSNHhHrStvNFHX1bKCi4nh0fNsjq4rQ8NmmAWAqb%2FhcC0%2BLslI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c86c9f2c47f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2002&min_rtt=1993&rtt_var=766&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1172&delivery_rate=1412675&cwnd=252&unsent_bytes=0&cid=097fe0c339e8f8b1&ts=161&x=0"
2025-01-14 15:20:40 UTC	383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 6e 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 6e 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 6e 5d 3d 22 35 61 33 64 63 30 32 36 2d 66 62 30 32 2d 34 37 37 34 2d 39 64 61 32 2d 31 37 36 34 30 64 38 31 39 65 34 63 22 2c 65 2e 5f 73 65 6e Data Ascii: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="5a3dc026-fb02-4774-9da2-17640d819e4c",e._sen
2025-01-14 15:20:40 UTC	428	IN	Data Raw: 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 30 35 5d 2c 7b 33 37 35 32 3a 28 29 3d 3e 7b 50 72 6f 6d 69 73 65 2e 77 69 74 68 52 65 73 6f 6c 76 65 72 73 7c 7c 28 50 72 6f 6d 69 73 65 2e 77 69 74 68 52 65 73 Data Ascii: indow:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[705],{3752:()=>{Promise.withResolvers\|\|(Promise.withRes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.8	49836	188.114.97.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:40 UTC	377	OUT	GET /static/js/main.64e6aab4.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:40 UTC	991	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:40 GMT Content-Type: application/javascript Content-Length: 50664 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: "3ae67c3808b84a52adcb249ca46fa8fb" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uMrjQJjpXz%2F%2Bp0bQ8prqRP2os3OaAy9V%2BZNRJ%2BQZObbjUWkKXPWq2iH6WL%2B5ZFfqT2XUGDTMDsQ3ZNC7O%2BfZoqqKJW1fen7FK%2BXvK%2FCsUPsnDUh1f6ufJsAn81ZnXlGrW6l1UaMOrLtFGpa%2BRig%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c876e740f71-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1547&min_rtt=1526&rtt_var=588&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=955&delivery_rate=1913499&cwnd=250&unsent_bytes=0&cid=f7f73da053ae94ac&ts=171&x=0"
2025-01-14 15:20:40 UTC	378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 72 3d 28 6e 65 77 20 74 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 72 26 26 28 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 72 5d 3d 22 30 32 65 39 38 36 63 39 2d 64 30 62 63 2d 34 38 39 32 2d 62 65 63 38 2d 64 65 39 34 36 36 65 61 35 37 61 39 22 2c 74 2e 5f 73 65 6e Data Ascii: !function(){try{var t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},r=(new t.Error).stack;r&&(t._sentryDebugIds=t._sentryDebugIds\|\|{},t._sentryDebugIds[r]="02e986c9-d0bc-4892-bec8-de9466ea57a9",t._sen
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 31 32 33 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 37 30 36 29 2c 6f 3d 65 28 35 34 36 34 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 28 74 29 29 72 65 74 75 72 6e 20 74 Data Ascii: dow?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(()=>{"use strict";var t={1239:(t,r,e)=>{var n=e(4706),o=e(5464),i=TypeError;t.exports=function(t){if(n(t))return t
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 65 6e 66 6f 72 63 65 2c 4f 3d 41 2e 67 65 74 2c 53 3d 63 2e 49 6e 74 38 41 72 72 61 79 2c 49 3d 53 26 26 53 2e 70 72 6f 74 6f 74 79 70 65 2c 54 3d 63 2e 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2c 6a 3d 54 26 26 54 2e 70 72 6f 74 6f 74 79 70 65 2c 52 3d 53 26 26 62 28 53 29 2c 5f 3d 49 26 26 62 28 49 29 2c 50 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 43 3d 63 2e 54 79 70 65 45 72 72 6f 72 2c 4d 3d 77 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 46 3d 6d 28 22 54 59 50 45 44 5f 41 52 52 41 59 5f 54 41 47 22 29 2c 6b 3d 22 54 79 70 65 64 41 72 72 61 79 43 6f 6e 73 74 72 75 63 74 6f 72 22 2c 4e 3d 61 26 26 21 21 78 26 26 22 4f 70 65 72 61 22 21 3d 3d 6c 28 63 2e 6f 70 65 72 61 29 2c 55 3d 21 31 2c 4c 3d 7b 49 6e 74 38 41 72 72 61 79 Data Ascii: enforce,O=A.get,S=c.Int8Array,I=S&&S.prototype,T=c.Uint8ClampedArray,j=T&&T.prototype,R=S&&b(S),_=I&&b(I),P=Object.prototype,C=c.TypeError,M=w("toStringTag"),F=m("TYPED_ARRAY_TAG"),k="TypedArrayConstructor",N=a&&!!x&&"Opera"!==l(c.opera),U=!1,L={Int8Array
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 69 2e 70 72 6f 74 6f 74 79 70 65 5b 74 5d 7d 63 61 74 63 68 28 61 29 7b 74 72 79 7b 69 2e 70 72 6f 74 6f 74 79 70 65 5b 74 5d 3d 72 7d 63 61 74 63 68 28 66 29 7b 7d 7d 7d 5f 5b 74 5d 26 26 21 65 7c 7c 64 28 5f 2c 74 2c 65 3f 72 3a 4e 26 26 49 5b 74 5d 7c 7c 72 2c 6e 29 7d 7d 2c 65 78 70 6f 72 74 54 79 70 65 64 41 72 72 61 79 53 74 61 74 69 63 4d 65 74 68 6f 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 2c 6f 3b 69 66 28 75 29 7b 69 66 28 78 29 7b 69 66 28 65 29 66 6f 72 28 6e 20 69 6e 20 4c 29 69 66 28 28 6f 3d 63 5b 6e 5d 29 26 26 70 28 6f 2c 74 29 29 74 72 79 7b 64 65 6c 65 74 65 20 6f 5b 74 5d 7d 63 61 74 63 68 28 69 29 7b 7d 69 66 28 52 5b 74 5d 26 26 21 65 29 72 65 74 75 72 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 28 52 2c 74 Data Ascii: i.prototype[t]}catch(a){try{i.prototype[t]=r}catch(f){}}}_[t]&&!e\|\|d(_,t,e?r:N&&I[t]\|\|r,n)}},exportTypedArrayStaticMethod:function(t,r,e){var n,o;if(u){if(x){if(e)for(n in L)if((o=c[n])&&p(o,t))try{delete o[t]}catch(i){}if(R[t]&&!e)return;try{return d(R,t
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 3e 6f 2e 62 79 74 65 4c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 57 28 50 29 3b 76 61 72 20 75 3d 6f 2e 62 79 74 65 73 2c 63 3d 69 2b 6f 2e 62 79 74 65 4f 66 66 73 65 74 2c 66 3d 6d 28 75 2c 63 2c 63 2b 72 29 3b 72 65 74 75 72 6e 20 61 3f 66 3a 59 28 66 29 7d 2c 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 2c 6e 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 4d 28 74 29 2c 75 3d 64 28 65 29 2c 63 3d 6e 28 2b 6f 29 2c 66 3d 21 21 69 3b 69 66 28 75 2b 72 3e 61 2e 62 79 74 65 4c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 57 28 50 29 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 62 79 74 65 73 2c 70 3d 75 2b 61 2e 62 79 74 65 4f 66 66 73 65 74 2c 6c 3d 30 3b 6c 3c 72 3b 6c 2b 2b 29 73 5b 70 2b 6c 5d 3d 63 5b 66 3f 6c 3a 72 2d 6c 2d 31 5d 7d 3b 69 66 28 61 29 Data Ascii: >o.byteLength)throw new W(P);var u=o.bytes,c=i+o.byteOffset,f=m(u,c,c+r);return a?f:Y(f)},rt=function(t,r,e,n,o,i){var a=M(t),u=d(e),c=n(+o),f=!!i;if(u+r>a.byteLength)throw new W(P);for(var s=a.bytes,p=u+a.byteOffset,l=0;l<r;l++)s[p+l]=c[f?l:r-l-1]};if(a)
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 2c 67 65 74 49 6e 74 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 74 28 74 68 69 73 2c 32 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 3b 72 65 74 75 72 6e 28 72 5b 31 5d 3c 3c 38 7c 72 5b 30 5d 29 3c 3c 31 36 3e 3e 31 36 7d 2c 67 65 74 55 69 6e 74 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 74 28 74 68 69 73 2c 32 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 3b 72 65 74 75 72 6e 20 72 5b 31 5d 3c 3c 38 7c 72 5b 30 5d 7d 2c 67 65 74 49 6e 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 48 28 74 74 28 74 68 69 73 2c 34 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 Data Ascii: ,getInt16:function(t){var r=tt(this,2,t,arguments.length>1&&arguments[1]);return(r[1]<<8\|r[0])<<16>>16},getUint16:function(t){var r=tt(this,2,t,arguments.length>1&&arguments[1]);return r[1]<<8\|r[0]},getInt32:function(t){return H(tt(this,4,t,arguments.leng
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 3f 65 3a 6e 28 72 29 2c 61 3d 6e 65 77 20 74 28 69 29 3b 69 3e 6f 3b 29 61 5b 6f 5d 3d 72 5b 6f 2b 2b 5d 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 39 37 32 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 36 37 37 34 29 2c 6f 3d 65 28 32 32 30 31 29 2c 69 3d 65 28 31 35 39 31 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 61 29 7b 76 61 72 20 75 3d 6e 28 72 29 2c 63 3d 69 28 75 29 3b 69 66 28 30 3d 3d 3d 63 29 72 65 74 75 72 6e 21 74 26 26 2d 31 3b 76 61 72 20 66 2c 73 3d 6f 28 61 2c 63 29 3b 69 66 28 74 26 26 65 21 3d 3d 65 29 7b 66 6f 72 28 3b 63 3e Data Ascii: function(t,r,e){for(var o=0,i=arguments.length>2?e:n(r),a=new t(i);i>o;)a[o]=r[o++];return a}},972:(t,r,e)=>{var n=e(6774),o=e(2201),i=e(1591),a=function(t){return function(r,e,a){var u=n(r),c=i(u);if(0===c)return!t&&-1;var f,s=o(a,c);if(t&&e!==e){for(;c>
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 74 75 72 6e 20 74 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 32 35 33 30 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 35 35 33 29 2c 6f 3d 65 28 31 30 31 32 29 2c 69 3d 65 28 36 38 32 31 29 2c 61 3d 65 28 34 33 35 32 29 28 22 73 70 65 63 69 65 73 22 29 2c 75 3d 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 6e 28 74 29 26 26 28 72 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 28 6f 28 72 29 26 26 28 72 3d 3d 3d 75 7c 7c 6e 28 72 2e 70 72 6f 74 6f 74 79 70 65 29 29 7c 7c 69 28 72 29 26 26 6e 75 6c 6c 3d 3d 3d 28 72 3d 72 5b 61 5d 29 29 26 26 28 72 3d 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 3f 75 3a 72 7d 7d 2c 35 31 38 34 3a 28 74 2c 72 2c 65 29 3d Data Ascii: turn t};t.exports=i},2530:(t,r,e)=>{var n=e(4553),o=e(1012),i=e(6821),a=e(4352)("species"),u=Array;t.exports=function(t){var r;return n(t)&&(r=t.constructor,(o(r)&&(r===u\|\|n(r.prototype))\|\|i(r)&&null===(r=r[a]))&&(r=void 0)),void 0===r?u:r}},5184:(t,r,e)=
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f 74 79 70 65 7d 29 29 7d 2c 39 32 36 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 39 35 31 39 29 2c 6f 3d 65 28 33 35 37 32 29 2c 69 3d 65 28 36 33 36 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 6f 2e 66 28 74 2c 72 2c 69 28 31 2c 65 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 74 5b 72 5d 3d 65 2c 74 7d 7d 2c 36 33 36 39 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 Data Ascii: tion(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.prototype}))},9266:(t,r,e)=>{var n=e(9519),o=e(3572),i=e(6369);t.exports=n?function(t,r,e){return o.f(t,r,i(1,e))}:function(t,r,e){return t[r]=e,t}},6369:t=>{t.expor
2025-01-14 15:20:40 UTC	1369	IN	Data Raw: 28 69 29 26 26 6f 28 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 3f 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3a 7b 7d 7d 7d 2c 36 36 37 32 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 5b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 2c 22 74 6f 53 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 4f 66 22 5d 7d 2c 34 30 35 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 39 38 29 2e 6d 61 74 63 68 28 2f 66 69 72 65 66 6f 78 5c 2f 28 5c Data Ascii: (i)&&o(i.createElement);t.exports=function(t){return a?i.createElement(t):{}}},6672:t=>{t.exports=["constructor","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","toLocaleString","toString","valueOf"]},4056:(t,r,e)=>{var n=e(498).match(/firefox\/(\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.8	49841	216.198.53.1	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:41 UTC	725	OUT	GET /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: prodhostedtest.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=ad56023455f23e8800db5c98280dea7cb3eac6b7-1736868040; __cf_bm=tamrwo5Eq.3InBVnF0QuLP9vWPNbbHzmKvQsLXvdbek-1736868040-1.0.1.1-6n_pNJwX0wr5ST5qi8PV1Kz7NN.F1f1A59XxyTpk.tZXLsMv88ZB_UZtVeIqJRR2bziLxulCPA4STyDiBlhAlQ; _cfuvid=0AiPqD1wZQmJm_5H5tZ3g0A0r3owFlAq2BOlaJg9Ylo-1736868040729-0.0.1.1-604800000
2025-01-14 15:20:41 UTC	589	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 14 Jan 2025 15:20:41 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 901e9c8b4b534361-EWR CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k4IhxRIzG8vH0UMYaHYSF5DDfqI10NsCZHuOw%2FLWSRBNRk34v5yvyBTmcZfABJJ%2BDmKZdrM4HNv%2BvjYpBgwPolgDfT4tQqn%2F89HcmFxLSkF%2FOMwAI9ajYX%2Bl0s1kCQKAH1A%2Beu6vJdXpmGob"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c8b4b534361-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.8	49843	188.114.97.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:41 UTC	402	OUT	GET /static/js/polyfill-with-resolvers.42c0e97c.chunk.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:41 UTC	977	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:41 GMT Content-Type: application/javascript Content-Length: 811 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: "82c8472603cb789703ed69c179a294e3" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oN0OCO7yi9dLM%2BQw1JaATiEulSsqlwdl5878efyvjuAFcPPRXMLpFTR3ZNrYF2exKIjlbxZv63vs%2B6gjDVKsH34S1DUcwOWaRWIcoxDvB2FLT47Cj%2B7g8eu8hARqIWFVtfKAl3LpKYZx9bPaov8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c8d8f0cf799-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1574&min_rtt=1567&rtt_var=602&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=980&delivery_rate=1798029&cwnd=141&unsent_bytes=0&cid=5db349774e03e270&ts=132&x=0"
2025-01-14 15:20:41 UTC	392	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 6e 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 6e 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 6e 5d 3d 22 35 61 33 64 63 30 32 36 2d 66 62 30 32 2d 34 37 37 34 2d 39 64 61 32 2d 31 37 36 34 30 64 38 31 39 65 34 63 22 2c 65 2e 5f 73 65 6e Data Ascii: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="5a3dc026-fb02-4774-9da2-17640d819e4c",e._sen
2025-01-14 15:20:41 UTC	419	IN	Data Raw: 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 30 35 5d 2c 7b 33 37 35 32 3a 28 29 3d 3e 7b 50 72 6f 6d 69 73 65 2e 77 69 74 68 52 65 73 6f 6c 76 65 72 73 7c 7c 28 50 72 6f 6d 69 73 65 2e 77 69 74 68 52 65 73 6f 6c 76 65 72 73 3d 66 75 Data Ascii: defined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[705],{3752:()=>{Promise.withResolvers\|\|(Promise.withResolvers=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.8	49842	188.114.96.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:41 UTC	590	OUT	GET /static/css/647.38ef54d4.chunk.css HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://solve-widget.forethought.ai/?v=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:41 UTC	980	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:41 GMT Content-Type: text/css; charset=utf-8 Content-Length: 787 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: "14e23d015295d34f7ee0ca7e0d4e3346" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZXUWLsrSLhIZudw9ZyhA2Fudmv8TyKvdjRRxganxTNxTfo%2BhQEzCvjL4gqr%2Fiecn8ESI6zgMFSvpSp7Ms15oj%2BDp1GtnjnYs1J7%2BnBdQIaNiOl2er3L7c5btm5EUPupPR2vYxUMEHm6W64mdpN0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c8dba180c7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1780&min_rtt=1708&rtt_var=692&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1168&delivery_rate=1709601&cwnd=77&unsent_bytes=0&cid=59507615a29a652d&ts=178&x=0"
2025-01-14 15:20:41 UTC	389	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6c 75 73 20 4a 61 6b 61 72 74 61 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 32 30 30 20 38 30 30 3b 73 72 63 3a 75 72 6c 28 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 50 6c 75 73 4a 61 6b 61 72 74 61 53 61 6e 73 5b 77 67 68 74 5d 2e 38 39 32 35 35 36 65 30 37 39 36 33 62 32 64 34 38 34 39 61 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 20 74 65 63 68 28 22 76 61 72 69 61 74 69 6f 6e 73 22 29 2c 75 72 6c 28 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 50 6c 75 73 4a 61 6b 61 72 74 61 53 61 6e 73 5b 77 67 68 74 5d 2e 38 39 32 35 35 36 65 30 37 39 36 Data Ascii: @font-face{font-display:swap;font-family:Plus Jakarta Sans;font-style:normal;font-weight:200 800;src:url(/static/media/PlusJakartaSans[wght].892556e07963b2d4849a.woff2) format("woff2") tech("variations"),url(/static/media/PlusJakartaSans[wght].892556e0796
2025-01-14 15:20:41 UTC	398	IN	Data Raw: 65 69 67 68 74 3a 32 30 30 20 38 30 30 3b 73 72 63 3a 75 72 6c 28 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 50 6c 75 73 4a 61 6b 61 72 74 61 53 61 6e 73 2d 49 74 61 6c 69 63 5b 77 67 68 74 5d 2e 30 38 34 62 39 32 35 62 31 35 39 64 62 62 36 63 37 36 62 31 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 20 74 65 63 68 28 22 76 61 72 69 61 74 69 6f 6e 73 22 29 2c 75 72 6c 28 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 50 6c 75 73 4a 61 6b 61 72 74 61 53 61 6e 73 2d 49 74 61 6c 69 63 5b 77 67 68 74 5d 2e 30 38 34 62 39 32 35 62 31 35 39 64 62 62 36 63 37 36 62 31 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 2d 76 61 72 69 61 74 69 6f 6e 73 22 29 7d 65 6d 2c 69 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 50 6c 75 73 20 4a 61 Data Ascii: eight:200 800;src:url(/static/media/PlusJakartaSans-Italic[wght].084b925b159dbb6c76b1.woff2) format("woff2") tech("variations"),url(/static/media/PlusJakartaSans-Italic[wght].084b925b159dbb6c76b1.woff2) format("woff2-variations")}em,i{font-family:"Plus Ja

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.8	49844	188.114.96.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:41 UTC	574	OUT	GET /static/js/621.d916e3cb.chunk.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://solve-widget.forethought.ai/?v=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:41 UTC	986	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:41 GMT Content-Type: application/javascript Content-Length: 1442999 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: "0177af822136984f45cee7b893b28193" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7E8hilJHj%2BxNzMMw2%2FtF0rtrplR27De1wyvXNpNw9atkydL%2F9JOFSE91ShFZXdI9DjhVfS5lnSU6y356PV7MR3mMHbNRyXrkfn%2FhWN8EiX%2BrOTmp0teEq94FTci2ztRP1omVqjJSX41Uv4hpPM0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c8dbddfde94-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1527&min_rtt=1515&rtt_var=593&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1152&delivery_rate=1809169&cwnd=237&unsent_bytes=0&cid=04cf675f0c2d8985&ts=163&x=0"
2025-01-14 15:20:41 UTC	383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 32 31 2e 64 39 31 36 65 33 63 62 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 74 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 74 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 Data Ascii: /! For license information please see 621.d916e3cb.chunk.js.LICENSE.txt /!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDeb
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 2d 39 39 63 64 2d 62 39 34 34 64 34 36 33 64 64 39 30 22 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b 76 61 72 20 5f 67 6c 6f 62 61 6c 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b Data Ascii: -99cd-b944d463dd90")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunk
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 65 6e 74 2e 73 74 79 6c 65 53 68 65 65 74 73 5b 74 5d 7d 28 74 29 3b 74 72 79 7b 6e 2e 69 6e 73 65 72 74 52 75 6c 65 28 65 2c 6e 2e 63 73 73 52 75 6c 65 73 2e 6c 65 6e 67 74 68 29 7d 63 61 74 63 68 28 72 29 7b 30 7d 7d 65 6c 73 65 20 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 65 29 29 3b 74 68 69 73 2e 63 74 72 2b 2b 7d 2c 74 2e 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 61 67 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 29 29 2c 74 68 69 73 2e 74 61 67 73 3d 5b 5d 2c 74 68 69 73 2e 63 74 72 Data Ascii: ent.styleSheets[t]}(t);try{n.insertRule(e,n.cssRules.length)}catch(r){0}}else t.appendChild(document.createTextNode(e));this.ctr++},t.flush=function(){this.tags.forEach((function(e){return e.parentNode&&e.parentNode.removeChild(e)})),this.tags=[],this.ctr
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 6e 20 73 28 45 28 79 2d 31 2c 4c 28 39 31 3d 3d 3d 65 3f 65 2b 32 3a 34 30 3d 3d 3d 65 3f 65 2b 31 3a 65 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 66 6f 72 28 3b 28 62 3d 41 28 29 29 26 26 62 3c 33 33 3b 29 5f 28 29 3b 72 65 74 75 72 6e 20 43 28 65 29 3e 32 7c 7c 43 28 62 29 3e 33 3f 22 22 3a 22 20 22 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 29 7b 66 6f 72 28 3b 2d 2d 74 26 26 5f 28 29 26 26 21 28 62 3c 34 38 7c 7c 62 3e 31 30 32 7c 7c 62 3e 35 37 26 26 62 3c 36 35 7c 7c 62 3e 37 30 26 26 62 3c 39 37 29 3b 29 3b 72 65 74 75 72 6e 20 45 28 65 2c 54 28 29 2b 28 74 3c 36 26 26 33 32 3d 3d 41 28 29 26 26 33 32 3d 3d 5f 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 66 6f 72 28 3b 5f 28 29 3b 29 73 77 69 74 63 68 28 62 29 7b 63 61 73 Data Ascii: n s(E(y-1,L(91===e?e+2:40===e?e+1:e)))}function O(e){for(;(b=A())&&b<33;)_();return C(e)>2\|\|C(b)>3?"":" "}function M(e,t){for(;--t&&_()&&!(b<48\|\|b>102\|\|b>57&&b<65\|\|b>70&&b<97););return E(e,T()+(t<6&&32==A()&&32==_()))}function L(e){for(;_();)switch(b){cas
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 28 59 28 4e 28 5f 28 29 2c 54 28 29 29 2c 74 2c 6e 29 2c 68 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 7a 2b 3d 22 2f 22 7d 62 72 65 61 6b 3b 63 61 73 65 20 31 32 33 2a 77 3a 64 5b 6d 2b 2b 5d 3d 70 28 7a 29 2a 45 3b 63 61 73 65 20 31 32 35 2a 77 3a 63 61 73 65 20 35 39 3a 63 61 73 65 20 30 3a 73 77 69 74 63 68 28 43 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 32 35 3a 6b 3d 30 3b 63 61 73 65 20 35 39 2b 67 3a 2d 31 3d 3d 45 26 26 28 7a 3d 6c 28 7a 2c 2f 5c 66 2f 67 2c 22 22 29 29 2c 62 3e 30 26 26 70 28 7a 29 2d 76 26 26 66 28 62 3e 33 32 3f 58 28 7a 2b 22 3b 22 2c 72 2c 6e 2c 76 2d 31 29 3a 58 28 6c 28 7a 2c 22 20 22 2c 22 22 29 2b 22 3b 22 2c 72 2c 6e 2c 76 2d 32 29 2c 68 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 39 3a 7a 2b 3d 22 3b 22 3b 64 65 Data Ascii: (Y(N(_(),T()),t,n),h);break;default:z+="/"}break;case 123w:d[m++]=p(z)E;case 125*w:case 59:case 0:switch(C){case 0:case 125:k=0;case 59+g:-1==E&&(z=l(z,/\f/g,"")),b>0&&p(z)-v&&f(b>32?X(z+";",r,n,v-1):X(l(z," ","")+";",r,n,v-2),h);break;case 59:z+=";";de
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 2c 65 5b 6e 5d 2b 3d 51 28 79 2d 31 2c 74 2c 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 65 5b 6e 5d 2b 3d 50 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 69 66 28 34 34 3d 3d 3d 72 29 7b 65 5b 2b 2b 6e 5d 3d 35 38 3d 3d 3d 41 28 29 3f 22 26 5c 66 22 3a 22 22 2c 74 5b 6e 5d 3d 65 5b 6e 5d 2e 6c 65 6e 67 74 68 3b 62 72 65 61 6b 7d 64 65 66 61 75 6c 74 3a 65 5b 6e 5d 2b 3d 69 28 72 29 7d 7d 77 68 69 6c 65 28 72 3d 5f 28 29 29 3b 72 65 74 75 72 6e 20 65 7d 28 52 28 65 29 2c 74 29 29 7d 2c 5a 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 65 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 72 75 6c 65 22 3d 3d 3d 65 2e 74 79 70 65 26 26 65 2e 70 61 72 65 6e 74 26 26 21 28 65 2e 6c 65 6e 67 74 68 3c 31 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 76 61 Data Ascii: ,e[n]+=Q(y-1,t,n);break;case 2:e[n]+=P(r);break;case 4:if(44===r){e[++n]=58===A()?"&\f":"",t[n]=e[n].length;break}default:e[n]+=i(r)}}while(r=_());return e}(R(e),t))},Z=new WeakMap,ee=function(e){if("rule"===e.type&&e.parent&&!(e.length<1)){for(var t=e.va
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 65 3b 63 61 73 65 20 34 36 37 35 3a 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 22 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 22 2b 6c 28 65 2c 2f 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 7c 66 6c 65 78 2d 7c 2d 73 65 6c 66 2f 2c 22 22 29 2b 65 3b 63 61 73 65 20 35 35 34 38 3a 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 6c 28 65 2c 22 73 68 72 69 6e 6b 22 2c 22 6e 65 67 61 74 69 76 65 22 29 2b 65 3b 63 61 73 65 20 35 32 39 32 3a 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 6c 28 65 2c 22 62 61 73 69 73 22 2c 22 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 22 29 2b 65 3b 63 61 73 65 20 36 30 36 30 3a 72 65 74 75 72 6e 20 46 2b 22 62 6f 78 2d 22 2b 6c 28 65 2c 22 2d 67 72 6f 77 22 2c 22 22 29 2b 46 2b 65 2b 44 2b 6c 28 65 2c 22 67 72 6f 77 22 2c 22 70 6f 73 69 74 69 76 65 22 29 Data Ascii: e;case 4675:return F+e+D+"flex-line-pack"+l(e,/align-content\|flex-\|-self/,"")+e;case 5548:return F+e+D+l(e,"shrink","negative")+e;case 5292:return F+e+D+l(e,"basis","preferred-size")+e;case 6060:return F+"box-"+l(e,"-grow","")+F+e+D+l(e,"grow","positive")
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 2f 2c 22 74 62 2d 72 6c 22 29 2b 65 3b 63 61 73 65 20 34 35 3a 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 6c 28 65 2c 2f 5b 73 76 68 5d 5c 77 2b 2d 5b 74 62 6c 72 5d 7b 32 7d 2f 2c 22 6c 72 22 29 2b 65 7d 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 65 2b 65 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 72 65 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 3e 2d 31 26 26 21 65 2e 72 65 74 75 72 6e 29 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 20 57 3a 65 2e 72 65 74 75 72 6e 3d 6e 65 28 65 2e 76 61 6c 75 65 2c 65 2e 6c 65 6e 67 74 68 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 48 3a 72 65 74 75 72 6e 20 56 28 5b 6b 28 65 2c 7b 76 61 6c 75 65 3a 6c 28 65 2e 76 61 6c 75 65 2c 22 40 22 2c 22 40 22 2b 46 29 7d 29 5d 2c Data Ascii: /,"tb-rl")+e;case 45:return F+e+D+l(e,/[svh]\w+-[tblr]{2}/,"lr")+e}return F+e+D+e+e}return e}var re=[function(e,t,n,r){if(e.length>-1&&!e.return)switch(e.type){case W:e.return=ne(e.value,e.length);break;case H:return V([k(e,{value:l(e.value,"@","@"+F)})],
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 2c 69 29 7b 66 6f 72 28 76 61 72 20 61 3d 22 22 2c 73 3d 30 3b 73 3c 74 3b 73 2b 2b 29 61 2b 3d 65 5b 73 5d 28 6e 2c 72 2c 6f 2c 69 29 7c 7c 22 22 3b 72 65 74 75 72 6e 20 61 7d 7d 28 5b 65 65 2c 74 65 5d 2e 63 6f 6e 63 61 74 28 6f 2c 64 29 29 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 63 3d 6e 2c 56 28 47 28 65 3f 65 2b 22 7b 22 2b 74 2e 73 74 79 6c 65 73 2b 22 7d 22 3a 74 2e 73 74 79 6c 65 73 29 2c 70 29 2c 72 26 26 28 66 2e 69 6e 73 65 72 74 65 64 5b 74 2e 6e 61 6d 65 5d 3d 21 30 29 7d 3b 76 61 72 20 66 3d 7b 6b 65 79 3a 74 2c 73 68 65 65 74 3a 6e 65 77 20 72 28 7b 6b 65 79 3a 74 2c 63 6f 6e 74 61 69 6e 65 72 3a 69 2c 6e 6f 6e 63 65 3a 65 2e 6e 6f 6e 63 65 2c 73 70 65 65 64 79 3a 65 2e 73 70 65 65 64 79 2c 70 72 65 70 65 6e 64 3a 65 Data Ascii: ,i){for(var a="",s=0;s<t;s++)a+=e[s](n,r,o,i)\|\|"";return a}}([ee,te].concat(o,d));a=function(e,t,n,r){c=n,V(G(e?e+"{"+t.styles+"}":t.styles),p),r&&(f.inserted[t.name]=!0)};var f={key:t,sheet:new r({key:t,container:i,nonce:e.nonce,speedy:e.speedy,prepend:e
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 79 6c 65 73 3a 64 7d 2c 74 2e 73 68 65 65 74 2c 68 29 3b 72 65 74 75 72 6e 20 68 3f 6e 75 6c 6c 3a 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 2c 28 28 63 3d 7b 7d 29 5b 22 64 61 74 61 2d 65 6d 6f 74 69 6f 6e 22 5d 3d 74 2e 6b 65 79 2b 22 2d 67 6c 6f 62 61 6c 20 22 2b 75 2c 63 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3d 7b 5f 5f 68 74 6d 6c 3a 66 7d 2c 63 2e 6e 6f 6e 63 65 3d 74 2e 73 68 65 65 74 2e 6e 6f 6e 63 65 2c 63 29 29 7d 76 61 72 20 6d 3d 6f 2e 75 73 65 52 65 66 28 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 69 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 6b 65 79 2b 22 2d 67 6c 6f 62 61 6c 22 2c 6e 3d 6e 65 77 20 74 2e 73 68 65 65 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 7b Data Ascii: yles:d},t.sheet,h);return h?null:o.createElement("style",((c={})["data-emotion"]=t.key+"-global "+u,c.dangerouslySetInnerHTML={__html:f},c.nonce=t.sheet.nonce,c))}var m=o.useRef();return(0,a.i)((function(){var e=t.key+"-global",n=new t.sheet.constructor({

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.8	49845	188.114.96.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:41 UTC	574	OUT	GET /static/js/647.f82da89b.chunk.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://solve-widget.forethought.ai/?v=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:41 UTC	991	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:41 GMT Content-Type: application/javascript Content-Length: 305171 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: "dc4f869d6253f4f9c39951fcb99a7db0" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U9ld2o7NjvSJhslRzKKKh4pnCtL5cWe%2B%2FhrGbVRKMUD49ONblt6HWEJxYFTywyQBwb7eK1IZ%2B8dMsIsITwgV922Q8eKo4bw8%2B%2Fzd%2FRItHSYS9c8%2Fsj2NRzfrUQA8oAgcCDZ%2B5WutBagr5yi73aw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c8dede3de99-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1479&min_rtt=1470&rtt_var=569&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1152&delivery_rate=1893644&cwnd=220&unsent_bytes=0&cid=01dc111c2c0c322e&ts=169&x=0"
2025-01-14 15:20:41 UTC	378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 74 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 74 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 74 5d 3d 22 64 33 64 65 36 32 66 66 2d 36 32 62 39 2d 34 61 34 66 2d 61 34 62 64 2d 34 64 33 66 32 61 38 65 33 66 30 33 22 2c 65 2e 5f 73 65 6e Data Ascii: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="d3de62ff-62b9-4a4f-a4bd-4d3f2a8e3f03",e._sen
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 37 5d 2c 7b 35 39 34 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 35 30 34 33 29 2c 69 3d 6e 28 32 39 36 35 Data Ascii: dow?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[647],{5944:(e,t,n)=>{n.r(t);var o=n(5043),i=n(2965
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 70 6f 73 74 4d 65 73 73 61 67 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6f 2e 63 61 6c 6c 28 6e 2c 65 2c 74 7c 7c 71 29 2c 6e 75 6c 6c 3d 3d 3d 28 69 3d 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 69 2e 77 65 62 6b 69 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 73 3d 61 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 6e 75 6c 6c 3d 3d 3d 28 72 3d 73 2e 77 69 64 67 65 74 4f 62 73 65 72 76 61 62 6c 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 72 2e 70 6f 73 74 4d 65 73 73 61 67 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 7c 7c 6c 2e 63 61 6c 6c 28 72 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 Data Ascii: postMessage)\|\|void 0===o\|\|o.call(n,e,t\|\|q),null===(i=window)\|\|void 0===i\|\|null===(a=i.webkit)\|\|void 0===a\|\|null===(s=a.messageHandlers)\|\|void 0===s\|\|null===(r=s.widgetObservable)\|\|void 0===r\|\|null===(l=r.postMessage)\|\|void 0===l\|\|l.call(r,JSON.stringify(e
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 67 52 6f 63 6b 65 74 2e 72 65 64 75 78 4d 69 64 64 6c 65 77 61 72 65 28 57 2e 72 65 64 75 78 4d 69 64 64 6c 65 77 61 72 65 4f 70 74 69 6f 6e 73 29 2c 57 2e 6f 72 69 67 69 6e 61 6c 4c 6f 67 52 6f 63 6b 65 74 2e 69 6e 69 74 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 7d 2c 72 65 64 75 78 4d 69 64 64 6c 65 77 61 72 65 3a 65 3d 3e 28 57 2e 72 65 64 75 78 4d 69 64 64 6c 65 77 61 72 65 4f 70 74 69 6f 6e 73 3d 65 2c 51 29 2c 67 65 74 20 73 65 73 73 69 6f 6e 55 52 4c 28 29 7b 72 65 74 75 72 6e 20 57 2e 6f 72 69 67 69 6e 61 6c 4c 6f 67 52 6f 63 6b 65 74 3f 57 2e 6f 72 69 67 69 6e 61 6c 4c 6f 67 52 6f 63 6b 65 74 2e 73 65 73 73 69 6f 6e 55 52 4c 3a 48 7d 7d 3b 76 61 72 20 59 3d 6e 28 31 39 34 39 29 3b 63 6f 6e 73 74 20 5a 3d 22 61 64 64 2f 72 61 77 50 61 72 61 6d 73 Data Ascii: gRocket.reduxMiddleware(W.reduxMiddlewareOptions),W.originalLogRocket.init(...arguments)},reduxMiddleware:e=>(W.reduxMiddlewareOptions=e,Q),get sessionURL(){return W.originalLogRocket?W.originalLogRocket.sessionURL:H}};var Y=n(1949);const Z="add/rawParams
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 29 2c 41 65 3d 43 65 5b 22 64 61 74 61 2d 61 70 69 2d 6b 65 79 22 5d 2c 49 65 3d 43 65 5b 22 63 6f 6e 66 69 67 2d 66 74 2d 70 65 72 73 69 73 74 65 6e 63 65 2d 69 64 22 5d 2c 6a 65 3d 43 65 5b 22 64 61 74 61 2d 66 74 2d 77 6f 72 6b 66 6c 6f 77 2d 74 61 67 22 5d 2c 53 65 3d 41 65 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 22 64 61 74 61 2d 61 70 69 2d 6b 65 79 22 3a 41 65 2c 2e 2e 2e 49 65 3f 7b 22 63 6f 6e 66 69 67 2d 66 74 2d 70 65 72 73 69 73 74 65 6e 63 65 2d 69 64 22 3a 49 65 7d 3a 7b 22 64 61 74 61 2d 66 74 2d 77 6f 72 6b 66 6c 6f 77 2d 74 61 67 22 3a 6a 65 7c 7c 76 6f 69 64 20 30 7d 7d 29 3a 6e 75 6c 6c 3b 76 61 72 20 45 65 3d 6e 28 34 37 39 31 29 2c 50 65 3d 6e 28 33 30 30 33 29 3b 63 6f 6e 73 74 20 54 65 3d 28 29 3d 3e 28 30 2c 50 65 2e 77 Data Ascii: ),Ae=Ce["data-api-key"],Ie=Ce["config-ft-persistence-id"],je=Ce["data-ft-workflow-tag"],Se=Ae?JSON.stringify({"data-api-key":Ae,...Ie?{"config-ft-persistence-id":Ie}:{"data-ft-workflow-tag":je\|\|void 0}}):null;var Ee=n(4791),Pe=n(3003);const Te=()=>(0,Pe.w
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 65 3d 6e 2e 70 2b 22 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 65 6d 70 74 79 2d 73 74 61 72 2e 33 31 31 62 61 39 64 62 65 61 62 65 32 34 39 39 61 61 35 37 66 66 66 62 32 37 39 63 33 66 66 64 2e 73 76 67 22 2c 47 65 3d 5b 7b 69 63 6f 6e 3a 4b 65 2c 69 63 6f 6e 4e 61 6d 65 73 3a 5b 22 54 65 72 72 69 62 6c 65 22 2c 22 42 61 64 22 2c 22 4f 6b 61 79 22 2c 22 47 6f 6f 64 22 2c 22 45 78 63 65 6c 6c 65 6e 74 22 5d 2c 69 63 6f 6e 73 3a 5b 51 65 2c 51 65 2c 51 65 2c 51 65 2c 51 65 5d 2c 6c 61 62 65 6c 3a 22 53 74 61 72 73 22 2c 73 65 6c 65 63 74 65 64 49 63 6f 6e 3a 4b 65 2c 76 61 6c 75 65 3a 22 73 74 61 72 22 7d 2c 7b 69 63 6f 6e 3a 55 65 2c 69 63 6f 6e 4e 61 6d 65 73 3a 5b 22 54 65 72 72 69 62 6c 65 22 2c 22 42 61 64 22 2c 22 4f 6b 61 79 22 2c 22 47 6f 6f 64 22 2c Data Ascii: e=n.p+"static/media/empty-star.311ba9dbeabe2499aa57fffb279c3ffd.svg",Ge=[{icon:Ke,iconNames:["Terrible","Bad","Okay","Good","Excellent"],icons:[Qe,Qe,Qe,Qe,Qe],label:"Stars",selectedIcon:Ke,value:"star"},{icon:Ue,iconNames:["Terrible","Bad","Okay","Good",
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 75 65 72 79 3a 22 22 2c 68 61 6e 64 6f 66 66 46 61 69 6c 75 72 65 4d 65 73 73 61 67 65 3a 6e 75 6c 6c 2c 68 61 6e 64 6f 66 66 49 6e 74 65 67 72 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 68 61 6e 64 6f 66 66 53 74 61 74 75 73 3a 22 6e 6f 74 5f 73 74 61 72 74 65 64 22 2c 69 6e 69 74 69 61 6c 49 6e 74 65 6e 74 49 64 3a 22 22 2c 69 6e 69 74 69 61 6c 51 75 65 72 79 3a 22 22 2c 69 6e 74 65 6e 74 49 64 3a 22 22 2c 69 6e 74 65 6e 74 54 69 74 6c 65 3a 22 22 2c 69 6e 74 65 72 61 63 74 69 76 65 45 6d 61 69 6c 44 65 66 6c 65 63 74 69 6f 6e 46 65 65 64 62 61 63 6b 3a 6e 75 6c 6c 2c 69 73 41 75 74 6f 6e 6f 6d 6f 75 73 41 67 65 6e 74 57 6f 72 6b 66 6c 6f 77 50 72 65 76 69 65 77 3a 21 31 2c 69 73 42 75 69 6c 64 65 72 50 72 65 76 69 65 77 3a 21 31 2c 69 73 46 69 72 73 74 43 6f 6e Data Ascii: uery:"",handoffFailureMessage:null,handoffIntegration:null,handoffStatus:"not_started",initialIntentId:"",initialQuery:"",intentId:"",intentTitle:"",interactiveEmailDeflectionFeedback:null,isAutonomousAgentWorkflowPreview:!1,isBuilderPreview:!1,isFirstCon
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 50 6f 73 69 74 69 6f 6e 3a 76 6f 69 64 20 30 2c 73 74 61 74 75 73 3a 76 6f 69 64 20 30 2c 73 75 62 6d 69 74 74 65 64 5f 63 73 61 74 5f 72 65 73 75 6c 74 3a 7b 7d 2c 75 73 65 72 45 6e 64 65 64 43 68 61 74 3a 21 31 7d 2c 4a 65 3d 7b 61 6e 73 77 65 72 73 3a 4d 65 2c 63 6f 6e 66 69 67 3a 4c 65 2c 6c 69 76 65 43 68 61 74 3a 5a 65 2c 6d 61 69 6e 3a 52 2c 77 6f 72 6b 66 6c 6f 77 73 3a 59 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 79 65 28 65 2c 7b 6d 61 69 6e 3a 7b 69 73 4d 6f 62 69 6c 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 63 6f 6e 73 74 20 24 65 3d 28 30 2c 73 2e 56 50 29 28 22 73 79 6e 63 68 72 6f 6e 69 7a 65 53 74 61 74 65 22 29 2c 65 74 3d 28 30 2c 73 2e 56 50 29 28 22 73 65 74 4c 61 73 74 41 63 74 69 76 65 54 61 62 49 64 22 29 Data Ascii: Position:void 0,status:void 0,submitted_csat_result:{},userEndedChat:!1},Je={answers:Me,config:Le,liveChat:Ze,main:R,workflows:Ye};function Xe(e){return ye(e,{main:{isMobile:void 0}})}const $e=(0,s.VP)("synchronizeState"),et=(0,s.VP)("setLastActiveTabId")
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 7d 76 61 72 20 6d 74 3d 6e 28 33 30 34 30 29 3b 63 6f 6e 73 74 20 66 74 3d 28 30 2c 73 2e 76 79 29 28 4c 65 2c 28 65 3d 3e 7b 65 2e 61 64 64 43 61 73 65 28 6f 65 2c 28 28 65 2c 74 29 3d 3e 28 7b 2e 2e 2e 65 2c 61 70 69 4b 65 79 3a 70 74 28 74 2e 70 61 79 6c 6f 61 64 29 7d 29 29 29 2c 65 2e 61 64 64 43 61 73 65 28 73 65 2c 28 28 65 2c 74 29 3d 3e 28 7b 2e 2e 2e 65 2c 6f 72 69 67 69 6e 3a 70 74 28 74 2e 70 61 79 6c 6f 61 64 29 7d 29 29 29 2c 65 2e 61 64 64 43 61 73 65 28 72 65 2c 28 28 65 2c 74 29 3d 3e 28 7b 2e 2e 2e 65 2c 72 61 77 50 61 72 61 6d 73 3a 7b 2e 2e 2e 65 2e 72 61 77 50 61 72 61 6d 73 2c 2e 2e 2e 28 30 2c 6d 74 2e 41 29 28 74 Data Ascii: n gt(e){return 0===Object.keys(e).length}var mt=n(3040);const ft=(0,s.vy)(Le,(e=>{e.addCase(oe,((e,t)=>({...e,apiKey:pt(t.payload)}))),e.addCase(se,((e,t)=>({...e,origin:pt(t.payload)}))),e.addCase(re,((e,t)=>({...e,rawParams:{...e.rawParams,...(0,mt.A)(t
2025-01-14 15:20:41 UTC	1369	IN	Data Raw: 22 5d 29 7c 7c 22 74 72 75 65 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 63 6f 6e 66 69 67 2e 72 61 77 50 61 72 61 6d 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 5b 22 64 61 74 61 2d 69 6e 74 65 72 61 63 74 69 76 65 2d 65 6d 61 69 6c 2d 70 72 65 76 69 65 77 22 5d 29 7d 2c 41 74 3d 65 3d 3e 7b 6c 65 74 7b 63 75 73 74 6f 6d 43 6f 6e 66 69 67 56 61 6c 75 65 3a 74 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 3d 22 22 2c 77 69 64 67 65 74 43 6f 6e 66 69 67 56 61 6c 75 65 3a 6f 7d 3d 65 3b 72 65 74 75 72 6e 20 74 3f 53 74 72 69 6e 67 28 74 29 3a 6f 7c 7c 6e 7d 2c 49 74 3d 65 3d 3e 7b 6c 65 74 7b 63 75 73 74 6f 6d 43 6f 6e 66 69 67 56 61 6c 75 65 3a 74 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 3d 22 22 2c 77 69 64 67 65 74 43 Data Ascii: "])\|\|"true"===(null===(n=e.config.rawParams)\|\|void 0===n?void 0:n["data-interactive-email-preview"])},At=e=>{let{customConfigValue:t,defaultValue:n="",widgetConfigValue:o}=e;return t?String(t):o\|\|n},It=e=>{let{customConfigValue:t,defaultValue:n="",widgetC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.8	49846	35.190.80.1	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:42 UTC	565	OUT	OPTIONS /report/v4?s=k4IhxRIzG8vH0UMYaHYSF5DDfqI10NsCZHuOw%2FLWSRBNRk34v5yvyBTmcZfABJJ%2BDmKZdrM4HNv%2BvjYpBgwPolgDfT4tQqn%2F89HcmFxLSkF%2FOMwAI9ajYX%2Bl0s1kCQKAH1A%2Beu6vJdXpmGob HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://prodhostedtest.zendesk.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:42 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 14 Jan 2025 15:20:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.8	49847	35.190.80.1	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:42 UTC	496	OUT	POST /report/v4?s=k4IhxRIzG8vH0UMYaHYSF5DDfqI10NsCZHuOw%2FLWSRBNRk34v5yvyBTmcZfABJJ%2BDmKZdrM4HNv%2BvjYpBgwPolgDfT4tQqn%2F89HcmFxLSkF%2FOMwAI9ajYX%2Bl0s1kCQKAH1A%2Beu6vJdXpmGob HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 456 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:42 UTC	456	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 39 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 32 31 36 2e 31 39 38 2e 35 33 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 72 6f 64 68 6f 73 74 65 64 74 65 73 74 2e 7a 65 Data Ascii: [{"age":0,"body":{"elapsed_time":691,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"216.198.53.1","status_code":405,"type":"http.error"},"type":"network-error","url":"https://prodhostedtest.ze
2025-01-14 15:20:42 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 14 Jan 2025 15:20:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.8	49849	188.114.97.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:43 UTC	382	OUT	GET /static/js/647.f82da89b.chunk.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:43 UTC	990	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:43 GMT Content-Type: application/javascript Content-Length: 305171 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: "dc4f869d6253f4f9c39951fcb99a7db0" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qWxhfbH%2BLeQ1q4%2FYwrsuC0UXD%2Baw%2FQVNfIKN4HewQ39YnHuUh%2F03X0Xcrm9vxcx%2FhDsrr6850zTCIOU0hab5tZ5%2BhlxrQhSt57zNxYKeSE%2BVsWNdhexZQSN8tJzDxpBJLL85wkZox7UBuRyK9xA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c96df0ec33e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1542&min_rtt=1527&rtt_var=603&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=960&delivery_rate=1768625&cwnd=217&unsent_bytes=0&cid=1f8c6f8824ee1108&ts=144&x=0"
2025-01-14 15:20:43 UTC	379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 74 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 74 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 74 5d 3d 22 64 33 64 65 36 32 66 66 2d 36 32 62 39 2d 34 61 34 66 2d 61 34 62 64 2d 34 64 33 66 32 61 38 65 33 66 30 33 22 2c 65 2e 5f 73 65 6e Data Ascii: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="d3de62ff-62b9-4a4f-a4bd-4d3f2a8e3f03",e._sen
2025-01-14 15:20:43 UTC	1369	IN	Data Raw: 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 37 5d 2c 7b 35 39 34 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 35 30 34 33 29 2c 69 3d 6e 28 32 39 36 35 29 Data Ascii: ow?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve_ui\|\|[]).push([[647],{5944:(e,t,n)=>{n.r(t);var o=n(5043),i=n(2965)
2025-01-14 15:20:43 UTC	1369	IN	Data Raw: 6f 73 74 4d 65 73 73 61 67 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6f 2e 63 61 6c 6c 28 6e 2c 65 2c 74 7c 7c 71 29 2c 6e 75 6c 6c 3d 3d 3d 28 69 3d 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 69 2e 77 65 62 6b 69 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 73 3d 61 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 6e 75 6c 6c 3d 3d 3d 28 72 3d 73 2e 77 69 64 67 65 74 4f 62 73 65 72 76 61 62 6c 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 72 2e 70 6f 73 74 4d 65 73 73 61 67 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 7c 7c 6c 2e 63 61 6c 6c 28 72 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 Data Ascii: ostMessage)\|\|void 0===o\|\|o.call(n,e,t\|\|q),null===(i=window)\|\|void 0===i\|\|null===(a=i.webkit)\|\|void 0===a\|\|null===(s=a.messageHandlers)\|\|void 0===s\|\|null===(r=s.widgetObservable)\|\|void 0===r\|\|null===(l=r.postMessage)\|\|void 0===l\|\|l.call(r,JSON.stringify(e)
2025-01-14 15:20:43 UTC	1369	IN	Data Raw: 52 6f 63 6b 65 74 2e 72 65 64 75 78 4d 69 64 64 6c 65 77 61 72 65 28 57 2e 72 65 64 75 78 4d 69 64 64 6c 65 77 61 72 65 4f 70 74 69 6f 6e 73 29 2c 57 2e 6f 72 69 67 69 6e 61 6c 4c 6f 67 52 6f 63 6b 65 74 2e 69 6e 69 74 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 7d 2c 72 65 64 75 78 4d 69 64 64 6c 65 77 61 72 65 3a 65 3d 3e 28 57 2e 72 65 64 75 78 4d 69 64 64 6c 65 77 61 72 65 4f 70 74 69 6f 6e 73 3d 65 2c 51 29 2c 67 65 74 20 73 65 73 73 69 6f 6e 55 52 4c 28 29 7b 72 65 74 75 72 6e 20 57 2e 6f 72 69 67 69 6e 61 6c 4c 6f 67 52 6f 63 6b 65 74 3f 57 2e 6f 72 69 67 69 6e 61 6c 4c 6f 67 52 6f 63 6b 65 74 2e 73 65 73 73 69 6f 6e 55 52 4c 3a 48 7d 7d 3b 76 61 72 20 59 3d 6e 28 31 39 34 39 29 3b 63 6f 6e 73 74 20 5a 3d 22 61 64 64 2f 72 61 77 50 61 72 61 6d 73 22 Data Ascii: Rocket.reduxMiddleware(W.reduxMiddlewareOptions),W.originalLogRocket.init(...arguments)},reduxMiddleware:e=>(W.reduxMiddlewareOptions=e,Q),get sessionURL(){return W.originalLogRocket?W.originalLogRocket.sessionURL:H}};var Y=n(1949);const Z="add/rawParams"
2025-01-14 15:20:43 UTC	1369	IN	Data Raw: 2c 41 65 3d 43 65 5b 22 64 61 74 61 2d 61 70 69 2d 6b 65 79 22 5d 2c 49 65 3d 43 65 5b 22 63 6f 6e 66 69 67 2d 66 74 2d 70 65 72 73 69 73 74 65 6e 63 65 2d 69 64 22 5d 2c 6a 65 3d 43 65 5b 22 64 61 74 61 2d 66 74 2d 77 6f 72 6b 66 6c 6f 77 2d 74 61 67 22 5d 2c 53 65 3d 41 65 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 22 64 61 74 61 2d 61 70 69 2d 6b 65 79 22 3a 41 65 2c 2e 2e 2e 49 65 3f 7b 22 63 6f 6e 66 69 67 2d 66 74 2d 70 65 72 73 69 73 74 65 6e 63 65 2d 69 64 22 3a 49 65 7d 3a 7b 22 64 61 74 61 2d 66 74 2d 77 6f 72 6b 66 6c 6f 77 2d 74 61 67 22 3a 6a 65 7c 7c 76 6f 69 64 20 30 7d 7d 29 3a 6e 75 6c 6c 3b 76 61 72 20 45 65 3d 6e 28 34 37 39 31 29 2c 50 65 3d 6e 28 33 30 30 33 29 3b 63 6f 6e 73 74 20 54 65 3d 28 29 3d 3e 28 30 2c 50 65 2e 77 41 Data Ascii: ,Ae=Ce["data-api-key"],Ie=Ce["config-ft-persistence-id"],je=Ce["data-ft-workflow-tag"],Se=Ae?JSON.stringify({"data-api-key":Ae,...Ie?{"config-ft-persistence-id":Ie}:{"data-ft-workflow-tag":je\|\|void 0}}):null;var Ee=n(4791),Pe=n(3003);const Te=()=>(0,Pe.wA
2025-01-14 15:20:43 UTC	1369	IN	Data Raw: 3d 6e 2e 70 2b 22 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 65 6d 70 74 79 2d 73 74 61 72 2e 33 31 31 62 61 39 64 62 65 61 62 65 32 34 39 39 61 61 35 37 66 66 66 62 32 37 39 63 33 66 66 64 2e 73 76 67 22 2c 47 65 3d 5b 7b 69 63 6f 6e 3a 4b 65 2c 69 63 6f 6e 4e 61 6d 65 73 3a 5b 22 54 65 72 72 69 62 6c 65 22 2c 22 42 61 64 22 2c 22 4f 6b 61 79 22 2c 22 47 6f 6f 64 22 2c 22 45 78 63 65 6c 6c 65 6e 74 22 5d 2c 69 63 6f 6e 73 3a 5b 51 65 2c 51 65 2c 51 65 2c 51 65 2c 51 65 5d 2c 6c 61 62 65 6c 3a 22 53 74 61 72 73 22 2c 73 65 6c 65 63 74 65 64 49 63 6f 6e 3a 4b 65 2c 76 61 6c 75 65 3a 22 73 74 61 72 22 7d 2c 7b 69 63 6f 6e 3a 55 65 2c 69 63 6f 6e 4e 61 6d 65 73 3a 5b 22 54 65 72 72 69 62 6c 65 22 2c 22 42 61 64 22 2c 22 4f 6b 61 79 22 2c 22 47 6f 6f 64 22 2c 22 Data Ascii: =n.p+"static/media/empty-star.311ba9dbeabe2499aa57fffb279c3ffd.svg",Ge=[{icon:Ke,iconNames:["Terrible","Bad","Okay","Good","Excellent"],icons:[Qe,Qe,Qe,Qe,Qe],label:"Stars",selectedIcon:Ke,value:"star"},{icon:Ue,iconNames:["Terrible","Bad","Okay","Good","
2025-01-14 15:20:43 UTC	1369	IN	Data Raw: 65 72 79 3a 22 22 2c 68 61 6e 64 6f 66 66 46 61 69 6c 75 72 65 4d 65 73 73 61 67 65 3a 6e 75 6c 6c 2c 68 61 6e 64 6f 66 66 49 6e 74 65 67 72 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 68 61 6e 64 6f 66 66 53 74 61 74 75 73 3a 22 6e 6f 74 5f 73 74 61 72 74 65 64 22 2c 69 6e 69 74 69 61 6c 49 6e 74 65 6e 74 49 64 3a 22 22 2c 69 6e 69 74 69 61 6c 51 75 65 72 79 3a 22 22 2c 69 6e 74 65 6e 74 49 64 3a 22 22 2c 69 6e 74 65 6e 74 54 69 74 6c 65 3a 22 22 2c 69 6e 74 65 72 61 63 74 69 76 65 45 6d 61 69 6c 44 65 66 6c 65 63 74 69 6f 6e 46 65 65 64 62 61 63 6b 3a 6e 75 6c 6c 2c 69 73 41 75 74 6f 6e 6f 6d 6f 75 73 41 67 65 6e 74 57 6f 72 6b 66 6c 6f 77 50 72 65 76 69 65 77 3a 21 31 2c 69 73 42 75 69 6c 64 65 72 50 72 65 76 69 65 77 3a 21 31 2c 69 73 46 69 72 73 74 43 6f 6e 76 Data Ascii: ery:"",handoffFailureMessage:null,handoffIntegration:null,handoffStatus:"not_started",initialIntentId:"",initialQuery:"",intentId:"",intentTitle:"",interactiveEmailDeflectionFeedback:null,isAutonomousAgentWorkflowPreview:!1,isBuilderPreview:!1,isFirstConv
2025-01-14 15:20:43 UTC	1369	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 76 6f 69 64 20 30 2c 73 74 61 74 75 73 3a 76 6f 69 64 20 30 2c 73 75 62 6d 69 74 74 65 64 5f 63 73 61 74 5f 72 65 73 75 6c 74 3a 7b 7d 2c 75 73 65 72 45 6e 64 65 64 43 68 61 74 3a 21 31 7d 2c 4a 65 3d 7b 61 6e 73 77 65 72 73 3a 4d 65 2c 63 6f 6e 66 69 67 3a 4c 65 2c 6c 69 76 65 43 68 61 74 3a 5a 65 2c 6d 61 69 6e 3a 52 2c 77 6f 72 6b 66 6c 6f 77 73 3a 59 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 79 65 28 65 2c 7b 6d 61 69 6e 3a 7b 69 73 4d 6f 62 69 6c 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 63 6f 6e 73 74 20 24 65 3d 28 30 2c 73 2e 56 50 29 28 22 73 79 6e 63 68 72 6f 6e 69 7a 65 53 74 61 74 65 22 29 2c 65 74 3d 28 30 2c 73 2e 56 50 29 28 22 73 65 74 4c 61 73 74 41 63 74 69 76 65 54 61 62 49 64 22 29 2c Data Ascii: osition:void 0,status:void 0,submitted_csat_result:{},userEndedChat:!1},Je={answers:Me,config:Le,liveChat:Ze,main:R,workflows:Ye};function Xe(e){return ye(e,{main:{isMobile:void 0}})}const $e=(0,s.VP)("synchronizeState"),et=(0,s.VP)("setLastActiveTabId"),
2025-01-14 15:20:43 UTC	1369	IN	Data Raw: 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 7d 76 61 72 20 6d 74 3d 6e 28 33 30 34 30 29 3b 63 6f 6e 73 74 20 66 74 3d 28 30 2c 73 2e 76 79 29 28 4c 65 2c 28 65 3d 3e 7b 65 2e 61 64 64 43 61 73 65 28 6f 65 2c 28 28 65 2c 74 29 3d 3e 28 7b 2e 2e 2e 65 2c 61 70 69 4b 65 79 3a 70 74 28 74 2e 70 61 79 6c 6f 61 64 29 7d 29 29 29 2c 65 2e 61 64 64 43 61 73 65 28 73 65 2c 28 28 65 2c 74 29 3d 3e 28 7b 2e 2e 2e 65 2c 6f 72 69 67 69 6e 3a 70 74 28 74 2e 70 61 79 6c 6f 61 64 29 7d 29 29 29 2c 65 2e 61 64 64 43 61 73 65 28 72 65 2c 28 28 65 2c 74 29 3d 3e 28 7b 2e 2e 2e 65 2c 72 61 77 50 61 72 61 6d 73 3a 7b 2e 2e 2e 65 2e 72 61 77 50 61 72 61 6d 73 2c 2e 2e 2e 28 30 2c 6d 74 2e 41 29 28 74 2e Data Ascii: gt(e){return 0===Object.keys(e).length}var mt=n(3040);const ft=(0,s.vy)(Le,(e=>{e.addCase(oe,((e,t)=>({...e,apiKey:pt(t.payload)}))),e.addCase(se,((e,t)=>({...e,origin:pt(t.payload)}))),e.addCase(re,((e,t)=>({...e,rawParams:{...e.rawParams,...(0,mt.A)(t.
2025-01-14 15:20:43 UTC	1369	IN	Data Raw: 5d 29 7c 7c 22 74 72 75 65 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 63 6f 6e 66 69 67 2e 72 61 77 50 61 72 61 6d 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 5b 22 64 61 74 61 2d 69 6e 74 65 72 61 63 74 69 76 65 2d 65 6d 61 69 6c 2d 70 72 65 76 69 65 77 22 5d 29 7d 2c 41 74 3d 65 3d 3e 7b 6c 65 74 7b 63 75 73 74 6f 6d 43 6f 6e 66 69 67 56 61 6c 75 65 3a 74 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 3d 22 22 2c 77 69 64 67 65 74 43 6f 6e 66 69 67 56 61 6c 75 65 3a 6f 7d 3d 65 3b 72 65 74 75 72 6e 20 74 3f 53 74 72 69 6e 67 28 74 29 3a 6f 7c 7c 6e 7d 2c 49 74 3d 65 3d 3e 7b 6c 65 74 7b 63 75 73 74 6f 6d 43 6f 6e 66 69 67 56 61 6c 75 65 3a 74 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 3d 22 22 2c 77 69 64 67 65 74 43 6f Data Ascii: ])\|\|"true"===(null===(n=e.config.rawParams)\|\|void 0===n?void 0:n["data-interactive-email-preview"])},At=e=>{let{customConfigValue:t,defaultValue:n="",widgetConfigValue:o}=e;return t?String(t):o\|\|n},It=e=>{let{customConfigValue:t,defaultValue:n="",widgetCo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.8	49851	34.120.195.249	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:43 UTC	768	OUT	POST /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1 Host: o185886.ingest.sentry.io Connection: keep-alive Content-Length: 480 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://solve-widget.forethought.ai Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:43 UTC	480	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 35 2d 30 31 2d 31 34 54 31 35 3a 32 30 3a 34 31 2e 39 39 31 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 72 65 61 63 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 39 2e 32 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 31 35 62 32 61 65 33 30 33 32 35 61 34 66 38 36 62 32 66 36 63 39 62 66 65 31 62 39 61 62 30 33 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 35 2d 30 31 2d 31 34 54 31 35 3a 32 30 3a 34 31 2e 39 39 31 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 35 2d 30 31 2d 31 34 54 31 35 3a 32 30 3a 34 31 2e 39 39 31 5a 22 2c 22 73 74 61 74 75 Data Ascii: {"sent_at":"2025-01-14T15:20:41.991Z","sdk":{"name":"sentry.javascript.react","version":"7.119.2"}}{"type":"session"}{"sid":"15b2ae30325a4f86b2f6c9bfe1b9ab03","init":true,"started":"2025-01-14T15:20:41.991Z","timestamp":"2025-01-14T15:20:41.991Z","statu
2025-01-14 15:20:44 UTC	530	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 15:20:43 GMT Content-Type: application/json vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-14 15:20:44 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.8	49852	104.16.80.73	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:43 UTC	542	OUT	OPTIONS /cdn-cgi/rum HTTP/1.1 Host: cloudflareinsights.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://solve-widget.forethought.ai User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	474	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:43 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://solve-widget.forethought.ai Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Headers: Content-Type access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 901e9c9a7b7b6fa4-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff
2025-01-14 15:20:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.8	49854	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:43 UTC	947	OUT	GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj8FKAzEQQP9lznWTrLbi3gR7sAcV1HoMQzK0gd3Jkp0sltJ_byKlJ9FbCPPevDlCTj10sBcZp06pQ8yJvh31PbE7NOgkzLSPk5BvXBwU-iGwggUMJOhRELojzGEKElN9Bl9k9m398vRqP-x2XsfN18P9aisF6ZF3GXdUJojt5zucFoDOxcxyRY3R-tYsb8YUfS7LIxeQcajQP21VN2IilsertHyVyAqbO6WNanW7LMKZ0lTVHbRNu9KNsXVfFVxOef7jjEvyz8gvuaczJGNvtQ&ct=1736868042046&v=2.260.1_prod HTTP/1.1 Host: data.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yourexcellency.activehosted.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	508	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: application/json; charset=utf-8 x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:43 GMT Content-Length: 16 x-envoy-upstream-service-time: 5 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2025-01-14 15:20:44 UTC	16	IN	Data Raw: 7b 22 65 6e 61 62 6c 65 22 3a 66 61 6c 73 65 7d Data Ascii: {"enable":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.8	49857	104.17.255.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:43 UTC	619	OUT	OPTIONS /workflow/widget-config HTTP/1.1 Host: solve-api.forethought.ai Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,is-config-preview,is-draft,is-preview,solve-origin Origin: https://solve-widget.forethought.ai User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	639	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close vary: Origin access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT access-control-max-age: 600 access-control-allow-credentials: true access-control-allow-origin: https://solve-widget.forethought.ai access-control-allow-headers: authorization,content-type,is-config-preview,is-draft,is-preview,solve-origin strict-transport-security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 901e9c9ace7a4386-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:44 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.8	49856	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:43 UTC	909	OUT	GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFjjFPwzAQhf_LzW1sB1pENiQ6wABIQBitk31qLTl25JwjKpT_XpshLAg26_y9974vmN3kOKYHCx3ol8PT_bN-0_18iI8ftzf7nmEDaEzMgb8RpaS8UrvtmKLNhl0MBcjJl68T8zh1QpxjTvRpyHsK5txgoWY6xYnJNiYOAu3ggiix6G3_sx6y9xsYiNEiI3SrWn26P_Q8hmPGIxWCgn5_hWVVXqO_agccaugf31o3YqLAd2tpORXJGlbXQirRynZXCmdKU63uoG3avWyUrnuwLBe3O3b2&v=2.260.1_prod&ct=1736868042051 HTTP/1.1 Host: data.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	508	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: application/javascript x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:44 GMT x-envoy-upstream-service-time: 86 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2025-01-14 15:20:44 UTC	882	IN	Data Raw: 65 35 66 0d 0a 70 65 6e 64 6f 2e 67 75 69 64 65 73 50 61 79 6c 6f 61 64 28 7b 22 67 75 69 64 65 73 22 3a 5b 7b 22 63 72 65 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 68 61 73 4c 6f 67 67 65 64 49 6e 22 3a 66 61 6c 73 65 7d 2c 22 63 72 65 61 74 65 64 41 74 22 3a 31 36 37 33 30 33 31 35 39 34 31 31 33 2c 22 6c 61 73 74 55 70 64 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 Data Ascii: e5fpendo.guidesPayload({"guides":[{"createdByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"createdAt":1673031594113,"lastUpdatedByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","
2025-01-14 15:20:44 UTC	1390	IN	Data Raw: 2c 20 32 30 32 33 22 2c 22 69 64 22 3a 22 4a 61 6e 20 32 33 2c 20 32 30 32 33 22 2c 22 69 74 22 3a 22 67 65 6e 20 32 33 2c 20 32 30 32 33 22 2c 22 6e 6c 22 3a 22 6a 61 6e 2e 20 32 33 2c 20 32 30 32 33 22 2c 22 70 6c 22 3a 22 73 74 79 20 32 33 2c 20 32 30 32 33 22 2c 22 70 74 2d 42 52 22 3a 22 4a 61 6e 20 32 33 2c 20 32 30 32 33 22 2c 22 70 74 2d 50 54 22 3a 22 4a 61 6e 20 32 33 2c 20 32 30 32 33 22 2c 22 72 75 22 3a 22 d1 8f d0 bd d0 b2 2e 20 32 33 2c 20 32 30 32 33 22 2c 22 73 6c 22 3a 22 6a 61 6e 2e 20 32 33 2c 20 32 30 32 33 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 2c 22 64 6f 6d 22 3a 7b 22 69 73 4f 6e 6c 79 53 68 6f 77 4f 6e 63 65 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 47 75 69 64 65 4f 6e 6c 79 4f 6e Data Ascii: , 2023","id":"Jan 23, 2023","it":"gen 23, 2023","nl":"jan. 23, 2023","pl":"sty 23, 2023","pt-BR":"Jan 23, 2023","pt-PT":"Jan 23, 2023","ru":". 23, 2023","sl":"jan. 23, 2023"},"device":{"type":"desktop"},"dom":{"isOnlyShowOnce":false,"showGuideOnlyOn
2025-01-14 15:20:44 UTC	1390	IN	Data Raw: 3a 23 2e 2a 29 3f 24 22 2c 22 65 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 5b 64 61 74 61 2d 74 65 73 74 69 64 3d 5c 22 61 63 74 69 76 69 74 79 2d 6c 69 73 74 2d 64 72 61 77 65 72 2d 73 63 72 6f 6c 6c 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 5d 20 5b 64 61 74 61 2d 70 65 6e 64 6f 3d 5c 22 61 63 63 6f 75 6e 74 2d 61 63 74 69 76 69 74 79 2d 73 75 72 76 65 79 2d 6c 69 6e 6b 5c 22 5d 22 2c 22 74 72 69 67 67 65 72 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 22 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 73 55 72 6c 22 3a 22 68 Data Ascii: :#.*)?$","elementPathRule":"[data-testid=\"activity-list-drawer-scroll-container\"] [data-pendo=\"account-activity-survey-link\"]","triggerElementPathRule":"","confirmationElementPathRule":"","contentType":"text/html; charset=utf-8","buildingBlocksUrl":"h
2025-01-14 15:20:44 UTC	24	IN	Data Raw: 63 74 69 76 69 74 79 2d 6c 69 73 74 2d 64 72 61 77 65 72 2d 73 63 0d 0a Data Ascii: ctivity-list-drawer-sc
2025-01-14 15:20:44 UTC	1390	IN	Data Raw: 36 33 66 0d 0a 72 6f 6c 6c 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 5d 20 5b 64 61 74 61 2d 70 65 6e 64 6f 3d 5c 22 61 63 63 6f 75 6e 74 2d 61 63 74 69 76 69 74 79 2d 73 75 72 76 65 79 2d 6c 69 6e 6b 5c 22 5d 22 2c 22 74 72 69 67 67 65 72 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 22 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 35 36 34 36 31 30 37 35 33 34 34 32 36 31 31 32 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 Data Ascii: 63froll-container\"] [data-pendo=\"account-activity-survey-link\"]","triggerElementPathRule":"","confirmationElementPathRule":"","contentType":"text/html; charset=utf-8","buildingBlocksUrl":"https://pendo-static-5646107534426112.storage.googleapis.com/g
2025-01-14 15:20:44 UTC	221	IN	Data Raw: 69 64 65 43 73 73 55 72 6c 22 3a 22 22 2c 22 74 68 72 6f 74 74 6c 69 6e 67 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 6e 74 65 72 76 61 6c 22 3a 32 2c 22 75 6e 69 74 22 3a 22 44 61 79 22 7d 2c 22 61 75 74 6f 4f 72 64 65 72 69 6e 67 22 3a 5b 5d 2c 22 67 6c 6f 62 61 6c 4a 73 55 72 6c 22 3a 22 22 2c 22 73 65 67 6d 65 6e 74 46 6c 61 67 73 22 3a 5b 5d 2c 22 64 65 73 69 67 6e 65 72 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 73 22 3a 6e 75 6c 6c 2c 22 69 64 22 3a 22 32 38 22 2c 22 70 72 65 76 65 6e 74 43 6f 64 65 49 6e 6a 65 63 74 69 6f 6e 22 3a 66 61 6c 73 65 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: ideCssUrl":"","throttling":{"count":1,"enabled":true,"interval":2,"unit":"Day"},"autoOrdering":[],"globalJsUrl":"","segmentFlags":[],"designerEnabled":false,"features":null,"id":"28","preventCodeInjection":false});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.8	49855	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:43 UTC	704	OUT	GET /data/guide.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1736868042054&v=2.260.1_prod HTTP/1.1 Host: data.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	486	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: image/gif x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:43 GMT Content-Length: 42 x-envoy-upstream-service-time: 3 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2025-01-14 15:20:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.8	49858	188.114.97.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	382	OUT	GET /static/js/621.d916e3cb.chunk.js HTTP/1.1 Host: solve-widget.forethought.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	981	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:44 GMT Content-Type: application/javascript Content-Length: 1442999 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: "0177af822136984f45cee7b893b28193" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qr70r6DfJCQSl1ZQaGgQ0NoJ%2FvZYn519hQB5myd8S0lrnnQX3EJxc2PLmJ2Ms3FJknxZp3HqpsfeTHAb24lEbtMHQwofX0d9fZXn3B9RjTYiQZvSMAR0gJQu8x%2FV40rxroWd2NhpetXX3J%2Bvop4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901e9c9c4e43c47a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1528&min_rtt=1524&rtt_var=581&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=960&delivery_rate=1869398&cwnd=244&unsent_bytes=0&cid=556d294e920db28d&ts=223&x=0"
2025-01-14 15:20:44 UTC	388	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 32 31 2e 64 39 31 36 65 33 63 62 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 74 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 74 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 Data Ascii: /! For license information please see 621.d916e3cb.chunk.js.LICENSE.txt /!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new e.Error).stack;t&&(e._sentryDebugIds=e._sentryDeb
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 2d 62 39 34 34 64 34 36 33 64 64 39 30 22 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b 76 61 72 20 5f 67 6c 6f 62 61 6c 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 5f 67 6c 6f 62 61 6c 2e 53 45 4e 54 52 59 5f 52 45 4c 45 41 53 45 3d 7b 69 64 3a 22 70 72 6f 64 75 63 74 69 6f 6e 5f 76 31 2e 37 2e 36 38 37 5f 31 5f 63 32 33 34 66 31 66 22 7d 2c 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 5f 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 6c 76 65 Data Ascii: -b944d463dd90")}catch(e){}}();var _global="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{};_global.SENTRY_RELEASE={id:"production_v1.7.687_1_c234f1f"},(self.webpackChunksolve_ui=self.webpackChunksolve
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 74 79 6c 65 53 68 65 65 74 73 5b 74 5d 7d 28 74 29 3b 74 72 79 7b 6e 2e 69 6e 73 65 72 74 52 75 6c 65 28 65 2c 6e 2e 63 73 73 52 75 6c 65 73 2e 6c 65 6e 67 74 68 29 7d 63 61 74 63 68 28 72 29 7b 30 7d 7d 65 6c 73 65 20 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 65 29 29 3b 74 68 69 73 2e 63 74 72 2b 2b 7d 2c 74 2e 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 61 67 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 29 29 2c 74 68 69 73 2e 74 61 67 73 3d 5b 5d 2c 74 68 69 73 2e 63 74 72 3d 30 7d 2c 65 Data Ascii: tyleSheets[t]}(t);try{n.insertRule(e,n.cssRules.length)}catch(r){0}}else t.appendChild(document.createTextNode(e));this.ctr++},t.flush=function(){this.tags.forEach((function(e){return e.parentNode&&e.parentNode.removeChild(e)})),this.tags=[],this.ctr=0},e
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 28 79 2d 31 2c 4c 28 39 31 3d 3d 3d 65 3f 65 2b 32 3a 34 30 3d 3d 3d 65 3f 65 2b 31 3a 65 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 66 6f 72 28 3b 28 62 3d 41 28 29 29 26 26 62 3c 33 33 3b 29 5f 28 29 3b 72 65 74 75 72 6e 20 43 28 65 29 3e 32 7c 7c 43 28 62 29 3e 33 3f 22 22 3a 22 20 22 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 29 7b 66 6f 72 28 3b 2d 2d 74 26 26 5f 28 29 26 26 21 28 62 3c 34 38 7c 7c 62 3e 31 30 32 7c 7c 62 3e 35 37 26 26 62 3c 36 35 7c 7c 62 3e 37 30 26 26 62 3c 39 37 29 3b 29 3b 72 65 74 75 72 6e 20 45 28 65 2c 54 28 29 2b 28 74 3c 36 26 26 33 32 3d 3d 41 28 29 26 26 33 32 3d 3d 5f 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 66 6f 72 28 3b 5f 28 29 3b 29 73 77 69 74 63 68 28 62 29 7b 63 61 73 65 20 65 3a 72 Data Ascii: (y-1,L(91===e?e+2:40===e?e+1:e)))}function O(e){for(;(b=A())&&b<33;)_();return C(e)>2\|\|C(b)>3?"":" "}function M(e,t){for(;--t&&_()&&!(b<48\|\|b>102\|\|b>57&&b<65\|\|b>70&&b<97););return E(e,T()+(t<6&&32==A()&&32==_()))}function L(e){for(;_();)switch(b){case e:r
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 5f 28 29 2c 54 28 29 29 2c 74 2c 6e 29 2c 68 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 7a 2b 3d 22 2f 22 7d 62 72 65 61 6b 3b 63 61 73 65 20 31 32 33 2a 77 3a 64 5b 6d 2b 2b 5d 3d 70 28 7a 29 2a 45 3b 63 61 73 65 20 31 32 35 2a 77 3a 63 61 73 65 20 35 39 3a 63 61 73 65 20 30 3a 73 77 69 74 63 68 28 43 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 32 35 3a 6b 3d 30 3b 63 61 73 65 20 35 39 2b 67 3a 2d 31 3d 3d 45 26 26 28 7a 3d 6c 28 7a 2c 2f 5c 66 2f 67 2c 22 22 29 29 2c 62 3e 30 26 26 70 28 7a 29 2d 76 26 26 66 28 62 3e 33 32 3f 58 28 7a 2b 22 3b 22 2c 72 2c 6e 2c 76 2d 31 29 3a 58 28 6c 28 7a 2c 22 20 22 2c 22 22 29 2b 22 3b 22 2c 72 2c 6e 2c 76 2d 32 29 2c 68 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 39 3a 7a 2b 3d 22 3b 22 3b 64 65 66 61 75 6c 74 Data Ascii: _(),T()),t,n),h);break;default:z+="/"}break;case 123w:d[m++]=p(z)E;case 125*w:case 59:case 0:switch(C){case 0:case 125:k=0;case 59+g:-1==E&&(z=l(z,/\f/g,"")),b>0&&p(z)-v&&f(b>32?X(z+";",r,n,v-1):X(l(z," ","")+";",r,n,v-2),h);break;case 59:z+=";";default
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 2b 3d 51 28 79 2d 31 2c 74 2c 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 65 5b 6e 5d 2b 3d 50 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 69 66 28 34 34 3d 3d 3d 72 29 7b 65 5b 2b 2b 6e 5d 3d 35 38 3d 3d 3d 41 28 29 3f 22 26 5c 66 22 3a 22 22 2c 74 5b 6e 5d 3d 65 5b 6e 5d 2e 6c 65 6e 67 74 68 3b 62 72 65 61 6b 7d 64 65 66 61 75 6c 74 3a 65 5b 6e 5d 2b 3d 69 28 72 29 7d 7d 77 68 69 6c 65 28 72 3d 5f 28 29 29 3b 72 65 74 75 72 6e 20 65 7d 28 52 28 65 29 2c 74 29 29 7d 2c 5a 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 65 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 72 75 6c 65 22 3d 3d 3d 65 2e 74 79 70 65 26 26 65 2e 70 61 72 65 6e 74 26 26 21 28 65 2e 6c 65 6e 67 74 68 3c 31 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 76 61 6c 75 65 2c 6e Data Ascii: +=Q(y-1,t,n);break;case 2:e[n]+=P(r);break;case 4:if(44===r){e[++n]=58===A()?"&\f":"",t[n]=e[n].length;break}default:e[n]+=i(r)}}while(r=_());return e}(R(e),t))},Z=new WeakMap,ee=function(e){if("rule"===e.type&&e.parent&&!(e.length<1)){for(var t=e.value,n
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 65 20 34 36 37 35 3a 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 22 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 22 2b 6c 28 65 2c 2f 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 7c 66 6c 65 78 2d 7c 2d 73 65 6c 66 2f 2c 22 22 29 2b 65 3b 63 61 73 65 20 35 35 34 38 3a 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 6c 28 65 2c 22 73 68 72 69 6e 6b 22 2c 22 6e 65 67 61 74 69 76 65 22 29 2b 65 3b 63 61 73 65 20 35 32 39 32 3a 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 6c 28 65 2c 22 62 61 73 69 73 22 2c 22 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 22 29 2b 65 3b 63 61 73 65 20 36 30 36 30 3a 72 65 74 75 72 6e 20 46 2b 22 62 6f 78 2d 22 2b 6c 28 65 2c 22 2d 67 72 6f 77 22 2c 22 22 29 2b 46 2b 65 2b 44 2b 6c 28 65 2c 22 67 72 6f 77 22 2c 22 70 6f 73 69 74 69 76 65 22 29 2b 65 3b 63 61 Data Ascii: e 4675:return F+e+D+"flex-line-pack"+l(e,/align-content\|flex-\|-self/,"")+e;case 5548:return F+e+D+l(e,"shrink","negative")+e;case 5292:return F+e+D+l(e,"basis","preferred-size")+e;case 6060:return F+"box-"+l(e,"-grow","")+F+e+D+l(e,"grow","positive")+e;ca
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 2d 72 6c 22 29 2b 65 3b 63 61 73 65 20 34 35 3a 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 6c 28 65 2c 2f 5b 73 76 68 5d 5c 77 2b 2d 5b 74 62 6c 72 5d 7b 32 7d 2f 2c 22 6c 72 22 29 2b 65 7d 72 65 74 75 72 6e 20 46 2b 65 2b 44 2b 65 2b 65 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 72 65 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 3e 2d 31 26 26 21 65 2e 72 65 74 75 72 6e 29 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 20 57 3a 65 2e 72 65 74 75 72 6e 3d 6e 65 28 65 2e 76 61 6c 75 65 2c 65 2e 6c 65 6e 67 74 68 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 48 3a 72 65 74 75 72 6e 20 56 28 5b 6b 28 65 2c 7b 76 61 6c 75 65 3a 6c 28 65 2e 76 61 6c 75 65 2c 22 40 22 2c 22 40 22 2b 46 29 7d 29 5d 2c 72 29 3b 63 61 Data Ascii: -rl")+e;case 45:return F+e+D+l(e,/[svh]\w+-[tblr]{2}/,"lr")+e}return F+e+D+e+e}return e}var re=[function(e,t,n,r){if(e.length>-1&&!e.return)switch(e.type){case W:e.return=ne(e.value,e.length);break;case H:return V([k(e,{value:l(e.value,"@","@"+F)})],r);ca
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 61 3d 22 22 2c 73 3d 30 3b 73 3c 74 3b 73 2b 2b 29 61 2b 3d 65 5b 73 5d 28 6e 2c 72 2c 6f 2c 69 29 7c 7c 22 22 3b 72 65 74 75 72 6e 20 61 7d 7d 28 5b 65 65 2c 74 65 5d 2e 63 6f 6e 63 61 74 28 6f 2c 64 29 29 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 63 3d 6e 2c 56 28 47 28 65 3f 65 2b 22 7b 22 2b 74 2e 73 74 79 6c 65 73 2b 22 7d 22 3a 74 2e 73 74 79 6c 65 73 29 2c 70 29 2c 72 26 26 28 66 2e 69 6e 73 65 72 74 65 64 5b 74 2e 6e 61 6d 65 5d 3d 21 30 29 7d 3b 76 61 72 20 66 3d 7b 6b 65 79 3a 74 2c 73 68 65 65 74 3a 6e 65 77 20 72 28 7b 6b 65 79 3a 74 2c 63 6f 6e 74 61 69 6e 65 72 3a 69 2c 6e 6f 6e 63 65 3a 65 2e 6e 6f 6e 63 65 2c 73 70 65 65 64 79 3a 65 2e 73 70 65 65 64 79 2c 70 72 65 70 65 6e 64 3a 65 2e 70 72 65 70 Data Ascii: or(var a="",s=0;s<t;s++)a+=e[s](n,r,o,i)\|\|"";return a}}([ee,te].concat(o,d));a=function(e,t,n,r){c=n,V(G(e?e+"{"+t.styles+"}":t.styles),p),r&&(f.inserted[t.name]=!0)};var f={key:t,sheet:new r({key:t,container:i,nonce:e.nonce,speedy:e.speedy,prepend:e.prep
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 64 7d 2c 74 2e 73 68 65 65 74 2c 68 29 3b 72 65 74 75 72 6e 20 68 3f 6e 75 6c 6c 3a 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 2c 28 28 63 3d 7b 7d 29 5b 22 64 61 74 61 2d 65 6d 6f 74 69 6f 6e 22 5d 3d 74 2e 6b 65 79 2b 22 2d 67 6c 6f 62 61 6c 20 22 2b 75 2c 63 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3d 7b 5f 5f 68 74 6d 6c 3a 66 7d 2c 63 2e 6e 6f 6e 63 65 3d 74 2e 73 68 65 65 74 2e 6e 6f 6e 63 65 2c 63 29 29 7d 76 61 72 20 6d 3d 6f 2e 75 73 65 52 65 66 28 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 69 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 6b 65 79 2b 22 2d 67 6c 6f 62 61 6c 22 2c 6e 3d 6e 65 77 20 74 2e 73 68 65 65 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 7b 6b 65 79 3a 65 Data Ascii: d},t.sheet,h);return h?null:o.createElement("style",((c={})["data-emotion"]=t.key+"-global "+u,c.dangerouslySetInnerHTML={__html:f},c.nonce=t.sheet.nonce,c))}var m=o.useRef();return(0,a.i)((function(){var e=t.key+"-global",n=new t.sheet.constructor({key:e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.8	49853	18.245.45.143	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	621	OUT	GET /media/favicon.ico HTTP/1.1 Host: d3rxaij56vjege.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 730 Connection: close Last-Modified: Wed, 23 Feb 2022 16:14:06 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 07:16:16 GMT ETag: "2ed86f7b79c7afa8fc13da5d9180c70a" X-Cache: Hit from cloudfront Via: 1.1 0b328de7c6916513ee4489477445f2e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: etHKNueBsXzmkF4zHal2G-jWESsyeOTsbf75pHjBhGcaaxGzF85XtQ== Age: 29069
2025-01-14 15:20:44 UTC	730	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 6f 49 44 41 54 78 01 ed 99 3d 4c 1b 41 10 85 df 25 11 4a 94 22 49 43 94 2e 4e 91 34 89 94 92 12 e4 36 ca 4f 99 34 01 01 35 6e 81 02 bb 80 16 43 8b 10 d0 00 1d 3f 0d a2 40 18 d1 40 c3 8f 4c 43 63 a0 84 06 90 00 21 51 c0 3e 2d a7 bb b3 0d b2 7d b3 b7 42 da 4f 3a dd 69 bd c5 be d9 37 b3 73 67 0f 3f 6e 6f f1 84 79 86 27 8e 13 60 1b 27 c0 36 4e 80 6d 9c 00 db 88 08 18 f8 0b fc 6e 81 15 44 04 a4 9a 81 b9 7e 60 b8 0b 78 fb 1a 89 22 6a a1 cc 2f 60 7b 14 f8 d8 8c c4 10 11 b0 73 18 3c 73 f1 07 e3 da 56 49 e0 49 Data Ascii: PNGIHDR00WpHYs%%IR$sRGBgAMAaoIDATx=LA%J"IC.N46O45nC?@@LCc!Q>-}BO:i7sg?noy'`'6NmnD~`x"j/`{s<sVII

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.8	49859	104.16.80.73	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	640	OUT	POST /cdn-cgi/rum HTTP/1.1 Host: cloudflareinsights.com Connection: keep-alive Content-Length: 1961 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://solve-widget.forethought.ai Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	1961	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 34 31 32 34 30 32 36 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 39 39 38 33 31 39 30 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 79 6f 75 72 65 78 63 65 6c 6c 65 6e 63 79 2e 61 63 74 69 76 65 68 6f 73 74 65 64 2e 63 6f 6d 2f 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 30 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 30 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 33 36 38 36 38 30 33 35 36 39 30 2e 39 2c 22 76 65 72 73 69 6f 6e 73 22 3a Data Ascii: {"memory":{"totalJSHeapSize":14124026,"usedJSHeapSize":9983190,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"https://yourexcellency.activehosted.com/","eventType":1,"firstPaint":0,"firstContentfulPaint":0,"startTime":1736868035690.9,"versions":
2025-01-14 15:20:44 UTC	384	IN	HTTP/1.1 204 No Content Date: Tue, 14 Jan 2025 15:20:44 GMT Connection: close access-control-allow-origin: https://solve-widget.forethought.ai access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 901e9c9f18c54339-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.8	49862	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	1216	OUT	GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868042801&jzb=eJzNUstu2zAQ_BeeXYkP2ZZ8a-HAdVC0Aeqkh6IgGJKxCUikQlJ25MD_nmXiqClQuD0ESHSSNDuzs7P78x7FvtVohozSNpqbHo3QtXe7oD2PpgGETNmknJS4oJhNR2hrgonOc6OAxC_Ovs6_8RW_2p658x_VdHIVQUBI6Tobn2oIwZiR8YfWO9XJaJyFis7XAG1ibMMsz3vXeX0ndV1rK_tMQNVWb1yIWmXSNblQjbE50ECjDWh2j1yt-P84SXUv3diurl9nhgO4ER4yW4nr5aAcnz7QrpnvFvvL1aJfLvr5LQPBGy8a_QgS5_erJfs8XrP2S_WpADDo2w5mh7gx5N9HDVMWmB1Gw34aHcWp3RRAfB-7ObpIr6eM1MKuO7FOs2nLL7-nRI_mBupf_VnIEbB_GPu9oI-DKPxSIiYyKXJMcorpGAS32ockPUM0oxOcEZ76vfqGQ2ryCM8LeRE3Moi7lp57L_84ADIcwBjjFwdQO6FOHgB9LweQnD77Y2U1zWj1_JTlG6UK4RxTZbQ6_HoAhnSdxg HTTP/1.1 Host: data.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	487	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: image/gif x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:44 GMT Content-Length: 42 x-envoy-upstream-service-time: 89 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2025-01-14 15:20:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.8	49861	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	1104	OUT	POST /data/rec/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJxdkN1S8jAQhu8lx5W2lt-eiUWsMsLYiAeO0wlpgI5pUvIDX2C4d7bg8DmcpbtPd599D8i4mqEYKUalKkqxQh7alro0UqUF1PPZ6C2Z5jifb0fy5XPQ684NIIRSaYU5I2EYBFHYuauVLCw1pRQALJTcaaZwWcH0sBd1-91-0L7vB6GHfph7UqRpLAnXzEOcaPN6LQbef5vzAi4bq2stY1rDkj8tqzi818bUOvZ9J61i_yjjnAnqWgSUtmwttWFFi8rKJ0VVCh9-03aBL9ffbJgRxyWB-V_fQLGNhUE3Yr_IY5PCuQPX1xrFB0CIhghiNE-zFE_f8yTNHoaTUYKOQBHFhMFk0dgLy7mHzOUD7apkN95_4LFLxy7ZRCC0bAK5ZCzVHqfRc2cV1ZPBsI2OJ9ookpI&ct=1736868042802&v=2.260.1_prod&recordingId=log HTTP/1.1 Host: data.pendo.io Connection: keep-alive Content-Length: 308 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yourexcellency.activehosted.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	308	OUT	Data Raw: 78 9c 5d 90 dd 52 f2 30 10 86 ef 25 c7 95 b6 96 df 9e 89 45 ac 32 c2 d8 88 07 8e d3 09 69 80 8e 69 52 f2 03 5f 60 b8 77 b6 e0 f0 39 9c a5 bb 4f 77 9f 7d 0f c8 b8 9a a1 18 29 46 a5 2a 4a b1 42 1e da 96 ba 34 52 a5 05 d4 f3 d9 e8 2d 99 e6 38 9f 6f 47 f2 e5 73 d0 eb ce 0d 20 84 52 69 85 39 23 61 18 04 51 d8 b9 ab 95 2c 2c 35 a5 14 00 2c 94 dc 69 a6 70 59 c1 f4 b0 17 75 fb dd 7e d0 be ef 07 a1 87 7e 98 7b 52 a4 69 2c 09 d7 cc 43 9c 68 f3 7a 2d 06 de 7f 9b f3 02 2e 1b ab 6b 2d 63 5a c3 92 3f 2d ab 38 bc d7 c6 d4 3a f6 7d 27 ad 62 ff 28 e3 9c 09 ea 5a 04 94 b6 6c 2d b5 61 45 8b ca ca 27 45 55 0a 1f 7e d3 76 81 2f d7 df 6c 98 11 c7 25 81 f9 5f df 40 b1 8d 85 41 37 62 bf c8 63 93 c2 b9 03 d7 d7 1a c5 07 40 88 86 08 62 34 4f b3 14 4f df f3 24 cd 1e 86 93 51 82 8e Data Ascii: x]R0%E2iiR_`w9Ow})F*JB4R-8oGs Ri9#aQ,,5,ipYu~~{Ri,Chz-.k-cZ?-8:}'b(Zl-aE'EU~v/l%_@A7bc@b4OO$Q
2025-01-14 15:20:44 UTC	461	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:44 GMT Content-Length: 0 x-envoy-upstream-service-time: 68 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.8	49860	104.17.255.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	828	OUT	POST /workflow/widget-config HTTP/1.1 Host: solve-api.forethought.ai Connection: keep-alive Content-Length: 490 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" solve-origin: https://yourexcellency.activehosted.com is-config-preview: false sec-ch-ua-mobile: ?0 Authorization: Bearer 2310ff96-9b16-4a77-9601-827429c9507c User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 is-draft: false Content-Type: application/json is-preview: false sec-ch-ua-platform: "Windows" Accept: / Origin: https://solve-widget.forethought.ai Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	490	OUT	Data Raw: 7b 22 72 61 77 5f 70 61 72 61 6d 73 22 3a 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 6c 76 65 2d 77 69 64 67 65 74 2e 66 6f 72 65 74 68 6f 75 67 68 74 2e 61 69 2f 65 6d 62 65 64 2e 6a 73 22 2c 22 61 73 79 6e 63 22 3a 22 74 72 75 65 22 2c 22 69 64 22 3a 22 66 6f 72 65 74 68 6f 75 67 68 74 2d 77 69 64 67 65 74 2d 65 6d 62 65 64 2d 73 63 72 69 70 74 22 2c 22 65 6d 69 74 2d 74 72 61 63 6b 69 6e 67 2d 65 76 65 6e 74 73 22 3a 22 74 72 75 65 22 2c 22 64 61 74 61 2d 61 70 69 2d 6b 65 79 22 3a 22 32 33 31 30 66 66 39 36 2d 39 62 31 36 2d 34 61 37 37 2d 39 36 30 31 2d 38 32 37 34 32 39 63 39 35 30 37 63 22 2c 22 64 61 74 61 2d 66 74 2d 77 6f 72 6b 66 6c 6f 77 2d 74 61 67 22 3a 22 6c 6f 67 69 6e 22 2c 22 64 61 74 61 2d 66 74 2d 6f 72 69 67 69 6e 61 74 69 Data Ascii: {"raw_params":{"src":"https://solve-widget.forethought.ai/embed.js","async":"true","id":"forethought-widget-embed-script","emit-tracking-events":"true","data-api-key":"2310ff96-9b16-4a77-9601-827429c9507c","data-ft-workflow-tag":"login","data-ft-originati
2025-01-14 15:20:44 UTC	419	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:44 GMT Content-Type: application/json Content-Length: 9039 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://solve-widget.forethought.ai vary: Origin strict-transport-security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 901e9c9f7be342d3-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:44 UTC	950	IN	Data Raw: 7b 22 6d 61 6e 75 61 6c 6c 79 5f 73 65 6c 65 63 74 65 64 5f 74 6f 70 5f 69 6e 74 65 6e 74 73 22 3a 5b 22 62 39 32 30 33 35 39 37 2d 66 31 37 30 2d 34 63 34 38 2d 38 65 62 30 2d 65 30 63 33 36 37 62 61 32 35 39 38 22 2c 22 37 66 64 31 32 30 38 34 2d 65 38 34 30 2d 34 32 65 66 2d 39 62 63 35 2d 30 34 39 34 34 63 35 63 64 35 62 39 22 2c 22 62 65 33 31 30 31 35 36 2d 34 37 34 34 2d 34 62 33 37 2d 39 35 66 63 2d 66 31 61 36 62 64 64 38 66 36 64 39 22 2c 22 30 32 32 31 35 30 66 39 2d 36 37 61 62 2d 34 61 66 30 2d 62 61 66 64 2d 30 33 30 32 63 34 62 35 38 37 37 37 22 2c 22 61 37 37 32 39 64 31 61 2d 66 62 33 30 2d 34 66 64 65 2d 61 39 34 63 2d 65 61 35 30 62 61 37 34 64 36 62 37 22 5d 2c 22 67 72 65 65 74 69 6e 67 5f 6c 69 6e 65 22 3a 22 3c 70 20 73 74 79 6c 65 Data Ascii: {"manually_selected_top_intents":["b9203597-f170-4c48-8eb0-e0c367ba2598","7fd12084-e840-42ef-9bc5-04944c5cd5b9","be310156-4744-4b37-95fc-f1a6bdd8f6d9","022150f9-67ab-4af0-bafd-0302c4b58777","a7729d1a-fb30-4fde-a94c-ea50ba74d6b7"],"greeting_line":"<p style
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 73 3a 2f 2f 64 33 74 6e 6e 37 6c 61 72 36 6f 7a 61 73 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 65 34 33 32 62 39 37 64 2d 37 39 38 30 2d 34 63 31 36 2d 61 35 39 34 2d 61 33 63 33 62 39 37 32 36 33 34 37 2e 6a 70 67 22 2c 22 68 65 61 64 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 64 33 74 6e 6e 37 6c 61 72 36 6f 7a 61 73 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 65 66 65 62 64 33 34 65 2d 30 32 31 36 2d 34 36 61 37 2d 62 63 37 35 2d 66 66 34 61 63 38 34 35 36 35 62 39 2e 6a 70 67 22 2c 22 68 65 6c 70 5f 62 75 74 74 6f 6e 5f 68 6f 76 65 72 65 64 22 3a 22 68 74 74 70 73 3a 2f 2f 64 33 74 6e 6e 37 6c 61 72 36 6f 7a 61 73 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 30 38 66 32 63 65 64 36 2d 65 65 35 64 2d 34 35 65 33 2d 61 32 34 38 2d 35 38 32 38 Data Ascii: s://d3tnn7lar6ozas.cloudfront.net/e432b97d-7980-4c16-a594-a3c3b9726347.jpg","header":"https://d3tnn7lar6ozas.cloudfront.net/efebd34e-0216-46a7-bc75-ff4ac84565b9.jpg","help_button_hovered":"https://d3tnn7lar6ozas.cloudfront.net/08f2ced6-ee5d-45e3-a248-5828
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 63 6f 6e 66 69 67 22 3a 7b 22 73 68 6f 77 5f 77 68 65 6e 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 73 74 61 72 74 73 22 3a 66 61 6c 73 65 2c 22 70 72 69 76 61 63 79 5f 70 6f 6c 69 63 79 22 3a 22 3c 70 20 73 74 79 6c 65 3d 5c 22 5c 22 20 64 69 72 3d 5c 22 6c 74 72 5c 22 3e 4a 75 73 74 20 61 20 68 65 61 64 73 20 75 70 2c 20 62 79 20 63 68 61 74 74 69 6e 67 20 77 69 74 68 20 75 73 20 74 6f 64 61 79 20 79 6f 75 e2 80 99 72 65 20 61 67 72 65 65 69 6e 67 20 74 68 61 74 20 74 68 69 73 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 6d 61 79 20 62 65 20 74 72 61 6e 73 63 72 69 62 65 64 20 26 61 6d 70 3b 20 73 68 61 72 65 64 20 77 69 74 68 20 74 68 69 72 64 20 70 61 72 74 69 65 73 Data Ascii: abled":false,"privacy_consent_config":{"show_when_conversation_starts":false,"privacy_policy":"<p style=\"\" dir=\"ltr\">Just a heads up, by chatting with us today youre agreeing that this conversation may be transcribed & shared with third parties
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 6e 75 6c 6c 2c 22 73 68 6f 75 6c 64 5f 72 65 71 75 65 73 74 5f 66 65 65 64 62 61 63 6b 5f 66 6f 72 5f 6c 6f 77 5f 72 61 74 69 6e 67 73 22 3a 74 72 75 65 2c 22 73 68 6f 75 6c 64 5f 72 65 71 75 65 73 74 5f 66 65 65 64 62 61 63 6b 5f 66 6f 72 5f 68 69 67 68 5f 72 61 74 69 6e 67 73 22 3a 74 72 75 65 2c 22 73 68 6f 75 6c 64 5f 72 65 71 75 65 73 74 5f 72 65 73 6f 6c 75 74 69 6f 6e 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 5f 72 65 71 75 65 73 74 5f 61 64 64 69 74 69 6f 6e 61 6c 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 73 68 6f 75 6c 64 5f 73 68 6f 77 5f 73 75 62 6d 69 74 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 6d 65 73 73 61 67 65 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 5f 75 73 65 5f 72 61 74 69 6e 67 Data Ascii: null,"should_request_feedback_for_low_ratings":true,"should_request_feedback_for_high_ratings":true,"should_request_resolution_confirmation":false,"should_request_additional_feedback":true,"should_show_submit_confirmation_message":false,"should_use_rating
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 2c 22 71 75 69 63 6b 5f 66 65 65 64 62 61 63 6b 5f 63 6f 6e 66 69 67 22 3a 7b 22 69 73 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 73 74 79 6c 65 22 3a 22 74 68 75 6d 62 73 22 2c 22 68 6f 76 65 72 5f 6c 61 62 65 6c 5f 67 6f 6f 64 22 3a 22 47 6f 6f 64 20 73 75 67 67 65 73 74 69 6f 6e 22 2c 22 68 6f 76 65 72 5f 6c 61 62 65 6c 5f 62 61 64 22 3a 22 42 61 64 20 73 75 67 67 65 73 74 69 6f 6e 22 2c 22 66 65 65 64 62 61 63 6b 5f 70 72 6f 6d 70 74 22 3a 22 22 2c 22 6e 65 67 61 74 69 76 65 5f 72 6f 75 74 69 6e 67 5f 69 6e 74 65 6e 74 5f 77 6f 72 6b 66 6c 6f 77 5f 69 64 22 3a 6e 75 6c 6c 2c 22 73 68 6f 75 6c 64 5f 72 65 71 75 65 73 74 5f 66 65 65 64 62 61 63 6b 5f 66 6f 72 5f 6c 6f 77 5f 72 61 74 69 6e 67 73 22 3a 74 72 75 65 2c 22 71 75 65 73 74 69 6f 6e 5f Data Ascii: ,"quick_feedback_config":{"is_enabled":false,"style":"thumbs","hover_label_good":"Good suggestion","hover_label_bad":"Bad suggestion","feedback_prompt":"","negative_routing_intent_workflow_id":null,"should_request_feedback_for_low_ratings":true,"question_
2025-01-14 15:20:44 UTC	1369	IN	Data Raw: 31 38 34 5f 39 34 61 36 5f 39 63 61 35 64 61 61 31 33 66 33 66 22 3a 22 6c 6f 67 69 6e 22 2c 22 61 35 65 38 33 35 36 36 5f 37 66 38 36 5f 34 39 38 36 5f 61 62 39 61 5f 66 32 63 36 62 63 32 38 30 35 36 61 22 3a 22 79 6f 75 72 65 78 63 65 6c 6c 65 6e 63 79 2e 61 63 74 69 76 65 68 6f 73 74 65 64 2e 63 6f 6d 22 2c 22 62 65 36 32 63 65 31 31 5f 38 35 65 39 5f 34 62 30 39 5f 38 63 37 66 5f 30 63 62 30 31 65 30 30 31 38 36 66 22 3a 32 2c 22 38 63 31 64 63 35 64 61 5f 34 63 32 32 5f 34 62 65 39 5f 61 37 62 39 5f 62 66 35 66 64 61 65 31 64 66 37 38 22 3a 22 65 6e 2d 55 53 22 7d 2c 22 63 6f 6e 66 69 67 5f 70 61 72 61 6d 73 22 3a 7b 22 69 67 6e 6f 72 65 5f 70 65 72 73 69 73 74 65 6e 63 65 5f 70 61 72 61 6d 65 74 65 72 73 22 3a 22 61 73 79 6e 63 7c 64 61 74 61 2d 66 Data Ascii: 184_94a6_9ca5daa13f3f":"login","a5e83566_7f86_4986_ab9a_f2c6bc28056a":"yourexcellency.activehosted.com","be62ce11_85e9_4b09_8c7f_0cb01e00186f":2,"8c1dc5da_4c22_4be9_a7b9_bf5fdae1df78":"en-US"},"config_params":{"ignore_persistence_parameters":"async\|data-f
2025-01-14 15:20:44 UTC	397	IN	Data Raw: 73 77 65 72 22 2c 22 73 75 6e 63 6f 5f 75 73 65 5f 73 6c 65 65 70 22 2c 22 68 61 6e 64 6f 66 66 5f 6f 6e 5f 63 6f 6e 6e 65 63 74 5f 74 6f 5f 61 67 65 6e 74 22 2c 22 63 61 6e 76 61 73 5f 64 72 61 67 5f 61 6e 64 5f 64 72 6f 70 22 2c 22 61 75 74 6f 66 6c 6f 77 5f 74 65 6d 70 6c 61 74 65 73 22 2c 22 73 6f 6c 76 65 5f 65 6d 61 69 6c 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 73 65 63 75 72 69 74 79 5f 70 61 67 65 22 2c 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 22 2c 22 62 61 6e 6e 65 72 5f 69 6d 61 67 65 22 2c 22 73 6f 6c 76 65 5f 69 6e 73 69 67 68 74 73 5f 74 6f 70 69 63 22 2c 22 73 6f 6c 76 65 5f 69 6e 73 69 67 68 74 73 5f 6f 76 65 72 76 69 65 77 22 2c 22 73 6f 6c 76 65 5f 69 6e 73 69 67 68 74 73 5f 77 6f 72 6b 66 6c 6f 77 22 Data Ascii: swer","sunco_use_sleep","handoff_on_connect_to_agent","canvas_drag_and_drop","autoflow_templates","solve_email_translation_enabled","security_page","privacy_consent","banner_image","solve_insights_topic","solve_insights_overview","solve_insights_workflow"
2025-01-14 15:20:44 UTC	847	IN	Data Raw: 6c 79 74 69 63 73 22 2c 22 69 72 5f 73 74 72 65 61 6d 22 2c 22 61 70 69 5f 69 72 5f 73 74 72 65 61 6d 22 2c 22 73 6c 61 63 6b 5f 69 72 5f 73 74 72 65 61 6d 22 2c 22 69 6e 73 74 72 75 63 74 69 6f 6e 61 6c 5f 6e 6f 74 65 73 5f 66 6f 72 5f 6b 72 22 2c 22 63 73 61 74 5f 63 6f 6e 66 69 67 5f 72 65 76 61 6d 70 22 2c 22 73 6b 69 70 5f 63 6f 6d 6d 6f 6e 5f 69 6e 74 65 6e 74 5f 70 72 65 64 69 63 74 69 6f 6e 22 2c 22 70 72 65 70 65 6e 64 5f 73 75 6d 6d 61 72 69 7a 65 64 5f 74 72 61 6e 73 63 72 69 70 74 5f 74 6f 5f 7a 64 5f 74 69 63 6b 65 74 22 2c 22 66 61 6c 6c 62 61 63 6b 5f 77 6f 72 6b 66 6c 6f 77 22 2c 22 6e 65 77 5f 74 61 62 6c 65 5f 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 63 73 61 74 5f 74 72 69 67 67 65 72 5f 70 6f 69 6e 74 22 2c 22 64 65 66 6c 65 63 74 69 6f 6e Data Ascii: lytics","ir_stream","api_ir_stream","slack_ir_stream","instructional_notes_for_kr","csat_config_revamp","skip_common_intent_prediction","prepend_summarized_transcript_to_zd_ticket","fallback_workflow","new_table_component","csat_trigger_point","deflection

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.8	49866	34.120.195.249	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	478	OUT	GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1 Host: o185886.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	290	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Tue, 14 Jan 2025 15:20:44 GMT Content-Type: text/html Content-Length: 548 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 15:20:44 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.8	49863	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	453	OUT	GET /data/guide.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1736868042054&v=2.260.1_prod HTTP/1.1 Host: data.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	486	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: image/gif x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:44 GMT Content-Length: 42 x-envoy-upstream-service-time: 1 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2025-01-14 15:20:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.8	49865	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	711	OUT	GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyFj8FKAzEQQP9lznWTrLbi3gR7sAcV1HoMQzK0gd3Jkp0sltJ_byKlJ9FbCPPevDlCTj10sBcZp06pQ8yJvh31PbE7NOgkzLSPk5BvXBwU-iGwggUMJOhRELojzGEKElN9Bl9k9m398vRqP-x2XsfN18P9aisF6ZF3GXdUJojt5zucFoDOxcxyRY3R-tYsb8YUfS7LIxeQcajQP21VN2IilsertHyVyAqbO6WNanW7LMKZ0lTVHbRNu9KNsXVfFVxOef7jjEvyz8gvuaczJGNvtQ&ct=1736868042046&v=2.260.1_prod HTTP/1.1 Host: data.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	508	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: application/json; charset=utf-8 x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:44 GMT Content-Length: 16 x-envoy-upstream-service-time: 2 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2025-01-14 15:20:44 UTC	16	IN	Data Raw: 7b 22 65 6e 61 62 6c 65 22 3a 66 61 6c 73 65 7d Data Ascii: {"enable":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.8	49864	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:44 UTC	718	OUT	GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=28&jzb=eJyFjjFPwzAQhf_LzW1sB1pENiQ6wABIQBitk31qLTl25JwjKpT_XpshLAg26_y9974vmN3kOKYHCx3ol8PT_bN-0_18iI8ftzf7nmEDaEzMgb8RpaS8UrvtmKLNhl0MBcjJl68T8zh1QpxjTvRpyHsK5txgoWY6xYnJNiYOAu3ggiix6G3_sx6y9xsYiNEiI3SrWn26P_Q8hmPGIxWCgn5_hWVVXqO_agccaugf31o3YqLAd2tpORXJGlbXQirRynZXCmdKU63uoG3avWyUrnuwLBe3O3b2&v=2.260.1_prod&ct=1736868042051 HTTP/1.1 Host: data.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:44 UTC	508	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: application/javascript x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:44 GMT x-envoy-upstream-service-time: 20 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2025-01-14 15:20:44 UTC	1390	IN	Data Raw: 65 35 66 0d 0a 70 65 6e 64 6f 2e 67 75 69 64 65 73 50 61 79 6c 6f 61 64 28 7b 22 67 75 69 64 65 73 22 3a 5b 7b 22 63 72 65 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 68 61 73 4c 6f 67 67 65 64 49 6e 22 3a 66 61 6c 73 65 7d 2c 22 63 72 65 61 74 65 64 41 74 22 3a 31 36 37 33 30 33 31 35 39 34 31 31 33 2c 22 6c 61 73 74 55 70 64 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 Data Ascii: e5fpendo.guidesPayload({"guides":[{"createdByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"createdAt":1673031594113,"lastUpdatedByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","
2025-01-14 15:20:44 UTC	1390	IN	Data Raw: 22 3a 31 36 37 34 35 38 36 33 39 38 32 30 36 2c 22 70 75 62 6c 69 73 68 65 64 45 76 65 72 22 3a 66 61 6c 73 65 2c 22 63 75 72 72 65 6e 74 46 69 72 73 74 45 6c 69 67 69 62 6c 65 54 6f 42 65 53 65 65 6e 41 74 22 3a 31 36 37 34 35 31 34 36 38 38 34 30 30 2c 22 70 6f 6c 6c 73 22 3a 5b 7b 22 69 64 22 3a 22 72 39 7a 6c 30 6e 73 68 33 73 66 22 2c 22 71 75 65 73 74 69 6f 6e 22 3a 22 48 6f 77 20 77 6f 75 6c 64 20 79 6f 75 20 72 61 74 65 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 77 69 74 68 20 74 68 65 20 41 63 74 69 76 69 74 79 20 46 65 65 64 3f 22 2c 22 6e 75 6d 65 72 69 63 52 65 73 70 6f 6e 73 65 73 22 3a 5b 31 2c 32 2c 33 2c 34 2c 35 5d 2c 22 69 64 52 65 73 70 6f 6e 73 65 73 22 3a 7b 22 31 22 3a 22 56 65 72 79 20 4e 65 67 61 74 69 76 65 22 2c 22 35 22 Data Ascii: ":1674586398206,"publishedEver":false,"currentFirstEligibleToBeSeenAt":1674514688400,"polls":[{"id":"r9zl0nsh3sf","question":"How would you rate your experience with the Activity Feed?","numericResponses":[1,2,3,4,5],"idResponses":{"1":"Very Negative","5"
2025-01-14 15:20:44 UTC	906	IN	Data Raw: 64 65 2d 63 6f 6e 74 65 6e 74 2f 42 2d 68 67 45 51 61 4a 4a 77 6e 7a 33 62 46 33 30 77 70 72 59 72 6c 65 57 4b 67 2f 44 53 79 66 42 47 36 56 41 4f 6e 57 4e 35 45 41 78 51 78 6d 41 4e 4d 42 54 79 45 2f 68 36 4f 57 46 6a 4f 77 68 79 78 6a 55 66 4e 67 53 41 31 77 42 52 34 56 5f 65 51 2e 64 6f 6d 2e 6a 73 6f 6e 3f 73 68 61 32 35 36 3d 4c 53 79 4b 56 2d 55 6b 76 43 30 51 71 59 64 4e 69 75 66 77 63 33 43 77 48 34 41 75 50 68 79 4d 65 78 49 6d 6f 6b 57 55 4d 36 55 22 2c 22 64 6f 6d 4a 73 6f 6e 70 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 35 36 34 36 31 30 37 35 33 34 34 32 36 31 31 32 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 75 69 64 65 2d 63 6f 6e 74 65 6e 74 2f 42 2d 68 67 45 51 61 4a 4a Data Ascii: de-content/B-hgEQaJJwnz3bF30wprYrleWKg/DSyfBG6VAOnWN5EAxQxmANMBTyE/h6OWFjOwhyxjUfNgSA1wBR4V_eQ.dom.json?sha256=LSyKV-UkvC0QqYdNiufwc3CwH4AuPhyMexImokWUM6U","domJsonpUrl":"https://pendo-static-5646107534426112.storage.googleapis.com/guide-content/B-hgEQaJJ
2025-01-14 15:20:44 UTC	1390	IN	Data Raw: 36 33 66 0d 0a 72 6f 6c 6c 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 5d 20 5b 64 61 74 61 2d 70 65 6e 64 6f 3d 5c 22 61 63 63 6f 75 6e 74 2d 61 63 74 69 76 69 74 79 2d 73 75 72 76 65 79 2d 6c 69 6e 6b 5c 22 5d 22 2c 22 74 72 69 67 67 65 72 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 22 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 35 36 34 36 31 30 37 35 33 34 34 32 36 31 31 32 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 Data Ascii: 63froll-container\"] [data-pendo=\"account-activity-survey-link\"]","triggerElementPathRule":"","confirmationElementPathRule":"","contentType":"text/html; charset=utf-8","buildingBlocksUrl":"https://pendo-static-5646107534426112.storage.googleapis.com/g
2025-01-14 15:20:44 UTC	221	IN	Data Raw: 69 64 65 43 73 73 55 72 6c 22 3a 22 22 2c 22 74 68 72 6f 74 74 6c 69 6e 67 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 6e 74 65 72 76 61 6c 22 3a 32 2c 22 75 6e 69 74 22 3a 22 44 61 79 22 7d 2c 22 61 75 74 6f 4f 72 64 65 72 69 6e 67 22 3a 5b 5d 2c 22 67 6c 6f 62 61 6c 4a 73 55 72 6c 22 3a 22 22 2c 22 73 65 67 6d 65 6e 74 46 6c 61 67 73 22 3a 5b 5d 2c 22 64 65 73 69 67 6e 65 72 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 73 22 3a 6e 75 6c 6c 2c 22 69 64 22 3a 22 32 38 22 2c 22 70 72 65 76 65 6e 74 43 6f 64 65 49 6e 6a 65 63 74 69 6f 6e 22 3a 66 61 6c 73 65 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: ideCssUrl":"","throttling":{"count":1,"enabled":true,"interval":2,"unit":"Day"},"autoOrdering":[],"globalJsUrl":"","segmentFlags":[],"designerEnabled":false,"features":null,"id":"28","preventCodeInjection":false});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.8	49868	18.245.45.143	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:45 UTC	370	OUT	GET /media/favicon.ico HTTP/1.1 Host: d3rxaij56vjege.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:45 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 730 Connection: close Last-Modified: Wed, 23 Feb 2022 16:14:06 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 07:16:16 GMT ETag: "2ed86f7b79c7afa8fc13da5d9180c70a" X-Cache: Hit from cloudfront Via: 1.1 3a52599b74209adc8297b59f7eaa4bce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: JO5ZALLXFZm3_1MQ6KA1pyxaMDbPJMRsF-4232ImbSVT2XsOADo7_g== Age: 29070
2025-01-14 15:20:45 UTC	730	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 6f 49 44 41 54 78 01 ed 99 3d 4c 1b 41 10 85 df 25 11 4a 94 22 49 43 94 2e 4e 91 34 89 94 92 12 e4 36 ca 4f 99 34 01 01 35 6e 81 02 bb 80 16 43 8b 10 d0 00 1d 3f 0d a2 40 18 d1 40 c3 8f 4c 43 63 a0 84 06 90 00 21 51 c0 3e 2d a7 bb b3 0d b2 7d b3 b7 42 da 4f 3a dd 69 bd c5 be d9 37 b3 73 67 0f 3f 6e 6f f1 84 79 86 27 8e 13 60 1b 27 c0 36 4e 80 6d 9c 00 db 88 08 18 f8 0b fc 6e 81 15 44 04 a4 9a 81 b9 7e 60 b8 0b 78 fb 1a 89 22 6a a1 cc 2f 60 7b 14 f8 d8 8c c4 10 11 b0 73 18 3c 73 f1 07 e3 da 56 49 e0 49 Data Ascii: PNGIHDR00WpHYs%%IR$sRGBgAMAaoIDATx=LA%J"IC.N46O45nC?@@LCc!Q>-}BO:i7sg?noy'`'6NmnD~`x"j/`{s<sVII

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.8	49869	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:45 UTC	846	OUT	GET /data/rec/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJxdkN1S8jAQhu8lx5W2lt-eiUWsMsLYiAeO0wlpgI5pUvIDX2C4d7bg8DmcpbtPd599D8i4mqEYKUalKkqxQh7alro0UqUF1PPZ6C2Z5jifb0fy5XPQ684NIIRSaYU5I2EYBFHYuauVLCw1pRQALJTcaaZwWcH0sBd1-91-0L7vB6GHfph7UqRpLAnXzEOcaPN6LQbef5vzAi4bq2stY1rDkj8tqzi818bUOvZ9J61i_yjjnAnqWgSUtmwttWFFi8rKJ0VVCh9-03aBL9ffbJgRxyWB-V_fQLGNhUE3Yr_IY5PCuQPX1xrFB0CIhghiNE-zFE_f8yTNHoaTUYKOQBHFhMFk0dgLy7mHzOUD7apkN95_4LFLxy7ZRCC0bAK5ZCzVHqfRc2cV1ZPBsI2OJ9ookpI&ct=1736868042802&v=2.260.1_prod&recordingId=log HTTP/1.1 Host: data.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:45 UTC	511	IN	HTTP/1.1 400 Bad Request access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: text/plain; charset=utf-8 x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:45 GMT Content-Length: 16 x-envoy-upstream-service-time: 9 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2025-01-14 15:20:45 UTC	16	IN	Data Raw: 69 6e 76 61 6c 69 64 20 70 61 79 6c 6f 61 64 0a Data Ascii: invalid payload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.8	49870	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:45 UTC	965	OUT	GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868042801&jzb=eJzNUstu2zAQ_BeeXYkP2ZZ8a-HAdVC0Aeqkh6IgGJKxCUikQlJ25MD_nmXiqClQuD0ESHSSNDuzs7P78x7FvtVohozSNpqbHo3QtXe7oD2PpgGETNmknJS4oJhNR2hrgonOc6OAxC_Ovs6_8RW_2p658x_VdHIVQUBI6Tobn2oIwZiR8YfWO9XJaJyFis7XAG1ibMMsz3vXeX0ndV1rK_tMQNVWb1yIWmXSNblQjbE50ECjDWh2j1yt-P84SXUv3diurl9nhgO4ER4yW4nr5aAcnz7QrpnvFvvL1aJfLvr5LQPBGy8a_QgS5_erJfs8XrP2S_WpADDo2w5mh7gx5N9HDVMWmB1Gw34aHcWp3RRAfB-7ObpIr6eM1MKuO7FOs2nLL7-nRI_mBupf_VnIEbB_GPu9oI-DKPxSIiYyKXJMcorpGAS32ockPUM0oxOcEZ76vfqGQ2ryCM8LeRE3Moi7lp57L_84ADIcwBjjFwdQO6FOHgB9LweQnD77Y2U1zWj1_JTlG6UK4RxTZbQ6_HoAhnSdxg HTTP/1.1 Host: data.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:45 UTC	488	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: image/gif x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:45 GMT Content-Length: 42 x-envoy-upstream-service-time: 212 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2025-01-14 15:20:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.8	49873	104.17.255.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:45 UTC	370	OUT	GET /workflow/widget-config HTTP/1.1 Host: solve-api.forethought.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:45 UTC	326	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 14 Jan 2025 15:20:45 GMT Content-Type: application/json Content-Length: 31 Connection: close allow: POST strict-transport-security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 901e9ca4be5d0c86-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 15:20:45 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.8	49872	52.222.250.40	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:45 UTC	640	OUT	GET /08f2ced6-ee5d-45e3-a248-5828d7d63950.png HTTP/1.1 Host: d3tnn7lar6ozas.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:45 UTC	598	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1711 Connection: close Last-Modified: Tue, 12 Nov 2024 17:53:30 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: .XKKSi3EMnpQH5xnblUkjVhpnyS5GZ2E Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 15:07:52 GMT ETag: "51bfbf8467bd589040750ae903bce99f" X-Cache: Hit from cloudfront Via: 1.1 b4904c5988fd0eaae341a12cc47f3766.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 X-Amz-Cf-Id: umdNiRkqRNT7RVK0MLqlsDZn3JFTLuZ6Z8BsE0zFVMOgcj_YIPTCOw== Age: 774 Cache-Control: public, max-age=31536000, immutable
2025-01-14 15:20:45 UTC	1711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 65 08 06 00 00 00 bb be 46 f1 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 54 49 44 41 54 78 9c ed 9d 5b 6c 55 45 14 86 d1 4c cb b5 81 4a 41 04 05 11 6b 1a 22 8d da 1b 28 56 a2 48 ad 6d 41 11 4d 28 11 a8 50 8c c1 5b c0 44 43 a2 0f 44 31 05 c5 5b 1a e3 15 0c 21 88 42 7c 91 80 1a 6b a4 4a 08 d0 18 7d 40 b1 62 a1 da 2a 92 52 4a 00 8b d4 f3 bb c6 bd ab b4 39 c7 5e 9c 35 6b 76 99 3f f9 9e 9a b3 cf 5a ff df 7d 9b b3 f7 4c bf 7e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e bd 96 ba 0e c9 c4 58 22 9b b8 83 58 4c 2c 39 87 45 c4 cc f0 ef 63 08 25 5d 73 9f 11 99 d9 9f b8 93 78 93 a8 21 7e 21 62 04 7a c0 9f e1 e7 f6 10 95 44 a1 de Data Ascii: PNGIHDRdeFsRGB,pHYsTIDATx[lUELJAk"(VHmAM(P[DCD1[!B\|kJ}@b*RJ9^5kv?Z}L~^^^^^^^^^^^^^^^^X"XL,9Ec%]sx!~!bzD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.8	49875	52.222.250.117	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:46 UTC	393	OUT	GET /08f2ced6-ee5d-45e3-a248-5828d7d63950.png HTTP/1.1 Host: d3tnn7lar6ozas.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:46 UTC	598	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1711 Connection: close Last-Modified: Tue, 12 Nov 2024 17:53:30 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: .XKKSi3EMnpQH5xnblUkjVhpnyS5GZ2E Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 14 Jan 2025 15:07:52 GMT ETag: "51bfbf8467bd589040750ae903bce99f" X-Cache: Hit from cloudfront Via: 1.1 68b2682a924ac399aa2724b5b439e75c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 X-Amz-Cf-Id: Hl9NCZf3eNrrMAdC1HhbBV0Cdwom-XlzBpIPb1eQR7eNCO2I-a1-3Q== Age: 775 Cache-Control: public, max-age=31536000, immutable
2025-01-14 15:20:46 UTC	1711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 65 08 06 00 00 00 bb be 46 f1 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 54 49 44 41 54 78 9c ed 9d 5b 6c 55 45 14 86 d1 4c cb b5 81 4a 41 04 05 11 6b 1a 22 8d da 1b 28 56 a2 48 ad 6d 41 11 4d 28 11 a8 50 8c c1 5b c0 44 43 a2 0f 44 31 05 c5 5b 1a e3 15 0c 21 88 42 7c 91 80 1a 6b a4 4a 08 d0 18 7d 40 b1 62 a1 da 2a 92 52 4a 00 8b d4 f3 bb c6 bd ab b4 39 c7 5e 9c 35 6b 76 99 3f f9 9e 9a b3 cf 5a ff df 7d 9b b3 f7 4c bf 7e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e bd 96 ba 0e c9 c4 58 22 9b b8 83 58 4c 2c 39 87 45 c4 cc f0 ef 63 08 25 5d 73 9f 11 99 d9 9f b8 93 78 93 a8 21 7e 21 62 04 7a c0 9f e1 e7 f6 10 95 44 a1 de Data Ascii: PNGIHDRdeFsRGB,pHYsTIDATx[lUELJAk"(VHmAM(P[DCD1[!B\|kJ}@b*RJ9^5kv?Z}L~^^^^^^^^^^^^^^^^X"XL,9Ec%]sx!~!bzD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.8	49877	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:47 UTC	1396	OUT	POST /admin/login.php HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive Content-Length: 711 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://yourexcellency.activehosted.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:47 UTC	711	OUT	Data Raw: 74 61 6c 6f 6e 3d 25 37 42 25 32 32 30 25 32 32 25 33 41 31 25 32 43 25 32 32 32 25 32 32 25 33 41 33 30 30 37 30 36 31 35 33 35 25 32 43 25 32 32 33 25 32 32 25 33 41 25 32 32 35 36 37 34 39 36 66 38 61 63 31 64 39 39 36 66 66 33 34 64 35 36 66 34 33 38 61 34 64 36 66 34 25 32 32 25 32 43 25 32 32 34 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 35 25 32 32 25 33 41 31 37 33 36 38 36 38 30 33 32 39 34 30 25 32 43 25 32 32 36 25 32 32 25 33 41 31 25 32 43 25 32 32 37 25 32 32 25 33 41 30 25 32 43 25 32 32 38 25 32 32 25 33 41 34 25 32 43 25 32 32 39 25 32 32 25 33 41 30 25 32 43 25 32 32 76 65 72 73 69 6f 6e 25 32 32 25 33 41 25 32 32 36 2e 30 2e 36 25 32 32 25 32 43 25 32 32 69 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 73 74 61 74 75 Data Ascii: talon=%7B%220%22%3A1%2C%222%22%3A3007061535%2C%223%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%224%22%3A%22%22%2C%225%22%3A1736868032940%2C%226%22%3A1%2C%227%22%3A0%2C%228%22%3A4%2C%229%22%3A0%2C%22version%22%3A%226.0.6%22%2C%22i%22%3A%22%22%2C%22statu
2025-01-14 15:20:48 UTC	1049	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 15:20:48 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close location: index.php?error_mesg=invalidlogin Cache-Control: no-store, no-cache, must-revalidate content-security-policy: upgrade-insecure-requests;report-uri /csp/ content-security-policy-report-only: default-src https: 'self';font-src https: data: 'self';script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' https:;script-src-elem 'unsafe-inline' https:;style-src 'unsafe-inline' https:;style-src-elem 'unsafe-inline' https:;img-src https: blob: data:;connect-src https: wss:;worker-src https: blob:;form-action 'self';block-all-mixed-content;report-uri /csp/ expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache x-content-type-options: nosniff x-request-id: 345b419d3161a4d57c398925b2edcd68 x-robots-tag: noindex x-xss-protection: 1; mode=block CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cb40dc341de-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.8	49876	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:48 UTC	1300	OUT	GET /admin/index.php?error_mesg=invalidlogin HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://yourexcellency.activehosted.com/admin/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=zgUJStdrns6QUcCbAr4T7JSsBDGhSxPjyBU24Xk9J1Q
2025-01-14 15:20:48 UTC	1088	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, must-revalidate content-security-policy: upgrade-insecure-requests;report-uri /csp/ content-security-policy-report-only: default-src https: 'self';font-src https: data: 'self';script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' https:;script-src-elem 'unsafe-inline' https:;style-src 'unsafe-inline' https:;style-src-elem 'unsafe-inline' https:;img-src https: blob: data:;connect-src https: wss:;worker-src https: blob:;form-action 'self';block-all-mixed-content;report-uri /csp/ expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache Set-Cookie: XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY; path=/; secure; SameSite=Strict x-content-type-options: nosniff x-request-id: 3deb31a09f18702c43a43166e53d76b7 x-xss-protection: 1; mode=block CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cb68d910fa7-EWR
2025-01-14 15:20:48 UTC	281	IN	Data Raw: 31 63 62 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 Data Ascii: 1cb2<!DOCTYPE html><html lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="Content-Language" content="en-us" /> <meta name="robots" content="noindex" /> <link rel="icon" href="htt
2025-01-14 15:20:48 UTC	1369	IN	Data Raw: 72 6f 6e 74 2e 6e 65 74 2f 6d 65 64 69 61 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 59 4f 55 52 45 58 43 45 4c 4c 45 4e 43 59 20 45 6d 61 69 6c 20 4d 61 72 6b 65 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 37 2e 31 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 76 32 43 4a 37 55 61 59 79 34 4a 77 71 4c 44 49 72 5a 55 49 2f 34 68 71 65 6f 51 69 65 4f 6d 41 5a 4e 58 42 65 51 79 6a 6f 32 31 64 61 64 6e 77 52 2b 38 5a 61 49 4a 56 54 38 45 45 32 69 79 49 36 31 4f 56 38 65 36 4d Data Ascii: ront.net/media/favicon.ico" /> <title>YOUREXCELLENCY Email Marketing</title> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js" integrity="sha512-v2CJ7UaYy4JwqLDIrZUI/4hqeoQieOmAZNXBeQyjo21dadnwR+8ZaIJVT8EE2iyI61OV8e6M
2025-01-14 15:20:48 UTC	1369	IN	Data Raw: 73 63 2f 61 63 2e 6a 73 3f 76 3d 76 31 30 32 37 31 32 34 32 34 31 30 34 37 35 36 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 66 75 6e 63 74 69 6f 6e 73 2e 6a 73 3f 76 3d 76 31 30 32 37 31 32 34 32 34 31 30 34 37 35 36 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 63 61 6d 70 2d 63 6f 6c 6f 72 73 2e 63 73 73 3f 76 3d 76 31 30 32 37 31 32 34 32 34 31 30 34 37 35 36 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 6b 69 6e 2e 63 73 73 3f 76 3d 76 31 30 32 37 31 32 34 32 34 31 30 34 37 35 36 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e Data Ascii: sc/ac.js?v=v102712424104756"></script> <script src="js/functions.js?v=v102712424104756"></script> <link href="css/camp-colors.css?v=v102712424104756" rel="stylesheet" /> <link href="css/skin.css?v=v102712424104756" rel="stylesheet" /> <lin
2025-01-14 15:20:48 UTC	1369	IN	Data Raw: 71 53 37 74 6c 4f 37 62 59 6e 75 4c 33 37 6b 46 75 6c 36 33 63 6f 4f 58 58 42 34 51 79 46 68 41 41 59 4f 35 6d 67 55 56 32 6b 50 78 67 6e 49 57 7a 41 59 63 62 33 2b 34 41 6a 4d 6e 74 42 53 51 3d 3d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 72 65 66 65 72 72 65 72 70 6f 6c 69 63 79 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 63 73 73 56 61 72 73 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 61 63 74 69 76 65 63 61 6d 70 61 69 67 6e 2f 63 61 6d 70 2d 63 6f 72 65 2d 72 65 74 72 6f 66 69 74 2f 64 69 73 74 2f 62 75 6e 64 6c 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 Data Ascii: qS7tlO7bYnuL37kFul63coOXXB4QyFhAAYO5mgUV2kPxgnIWzAYcb3+4AjMntBSQ==" crossorigin="anonymous" referrerpolicy="no-referrer"></script><script>cssVars();</script> <script src="/node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js"></script>
2025-01-14 15:20:48 UTC	1369	IN	Data Raw: 65 73 75 6c 74 5f 74 65 78 74 22 3e 43 68 61 6e 67 65 73 20 53 61 76 65 64 2e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 61 63 5f 65 72 72 6f 72 5f 62 61 72 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 3c 73 70 61 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 61 63 5f 65 72 72 6f 72 5f 74 65 78 74 22 3e 45 72 72 6f 72 20 4f 63 63 75 72 72 65 64 21 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 22 20 69 64 3d 22 6c 6f 67 69 6e 5f 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 Data Ascii: esult_text">Changes Saved.</span></div> <div id="ac_error_bar" style="display:none;"><span id="ac_error_text">Error Occurred!</span></div> <div class="ac_login_box_container" id="login_container">
2025-01-14 15:20:48 UTC	1369	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 73 72 20 3d 20 24 4a 28 27 23 75 73 65 72 27 29 2e 76 61 6c 28 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 63 5f 73 74 72 5f 65 6d 61 69 6c 28 75 73 72 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 4a 28 74 68 69 73 29 2e 61 74 74 72 28 27 68 72 65 66 27 2c 20 75 72 6c 20 2b 20 27 26 65 6d 61 69 6c 3d 27 20 2b 20 75 73 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 61 63 74 53 75 70 70 6f 72 74 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 75 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 61 63 74 69 76 65 63 61 6d 70 61 69 67 6e 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 72 65 71 75 65 73 74 73 2f 6e 65 77 27 3b 0a Data Ascii: ); var usr = $J('#user').val(); if (ac_str_email(usr)) { $J(this).attr('href', url + '&email=' + usr); } } function contactSupport() { let url = 'https://help.activecampaign.com/hc/en-us/requests/new';
2025-01-14 15:20:48 UTC	228	IN	Data Raw: 6d 65 3d 22 69 64 74 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 69 64 74 22 20 76 61 6c 75 65 3d 22 22 2f 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 5f 6c 6f 67 69 6e 2d 6c 6f 77 65 72 20 63 66 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 6d 65 6d 62 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 72 6d 75 22 20 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 20 69 64 3d 22 72 6d 75 22 20 76 61 6c 75 65 3d 22 31 22 20 74 61 62 69 6e 64 65 78 3d 22 33 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 68 65 63 6b 65 64 3d 22 63 68 65 63 6b 65 64 22 20 2f 3e 0a 20 0d 0a Data Ascii: me="idt" type="hidden" id="idt" value=""/> <div class="ac_login-lower cf"> <div class="remember"> <input name="rmu" type="checkbox" id="rmu" value="1" tabindex="3" checked="checked" />
2025-01-14 15:20:48 UTC	1369	IN	Data Raw: 31 64 37 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 72 6d 75 22 20 63 6c 61 73 73 3d 22 63 68 65 63 6b 62 6f 78 22 3e 52 65 6d 65 6d 62 65 72 20 6d 79 20 75 73 65 72 6e 61 6d 65 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 61 63 5f 62 75 74 74 6f 6e 20 62 75 74 74 6f 6e 5f 6c 61 72 67 65 20 61 6c 74 31 20 66 72 69 67 68 74 20 6e 6f 6d 61 72 67 69 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 4c 6f 67 69 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 34 22 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 66 6f 72 6d 3e 0a 3c 73 63 72 69 70 74 3e 0a 63 6f 6e 73 74 20 65 Data Ascii: 1d71 <label for="rmu" class="checkbox">Remember my username</label> </div> <input type="submit" class="ac_button button_large alt1 fright nomargin" value="Login" tabindex="4"/> </div></form><script>const e
2025-01-14 15:20:48 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 20 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 75 6d 6e 20 70 2d 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 32 32 36 61 6a 34 61 6f 31 74 36 31 71 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 64 68 35 75 35 66 62 39 79 5f 66 75 6e 6e 65 6c 2e 70 6e 67 22 20 61 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 34 38 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3d 22 34 38 22 20 63 6c 61 73 73 3d Data Ascii: <div class="inner flex flex-column p-4"> <img src="https://d226aj4ao1t61q.cloudfront.net/dh5u5fb9y_funnel.png" alt="" width="48" height="48" class=
2025-01-14 15:20:48 UTC	1369	IN	Data Raw: 20 66 77 2d 35 30 30 22 3e 4c 65 61 72 6e 20 48 6f 77 3c 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 72 61 72 72 20 6d 6c 2d 31 22 3e 3c 2f 69 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 70 65 6e 64 6f 2d 63 61 72 64 2d 72 65 77 61 72 64 2d 63 6f 6e 74 61 63 74 73 22 0a 20 20 20 20 20 20 20 20 20 Data Ascii: fw-500">Learn How<i class="rarr ml-1"></i></span> </div> </a> <a id="pendo-card-reward-contacts"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.8	49882	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	1141	OUT	GET /admin/css/camp-colors.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:49 UTC	369	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1371 Connection: close etag: "842181549" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cbb5e100f46-EWR
2025-01-14 15:20:49 UTC	1000	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 2f 2a 20 50 72 69 6d 61 72 79 20 70 61 6c 65 74 74 65 20 2a 2f 0a 20 20 2d 2d 6f 63 65 61 6e 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 35 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 31 32 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 36 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 38 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 34 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 36 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 33 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 34 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 32 30 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 33 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 31 35 30 29 3b 0a 20 20 2d 2d 6f 63 65 61 6e 2d 32 30 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 31 30 30 29 3b 0a 20 Data Ascii: :root { /* Primary palette */ --ocean: var(--ocean-500); --ocean-120: var(--ocean-600); --ocean-80: var(--ocean-400); --ocean-60: var(--ocean-300); --ocean-40: var(--ocean-200); --ocean-30: var(--ocean-150); --ocean-20: var(--ocean-100);
2025-01-14 15:20:49 UTC	371	IN	Data Raw: 20 2d 2d 6c 61 76 65 6e 64 65 72 2d 36 30 3a 20 23 63 33 61 37 66 63 3b 0a 20 20 2d 2d 6c 61 76 65 6e 64 65 72 2d 34 30 3a 20 23 65 61 65 30 66 65 3b 0a 20 20 2d 2d 6c 61 76 65 6e 64 65 72 2d 32 30 3a 20 23 66 37 66 32 66 66 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 3a 20 23 66 61 63 66 33 66 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 31 32 30 3a 20 23 64 65 61 61 30 30 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 38 30 3a 20 23 66 62 64 39 36 35 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 36 30 3a 20 23 66 63 65 32 38 62 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 34 30 3a 20 23 66 64 65 63 62 32 3b 0a 20 20 2d 2d 62 61 6e 61 6e 61 2d 32 30 3a 20 23 66 66 66 39 65 36 3b 0a 0a 20 20 2f 2a 20 4e 65 75 74 72 61 6c 73 20 2a 2f 0a 20 20 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 0a 20 Data Ascii: --lavender-60: #c3a7fc; --lavender-40: #eae0fe; --lavender-20: #f7f2ff; --banana: #facf3f; --banana-120: #deaa00; --banana-80: #fbd965; --banana-60: #fce28b; --banana-40: #fdecb2; --banana-20: #fff9e6; /* Neutrals */ --black: #000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.8	49881	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	1134	OUT	GET /admin/css/skin.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:49 UTC	372	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 430286 Connection: close etag: "2455582122" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cbb5c1a42bd-EWR
2025-01-14 15:20:49 UTC	997	IN	Data Raw: 68 74 6d 6c 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 27 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 61 72 69 61 6c 2c 20 73 65 72 69 66 3b 20 2f 2a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 34 33 34 33 34 3b 20 2a 2f 20 7d 0a 62 6f 64 79 2c 20 64 69 76 2c 20 64 6c 2c 20 64 74 2c 20 64 64 2c 20 75 6c 2c 20 6f 6c 2c 20 6c 69 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 63 6f 64 65 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 70 61 Data Ascii: html { margin: 0;padding: 0;color: #000;height: 100%;min-height: 100%;font-family: 'IBM Plex Sans', helvetica, arial, serif; /* background-color: #343434; */ }body, div, dl, dt, dd, ul, ol, li, h1, h2, h3, h4, h5, h6, pre, code, blockquote { margin: 0;pa
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 36 30 30 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 73 75 62 70 69 78 65 6c 2d 61 6e 74 69 61 6c 69 61 73 65 64 3b 20 7d 0a 69 6d 67 20 7b 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 20 7d 0a 73 74 72 6f 6e 67 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 7d 0a 61 3a 6c 69 6e 6b 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6f 63 65 61 6e 2d 35 30 30 29 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0a 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 0a 2e 6c 61 73 74 63 Data Ascii: irection: column;color: var(--slate-600);-webkit-font-smoothing: subpixel-antialiased; }img { border: none; }strong { font-weight: 700; }a:link, a:visited { color: var(--ocean-500);text-decoration: none; }a:hover { text-decoration: underline; }.lastc
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 6f 74 20 68 65 61 64 65 72 20 23 67 6c 6f 62 61 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 2c 0a 23 67 6c 6f 62 61 6c 2d 72 6f 6f 74 20 68 65 61 64 65 72 20 23 67 6c 6f 62 61 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 69 76 2e 72 65 70 6f 72 74 73 2d 64 72 6f 70 64 6f 77 6e 20 7b 0a 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 32 30 30 29 0a 7d 0a 0a 23 67 6c 6f 62 61 6c 2d 72 6f 6f 74 20 68 65 61 64 65 72 20 23 67 6c 6f 62 61 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 2e 61 63 74 69 76 65 2c 0a 23 67 6c 6f 62 61 6c 2d 72 6f 6f 74 20 68 65 61 64 65 72 20 23 67 6c 6f 62 61 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 69 76 2e 72 65 70 6f 72 74 73 2d 64 72 6f 70 64 6f 77 6e 2e 61 63 74 69 76 65 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d Data Ascii: ot header #global-navigation a,#global-root header #global-navigation div.reports-dropdown {color: var(--slate-200)}#global-root header #global-navigation a.active,#global-root header #global-navigation div.reports-dropdown.active {color: #fff;}
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 30 20 36 30 25 3b 0a 09 09 2d 6d 6f 7a 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 0a 09 09 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 36 30 25 3b 0a 09 09 66 6c 65 78 3a 20 30 20 30 20 36 30 25 3b 20 7d 0a 7d 0a 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 66 65 61 74 75 72 65 64 2d 70 61 6e 65 20 2e 77 72 61 70 70 65 72 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 66 65 61 74 75 72 65 64 2d 70 61 6e 65 20 2e 74 69 6c 65 20 7b 0a 09 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 20 7b 0a 09 62 6f 64 79 2e 6c 6f Data Ascii: 0 60%;-moz-box-flex: 0;-ms-flex: 0 0 60%;flex: 0 0 60%; }}body.login .featured-pane .wrapper {max-width: 700px;margin: auto;width: 100%;}body.login .featured-pane .tile {width: 50%;}@media screen and (min-width:1024px) {body.lo
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 2e 32 35 72 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 68 6f 76 65 72 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 2e 68 6f 76 65 72 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 2d 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 20 72 69 67 68 74 3a 20 2d 2e 33 31 32 35 72 65 6d 3b 20 7d 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 68 6f 76 65 72 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 3a 66 6f 63 75 73 3a 61 66 74 65 72 2c 20 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 68 6f 76 65 72 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 3a 68 6f 76 65 72 3a 61 66 74 65 72 20 Data Ascii: transparent; border-right: 0 solid transparent; border-top: .25rem solid transparent; }body.login .hover-link-border.hover-link-border-arrow:after { right: -.3125rem; }body.login .hover-link-border:focus:after, body.login .hover-link-border:hover:after
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 7b 77 69 64 74 68 3a 34 35 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 61 63 5f 6c 6f 67 69 6e 5f 68 65 61 64 20 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 74 6f 70 6c 65 66 74 3a 36 70 78 3b 20 2d 6d 6f 7a 2d 62 6f 72 64 Data Ascii: }.ac_login_box_container {width:450px;font-family: "IBM Plex Sans", Helvetica, sans-serif;position: relative;top:50%;transform: translateY(-50%);padding-top: 0 !important;}.ac_login_box_container .ac_login_head {-moz-border-radius-topleft:6px; -moz-bord
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 67 3a 30 20 32 30 70 78 3b 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 65 72 72 6f 72 20 2e 6e 6f 2d 72 65 73 75 6c 74 73 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 65 72 72 6f 72 20 2e 6e 6f 2d 72 65 73 75 6c 74 73 20 61 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 7d 0a 0a 2f 2a 20 4c 6f 67 69 6e 20 46 61 69 6c 65 64 20 2a 2f 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 66 61 69 6c 65 64 2e 6e 6f 2d 72 65 73 75 6c 74 73 20 7b 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 63 6f 6c 6f 72 3a 20 23 37 37 36 65 33 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 33 61 35 3b 20 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 66 61 Data Ascii: g:0 20px;}.ac_login_error .no-results { font-size:15px;padding:16px;}.ac_login_error .no-results a { font-weight: bold;}/* Login Failed */.ac_login_failed.no-results { padding: 30px;line-height: 150%;color: #776e30;background: #fff3a5; }.ac_login_fa
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 37 64 63 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 69 63 6f 6e 2d 6c 6f 67 69 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 32 70 78 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 77 69 64 74 68 3a 20 32 34 70 78 3b 20 7d 0a 62 6f 64 79 2e 6c 6f 67 69 6e 20 2e 69 63 6f 6e 2d 6c 6f 67 69 6e 2e 73 73 6f 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 64 32 32 36 61 6a 34 61 6f 31 74 36 31 71 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 35 77 65 34 6e 73 77 6b 6f 5f 73 73 6f Data Ascii: 7dc; text-decoration: none; }body.login .icon-login { display: inline-block; height: 24px; margin-right: 12px; vertical-align: middle; width: 24px; }body.login .icon-login.sso { background-image: url("https://d226aj4ao1t61q.cloudfront.net/5we4nswko_sso
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 20 2d 6d 6f 7a 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 2d 6d 6f 7a 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 7a 6f 6f 6d 3a 20 31 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 20 7d 0a 23 75 78 62 6f 64 79 3a 61 66 74 65 72 20 7b 20 2f 2a 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 64 69 73 70 Data Ascii: -flex;display: -moz-flex;display: -ms-flexbox;display: flex;flex-direction: column;-webkit-flex-direction: column;-moz-flex-direction: column;font-size: 14px;zoom: 1;vertical-align: top; }#uxbody:after { /* position: relative;content: '';width: 100%;disp
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 64 3a 20 23 46 46 46 3b 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 30 64 66 64 62 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 33 70 78 20 33 70 78 20 34 70 78 20 23 65 30 64 66 64 63 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 33 70 78 20 33 70 78 20 34 70 78 20 23 65 30 64 66 64 63 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 33 70 78 20 33 70 78 20 34 70 78 20 23 65 30 64 66 64 63 3b 7d 0a 0a 2e 75 78 6c 66 74 63 6f 6c 6d 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 70 61 64 64 69 6e 67 3a 20 38 37 70 78 20 32 33 70 78 20 32 33 70 78 20 32 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 46 3b 77 69 64 74 68 3a 20 61 75 74 6f 3b 6d 69 6e 2d 77 69 Data Ascii: d: #FFF; border:1px solid #e0dfdb; -moz-box-shadow:3px 3px 4px #e0dfdc; -webkit-box-shadow:3px 3px 4px #e0dfdc; box-shadow:3px 3px 4px #e0dfdc;}.uxlftcolm { position: relative;flex-grow: 1;padding: 87px 23px 23px 23px;background: #FFF;width: auto;min-wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.8	49884	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	1140	OUT	GET /admin/css/animations.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:49 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 76307 Connection: close etag: "1836686120" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cbb5eb80f9c-EWR
2025-01-14 15:20:49 UTC	998	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 2a 2f 0a 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0a 20 20 2d 77 65 62 6b 69 74 Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateLicensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2014 Daniel Eden/.animated { -webkit-animation-duration: 1s; animation-duration: 1s; -webkit
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 0a 20 20 7d 0a 0a 20 20 34 30 25 2c 20 34 33 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a Data Ascii: 610, 0.355, 1.000); -webkit-transform: translate3d(0,0,0); transform: translate3d(0,0,0); } 40%, 43% { -webkit-transition-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); transition-timing-function: cubic-bez
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 35 70 78 2c 20 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 35 70 78 2c 20 30 29 Data Ascii: webkit-transition-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); transition-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -15px, 0); transform: translate3d(0, -15px, 0)
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 31 29 3b 0a 20 20 7d 0a 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 20 31 2e 30 35 2c 20 31 2e 30 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 20 31 2e 30 35 2c 20 31 2e 30 35 29 3b 0a 20 20 7d 0a 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 7d 0a 0a 2e 70 75 6c 73 65 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 Data Ascii: 1); } 50% { -webkit-transform: scale3d(1.05, 1.05, 1.05); transform: scale3d(1.05, 1.05, 1.05); } 100% { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); }}.pulse { -webkit-animation-name:
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 20 31 2e 32 35 2c 20 31 29 3b 0a 20 20 7d 0a 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 20 30 2e 38 35 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 20 30 2e 38 35 2c 20 31 29 3b 0a 20 20 7d 0a 0a 20 20 36 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 35 2c 20 31 2e 30 35 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 35 2c 20 31 2e 30 35 2c 20 31 29 3b 0a 20 20 7d 0a 0a 20 20 37 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f Data Ascii: 1.25, 1); } 50% { -webkit-transform: scale3d(1.15, 0.85, 1); transform: scale3d(1.15, 0.85, 1); } 65% { -webkit-transform: scale3d(.95, 1.05, 1); transform: scale3d(.95, 1.05, 1); } 75% { -webkit-transfo
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 68 61 6b 65 3b 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 77 69 6e 67 20 7b 0a 20 20 32 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 31 35 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 31 35 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 34 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 30 64 65 67 29 3b 0a Data Ascii: hake;}@-webkit-keyframes swing { 20% { -webkit-transform: rotate3d(0, 0, 1, 15deg); transform: rotate3d(0, 0, 1, 15deg); } 40% { -webkit-transform: rotate3d(0, 0, 1, -10deg); transform: rotate3d(0, 0, 1, -10deg);
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 74 61 64 61 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 0a 20 20 31 30 25 2c 20 32 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c Data Ascii: bkit-keyframes tada { 0% { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); } 10%, 20% { -webkit-transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); transform: scale3d(.9, .9, .9) rotate3d(0, 0,
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 7d 0a 0a 2e 74 61 64 61 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 74 61 64 61 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 74 61 64 61 3b 0a 7d 0a 0a 2f 2a 20 6f 72 69 67 69 6e 61 6c 6c 79 20 61 75 74 68 6f 72 65 64 20 62 79 20 4e 69 63 6b 20 50 65 74 74 69 74 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 69 63 6b 70 65 74 74 69 74 2f 67 6c 69 64 65 20 2a 2f 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 77 6f 62 62 6c 65 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e Data Ascii: transform: scale3d(1, 1, 1); }}.tada { -webkit-animation-name: tada; animation-name: tada;}/* originally authored by Nick Pettit - https://github.com/nickpettit/glide */@-webkit-keyframes wobble { 0% { -webkit-transform: n
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 35 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 33 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 20 30 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 33 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 20 30 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 33 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 34 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 20 30 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 Data Ascii: ) rotate3d(0, 0, 1, -5deg); } 30% { -webkit-transform: translate3d(20%, 0, 0) rotate3d(0, 0, 1, 3deg); transform: translate3d(20%, 0, 0) rotate3d(0, 0, 1, 3deg); } 45% { -webkit-transform: translate3d(-15%, 0, 0) rotate3d(0,
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 0a 20 20 36 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 30 33 2c 20 31 2e 30 33 2c 20 31 2e 30 33 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 30 33 2c 20 31 2e 30 33 2c 20 31 2e 30 33 29 3b 0a 20 20 7d 0a 0a 20 20 38 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 37 2c 20 2e 39 37 2c 20 2e 39 37 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 37 2c 20 2e 39 37 2c 20 2e 39 37 29 3b 0a 20 20 7d 0a 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 Data Ascii: 60% { opacity: 1; -webkit-transform: scale3d(1.03, 1.03, 1.03); transform: scale3d(1.03, 1.03, 1.03); } 80% { -webkit-transform: scale3d(.97, .97, .97); transform: scale3d(.97, .97, .97); } 100% { opaci

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.8	49880	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	1136	OUT	GET /admin/css/header.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:49 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 39824 Connection: close etag: "3966640577" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cbb5ac142c8-EWR
2025-01-14 15:20:49 UTC	998	IN	Data Raw: 2f 2a 0a 09 47 6c 6f 62 61 6c 20 61 64 6d 69 6e 20 68 65 61 64 65 72 0a 20 2a 2f 0a 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 5c 0a 20 20 20 20 46 72 61 6d 65 77 6f 72 6b 0a 5c 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 20 74 6f 70 3a 30 3b 20 77 69 64 74 68 3a 31 30 30 25 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 37 34 43 37 43 3b 20 68 65 69 67 68 74 3a 36 34 70 78 3b 20 7a 6f 6f 6d 3a 31 3b 20 7a 2d 69 6e 64 65 78 3a 39 39 30 3b 7d 0a 23 70 61 67 Data Ascii: /Global admin header //------------------------------------\ Framework\------------------------------------/#page_header {position:fixed; top:0; width:100%; margin:0; padding:0; background:#274C7C; height:64px; zoom:1; z-index:990;}#pag
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 0a 20 20 20 20 48 65 61 64 65 72 20 61 6c 74 65 72 6e 61 74 65 20 63 6f 6c 6f 72 73 0a 5c 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 62 6f 64 79 2e 74 65 6d 70 6c 61 74 65 5f 76 69 65 77 20 23 70 61 67 65 5f 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 64 65 73 69 67 6e 65 72 32 20 23 70 61 67 65 5f 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 61 6d 70 61 69 67 6e 5f 6e 65 77 20 23 70 61 67 65 5f 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 61 6d 70 61 69 67 6e 5f 64 65 73 69 67 6e 65 72 20 23 70 61 67 65 5f 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 6f 6c 64 2e 74 65 6d 70 6c 61 74 65 20 23 70 61 67 65 5f 68 65 61 64 65 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 21 69 6d 70 Data Ascii: Header alternate colors\------------------------------------/body.template_view #page_header, body.designer2 #page_header, body.campaign_new #page_header, body.campaign_designer #page_header, body.old.template #page_header { background: #fff !imp
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 61 34 64 38 61 3b 20 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 30 20 32 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 37 70 78 3b 20 63 6f 6c 6f 72 3a 23 64 61 64 61 64 61 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 30 33 39 36 62 3b 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 30 33 39 36 62 3b 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 3b 20 7a 2d 69 6e 64 65 78 3a 35 30 30 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d Data Ascii: ackground-color:#1a4d8a; padding:0 20px 0 20px; line-height:37px; color:#dadada; font-size:14px; text-decoration:none; font-weight:700; border:1px solid #10396b; border-right:1px solid #10396b; border-right:none; z-index:500;}#page_header .hdrwrap .act_m
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 6e 64 65 6e 74 3a 31 30 30 25 3b 20 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 61 63 74 5f 6d 65 6e 75 5f 6c 69 5f 73 65 61 72 63 68 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 32 70 78 20 31 31 70 78 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 6c 69 20 64 69 76 2e 73 65 61 72 63 68 77 72 61 70 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 68 65 69 67 68 74 3a 33 31 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 61 34 64 38 61 3b 20 70 61 64 64 69 6e 67 3a 33 70 78 20 Data Ascii: ndent:100%; white-space:nowrap; overflow:hidden; background:url('../images/act_menu_li_search.png') no-repeat 2px 11px;}#page_header .hdrwrap .act_menu li div.searchwrap {display:none; height:31px; line-height:100%; background-color:#1a4d8a; padding:3px
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 30 33 39 36 62 3b 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 53 68 61 64 6f 77 28 53 74 72 65 6e 67 74 68 3d 34 2c 20 44 69 72 65 63 74 69 6f 6e 3d 31 33 35 2c 20 43 6f 6c 6f 72 3d 27 23 31 30 33 39 36 62 27 29 22 3b 20 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 53 68 61 64 6f 77 28 53 74 72 65 6e 67 74 68 3d 34 2c 20 44 69 72 65 63 74 69 6f 6e 3d 31 33 35 2c 20 43 6f 6c 6f 72 3d 27 23 31 30 33 39 36 62 27 29 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 6c 69 20 2e 61 63 63 74 5f 69 6d 67 20 7b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: 0396b; -ms-filter:"progid:DXImageTransform.Microsoft.Shadow(Strength=4, Direction=135, Color='#10396b')"; filter:progid:DXImageTransform.Microsoft.Shadow(Strength=4, Direction=135, Color='#10396b');}#page_header .hdrwrap .act_menu li .acct_img {position:
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 30 20 30 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 20 33 70 78 20 30 20 30 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 6c 69 20 61 2e 68 6c 70 2e 61 63 74 69 76 65 20 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 33 30 29 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 33 30 29 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 33 30 29 3b 7d 0a 23 70 61 67 65 5f 68 65 61 Data Ascii: 0 0; border-radius:3px 3px 0 0;}#page_header .hdrwrap .act_menu li a.hlp.active {border-bottom-color:transparent; -moz-box-shadow:0 0 8px rgba(0, 0, 0, .30); -webkit-box-shadow:0 0 8px rgba(0, 0, 0, .30); box-shadow:0 0 8px rgba(0, 0, 0, .30);}#page_hea
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 67 68 74 3a 31 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 33 70 78 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 20 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 62 34 34 37 36 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 3e 20 75 6c 20 3e 20 6c 69 20 61 3a 6c 69 6e 6b 2c 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 3e 20 75 6c 20 3e 20 6c 69 20 61 3a 76 69 73 69 74 65 64 20 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 61 64 64 69 6e 67 3a 36 70 78 20 32 30 70 78 3b 20 62 61 63 6b 67 72 6f Data Ascii: ght:1px; margin:0 0 3px; padding:0; border:none; border-top:1px solid #1b4476;}#page_header .hdrwrap .act_menu ul li > ul > li a:link,#page_header .hdrwrap .act_menu ul li > ul > li a:visited {display:block; margin:0!important; padding:6px 20px; backgro
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 70 78 20 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 6f 6c 6f 72 3a 23 64 65 64 65 64 65 3b 20 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 75 6c 2e 73 74 61 74 75 73 20 6c 69 2e 6e 6f 73 74 61 74 75 73 65 73 20 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d Data Ascii: px 5px!important; display:block!important; line-height:14px!important; color:#dedede; word-wrap:break-word;}#page_header .hdrwrap .act_menu ul li ul.status li.nostatuses {margin-top:0!important; margin-bottom:10px!important;}#page_header .hdrwrap .act_m
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 67 72 61 70 68 63 6f 6e 74 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 75 6c 2e 73 74 61 74 75 73 20 6c 69 20 2e 67 72 61 70 68 63 6f 6e 74 20 73 70 61 6e 20 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 61 64 64 69 6e 67 3a 30 20 30 20 34 70 78 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 20 77 69 64 74 68 3a 31 30 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 Data Ascii: graphcont:first-child {margin-right:5px!important;}#page_header .hdrwrap .act_menu ul li ul.status li .graphcont span {display:block; margin:0!important; padding:0 0 4px 0!important; width:100px!important; color:#fff!important;}#page_header .hdrwrap .ac
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 70 61 67 65 5f 68 65 61 64 65 72 20 2e 68 64 72 77 72 61 70 20 2e 61 63 74 5f 6d 65 6e 75 20 75 6c 20 6c 69 23 68 65 6c 70 20 75 6c 20 6c 69 20 66 6f 72 6d 20 64 69 76 2e 68 73 65 61 72 63 68 20 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 70 61 64 64 69 6e 67 3a 35 70 78 20 30 3b 20 77 69 64 74 68 3a 31 34 38 70 78 3b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 68 65 69 67 68 74 3a 32 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 68 65 6c 70 5f 73 65 61 72 63 68 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 36 70 78 20 35 30 25 3b 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 62 34 34 37 36 3b 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 Data Ascii: page_header .hdrwrap .act_menu ul li#help ul li form div.hsearch {position:relative; padding:5px 0; width:148px; display:block; height:20px; background:#fff url('../images/help_search.png') no-repeat 6px 50%; border:1px solid #1b4476; -moz-border-radius:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.8	49883	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	1136	OUT	GET /admin/css/footer.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:49 UTC	369	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 2090 Connection: close etag: "575845233" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cbb9fbf8f90-BOS
2025-01-14 15:20:49 UTC	1000	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2f 2a 20 41 64 6d 69 6e 20 47 6c 6f 62 61 6c 20 46 6f 6f 74 65 72 20 53 74 79 6c 65 20 20 20 20 09 09 09 20 2a 2f 20 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 20 46 72 61 6d 65 77 6f 72 6b 20 2d 2d 2d 2d 2d 2d 2a 2f 0a 23 70 61 67 65 5f 66 6f 6f 74 65 72 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 36 34 70 78 3b 70 61 64 64 69 6e 67 3a 32 34 70 78 20 32 34 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 65 34 65 34 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c Data Ascii: /-------------------------------------------//* Admin Global Footer Style / /-------------------------------------------//------ Framework ------*/#page_footer {width:100%;height:64px;padding:24px 24px; background: #4e4e4e;text-align:l
2025-01-14 15:20:49 UTC	1090	IN	Data Raw: 32 70 78 3b 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 35 30 25 3b 20 6c 65 66 74 3a 20 35 30 25 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 31 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 20 7d 0a 2e 73 75 70 70 6f 72 74 2d 69 63 6f 6e 20 73 70 61 6e 3a 62 65 66 6f 72 65 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 7d 0a 0a 2f 2a 20 4d 65 6e 75 20 2a 2f 0a 2e 73 75 70 70 6f 72 74 2d 6d 65 6e 75 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 77 69 64 74 68 3a 20 32 35 30 70 78 3b 20 72 69 67 68 74 3a 20 32 30 70 78 3b 20 62 6f 74 74 6f 6d 3a 20 38 30 70 78 3b 20 62 6f Data Ascii: 2px;color: #fff; position: absolute; top: 50%; left: 50%; margin-left: -11px; margin-top: -11px;line-height: 0 }.support-icon span:before { margin: 0;}/* Menu */.support-menu { display: none;position: fixed; width: 250px; right: 20px; bottom: 80px; bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.8	49879	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	1135	OUT	GET /admin/css/skin2.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:49 UTC	372	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 502312 Connection: close etag: "4048953904" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cbb7ba3184d-EWR
2025-01-14 15:20:49 UTC	997	IN	Data Raw: 2f 2a 20 53 65 6e 64 65 72 20 44 65 74 61 69 6c 73 20 4d 6f 64 61 6c 20 28 62 61 73 69 63 20 65 64 69 74 6f 72 29 20 2a 2f 0a 23 74 65 6d 70 6c 61 74 65 2d 73 65 74 74 69 6e 67 20 2e 73 65 63 74 69 6f 6e 20 2e 73 65 74 74 69 6e 67 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 66 72 6f 6d 2d 69 6e 70 75 74 2d 77 72 61 70 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 20 30 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 62 6f 72 Data Ascii: /* Sender Details Modal (basic editor) */#template-setting .section .setting-section-container .from-input-wrap { width: 100% !important;position: relative;padding:0 5px 0 0 !important;display: inline-block;background-color: #ffffff;line-height: 100%;bor
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 77 72 61 70 20 61 2e 66 72 6f 6d 2d 70 65 72 73 20 7b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 63 6f 6c 6f 72 3a 20 23 62 62 62 62 62 62 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 35 30 25 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 20 72 69 67 68 74 3a 20 35 70 78 3b 7d 0a 23 74 65 6d 70 6c 61 74 65 2d 73 65 74 74 69 6e 67 20 2e 73 65 63 74 69 6f 6e 20 2e 73 65 74 74 69 6e 67 2d 73 65 63 74 69 6f 6e 2e 6e 61 6d 65 2d 66 69 65 6c 64 20 2e 61 63 5f 70 6f 70 6f 76 65 72 2d 6d 65 6e 75 20 2e 70 6f 70 6f 76 65 72 2d 66 6f 6f 74 65 72 20 2e 61 63 5f 62 75 74 74 6f 6e 20 7b 20 77 69 64 74 68 3a 20 34 37 25 3b 7d 0a 23 74 65 6d 70 6c 61 74 65 2d 73 65 74 74 69 6e 67 20 2e 73 65 Data Ascii: wrap a.from-pers { float: right;color: #bbbbbb; position: absolute; top: 50%; transform: translateY(-50%); right: 5px;}#template-setting .section .setting-section.name-field .ac_popover-menu .popover-footer .ac_button { width: 47%;}#template-setting .se
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 73 6c 61 74 65 2d 32 30 30 29 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 3a 31 34 70 78 20 22 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 33 33 33 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 20 30 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 74 65 6d 70 6c 61 74 65 2d 73 65 74 74 69 6e 67 20 2e 73 65 63 74 69 6f 6e 20 2e 73 65 74 74 69 6e 67 2d 73 65 63 74 69 6f 6e 2e 6e 61 6d 65 2d 66 69 65 6c 64 20 2e 69 6e 70 75 74 2d 77 72 61 70 20 69 6e 70 75 Data Ascii: var(--slate-200)!important;border-radius:4px;font:14px "IBM Plex Sans", Helvetica, sans-serif!important;color:#333!important;float:left;margin-right:10px;padding:0 5px 0 0!important;}#template-setting .section .setting-section.name-field .input-wrap inpu
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 61 64 69 75 73 3a 36 70 78 3b 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 75 70 6c 6f 61 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 65 63 33 34 66 3b 7d 0a 2f 2a 20 6d 65 6e 75 20 73 74 75 66 66 20 2a 2f 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 73 69 64 65 6d 65 6e 75 20 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 66 6c 6f 61 74 3a 72 69 67 68 74 3b 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 20 77 69 64 74 68 3a 32 32 30 70 78 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 73 69 64 65 6d 65 6e 75 20 3e 20 2e 68 65 61 Data Ascii: adius:6px; -moz-border-radius:6px; border-radius:6px;}#modal_gallery .upload input[type="submit"] {background:#6ec34f;}/* menu stuff */#modal_gallery .sidemenu {position:relative; float:right; padding:10px; width:220px;}#modal_gallery .sidemenu > .hea
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 5f 67 61 6c 6c 65 72 79 20 2e 66 6f 6c 64 65 72 5f 6c 69 73 74 20 3e 20 2e 66 6f 6c 64 65 72 73 20 3e 20 75 6c 20 3e 20 6c 69 20 3e 20 61 20 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 66 6c 6f 61 74 3a 6c 65 66 74 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 35 70 78 3b 20 63 6f 6c 6f 72 3a 23 35 35 35 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 66 6f 6c 64 65 72 5f 6c 69 73 74 20 3e 20 2e 66 6f 6c 64 65 72 73 20 3e 20 75 6c 20 3e 20 6c 69 20 3e 20 61 2e 66 6f 6c 64 65 72 2d 64 65 6c 65 74 65 20 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 74 6f 70 3a 36 70 78 3b 20 6d 61 72 67 Data Ascii: _gallery .folder_list > .folders > ul > li > a {display:block; float:left; height:100%; margin-left:15px; color:#555; text-decoration:none;}#modal_gallery .folder_list > .folders > ul > li > a.folder-delete {position:absolute; display:none; top:6px; marg
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 20 64 69 76 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 69 6d 61 67 65 2d 70 69 63 74 75 72 65 20 3e 20 69 6d 67 20 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 38 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 31 31 38 70 78 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 69 6d 61 67 65 73 20 3e 20 2e 69 6d 61 67 65 20 3e 20 64 69 76 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 64 69 76 2e 69 6d 61 67 65 2d 70 69 63 74 75 72 65 20 3e 20 64 69 76 2e 69 6d 61 67 65 2d 69 6d 67 74 61 67 20 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 31 38 70 78 3b 20 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 2e 69 6d 61 67 65 73 20 3e 20 2e 69 6d 61 67 65 20 3e 20 64 69 76 2e 69 6d 61 67 Data Ascii: div.image-container > div.image-picture > img {max-width:118px; max-height:118px;}#modal_gallery .images > .image > div.image-container > div.image-picture > div.image-imgtag {max-height:118px; cursor:pointer;}#modal_gallery .images > .image > div.imag
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 30 25 2c 23 38 32 63 63 35 64 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 30 30 25 2c 23 35 33 62 37 33 63 29 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 38 32 63 63 35 64 20 30 25 2c 23 35 33 62 37 33 63 20 31 30 30 25 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 38 32 63 63 35 64 20 30 25 2c 23 35 33 62 37 33 63 20 31 30 30 25 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 38 32 63 63 35 64 20 30 25 2c 23 35 33 62 37 Data Ascii: , left top, left bottom, color-stop(0%,#82cc5d), color-stop(100%,#53b73c)); background:-webkit-linear-gradient(top, #82cc5d 0%,#53b73c 100%); background:-o-linear-gradient(top, #82cc5d 0%,#53b73c 100%); background:-ms-linear-gradient(top, #82cc5d 0%,#53b7
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 66 74 3a 2d 31 30 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 32 38 70 78 20 30 20 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 20 77 69 64 74 68 3a 32 30 30 70 78 3b 20 63 6f 6c 6f 72 3a 23 37 37 37 3b 7d 0a 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 5f 6c 6f 61 64 69 6e 67 20 7b 77 69 64 74 68 3a 39 37 2e 38 25 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 20 23 6d 6f 64 61 6c 5f 67 61 6c 6c 65 72 79 5f 6c 6f 61 64 69 6e 67 20 3e 20 69 6d 67 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 0a 23 73 75 62 73 63 72 69 62 65 72 5f 69 6d 70 6f 72 74 20 2e 75 70 67 72 61 64 65 70 6c 61 6e 20 3e 20 61 20 7b 20 6d 61 72 67 69 6e 3a 31 Data Ascii: ft:-100px; padding:28px 0 0; font-size:12px; width:200px; color:#777;}#modal_gallery #modal_gallery_loading {width:97.8%!important;}#modal_gallery #modal_gallery_loading > img {margin-left:8px!important;}#subscriber_import .upgradeplan > a { margin:1
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 78 3a 31 3b 20 7a 6f 6f 6d 3a 31 3b 20 7d 0a 23 73 75 62 73 63 72 69 62 65 72 5f 69 6d 70 6f 72 74 20 2e 75 70 67 72 61 64 65 70 6c 61 6e 20 3e 20 61 3a 68 6f 76 65 72 20 7b 74 65 78 74 2d 73 68 61 64 6f 77 3a 31 70 78 20 30 20 30 20 23 66 66 66 36 64 32 3b 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 36 61 31 31 33 3b 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 63 33 61 33 32 36 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 20 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 30 2e 30 35 2c 20 23 66 37 63 62 32 30 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 2c 20 23 66 65 64 34 32 37 29 20 29 3b 20 62 61 63 Data Ascii: x:1; zoom:1; }#subscriber_import .upgradeplan > a:hover {text-shadow:1px 0 0 #fff6d2; border:1px solid #c6a113; border-top-color:#c3a326; background:-webkit-gradient( linear, left top, left bottom, color-stop(0.05, #f7cb20), color-stop(1, #fed427) ); bac
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 20 63 6f 6c 6f 72 3a 20 23 36 39 36 39 36 39 3b 20 7d 0a 0a 0a 23 73 75 62 73 63 72 69 62 65 72 44 65 74 61 69 6c 73 20 68 32 2e 70 72 69 6e 74 61 62 6c 65 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 23 74 61 62 5f 64 65 74 61 69 6c 73 5f 2c 0a 23 74 61 62 5f 6c 69 76 65 5f 74 72 61 76 65 6c 5f 2c 0a 23 74 61 62 5f 63 61 6d 70 61 69 67 6e 73 5f 2c 0a 23 74 61 62 5f 6c 6f 67 5f 2c 0a 23 74 61 62 5f 6e 6f 74 65 73 5f 0a 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 23 73 75 62 73 63 72 69 62 65 72 44 65 74 61 69 6c 73 20 20 23 6e 6f 74 65 73 20 2e 6f 70 74 69 6f 6e 73 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 20 63 6f 6c 6f 72 3a 23 33 33 33 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 Data Ascii: color: #696969; }#subscriberDetails h2.printable {display:none;}#tab_details_,#tab_live_travel_,#tab_campaigns_,#tab_log_,#tab_notes_{display:none;}#subscriberDetails #notes .options {font-size:11px; color:#333; font-weight:normal; padding-top

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.8	49878	34.107.204.85	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	1531	OUT	GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.260.1_prod&ct=1736868047249&jzb=eJztlGtP4zwQhf9KlM8NbZrQFr6shApsES8gVFitWBQ5jpNa60twJm3Cqv-dSQIl3Fa8CARa1VIv9ox9zvjyXPyxoUyZvW3HmuaZ3bFDoxcZMwFwicPu0BuMBqOeP-gNhx17zjMO2gQ8whnBye7R-DiYBufzXX3wY2s4OAdcgFCqcwVNjuv2ep676aRGRzkFrhVm5EZgaAaQZtvdbqlzwwrKhGCKlhsEs-ZspjNg0QbVsksiyVUXp-EaaWZvo2NiEgbNvwRXmhydnE0xoVbEXyowDX0EYQ6gldX8BKKaZhEBrhUbnszAUlriGK88AQeB9apcCCwBwDRKzd5keSh5VduciLwaONS3s0jIVcQKHPLtZceW5aTpeuhixkV023UxtUDHlbuUGKZgVzB5X8F4cv6cf1HJOEIvmLFo_JLLtu7WQ13_ebm949P_7vRQI8jxwFe6r5HBq9CWwWr_b1VBqIvXKOHOtZV6b1PCj4nqGt9fsBGhWgHhqrWPD_Tb4Y_d3ViwwqFaWDE3GVjNFUqJYlaYOJoy8uJtf7dtry0gRixJCmfGbp-aszAkfT_tnePxzyfidbWv0eg_ep_LVbtTm5Jwgms3S-A7rzr2Qo4X-9dn0_1ysl-OrzyUig2RrA662lxPJ973zcRLD7d2fAxmLMuQeXV47NMTmNGMFGn_wBhah69yhB46xTMOS2Bo0_Xd4bKzQg8VnP7-G5ZHWMoay2ssr7G8xvI_i2XErCAJZl_YgsVgX34Wp_Hlrjjt-S1Or1j0MqhHXxXUH8CdBqu_lIWt_f24_3i0anvaJBq-PU17Lvlp75RJJkNEsyytqhKF515nvAHyaxyucfglcfgZ7Nu8Z19_0F9e3gD21zjn HTTP/1.1 Host: data.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yourexcellency.activehosted.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:49 UTC	488	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 cache-control: no-store content-type: image/gif x-content-type-options: nosniff date: Tue, 14 Jan 2025 15:20:49 GMT Content-Length: 42 x-envoy-upstream-service-time: 265 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2025-01-14 15:20:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.8	49888	34.120.195.249	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	768	OUT	POST /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1 Host: o185886.ingest.sentry.io Connection: keep-alive Content-Length: 139 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://solve-widget.forethought.ai Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:49 UTC	139	OUT	Data Raw: 7b 7d 0a 7b 22 74 79 70 65 22 3a 22 63 6c 69 65 6e 74 5f 72 65 70 6f 72 74 22 7d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 33 36 38 36 38 30 34 37 2e 33 33 2c 22 64 69 73 63 61 72 64 65 64 5f 65 76 65 6e 74 73 22 3a 5b 7b 22 72 65 61 73 6f 6e 22 3a 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 2c 22 71 75 61 6e 74 69 74 79 22 3a 31 7d 5d 7d Data Ascii: {}{"type":"client_report"}{"timestamp":1736868047.33,"discarded_events":[{"reason":"sample_rate","category":"transaction","quantity":1}]}
2025-01-14 15:20:49 UTC	530	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: application/json vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-14 15:20:49 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.8	49887	104.16.80.73	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	542	OUT	OPTIONS /cdn-cgi/rum HTTP/1.1 Host: cloudflareinsights.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://solve-widget.forethought.ai User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:49 UTC	474	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://solve-widget.forethought.ai Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Headers: Content-Type access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 901e9cbbd80181d5-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff
2025-01-14 15:20:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.8	49885	143.204.215.3	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	732	OUT	GET /core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css HTTP/1.1 Host: platform-cdn.app-us1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "b6ffcf9edf281e009b6d8a4f00545f6a" If-Modified-Since: Tue, 09 Aug 2022 18:56:35 GMT
2025-01-14 15:20:49 UTC	431	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 14 Jan 2025 15:20:49 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=0, must-revalidate Server: AmazonS3 ETag: "b6ffcf9edf281e009b6d8a4f00545f6a" X-Cache: Hit from cloudfront Via: 1.1 a3c2566f9e36ad3cdf79fc6307fcf566.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA53-C1 X-Amz-Cf-Id: g7eNwn58g_yNiMSqjvkCryCN9M6xa16aqswVbQSN3SPKs5i1Qsu_ag== Age: 22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.8	49806	104.16.80.73	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	639	OUT	POST /cdn-cgi/rum HTTP/1.1 Host: cloudflareinsights.com Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://solve-widget.forethought.ai Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://solve-widget.forethought.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:49 UTC	552	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 79 6f 75 72 65 78 63 65 6c 6c 65 6e 63 79 2e 61 63 74 69 76 65 68 6f 73 74 65 64 2e 63 6f 6d 2f 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 36 2e 31 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 31 63 30 34 37 63 32 61 2d 66 37 62 31 2d 34 35 62 63 2d 39 66 34 65 2d 65 36 31 36 63 37 38 33 61 37 66 65 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 6c 76 65 2d 77 69 64 67 65 74 2e 66 6f 72 65 74 68 6f 75 67 68 74 2e 61 69 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 33 36 38 36 38 30 33 35 36 39 30 2e 39 2c 22 6e 74 22 3a 22 6e 61 76 Data Ascii: {"referrer":"https://yourexcellency.activehosted.com/","eventType":3,"versions":{"js":"2024.6.1"},"pageloadId":"1c047c2a-f7b1-45bc-9f4e-e616c783a7fe","location":"https://solve-widget.forethought.ai/","landingPath":"/","startTime":1736868035690.9,"nt":"nav
2025-01-14 15:20:49 UTC	384	IN	HTTP/1.1 204 No Content Date: Tue, 14 Jan 2025 15:20:49 GMT Connection: close access-control-allow-origin: https://solve-widget.forethought.ai access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 901e9cbc98d241d9-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.8	49889	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	1137	OUT	GET /admin/css/content.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:49 UTC	368	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 251 Connection: close etag: "480608683" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cbf8d1942f5-EWR
2025-01-14 15:20:49 UTC	251	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2f 2a 20 41 64 6d 69 6e 20 47 6c 6f 62 61 6c 20 43 6f 6e 74 65 6e 74 20 53 74 79 6c 65 20 20 20 20 09 09 09 09 09 09 20 2a 2f 20 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 0a 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 20 46 72 61 6d 65 77 6f 72 6b 20 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 61 63 2d 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 7b 20 70 61 64 64 69 6e 67 3a 20 30 20 32 33 70 78 20 32 33 70 78 20 32 33 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d Data Ascii: /-------------------------------------------//* Admin Global Content Style / /-------------------------------------------//------ Framework ------*/.ac-content_wrap { padding: 0 23px 23px 23px;width:100%;box-sizing:border-box;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.8	49891	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	921	OUT	GET /ac_global/fontello/css/ac-icons.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:49 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 13515 Connection: close etag: "4132928646" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cbfbd89183d-EWR
2025-01-14 15:20:49 UTC	998	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 61 63 2d 69 63 6f 6e 73 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 61 63 2d 69 63 6f 6e 73 2e 65 6f 74 3f 39 36 30 38 39 35 38 27 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 61 63 2d 69 63 6f 6e 73 2e 65 6f 74 3f 39 36 30 38 39 35 38 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 61 63 2d 69 63 6f 6e 73 2e 77 6f 66 66 32 3f 39 36 30 38 39 35 38 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 61 63 2d 69 63 6f 6e 73 2e 77 6f Data Ascii: @font-face { font-family: 'ac-icons'; src: url('../font/ac-icons.eot?9608958'); src: url('../font/ac-icons.eot?9608958#iefix') format('embedded-opentype'), url('../font/ac-icons.woff2?9608958') format('woff2'), url('../font/ac-icons.wo
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 62 6c 6f 63 6b 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 77 69 64 74 68 3a 20 31 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2e 32 65 6d 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 2f 2a 20 6f 70 61 63 69 74 79 3a 20 2e 38 3b 20 2a 2f 0a 0a 20 20 2f 2a 20 46 6f 72 20 73 61 66 65 74 79 20 2d 20 72 65 73 65 74 20 70 61 72 65 6e 74 20 73 74 79 6c 65 73 2c 20 74 68 61 74 20 63 61 6e 20 62 72 65 61 6b 20 67 6c 79 70 68 20 63 6f 64 65 73 2a 2f 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 2f 2a 20 66 69 78 20 62 75 74 74 6f 6e 73 20 68 65 69 67 68 74 Data Ascii: block; text-decoration: inherit; width: 1em; margin-right: .2em; text-align: center; /* opacity: .8; / / For safety - reset parent styles, that can break glyph codes/ font-variant: normal; text-transform: none; / fix buttons height
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6c 69 73 74 5f 64 65 6c 65 74 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 35 36 27 3b 20 7d 20 2f 2a 20 27 56 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 73 65 72 69 65 73 5f 61 64 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 35 37 27 3b 20 7d 20 2f 2a 20 27 57 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 73 65 72 69 65 73 5f 64 65 6c 65 74 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 35 38 27 3b 20 7d 20 2f 2a 20 27 58 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 61 67 5f 61 64 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 35 39 27 3b 20 7d 20 2f 2a 20 27 59 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 61 67 5f 64 65 6c 65 74 65 3a 62 Data Ascii: ' /.ac-icon-list_delete:before { content: '\56'; } / 'V' /.ac-icon-series_add:before { content: '\57'; } / 'W' /.ac-icon-series_delete:before { content: '\58'; } / 'X' /.ac-icon-tag_add:before { content: '\59'; } / 'Y' */.ac-icon-tag_delete:b
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 69 66 79 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 30 27 3b 20 7d 20 2f 2a 20 27 ee a0 90 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6c 69 73 74 2d 62 75 6c 6c 65 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 31 27 3b 20 7d 20 2f 2a 20 27 ee a0 91 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6c 69 73 74 2d 6e 75 6d 62 65 72 65 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 32 27 3b 20 7d 20 2f 2a 20 27 ee a0 92 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 33 27 3b 20 7d 20 2f 2a 20 27 ee a0 93 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 6f 67 2d 63 69 72 63 6c 65 64 3a 62 65 66 Data Ascii: ify:before { content: '\e810'; } /* '' /.ac-icon-list-bullet:before { content: '\e811'; } / '' /.ac-icon-list-numbered:before { content: '\e812'; } / '' /.ac-icon-underline:before { content: '\e813'; } / '' */.ac-icon-cog-circled:bef
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 36 27 3b 20 7d 20 2f 2a 20 27 ee a0 a6 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 69 6e 64 65 6e 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 37 27 3b 20 7d 20 2f 2a 20 27 ee a0 a7 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 69 6e 64 65 6e 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 38 27 3b 20 7d 20 2f 2a 20 27 ee a0 a8 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 6f 64 65 2d 31 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 39 27 3b 20 7d 20 2f 2a 20 27 ee a0 a9 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 62 75 63 6b 65 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a Data Ascii: efore { content: '\e826'; } /* '' /.ac-icon-indent-right:before { content: '\e827'; } / '' /.ac-icon-indent-left:before { content: '\e828'; } / '' /.ac-icon-code-1:before { content: '\e829'; } / '' */.ac-icon-bucket:before { content:
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 7d 20 2f 2a 20 27 ee a0 bd 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 6f 6c 64 65 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 33 65 27 3b 20 7d 20 2f 2a 20 27 ee a0 be 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 33 66 27 3b 20 7d 20 2f 2a 20 27 ee a0 bf 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 72 61 73 68 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 34 30 27 3b 20 7d 20 2f 2a 20 27 ee a1 80 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6d 65 6e 75 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 34 31 27 3b 20 7d 20 2f 2a 20 27 ee a1 81 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 77 Data Ascii: } /* '' /.ac-icon-folder:before { content: '\e83e'; } / '' /.ac-icon-folder-open:before { content: '\e83f'; } / '' /.ac-icon-trash:before { content: '\e840'; } / '' /.ac-icon-menu:before { content: '\e841'; } / '' */.ac-icon-cw
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 6e 2d 61 6c 65 72 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 35 35 27 3b 20 7d 20 2f 2a 20 27 ee a1 95 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 61 72 63 68 69 76 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 35 36 27 3b 20 7d 20 2f 2a 20 27 ee a1 96 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 35 37 27 3b 20 7d 20 2f 2a 20 27 ee a1 97 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 64 6f 77 6e 2d 31 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 35 38 27 3b 20 7d 20 2f 2a 20 27 ee a1 98 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 Data Ascii: n-alert:before { content: '\e855'; } /* '' /.ac-icon-archive:before { content: '\e856'; } / '' /.ac-icon-calendar:before { content: '\e857'; } / '' /.ac-icon-down-1:before { content: '\e858'; } / '' */.ac-icon-left:before { content:
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 36 63 27 3b 20 7d 20 2f 2a 20 27 ee a1 ac 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 36 64 27 3b 20 7d 20 2f 2a 20 27 ee a1 ad 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 36 65 27 3b 20 7d 20 2f 2a 20 27 ee a1 ae 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 67 70 6c 75 73 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 36 66 27 3b 20 7d 20 2f 2a 20 27 ee a1 af 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 37 30 27 3b 20 7d 20 2f 2a 20 27 ee a1 b0 27 20 2a 2f 0a 2e Data Ascii: content: '\e86c'; } /* '' /.ac-icon-up:before { content: '\e86d'; } / '' /.ac-icon-cog:before { content: '\e86e'; } / '' /.ac-icon-gplus:before { content: '\e86f'; } / '' /.ac-icon-twitter:before { content: '\e870'; } / '' */.
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 74 3a 20 27 5c 65 38 37 38 27 3b 20 7d 20 2f 2a 20 27 ee a1 b8 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 37 39 27 3b 20 7d 20 2f 2a 20 27 ee a1 b9 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 77 6f 72 64 70 72 65 73 73 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 37 61 27 3b 20 7d 20 2f 2a 20 27 ee a1 ba 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 37 62 27 3b 20 7d 20 2f 2a 20 27 ee a1 bb 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 6c 61 73 68 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 Data Ascii: t: '\e878'; } /* '' /.ac-icon-thumbs-down-alt:before { content: '\e879'; } / '' /.ac-icon-wordpress:before { content: '\e87a'; } / '' /.ac-icon-facebook-squared:before { content: '\e87b'; } / '' */.ac-icon-flash:before { content: '\e
2025-01-14 15:20:49 UTC	1369	IN	Data Raw: 74 3a 20 27 5c 65 38 38 66 27 3b 20 7d 20 2f 2a 20 27 ee a2 8f 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 70 61 6c 65 74 74 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 30 27 3b 20 7d 20 2f 2a 20 27 ee a2 90 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 67 70 6c 75 73 2d 63 69 72 63 6c 65 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 31 27 3b 20 7d 20 2f 2a 20 27 ee a2 91 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 32 27 3b 20 7d 20 2f 2a 20 27 ee a2 92 27 20 2a 2f 0a 2e 61 63 2d 69 63 6f 6e 2d 66 6c 69 63 6b 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 33 27 3b 20 7d 20 2f 2a 20 27 ee Data Ascii: t: '\e88f'; } /* '' /.ac-icon-palette:before { content: '\e890'; } / '' /.ac-icon-gplus-circled:before { content: '\e891'; } / '' /.ac-icon-github:before { content: '\e892'; } / '' /.ac-icon-flickr:before { content: '\e893'; } / '

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.8	49890	34.120.195.249	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	478	OUT	GET /api/5321290/envelope/?sentry_key=e69efc0111d24ee3b79752765776ca0a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.119.2 HTTP/1.1 Host: o185886.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 15:20:49 UTC	290	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Tue, 14 Jan 2025 15:20:49 GMT Content-Type: text/html Content-Length: 548 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-14 15:20:49 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.8	49892	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:49 UTC	1135	OUT	GET /admin/css/style.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:50 UTC	372	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:50 GMT Content-Type: text/css; charset=utf-8 Content-Length: 153634 Connection: close etag: "3757763939" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc03f6942c7-EWR
2025-01-14 15:20:50 UTC	997	IN	Data Raw: 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 57 41 52 4e 49 4e 47 3a 20 44 45 50 52 45 43 41 54 45 44 20 2d 20 44 4f 20 4e 4f 54 20 41 44 44 20 54 4f 20 54 48 49 53 20 46 49 4c 45 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2f 2a 0a 20 20 47 6c 6f 62 61 6c 20 65 6c 65 6d 65 6e 74 20 73 74 79 6c 69 6e 67 0a 2a 2f 0a 0a 2f 2a 20 49 6d 70 6f 72 74 20 2f 20 49 6e 63 6c 75 64 65 20 66 6f 6e 74 73 20 68 65 72 65 20 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 49 42 4d 2b 50 6c 65 78 2b 53 61 6e 73 3a 32 30 30 2c 33 30 30 2c 34 Data Ascii: /* --------------------------- WARNING: DEPRECATED - DO NOT ADD TO THIS FILE-------------------------------// Global element styling// Import / Include fonts here */@import url("https://fonts.googleapis.com/css?family=IBM+Plex+Sans:200,300,4
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 2a 2f 0a 2e 6e 6f 72 6d 61 6c 2d 74 65 78 74 20 7b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 36 30 30 29 3b 20 7d 0a 2e 6d 65 64 69 75 6d 2d 74 65 78 74 20 7b 20 63 6f 6c 6f 72 3a 20 23 37 41 37 41 37 41 3b 20 7d 0a 2e 6c 69 67 68 74 2d 74 65 78 74 20 7b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 34 30 30 29 3b 20 7d 0a 2e 78 6c 69 67 68 74 2d 74 65 78 74 20 7b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 34 30 30 29 3b 20 7d 0a 2e 74 65 78 74 2d 72 65 64 20 7b 20 63 6f 6c 6f 72 3a 20 23 46 33 37 43 37 42 3b 7d 0a 2e 74 65 78 74 2d 67 72 65 65 6e 20 7b 20 63 6f 6c 6f 72 3a 20 23 36 30 43 42 39 38 3b 7d 0a 2e 74 65 78 74 2d 62 6c 75 65 20 7b 20 63 6f 6c 6f 72 3a 20 23 34 30 37 33 62 35 3b 7d 0a 0a 2f 2a 2d Data Ascii: /.normal-text { color: var(--slate-600); }.medium-text { color: #7A7A7A; }.light-text { color: var(--slate-400); }.xlight-text { color: var(--slate-400); }.text-red { color: #F37C7B;}.text-green { color: #60CB98;}.text-blue { color: #4073b5;}/-
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 6a 75 73 74 69 66 79 2d 72 69 67 68 74 20 7b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 65 6e 64 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 2d 6d 6f 7a 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 6a 75 73 74 69 66 79 2d 61 72 6f 75 6e 64 20 7b 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 64 69 73 74 72 69 62 75 74 65 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 Data Ascii: tify-content: flex-start; }.ac_flex-justify-right { -webkit-box-pack: end;-ms-flex-pack: end;-webkit-justify-content: flex-end;-moz-justify-content: flex-end;justify-content: flex-end; }.ac_flex-justify-around { -ms-flex-pack: distribute;-webkit-justify
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 3b 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 31 36 2e 36 36 37 25 3b 20 66 6c 65 78 3a 20 30 20 30 20 31 36 2e 36 36 37 25 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 63 6f 6c 2e 61 63 5f 66 6c 65 78 33 20 7b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 6d 6f 7a 2d 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 20 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 63 6f 6c 2e 61 63 5f 66 6c 65 78 34 20 7b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 20 30 20 30 20 33 33 2e 33 Data Ascii: ; -ms-flex: 0 0 16.667%; flex: 0 0 16.667%; }.ac_flex-col.ac_flex3 { -webkit-box-flex: 0; -webkit-flex: 0 0 25%; -moz-box-flex: 0; -moz-flex: 0 0 25%; -ms-flex: 0 0 25%; flex: 0 0 25%; }.ac_flex-col.ac_flex4 { -webkit-box-flex: 0; -webkit-flex: 0 0 33.3
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 39 31 2e 36 36 37 25 3b 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 39 31 2e 36 36 37 25 3b 20 66 6c 65 78 3a 20 30 20 30 20 39 31 2e 36 36 37 25 3b 20 7d 0a 2e 61 63 5f 66 6c 65 78 2d 63 6f 6c 2e 61 63 5f 66 6c 65 78 31 32 20 7b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 20 30 20 30 20 31 30 30 25 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 20 2d 6d 6f 7a 2d 66 6c 65 78 3a 20 30 20 30 20 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 31 30 30 25 3b 20 66 6c 65 78 3a 20 30 20 30 20 31 30 30 25 3b 20 7d 0a 0a 2f 2a 20 43 6f 6c 75 6d 6e 20 6d 6f 64 69 66 69 65 72 73 20 2a 2f 0a 2e 61 63 5f 66 6c 65 78 2d 61 75 74 6f 68 65 69 67 68 74 20 7b 20 64 69 73 70 6c 61 79 3a 20 Data Ascii: 91.667%; -ms-flex: 0 0 91.667%; flex: 0 0 91.667%; }.ac_flex-col.ac_flex12 { -webkit-box-flex: 0; -webkit-flex: 0 0 100%; -moz-box-flex: 0; -moz-flex: 0 0 100%; -ms-flex: 0 0 100%; flex: 0 0 100%; }/* Column modifiers */.ac_flex-autoheight { display:
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 6f 20 7b 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 74 77 6f 68 61 6c 66 20 7b 20 77 69 64 74 68 3a 20 32 31 2e 37 34 34 34 34 34 34 34 34 34 34 25 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 74 68 72 65 65 20 7b 20 77 69 64 74 68 3a 20 32 35 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 74 68 72 65 65 68 61 6c 66 20 7b 20 77 69 64 74 68 3a 20 32 37 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 66 6f 75 72 20 7b 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 66 69 76 65 20 7b 20 77 69 64 74 68 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c 2e 73 69 78 20 7b 20 77 69 64 74 68 3a 20 34 38 2e 32 36 36 36 36 36 36 36 36 36 25 3b 20 7d 0a 2e 61 63 5f 63 6f 6c Data Ascii: o { width: 16.66666667%; }.ac_col.twohalf { width: 21.74444444444% }.ac_col.three { width: 25%; }.ac_col.threehalf { width: 27%; }.ac_col.four { width: 33.3333333%; }.ac_col.five { width: 41.66666667%; }.ac_col.six { width: 48.2666666666%; }.ac_col
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 36 65 6d 3b 20 7d 0a 2e 61 63 5f 66 73 2d 73 68 6d 65 64 69 75 6d 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 65 6d 3b 20 7d 0a 2e 61 63 5f 66 73 2d 6c 61 72 67 65 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 65 6d 3b 20 7d 0a 2e 61 63 5f 66 73 2d 78 6c 61 72 67 65 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 39 65 6d 3b 20 7d 0a 2e 61 63 5f 66 73 2d 78 78 6c 61 72 67 65 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 Data Ascii: 6em; }.ac_fs-shmedium { font-size: 14px !important;line-height: 1.6em; }.ac_fs-large { font-size: 16px !important;line-height: 1.6em; }.ac_fs-xlarge { font-size: 17px !important;line-height: 1.9em; }.ac_fs-xxlarge { font-size: 20px !important;line-hei
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 5c 0a 20 20 20 54 61 67 73 0a 5c 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 75 6c 2e 74 61 67 69 74 20 7b 20 70 61 64 64 69 6e 67 3a 20 30 3b 6d 61 72 67 69 6e 3a 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 20 7d 0a 75 6c 2e 74 61 67 69 74 20 2e 74 61 67 69 74 2d 63 68 6f 69 63 65 20 7b 20 Data Ascii: /-------------------------------------------------------------------------\ Tags\------------------------------------------------------------------------/ul.tagit { padding: 0;margin: 0;background: none;border: none; }ul.tagit .tagit-choice {
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 20 35 70 78 20 31 34 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 2e 61 63 5f 62 61 64 67 65 2e 68 6f 76 65 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 61 63 5f 62 61 64 67 65 2e 62 6c 75 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 31 45 39 46 34 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 30 37 33 42 35 3b 0a 7d 0a 2e 61 63 5f 62 61 64 67 65 2e 62 6f 72 64 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 76 61 72 28 2d 2d 73 6c 61 74 65 2d 32 30 30 29 20 31 70 78 20 73 6f 6c 69 64 3b 0a 7d 0a 2e 61 63 5f 62 61 64 67 65 2e 68 6f 76 65 72 3a 68 6f 76 65 72 20 7b 0a 20 20 62 Data Ascii: dding: 5px 14px; display: inline-block;}.ac_badge.hover { cursor: pointer;}.ac_badge.blue { background-color: #E1E9F4; color: #4073B5;}.ac_badge.border { background: none; border: var(--slate-200) 1px solid;}.ac_badge.hover:hover { b
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 35 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 63 6f 6c 6f 72 3a 23 35 35 35 3b 20 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7a 6f 6f 6d 3a 31 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 20 7d 0a 2e 62 74 6e 73 6d 61 6c 6c 20 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 38 66 38 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 20 62 6f 72 64 65 72 3a 31 Data Ascii: 5; border-radius:4px; display:inline-block; color:#555; cursor:pointer!important; zoom:1; -moz-box-sizing:border-box; -webkit-box-sizing:border-box; box-sizing:border-box; }.btnsmall {margin:0 0 10px; background-color:#f8f8f8;border-radius:3px; border:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.8	49893	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:50 UTC	1137	OUT	GET /admin/css/default.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:50 UTC	371	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:50 GMT Content-Type: text/css; charset=utf-8 Content-Length: 55497 Connection: close etag: "1262214838" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc1f97a4cd9-BOS
2025-01-14 15:20:50 UTC	998	IN	Data Raw: 0a 0a 2f 2a 20 50 41 47 45 20 44 45 46 41 55 4c 54 53 20 2a 2f 0a 2f 2a 20 53 65 74 74 69 6e 67 20 74 68 65 20 6d 61 69 6e 20 62 6f 64 79 2c 20 66 6f 6e 74 2c 20 63 6f 6c 6f 72 2c 20 61 6e 64 20 6c 69 6e 6b 20 64 65 66 61 75 6c 74 73 20 2a 2f 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 20 44 4f 20 4e 4f 54 20 45 44 49 54 20 54 48 49 53 20 46 49 4c 45 2e 20 20 55 53 45 20 4d 41 49 4e 20 43 53 53 20 46 49 4c 45 20 54 4f 20 4f 56 45 52 52 49 44 45 20 2a 2f 0a 0a 2f 2a 20 44 4f 20 4e 4f 54 20 45 44 49 54 20 54 48 49 53 20 46 49 4c 45 2e 20 20 55 53 45 20 4d 41 49 4e 20 43 53 53 20 46 49 4c 45 20 54 4f 20 4f 56 45 52 52 49 44 45 20 2a 2f 0a 0a 2f 2a 20 44 4f 20 4e 4f 54 20 45 44 49 54 20 54 48 49 53 20 46 49 4c 45 2e 20 20 55 53 45 20 4d 41 49 4e 20 43 53 53 Data Ascii: /* PAGE DEFAULTS // Setting the main body, font, color, and link defaults // DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE // DO NOT EDIT THIS FILE. USE MAIN CSS FILE TO OVERRIDE // DO NOT EDIT THIS FILE. USE MAIN CSS
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 0a 0a 09 6d 61 72 67 69 6e 3a 31 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 0a 7d 0a 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 35 70 78 3b 20 77 69 64 74 68 3a 33 30 30 70 78 3b 20 7d 0a 09 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 69 6d 67 20 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 20 7d 0a 09 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 61 2c 20 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 5f 63 6f 6e 74 61 69 6e 65 72 20 61 3a 76 69 73 69 74 65 64 7b 20 63 6f 6c 6f 72 3a 23 39 39 39 39 39 39 3b 20 7d 0a 09 2e 61 63 5f 6c 6f 67 69 6e 5f 62 6f 78 Data Ascii: ing-bottom:20px;margin:1px;margin-bottom:0;}.ac_login_box_container{ padding-top:75px; width:300px; }.ac_login_box_container img { margin-bottom:8px; }.ac_login_box_container a, .ac_login_box_container a:visited{ color:#999999; }.ac_login_box
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 6c 65 66 74 3a 36 70 78 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 36 70 78 20 36 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 36 70 78 20 36 70 78 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 32 30 36 2c 20 32 30 36 2c 20 32 30 36 2c 20 30 2e 36 29 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 32 30 36 2c 20 32 30 36 2c 20 32 30 36 2c 20 30 2e 36 29 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 32 30 36 2c 20 32 30 36 2c 20 32 30 36 2c 20 30 2e 36 29 7d 0a 0a 2f 2a 20 43 6f 72 65 20 Data Ascii: border-radius-bottomleft:6px; -webkit-border-radius:0 0 6px 6px; border-radius:0 0 6px 6px; -webkit-box-shadow:0 1px 1px rgba(206, 206, 206, 0.6); -moz-box-shadow:0 1px 1px rgba(206, 206, 206, 0.6); box-shadow:0 1px 1px rgba(206, 206, 206, 0.6)}/* Core
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 61 63 5f 61 64 6d 69 6e 5f 73 69 64 65 20 68 32 7b 20 63 6f 6c 6f 72 3a 20 23 37 44 38 46 41 32 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 20 7d 0a 09 09 23 61 63 5f 61 64 6d 69 6e 5f 73 69 64 65 20 68 31 20 61 2c 20 23 61 63 5f 61 64 6d 69 6e 5f 73 69 64 65 20 68 31 20 61 3a 76 69 73 69 74 65 64 7b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 63 6f 6c 6f 72 Data Ascii: ac_admin_side h2{ color: #7D8FA2; font-size:11px; font-weight:normal; display:block; margin-bottom:5px; padding-bottom:3px; }#ac_admin_side h1 a, #ac_admin_side h1 a:visited{ border:none; display:inline; margin:0; padding:0; text-decoration:none; color
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 20 2e 73 74 61 72 74 75 70 5f 63 6f 6e 74 61 69 6e 65 72 7b 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 45 45 46 33 46 39 20 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 20 7d 0a 09 09 23 61 63 5f 61 64 6d 69 6e 5f 63 6f 6e 74 65 6e 74 20 2e 73 74 61 72 74 75 70 5f 63 6f 6e 74 61 69 6e 65 72 20 68 33 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 63 5f 67 6c 6f 62 61 6c 2f 6d 65 64 69 61 2f 61 63 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 2e 67 69 66 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 44 45 45 37 45 46 3b 20 70 61 64 Data Ascii: .startup_container{ border: 2px solid #EEF3F9 ; margin-bottom:15px; }#ac_admin_content .startup_container h3{ background:url(../../ac_global/media/ac_table_header.gif); background-position:top; background-repeat:repeat-x; background-color:#DEE7EF; pad
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 63 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 2e 67 69 66 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 44 45 45 37 45 46 3b 20 70 61 64 64 69 6e 67 3a 35 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 20 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 45 45 37 45 46 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 30 44 42 45 35 3b 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 45 45 37 45 46 3b 20 7d 0a 09 2e 61 63 5f 74 61 62 6c 65 5f 68 65 61 64 65 72 20 74 64 20 61 2c 20 2e 61 63 5f 74 61 Data Ascii: c_table_header.gif); background-position:top; background-repeat:repeat-x; background-color:#DEE7EF; padding:5px; color: #666666; border-top:1px solid #DEE7EF; border-bottom:1px solid #D0DBE5; border-left:1px solid #DEE7EF; }.ac_table_header td a, .ac_ta
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 61 72 5f 6e 6f 6e 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 63 5f 67 6c 6f 62 61 6c 2f 6d 65 64 69 61 2f 61 63 5f 73 74 61 72 5f 6e 6f 6e 65 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 7d 0a 61 2e 61 63 5f 73 74 61 72 5f 68 61 6c 66 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 63 5f 67 6c 6f 62 61 6c 2f 6d 65 64 69 61 2f 61 63 5f 73 74 61 72 5f 68 61 6c 66 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 7d 0a 61 2e 61 63 5f 73 74 61 Data Ascii: ar_none { background: url(../../ac_global/media/ac_star_none.gif) no-repeat center; padding:0; border:none; margin:0; }a.ac_star_half { background: url(../../ac_global/media/ac_star_half.gif) no-repeat center; padding:0; border:none; margin:0; }a.ac_sta
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 3a 33 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 61 63 5f 67 6c 6f 62 61 6c 2f 6d 65 64 69 61 2f 64 72 6f 70 64 6f 77 6e 5f 64 6f 77 6e 5f 61 72 72 6f 77 2e 67 69 66 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 72 69 67 68 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 0a 0a 7d 0a 0a 2e 66 69 65 6c 64 5f 64 72 6f 70 64 6f 77 6e 5f 76 61 6c 75 65 7b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 39 39 39 3b 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 36 36 36 36 36 36 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 36 36 36 36 36 36 3b 0a 09 Data Ascii: :3px;background:url(../../ac_global/media/dropdown_down_arrow.gif);background-position:right;background-repeat:no-repeat;}.field_dropdown_value{border-left:1px solid #999999;border-right:1px solid #666666;border-bottom:1px solid #666666;
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 74 6f 70 5f 6e 61 76 5f 62 75 74 74 6f 6e 2c 0a 2e 62 6f 74 74 6f 6d 5f 6e 61 76 5f 62 75 74 74 6f 6e 20 7b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 62 6c 61 63 6b 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 0a 0a 0a 0a 2e 61 63 5f 69 63 6f 6e 5f 73 65 6c 65 63 74 20 7b 20 77 69 64 74 68 3a 20 34 31 30 70 78 3b 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 20 70 61 64 64 69 6e 67 3a 20 32 70 78 3b 20 62 6f Data Ascii: 0px;margin-right: 0;}.top_nav_button,.bottom_nav_button {border: 1px solid black;border-top: 1px solid white;border-left: 1px solid white;font-weight: bold;}.ac_icon_select { width: 410px; height: 60px; overflow: auto; padding: 2px; bo
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 53 68 61 64 6f 77 28 63 6f 6c 6f 72 3d 67 72 61 79 2c 64 69 72 65 63 74 69 6f 6e 3d 31 33 35 29 3b 0a 7d 0a 0a 23 64 68 74 6d 6c 70 6f 69 6e 74 65 72 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 6c 65 66 74 3a 20 2d 33 30 30 70 78 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 31 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 0a 0a 2e 61 63 5f 70 61 67 69 6e 61 74 6f 72 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 43 43 43 43 43 43 3b 0a 09 63 6f 6c 6f 72 3a 23 36 36 36 36 36 36 3b 0a 7d 0a 0a 2e Data Ascii: id:DXImageTransform.Microsoft.Shadow(color=gray,direction=135);}#dhtmlpointer{position:absolute;left: -300px;z-index: 101;visibility: hidden;}.ac_paginator {font-size:10px;margin-top:5px;border:1px solid #CCCCCC;color:#666666;}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.8	49895	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:50 UTC	943	OUT	GET /node_modules/@activecampaign/camp-core-css/dist/build.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:50 UTC	450	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:50 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1856241 Connection: close etag: "345110756" last-modified: Mon, 13 Jan 2025 21:19:38 GMT CF-Cache-Status: MISS Expires: Tue, 14 Jan 2025 19:20:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc4388c432c-EWR
2025-01-14 15:20:50 UTC	919	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 62 2d 30 3a 30 3b 2d 2d 62 2d 31 30 30 3a 31 70 78 3b 2d 2d 62 2d 32 30 30 3a 32 70 78 3b 2d 2d 62 2d 33 30 30 3a 34 70 78 3b 2d 2d 62 2d 6e 6f 6e 65 3a 6e 6f 6e 65 3b 2d 2d 62 2d 64 61 73 68 65 64 3a 64 61 73 68 65 64 3b 2d 2d 62 2d 73 6f 6c 69 64 3a 73 6f 6c 69 64 3b 2d 2d 72 61 64 69 69 2d 30 3a 30 3b 2d 2d 72 61 64 69 69 2d 31 30 30 3a 34 70 78 3b 2d 2d 72 61 64 69 69 2d 32 30 30 3a 38 70 78 3b 2d 2d 72 61 64 69 69 2d 72 6f 75 6e 64 65 64 3a 39 39 72 65 6d 3b 2d 2d 72 61 64 69 69 2d 63 69 72 63 6c 65 3a 31 30 30 25 3b 2d 2d 73 68 61 64 6f 77 2d 35 30 3a 30 20 31 70 78 20 34 70 78 20 72 67 62 61 28 33 31 2c 33 33 2c 34 31 2c 30 2e 33 29 3b 2d 2d 73 68 61 64 6f 77 2d 31 30 30 3a 30 20 34 70 78 20 38 70 78 20 2d 32 70 78 20 72 67 Data Ascii: :root{--b-0:0;--b-100:1px;--b-200:2px;--b-300:4px;--b-none:none;--b-dashed:dashed;--b-solid:solid;--radii-0:0;--radii-100:4px;--radii-200:8px;--radii-rounded:99rem;--radii-circle:100%;--shadow-50:0 1px 4px rgba(31,33,41,0.3);--shadow-100:0 4px 8px -2px rg
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 30 3a 23 31 39 63 63 61 33 3b 2d 2d 6d 69 6e 74 2d 36 30 30 3a 23 31 31 38 36 36 66 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 61 6e 64 72 6f 69 64 3a 23 33 64 64 63 38 34 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 61 70 70 6c 65 3a 23 31 66 32 31 32 39 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 66 61 63 65 62 6f 6f 6b 3a 23 31 38 37 37 66 32 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 69 6e 73 74 61 67 72 61 6d 3a 23 31 66 32 31 32 39 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 6c 69 6e 6b 65 64 2d 69 6e 3a 23 32 38 36 37 62 32 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 74 77 69 74 74 65 72 3a 23 31 64 61 31 66 32 3b 2d 2d 6e 65 74 77 6f 72 6b 2d 79 6f 75 2d 74 75 62 65 3a 72 65 64 3b 2d 2d 6f 63 65 61 6e 2d 31 30 30 3a 23 66 34 66 37 66 66 3b 2d 2d 6f 63 65 61 6e 2d 31 35 30 3a 23 65 61 66 30 66 66 3b 2d 2d 6f 63 Data Ascii: 0:#19cca3;--mint-600:#11866f;--network-android:#3ddc84;--network-apple:#1f2129;--network-facebook:#1877f2;--network-instagram:#1f2129;--network-linked-in:#2867b2;--network-twitter:#1da1f2;--network-you-tube:red;--ocean-100:#f4f7ff;--ocean-150:#eaf0ff;--oc
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 69 6e 73 22 2c 22 41 76 65 6e 69 72 22 2c 22 41 76 65 6e 69 72 20 4e 65 78 74 22 2c 22 46 75 74 75 72 61 22 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 66 66 2d 73 74 61 6e 64 61 72 64 3a 22 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 22 2c 22 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 22 2c 22 49 54 43 20 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 22 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 66 66 2d 6d 6f 6e 6f 73 70 61 63 65 3a 22 49 42 4d 20 50 6c 65 78 20 4d 6f 6e 6f 22 2c 6d 6f 6e 6f 73 70 61 63 65 3b 2d 2d 66 73 2d 31 30 30 3a 31 32 70 78 3b 2d 2d 66 73 2d 32 30 30 3a 31 34 70 78 3b 2d 2d 66 73 2d 33 30 30 3a 31 36 70 78 3b 2d 2d 66 73 2d 34 30 30 3a 31 38 Data Ascii: ins","Avenir","Avenir Next","Futura",helvetica,arial,sans-serif;--ff-standard:"IBM Plex Sans","Franklin Gothic","ITC Franklin Gothic",helvetica,arial,sans-serif;--ff-monospace:"IBM Plex Mono",monospace;--fs-100:12px;--fs-200:14px;--fs-300:16px;--fs-400:18
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 63 6c 69 70 3a 61 75 74 6f 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 2e 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 2d 6e 6f 6e 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 2d 61 75 74 6f 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 69 6e 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 73 74 61 74 69 63 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 7d 2e 66 69 Data Ascii: ;width:auto;height:auto;padding:0;margin:0;overflow:visible;clip:auto;white-space:normal}.pointer-events-none{pointer-events:none}.pointer-events-auto{pointer-events:auto}.visible{visibility:visible}.invisible{visibility:hidden}.static{position:static}.fi
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 72 28 2d 2d 73 70 2d 39 30 30 2c 33 32 70 78 29 3b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 39 30 30 2c 33 32 70 78 29 7d 2e 69 6e 73 65 74 2d 31 30 30 30 7b 74 6f 70 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 30 2c 34 38 70 78 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 30 2c 34 38 70 78 29 3b 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 30 2c 34 38 70 78 29 3b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 30 2c 34 38 70 78 29 7d 2e 69 6e 73 65 74 2d 31 31 30 30 7b 74 6f 70 3a 76 61 72 28 2d 2d 73 70 2d 31 31 30 30 2c 36 34 70 78 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 31 31 30 30 2c 36 34 70 78 29 3b 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 73 70 2d 31 31 30 30 2c 36 34 70 78 29 3b 6c 65 66 74 3a 76 61 72 28 2d 2d Data Ascii: r(--sp-900,32px);left:var(--sp-900,32px)}.inset-1000{top:var(--sp-1000,48px);right:var(--sp-1000,48px);bottom:var(--sp-1000,48px);left:var(--sp-1000,48px)}.inset-1100{top:var(--sp-1100,64px);right:var(--sp-1100,64px);bottom:var(--sp-1100,64px);left:var(--
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 31 29 3b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 33 30 30 2c 20 38 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 34 30 30 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 3b 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 3b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 35 30 30 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 35 30 30 2c 20 31 36 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 35 30 30 2c Data Ascii: 1);left:calc(var(--sp-300, 8px)-1)}.-inset-400{top:calc(var(--sp-400, 12px)-1);right:calc(var(--sp-400, 12px)-1);bottom:calc(var(--sp-400, 12px)-1);left:calc(var(--sp-400, 12px)-1)}.-inset-500{top:calc(var(--sp-500, 16px)-1);right:calc(var(--sp-500,
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 32 30 30 2c 20 38 30 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 31 33 30 30 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 33 30 30 2c 20 31 32 38 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 33 30 30 2c 20 31 32 38 70 78 29 2a 2d 31 29 3b 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 33 30 30 2c 20 31 32 38 70 78 29 2a 2d 31 29 3b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 33 30 30 2c 20 31 32 38 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 31 34 30 30 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 31 34 30 30 2c 20 32 30 30 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d Data Ascii: t:calc(var(--sp-1200, 80px)-1)}.-inset-1300{top:calc(var(--sp-1300, 128px)-1);right:calc(var(--sp-1300, 128px)-1);bottom:calc(var(--sp-1300, 128px)-1);left:calc(var(--sp-1300, 128px)-1)}.-inset-1400{top:calc(var(--sp-1400, 200px)-1);right:calc(var(-
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 6c 7b 74 6f 70 3a 2d 31 30 30 25 3b 72 69 67 68 74 3a 2d 31 30 30 25 3b 62 6f 74 74 6f 6d 3a 2d 31 30 30 25 3b 6c 65 66 74 3a 2d 31 30 30 25 7d 2e 69 6e 73 65 74 2d 78 2d 30 7b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 30 2c 30 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 30 2c 30 29 7d 2e 69 6e 73 65 74 2d 78 2d 31 30 30 7b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 2c 32 70 78 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 31 30 30 2c 32 70 78 29 7d 2e 69 6e 73 65 74 2d 78 2d 32 30 30 7b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 32 30 30 2c 34 70 78 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 2d 32 30 30 2c 34 70 78 29 7d 2e 69 6e 73 65 74 2d 78 2d 33 30 30 7b 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 2d 33 30 30 2c 38 70 78 29 3b 72 Data Ascii: l{top:-100%;right:-100%;bottom:-100%;left:-100%}.inset-x-0{left:var(--sp-0,0);right:var(--sp-0,0)}.inset-x-100{left:var(--sp-100,2px);right:var(--sp-100,2px)}.inset-x-200{left:var(--sp-200,4px);right:var(--sp-200,4px)}.inset-x-300{left:var(--sp-300,8px);r
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 73 70 2d 33 30 30 2c 20 38 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 33 30 30 2c 20 38 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 78 2d 34 30 30 7b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 34 30 30 2c 20 31 32 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 78 2d 35 30 30 7b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 35 30 30 2c 20 31 36 70 78 29 2a 2d 31 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 2d 35 30 30 2c 20 31 36 70 78 29 2a 2d 31 29 7d 2e 2d 69 6e 73 65 74 2d 78 2d 36 30 30 7b 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 70 Data Ascii: var(--sp-300, 8px)-1);right:calc(var(--sp-300, 8px)-1)}.-inset-x-400{left:calc(var(--sp-400, 12px)-1);right:calc(var(--sp-400, 12px)-1)}.-inset-x-500{left:calc(var(--sp-500, 16px)-1);right:calc(var(--sp-500, 16px)-1)}.-inset-x-600{left:calc(var(--sp
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 30 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 31 5c 2f 32 7b 6c 65 66 74 3a 2d 35 30 25 3b 72 69 67 68 74 3a 2d 35 30 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 31 5c 2f 33 7b 6c 65 66 74 3a 2d 33 33 2e 33 33 33 33 33 33 25 3b 72 69 67 68 74 3a 2d 33 33 2e 33 33 33 33 33 33 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 32 5c 2f 33 7b 6c 65 66 74 3a 2d 36 36 2e 36 36 36 36 36 37 25 3b 72 69 67 68 74 3a 2d 36 36 2e 36 36 36 36 36 37 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 31 5c 2f 34 7b 6c 65 66 74 3a 2d 32 35 25 3b 72 69 67 68 74 3a 2d 32 35 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 32 5c 2f 34 7b 6c 65 66 74 3a 2d 35 30 25 3b 72 69 67 68 74 3a 2d 35 30 25 7d 2e 2d 69 6e 73 65 74 2d 78 2d 33 5c 2f 34 7b 6c 65 66 74 3a 2d 37 35 25 3b 72 69 67 68 74 3a 2d 37 35 25 7d 2e 2d 69 6e 73 65 74 2d Data Ascii: 0%}.-inset-x-1\/2{left:-50%;right:-50%}.-inset-x-1\/3{left:-33.333333%;right:-33.333333%}.-inset-x-2\/3{left:-66.666667%;right:-66.666667%}.-inset-x-1\/4{left:-25%;right:-25%}.-inset-x-2\/4{left:-50%;right:-50%}.-inset-x-3\/4{left:-75%;right:-75%}.-inset-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.8	49894	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:50 UTC	1142	OUT	GET /admin/css/css_camp.min.css?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:50 UTC	372	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:50 GMT Content-Type: text/css; charset=utf-8 Content-Length: 120803 Connection: close etag: "2730981040" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc43d791839-EWR
2025-01-14 15:20:50 UTC	997	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 70 72 65 7b 66 6f 6e 74 2d 66 61 6d Data Ascii: /! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%;line-height:1.15}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-fam
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 2e 30 36 32 35 72 65 6d 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 Data Ascii: ype=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:.0625rem dotted ButtonText}fieldset{padding:.35em .75em
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 42 4d 20 50 6c 65 78 20 53 61 6e 73 2c 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 2c 49 54 43 20 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 30 7d 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 32 32 44 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 3a 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 32 32 44 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 67 2d 63 65 6e 74 65 72 7b Data Ascii: BM Plex Sans,Franklin Gothic,ITC Franklin Gothic,helvetica,arial,sans-serif;font-size:1.125rem;line-height:1.75rem;margin:0}::-moz-selection{background-color:#0022D2;color:#fff}::selection{background-color:#0022D2;color:#fff}img{max-width:100%}.bg-center{
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 6c 2d 2d 62 67 2d 74 6f 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 7d 2e 6c 2d 2d 62 67 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 7d 2e 6c 2d 2d 62 67 2d 62 6f 74 74 6f 6d 2c 2e 6c 2d 2d 62 67 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 6c 2d 2d 62 67 2d 62 6f 74 74 6f 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 7d 2e 6c 2d 2d 62 67 2d 6c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 7d 40 6d 65 64 69 61 20 73 Data Ascii: peat:no-repeat}.l--bg-top{background-position:top}.l--bg-right{background-position:100%}.l--bg-bottom,.l--bg-right{background-repeat:no-repeat}.l--bg-bottom{background-position:bottom}.l--bg-left{background-position:0;background-repeat:no-repeat}}@media s
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 2d 72 61 64 69 75 73 3a 30 7d 2e 62 72 2d 31 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 74 6f 70 2d 31 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 72 69 67 68 74 2d 31 2c 2e 62 72 2d 74 6f 70 2d 31 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 62 6f 74 74 6f 6d 2d 31 2c 2e 62 72 2d 72 69 67 68 74 2d 31 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 62 6f 74 74 6f 6d 2d 31 2c 2e 62 72 2d 6c 65 66 74 2d 31 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 62 72 2d 6c 65 66 74 2d Data Ascii: -radius:0}.br-1{border-radius:.25rem}.br-top-1{border-top-left-radius:.25rem}.br-right-1,.br-top-1{border-top-right-radius:.25rem}.br-bottom-1,.br-right-1{border-bottom-right-radius:.25rem}.br-bottom-1,.br-left-1{border-bottom-left-radius:.25rem}.br-left-
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 68 74 2d 72 61 64 69 75 73 3a 36 32 34 39 39 39 39 39 2e 39 33 37 35 72 65 6d 7d 2e 62 72 2d 62 6f 74 74 6f 6d 2d 70 69 6c 6c 2c 2e 62 72 2d 6c 65 66 74 2d 70 69 6c 6c 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 32 34 39 39 39 39 39 2e 39 33 37 35 72 65 6d 7d 2e 62 72 2d 6c 65 66 74 2d 70 69 6c 6c 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 32 34 39 39 39 39 39 2e 39 33 37 35 72 65 6d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 30 72 65 6d 29 7b 2e 73 2d 2d 62 72 2d 30 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 73 2d 2d 62 72 2d 31 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 73 2d 2d 62 72 2d 32 7b 62 Data Ascii: ht-radius:62499999.9375rem}.br-bottom-pill,.br-left-pill{border-bottom-left-radius:62499999.9375rem}.br-left-pill{border-top-left-radius:62499999.9375rem}@media screen and (min-width:30rem){.s--br-0{border-radius:0}.s--br-1{border-radius:.25rem}.s--br-2{b
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 73 2d 2d 62 62 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 73 2d 2d 62 6c 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 35 72 65 6d 29 7b 2e 6d 2d 2d 62 73 2d 6e 6f 6e 65 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6d 2d 2d 62 73 2d 73 6f 6c 69 64 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 6d 2d 2d 62 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 6d 2d 2d 62 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 6d 2d 2d 62 62 7b Data Ascii: rder-right-style:solid}.s--bb{border-bottom-style:solid}.s--bl{border-left-style:solid}}@media screen and (min-width:45rem){.m--bs-none{border-style:none}.m--bs-solid{border-style:solid}.m--bt{border-top-style:solid}.m--br{border-right-style:solid}.m--bb{
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 2e 6a 73 2d 65 6e 64 7b 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 65 6e 64 7d 2e 6a 73 2d 63 65 6e 74 65 72 7b 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 6a 73 2d 73 74 72 65 74 63 68 7b 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 73 74 72 65 74 63 68 7d 2e 6a 63 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 74 61 72 74 7d 2e 6a 63 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 65 6e 64 7d 2e 6a 63 2d 66 6c 65 78 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d Data Ascii: .js-end{justify-self:end}.js-center{justify-self:center}.js-stretch{justify-self:stretch}.jc-start{-ms-flex-pack:start;-webkit-box-pack:start;justify-content:start}.jc-end{-ms-flex-pack:end;-webkit-box-pack:end;justify-content:end}.jc-flex-start{-ms-flex-
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 61 72 74 7d 2e 61 69 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 65 6e 64 7d 2e 61 69 2d 66 6c 65 78 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 61 69 2d 66 6c 65 78 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 61 6c 69 67 6e 2d Data Ascii: tart;-webkit-box-align:start;align-items:start}.ai-end{-ms-flex-align:end;-webkit-box-align:end;align-items:end}.ai-flex-start{-ms-flex-align:start;-webkit-box-align:start;align-items:flex-start}.ai-flex-end{-ms-flex-align:end;-webkit-box-align:end;align-
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 61 63 6b 3a 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 65 6e 64 7d 2e 73 2d 2d 6a 63 2d 66 6c 65 78 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 73 2d 2d 6a 63 2d 66 6c 65 78 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 73 2d 2d 6a 63 2d 63 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b Data Ascii: ack:end;justify-content:end}.s--jc-flex-start{-ms-flex-pack:start;-webkit-box-pack:start;justify-content:flex-start}.s--jc-flex-end{-ms-flex-pack:end;-webkit-box-pack:end;justify-content:flex-end}.s--jc-center{-ms-flex-pack:center;-webkit-box-pack:center;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.8	49897	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:50 UTC	1117	OUT	GET /admin/jsc/ac.js?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:50 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:50 GMT Content-Type: application/javascript Content-Length: 54805 Connection: close etag: "2958274410" last-modified: Mon, 13 Jan 2025 21:19:56 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc43bf38fbb-BOS
2025-01-14 15:20:50 UTC	999	IN	Data Raw: 76 61 72 20 61 63 3d 7b 72 61 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 63 2e 73 74 72 2e 63 61 73 74 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 2c 72 61 6e 64 48 65 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 63 2e 72 61 6e 64 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 73 70 72 69 6e 74 66 28 22 25 78 22 2c 61 5b 31 5d 29 7d 2c 68 69 64 64 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 6e 6f 6e 65 22 3d 3d 24 4a 28 61 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 5b 63 5d 29 72 65 74 75 72 6e 21 31 Data Ascii: var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 64 3d 24 4a 28 74 68 69 73 29 3b 0a 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 64 2e 62 6c 75 72 28 29 3b 63 28 64 29 7d 7d 29 3b 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 65 61 63 68 28 24 4a 28 22 2e 63 6c 69 63 6b 2d 74 6f 2d 65 64 69 74 2e 22 2b 65 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 24 4a 28 61 29 3b 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6c 69 63 6b 2d 74 6f 2d 65 64 69 74 20 22 2b 65 29 3b 63 28 61 29 7d 29 7d 29 7d 2c 64 65 63 6f 64 65 42 61 73 65 36 34 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 61 74 6f 62 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 61 74 6f 62 28 61 Data Ascii: d=$J(this);a.preventDefault();d.blur();c(d)}});$J(document).on("click",function(a){_.each($J(".click-to-edit."+e),function(a){a=$J(a);a.removeClass("click-to-edit "+e);c(a)})})},decodeBase64:function(a){return window.atob?decodeURIComponent(window.atob(a
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 28 61 2e 6f 6b 6c 61 62 65 6c 3d 73 74 72 4f 4b 29 3b 61 2e 6f 6b 63 6c 61 73 73 7c 7c 28 61 2e 6f 6b 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 29 3b 61 2e 63 6c 6f 73 65 6c 61 62 65 6c 7c 7c 28 61 2e 63 6c 6f 73 65 6c 61 62 65 6c 3d 61 2e 68 69 64 65 6f 6b 3f 73 74 72 43 6c 6f 73 65 3a 73 74 72 43 61 6e 63 65 6c 29 3b 61 2e 63 6c 61 73 73 65 73 7c 7c 28 61 2e 63 6c 61 73 73 65 73 3d 22 22 29 3b 61 2e 64 6f 6e 74 5f 62 6c 75 72 7c 7c 24 4a 28 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 2e 62 6c 75 72 28 29 3b 63 3d 63 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 0a 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 22 29 2e 72 65 6d 6f 76 65 28 29 3b 76 61 72 20 64 3d 22 22 2b 28 27 3c 64 69 76 20 69 64 3d 22 61 63 5f 61 75 74 6f 6d Data Ascii: (a.oklabel=strOK);a.okclass\|\|(a.okclass="green");a.closelabel\|\|(a.closelabel=a.hideok?strClose:strCancel);a.classes\|\|(a.classes="");a.dont_blur\|\|$J(document.activeElement).blur();c=c\|\|function(){};$J("#ac_automodal").remove();var d=""+('<div id="ac_autom
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 65 5d 2e 76 61 6c 75 65 3d 3d 66 2e 64 65 66 61 75 6c 74 3f 22 73 65 6c 65 63 74 65 64 22 3a 22 22 2c 66 2e 6f 70 74 69 6f 6e 73 5b 65 5d 2e 76 61 6c 75 65 2c 66 2e 6f 70 74 69 6f 6e 73 5b 65 5d 2e 6c 61 62 65 6c 29 3b 64 2b 3d 22 3c 2f 73 65 6c 65 63 74 3e 22 3b 64 2b 3d 22 3c 2f 66 69 65 6c 64 73 65 74 3e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 74 65 78 74 61 72 65 61 22 3a 66 2e 72 6f 77 73 3d 66 2e 72 6f 77 73 7c 7c 38 3b 66 2e 63 6f 6c 73 3d 66 2e 63 6f 6c 73 7c 7c 34 30 3b 64 2b 3d 73 70 72 69 6e 74 66 28 27 3c 66 69 65 6c 64 73 65 74 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 25 73 22 3e 27 2c 66 2e 63 6c 61 73 73 4e 61 6d 65 29 3b 64 2b 3d 73 70 72 69 6e 74 66 28 22 3c 6c 61 62 65 6c 3e 25 73 3c 2f 6c 61 62 65 6c 3e 22 2c 66 2e 6c 61 62 65 6c 3f Data Ascii: e].value==f.default?"selected":"",f.options[e].value,f.options[e].label);d+="</select>";d+="</fieldset>";break;case "textarea":f.rows=f.rows\|\|8;f.cols=f.cols\|\|40;d+=sprintf('<fieldset class="input %s">',f.className);d+=sprintf("<label>%s</label>",f.label?
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 7b 69 66 28 61 2e 6f 6b 29 7b 76 61 72 20 64 3d 0a 7b 7d 3b 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 69 6e 70 75 74 2c 20 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 74 65 78 74 61 72 65 61 2c 20 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 73 65 6c 65 63 74 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 64 5b 63 2e 6e 61 6d 65 5d 3d 63 2e 76 61 6c 75 65 7d 29 3b 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 64 69 76 2e 6f 70 74 69 6f 6e 2d 75 69 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 5b 5b 24 4a 28 74 68 69 73 29 2e 64 61 74 61 28 22 6e 61 6d 65 22 29 5d 5d 3d 24 4a 28 22 2e 73 65 6c 65 63 74 65 64 22 2c 74 68 69 73 29 Data Ascii: {if(a.ok){var d={};$J("#ac_automodal fieldset input, #ac_automodal fieldset textarea, #ac_automodal fieldset select").each(function(a,c){d[c.name]=c.value});$J("#ac_automodal div.option-ui").each(function(){d[[$J(this).data("name")]]=$J(".selected",this)
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 6c 6f 61 64 65 72 22 29 2e 6c 65 6e 67 74 68 26 26 24 4a 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 20 6c 6f 61 64 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 69 6e 67 5f 62 61 72 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 3a 20 30 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 61 6d 70 61 69 67 6e 2f 73 74 72 69 70 6f 2f 69 63 6f 6e 73 2f 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 2e 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 6f 76 65 72 6c 61 79 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e Data Ascii: loader").length&&$J("body").append('<div class="ac loader"><div class="loading_bar" style="display: flex;justify-content: center;border: 0;"><img src="/campaign/stripo/icons/loading-indicator.svg" width="32"></div><div class="loadoverlay" style="backgroun
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 63 3a 63 2c 64 61 74 61 3a 66 7d 29 7d 3b 61 63 2e 61 70 69 2e 63 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 26 26 63 2e 65 72 72 6f 72 3f 63 6f 6e 73 6f 6c 65 5f 6c 6f 67 28 63 2e 65 72 72 6f 72 29 3a 61 28 63 29 7d 7d 3b 61 63 2e 61 70 69 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 76 61 72 20 64 3d 21 31 2c 67 3d 21 31 3b 63 7c 7c 28 63 3d 7b 65 72 72 6f 72 3a 22 45 72 72 6f 72 3a 20 55 6e 72 65 63 6f 67 6e 69 7a 65 64 20 72 65 73 70 6f 6e 73 65 20 72 65 63 65 69 76 65 64 2e 22 7d 29 3b 21 63 2e 6d 65 73 73 61 67 65 26 26 63 2e 65 72 72 6f 72 26 26 28 63 2e 6d 65 73 73 61 67 65 3d 0a 63 2e 65 72 72 6f 72 2c 64 3d 21 30 29 3b 69 66 28 63 2e 6d 65 73 73 61 67 Data Ascii: c:c,data:f})};ac.api.callback=function(a){return function(c){c&&c.error?console_log(c.error):a(c)}};ac.api.error=function(c,e){var d=!1,g=!1;c\|\|(c={error:"Error: Unrecognized response received."});!c.message&&c.error&&(c.message=c.error,d=!0);if(c.messag
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 20 64 3b 31 3d 3d 63 2e 6c 65 6e 67 74 68 26 26 22 46 4f 52 4d 22 21 3d 63 5b 30 5d 2e 74 61 67 4e 61 6d 65 26 26 28 63 3d 61 28 22 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 22 29 2e 68 74 6d 6c 28 63 2e 68 74 6d 6c 28 29 29 29 3b 61 2e 65 61 63 68 28 63 2e 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 2e 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5c 5b 5d 24 2f 29 3f 28 66 5b 63 2e 6e 61 6d 65 5d 7c 7c 28 66 5b 63 2e 6e 61 6d 65 5d 3d 30 29 2c 64 5b 63 2e 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 5d 24 2f 2c 73 70 72 69 6e 74 66 28 22 5b 25 64 5d 22 2c 66 5b 63 2e 6e 61 6d 65 5d 29 29 5d 3d 63 2e 76 61 6c 75 65 2c 66 5b 63 2e 6e 61 6d 65 5d 2b 2b 29 3a 64 5b 63 2e 6e 61 6d 65 5d 3d 63 2e 76 61 6c 75 65 7d 29 Data Ascii: d;1==c.length&&"FORM"!=c[0].tagName&&(c=a("<form></form>").html(c.html()));a.each(c.serializeArray(),function(a,c){c.name.match(/\[]$/)?(f[c.name]\|\|(f[c.name]=0),d[c.name.replace(/\[]$/,sprintf("[%d]",f[c.name]))]=c.value,f[c.name]++):d[c.name]=c.value})
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 2c 31 3a 22 42 22 2c 32 3a 22 43 22 2c 33 3a 22 44 22 2c 34 3a 22 45 22 2c 35 3a 22 46 22 2c 36 3a 22 47 22 2c 37 3a 22 48 22 2c 38 3a 22 49 22 2c 39 3a 22 4a 22 2c 31 30 3a 22 4b 22 2c 31 31 3a 22 4c 22 2c 31 32 3a 22 4d 22 2c 31 33 3a 22 4e 22 2c 31 34 3a 22 4f 22 2c 31 35 3a 22 50 22 2c 31 36 3a 22 51 22 2c 31 37 3a 22 52 22 2c 31 38 3a 22 53 22 2c 31 39 3a 22 54 22 2c 32 30 3a 22 55 22 2c 32 31 3a 22 56 22 2c 32 32 3a 22 57 22 2c 32 33 3a 22 58 22 2c 32 34 3a 22 59 22 2c 32 35 3a 22 5a 22 2c 32 36 3a 22 61 22 2c 32 37 3a 22 62 22 2c 32 38 3a 22 63 22 2c 32 39 3a 22 64 22 2c 33 30 3a 22 65 22 2c 33 31 3a 22 66 22 2c 33 32 3a 22 67 22 2c 33 33 3a 22 68 22 2c 33 34 3a 22 69 22 2c 33 35 3a 22 6a 22 2c 33 36 3a 22 6b 22 2c 33 37 3a 22 6c 22 2c 33 38 3a 22 Data Ascii: ,1:"B",2:"C",3:"D",4:"E",5:"F",6:"G",7:"H",8:"I",9:"J",10:"K",11:"L",12:"M",13:"N",14:"O",15:"P",16:"Q",17:"R",18:"S",19:"T",20:"U",21:"V",22:"W",23:"X",24:"Y",25:"Z",26:"a",27:"b",28:"c",29:"d",30:"e",31:"f",32:"g",33:"h",34:"i",35:"j",36:"k",37:"l",38:"
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 28 66 2b 32 29 2c 32 29 29 3b 69 66 28 22 5f 22 3d 3d 64 2e 63 68 61 72 41 74 28 66 2b 33 29 29 62 72 65 61 6b 3b 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 28 64 2e 63 68 61 72 41 74 28 66 2b 0a 32 29 2c 36 29 7c 63 28 64 2e 63 68 61 72 41 74 28 66 2b 33 29 2c 30 29 29 7d 72 65 74 75 72 6e 20 65 7d 7d 29 28 29 3b 61 63 2e 62 72 6f 77 73 65 72 3d 7b 7d 3b 0a 76 61 72 20 42 72 6f 77 73 65 72 44 65 74 65 63 74 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 62 72 6f 77 73 65 72 3d 74 68 69 73 2e 73 65 61 72 63 68 53 74 72 69 6e 67 28 74 68 69 73 2e 64 61 74 61 42 72 6f 77 73 65 72 29 7c 7c 22 41 6e 20 75 6e 6b 6e 6f 77 6e 20 62 72 6f 77 73 65 72 22 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 73 Data Ascii: (f+2),2));if("_"==d.charAt(f+3))break;e+=String.fromCharCode(a(d.charAt(f+2),6)\|c(d.charAt(f+3),0))}return e}})();ac.browser={};var BrowserDetect={init:function(){this.browser=this.searchString(this.dataBrowser)\|\|"An unknown browser";this.version=this.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.8	49896	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:50 UTC	1123	OUT	GET /admin/js/functions.js?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:50 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:50 GMT Content-Type: application/javascript Content-Length: 47585 Connection: close etag: "1483297891" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc43ab841b4-EWR
2025-01-14 15:20:50 UTC	999	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 6f 6c 65 5f 6c 6f 67 28 29 20 7b 0a 09 2f 2f 20 61 74 74 65 6d 70 74 20 74 6f 20 73 65 6e 64 20 61 20 6d 65 73 73 61 67 65 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 0a 09 74 72 79 20 7b 0a 09 09 66 6f 72 28 76 61 72 20 69 20 3d 30 3b 20 69 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 0a 09 09 7d 0a 09 7d 20 63 61 74 63 68 28 65 29 20 7b 7d 20 2f 2f 20 66 61 69 6c 20 67 72 61 63 65 66 75 6c 6c 79 20 69 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 0a 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 62 72 61 6e 64 69 6e 67 5f 64 65 6c 65 74 65 28 70 6c 61 6e 2c 20 72 73 69 64 Data Ascii: function console_log() {// attempt to send a message to the consoletry {for(var i =0; i < arguments.length; i++) {console.log(arguments[i]);}} catch(e) {} // fail gracefully if it does not exist}function form_branding_delete(plan, rsid
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 2d 31 3b 0a 09 7d 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 5f 61 72 65 61 73 28 6e 6f 64 65 29 20 7b 0a 09 24 4a 28 27 74 65 78 74 61 72 65 61 27 2c 20 6e 6f 64 65 29 2e 68 74 6d 6c 28 27 27 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 5f 65 6c 65 6d 65 6e 74 28 6e 6f 64 65 29 20 7b 0a 09 76 61 72 20 6d 65 20 3d 20 24 4a 28 6e 6f 64 65 29 3b 0a 09 76 61 72 20 64 61 64 20 3d 20 6d 65 2e 70 61 72 65 6e 74 28 29 3b 0a 09 69 66 20 28 20 24 4a 28 22 3e 20 64 69 76 22 2c 20 64 61 64 29 2e 6c 65 6e 67 74 68 20 3e 20 31 20 29 20 7b 0a 09 09 6d 65 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 63 6c 65 61 72 5f 69 6e 70 75 74 73 28 6e 6f 64 65 29 3b 0a 09 09 63 6c 65 61 72 5f 73 65 6c 65 63 74 73 28 6e 6f Data Ascii: -1;});}function clear_areas(node) {$J('textarea', node).html('');}function remove_element(node) {var me = $J(node);var dad = me.parent();if ( $J("> div", dad).length > 1 ) {me.remove();} else {clear_inputs(node);clear_selects(no
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 5d 29 3b 0a 0a 09 24 4a 28 27 23 27 20 2b 20 69 64 20 2b 20 27 45 64 69 74 6f 72 4c 69 6e 6b 44 65 66 61 75 6c 74 27 29 2e 74 6f 67 67 6c 65 28 29 3b 0a 09 61 63 5f 6a 73 5f 61 64 6d 69 6e 2e 68 74 6d 6c 65 64 69 74 6f 72 20 3d 20 28 20 69 73 45 64 69 74 6f 72 20 3f 20 31 20 3a 20 30 20 29 3b 0a 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f 70 75 73 68 28 6e 6f 64 65 73 2c 20 69 64 29 20 7b 0a 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0a 09 09 24 4a 28 27 23 27 20 2b 20 69 64 29 2e 61 70 70 65 6e 64 28 6e 6f 64 65 73 5b 69 5d 29 3b 0a 7d 0a 0a 0a 0a 66 75 Data Ascii: ]);$J('#' + id + 'EditorLinkDefault').toggle();ac_js_admin.htmleditor = ( isEditor ? 1 : 0 );return false;}function form_editor_personalization_push(nodes, id) {for (var i = 0; i < nodes.length; i++)$J('#' + id).append(nodes[i]);}fu
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 66 78 20 2b 20 27 66 6f 72 6d 61 74 46 69 65 6c 64 27 29 2e 76 61 6c 28 29 29 3b 0a 7d 0a 0a 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 65 78 70 6f 72 74 5f 6c 69 6e 6b 5f 62 75 69 6c 64 28 63 6f 6e 74 65 78 74 2c 20 61 72 79 29 20 7b 0a 09 76 61 72 20 6c 69 6e 6b 20 3d 20 27 65 78 70 6f 72 74 2e 70 68 70 3f 61 63 74 69 6f 6e 3d 27 20 2b 20 63 6f 6e 74 65 78 74 3b 0a 09 66 6f 72 20 28 20 76 61 72 20 69 20 69 6e 20 61 72 79 20 29 20 7b 0a 09 09 6c 69 6e 6b 20 2b 3d 20 27 26 27 20 2b 20 69 20 2b 20 27 3d 27 20 2b 20 61 72 79 5b 69 5d 3b 0a 09 7d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 28 6f 75 72 66 6c 61 67 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 70 72 6f 6d 70 74 28 27 47 6f 20 74 6f 20 74 68 69 73 20 65 78 70 6f 72 74 20 55 52 4c 3f 27 2c Data Ascii: fx + 'formatField').val());}function export_link_build(context, ary) {var link = 'export.php?action=' + context;for ( var i in ary ) {link += '&' + i + '=' + ary[i];}if ( typeof(ourflag) == 'undefined' \|\| prompt('Go to this export URL?',
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 6f 6e 74 65 78 74 0a 09 09 76 61 72 20 66 75 6e 63 20 3d 20 6e 75 6c 6c 3b 0a 09 09 74 72 79 20 7b 0a 09 09 09 76 61 72 20 66 75 6e 63 20 3d 20 65 76 61 6c 28 61 63 5f 61 63 74 69 6f 6e 20 2b 20 22 5f 6c 69 73 74 5f 73 65 61 72 63 68 22 29 3b 0a 09 09 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 09 09 09 2f 2f 20 64 6f 20 6e 6f 74 68 69 6e 67 2c 20 6e 6f 6e 65 20 66 6f 75 6e 64 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 66 75 6e 63 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 29 20 7b 0a 09 09 09 66 75 6e 63 28 29 3b 0a 09 09 7d 0a 09 7d 0a 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 70 61 72 65 6e 74 73 5f 6c 69 73 74 5f 73 65 6c 65 63 74 28 61 6c 6c 2c 20 66 69 72 73 74 49 73 41 6c 6c 29 20 7b 0a 09 69 66 20 28 20 61 6c 6c 20 29 20 7b 0a 09 09 61 Data Ascii: ontextvar func = null;try {var func = eval(ac_action + "_list_search");} catch (e) {// do nothing, none found}if ( typeof func == "function" ) {func();}}}function parents_list_select(all, firstIsAll) {if ( all ) {a
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 22 29 3b 0a 09 2f 2f 20 6f 70 65 6e 20 6d 6f 64 61 6c 0a 09 24 4a 28 27 23 6d 65 73 73 61 67 65 5f 61 63 74 69 76 65 72 73 73 27 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 61 63 74 69 76 65 72 73 73 5f 69 6e 73 65 72 74 28 29 20 7b 0a 09 2f 2f 20 62 75 69 6c 64 20 74 68 65 20 63 6f 64 65 0a 09 76 61 72 20 63 6f 64 65 20 3d 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 61 63 74 69 76 65 72 73 73 5f 62 75 69 6c 64 28 29 3b 0a 09 69 66 20 28 20 63 6f 64 65 20 3d 3d 20 27 27 20 29 20 72 65 74 75 72 6e 3b 0a 0a 09 2f 2f 20 70 75 73 68 20 69 74 20 69 6e 74 6f 20 6e 65 65 64 65 64 20 65 64 69 74 6f 72 0a 09 61 63 5f 65 64 69 74 6f 72 5f 69 6e 73 65 72 74 28 24 4a 28 27 23 61 63 74 69 76 65 Data Ascii: ");// open modal$J('#message_activerss').modal("show");}function form_editor_activerss_insert() {// build the codevar code = form_editor_activerss_build();if ( code == '' ) return;// push it into needed editorac_editor_insert($J('#active
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 20 27 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 73 74 61 72 74 20 66 65 65 64 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 43 48 41 4e 4e 45 4c 3a 54 49 54 4c 45 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 70 72 69 6e 74 20 6f 75 74 20 74 69 74 6c 65 0a 09 09 27 25 52 53 53 2d 4c 4f 4f 50 7c 4c 49 4d 49 54 3a 27 20 2b 20 6c 6f 6f 70 20 2b 20 27 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 73 74 61 72 74 20 69 74 65 6d 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 44 41 54 45 25 5c 6e 27 20 2b 20 2f 2f 20 77 69 74 68 69 6e 20 61 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 54 49 54 4c 45 25 5c 6e 27 20 2b 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 53 55 4d 4d 41 52 59 25 5c 6e 27 20 2b 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 4c 49 Data Ascii: '%\n\n' + // start feed section'%RSS:CHANNEL:TITLE%\n\n' + // print out title'%RSS-LOOP\|LIMIT:' + loop + '%\n\n' + // start item section'%RSS:ITEM:DATE%\n' + // within a section'%RSS:ITEM:TITLE%\n' +'%RSS:ITEM:SUMMARY%\n' +'%RSS:ITEM:LI
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 0a 0a 09 2f 2f 20 63 6c 65 61 72 20 61 6e 79 20 73 65 74 54 69 6d 65 6f 75 74 73 20 72 75 6e 6e 69 6e 67 2e 20 28 6f 6e 65 20 69 73 20 75 73 65 64 20 66 6f 72 20 53 75 72 76 65 79 4d 6f 6e 6b 65 79 20 69 6e 74 65 67 72 61 74 69 6f 6e 29 0a 09 61 63 2e 73 74 6f 70 28 22 63 61 6d 70 61 69 67 6e 5f 73 65 72 76 69 63 65 5f 67 65 74 22 29 3b 0a 0a 09 69 66 20 28 75 73 65 5f 64 65 73 69 67 6e 65 72 29 20 7b 0a 09 09 69 66 20 28 61 63 2e 62 72 6f 77 73 65 72 2e 69 73 49 45 28 29 29 20 7b 0a 09 09 09 2f 2f 22 69 6e 73 65 72 74 48 54 4d 4c 22 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 49 45 20 28 67 72 72 72 29 2e 20 53 6f 20 77 65 20 68 61 76 65 20 74 6f 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 64 69 66 66 65 72 65 6e Data Ascii: // clear any setTimeouts running. (one is used for SurveyMonkey integration)ac.stop("campaign_service_get");if (use_designer) {if (ac.browser.isIE()) {//"insertHTML" command is not supported by IE (grrr). So we have to do something differen
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 78 74 2c 20 74 65 78 74 29 20 7c 7c 20 27 27 3b 20 2f 2f 20 43 6f 65 72 63 65 20 6e 75 6c 6c 20 74 6f 20 62 6c 61 6e 6b 20 73 74 72 69 6e 67 20 69 66 20 75 73 65 72 20 63 61 6e 63 65 6c 73 0a 09 09 69 66 20 28 20 65 6e 74 65 72 65 64 2e 74 72 69 6d 28 29 20 3d 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 65 6e 74 65 72 65 64 20 3d 20 74 65 78 74 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 65 78 74 6f 6e 6c 79 20 29 20 7b 0a 09 09 09 76 61 6c 20 3d 20 65 6e 74 65 72 65 64 20 2b 20 27 20 28 27 20 2b 20 73 74 72 53 75 72 76 65 79 54 65 78 74 32 20 2b 20 27 3a 20 27 20 2b 20 73 70 6c 69 74 5f 76 61 6c 75 65 5b 32 5d 20 2b 20 27 20 2d 2d 20 27 20 2b 20 6c 69 6e 6b 5f 68 72 65 66 20 2b 20 27 29 27 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 76 61 6c 20 3d 20 27 3c Data Ascii: xt, text) \|\| ''; // Coerce null to blank string if user cancelsif ( entered.trim() === '' ) {entered = text;}if ( textonly ) {val = entered + ' (' + strSurveyText2 + ': ' + split_value[2] + ' -- ' + link_href + ')';} else {val = '<
2025-01-14 15:20:50 UTC	1369	IN	Data Raw: 09 09 69 66 20 28 20 65 6e 74 65 72 65 64 2e 74 72 69 6d 28 29 20 3d 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 65 6e 74 65 72 65 64 20 3d 20 74 65 78 74 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 65 78 74 6f 6e 6c 79 20 29 20 7b 0a 09 09 09 76 61 6c 20 3d 20 65 6e 74 65 72 65 64 20 2b 20 27 20 3c 27 20 2b 20 76 61 6c 20 2b 20 27 3e 27 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 76 61 6c 20 3d 20 27 3c 61 20 68 72 65 66 3d 22 27 20 2b 20 76 61 6c 20 2b 20 27 22 3e 27 20 2b 20 65 6e 74 65 72 65 64 20 2b 20 27 3c 2f 61 3e 27 3b 0a 09 09 7d 0a 09 7d 0a 09 72 65 74 75 72 6e 20 76 61 6c 3b 0a 7d 0a 0a 0a 2f 2f 20 43 61 6d 70 61 69 67 6e 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 0a 66 75 6e 63 74 69 6f 6e 20 63 61 6d 70 61 69 67 6e 5f 70 65 72 73 6f 6e 61 Data Ascii: if ( entered.trim() === '' ) {entered = text;}if ( textonly ) {val = entered + ' <' + val + '>';} else {val = '<a href="' + val + '">' + entered + '</a>';}}return val;}// Campaign Personalizationfunction campaign_persona

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.8	49899	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:51 UTC	1118	OUT	GET /admin/mainjs.php?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:51 UTC	450	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:51 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 7040 Connection: close Cache-Control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache x-request-id: 77573809c0b46588025f954cad103373 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc74afec443-EWR
2025-01-14 15:20:51 UTC	919	IN	Data Raw: 76 61 72 20 61 63 5f 6a 73 5f 61 64 6d 69 6e 20 3d 20 7b 20 22 69 64 22 20 3a 20 30 2c 20 22 75 73 65 72 6e 61 6d 65 22 20 3a 20 22 22 2c 20 22 66 69 72 73 74 5f 6e 61 6d 65 22 20 3a 20 22 22 2c 20 22 6c 61 73 74 5f 6e 61 6d 65 22 20 3a 20 22 22 2c 20 22 65 6d 61 69 6c 22 20 3a 20 22 22 2c 20 22 6c 61 73 74 5f 6c 6f 67 69 6e 22 20 3a 20 6e 75 6c 6c 2c 20 22 73 6f 75 72 63 65 69 64 22 20 3a 20 30 2c 20 22 73 6f 75 72 63 65 75 70 64 61 74 65 64 22 20 3a 20 6e 75 6c 6c 2c 20 22 70 72 6f 64 75 63 74 73 65 74 22 20 3a 20 6e 75 6c 6c 2c 20 22 61 62 73 69 64 22 20 3a 20 30 2c 20 22 70 61 72 65 6e 74 69 64 22 20 3a 20 30 2c 20 22 61 70 70 72 6f 76 65 64 22 20 3a 20 31 2c 20 22 73 61 6c 74 22 20 3a 20 22 22 2c 20 22 70 68 6f 6e 65 22 20 3a 20 22 22 2c 20 22 73 69 Data Ascii: var ac_js_admin = { "id" : 0, "username" : "", "first_name" : "", "last_name" : "", "email" : "", "last_login" : null, "sourceid" : 0, "sourceupdated" : null, "productset" : null, "absid" : 0, "parentid" : 0, "approved" : 1, "salt" : "", "phone" : "", "si
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 5f 73 65 6e 74 22 20 3a 20 30 2c 20 22 67 72 6f 75 70 73 22 20 3a 20 7b 20 31 20 3a 20 31 20 7d 2c 20 22 6c 69 73 74 73 22 20 3a 20 7b 20 38 20 3a 20 38 2c 20 31 30 20 3a 20 31 30 2c 20 31 33 20 3a 20 31 33 2c 20 31 35 20 3a 20 31 35 2c 20 31 39 20 3a 20 31 39 2c 20 32 37 20 3a 20 32 37 2c 20 33 34 20 3a 20 33 34 2c 20 34 31 20 3a 20 34 31 2c 20 35 31 20 3a 20 35 31 2c 20 35 35 20 3a 20 35 35 2c 20 35 37 20 3a 20 35 37 2c 20 35 38 20 3a 20 35 38 2c 20 36 31 20 3a 20 36 31 2c 20 36 32 20 3a 20 36 32 2c 20 36 35 20 3a 20 36 35 2c 20 36 36 20 3a 20 36 36 2c 20 36 37 20 3a 20 36 37 2c 20 36 38 20 3a 20 36 38 2c 20 36 39 20 3a 20 36 39 2c 20 37 30 20 3a 20 37 30 2c 20 37 31 20 3a 20 37 31 2c 20 37 32 20 3a 20 37 32 2c 20 37 33 20 3a 20 37 33 2c 20 37 34 20 3a Data Ascii: _sent" : 0, "groups" : { 1 : 1 }, "lists" : { 8 : 8, 10 : 10, 13 : 13, 15 : 15, 19 : 19, 27 : 27, 34 : 34, 41 : 41, 51 : 51, 55 : 55, 57 : 57, 58 : 58, 61 : 61, 62 : 62, 65 : 65, 66 : 66, 67 : 67, 68 : 68, 69 : 69, 70 : 70, 71 : 71, 72 : 72, 73 : 73, 74 :
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 5f 73 74 61 72 74 75 70 5f 72 65 70 6f 72 74 73 22 20 3a 20 30 2c 20 22 70 67 5f 73 74 61 72 74 75 70 5f 67 65 74 74 69 6e 67 73 74 61 72 74 65 64 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 61 64 64 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 65 64 69 74 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 64 65 6c 65 74 65 22 20 3a 20 30 2c 20 22 70 67 5f 61 63 63 6f 75 6e 74 5f 6d 61 6e 61 67 65 5f 63 75 73 74 6f 6d 5f 66 69 65 6c 64 22 20 3a 20 30 2c 20 22 70 67 5f 64 65 61 6c 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c 5f 64 65 6c 65 74 65 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c 5f 72 65 61 73 73 69 67 6e 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c 5f 66 69 65 6c 64 73 22 20 3a 20 31 2c 20 22 70 67 5f 64 65 61 6c Data Ascii: _startup_reports" : 0, "pg_startup_gettingstarted" : 0, "pg_account_add" : 0, "pg_account_edit" : 0, "pg_account_delete" : 0, "pg_account_manage_custom_field" : 0, "pg_deal" : 1, "pg_deal_delete" : 1, "pg_deal_reassign" : 1, "pg_deal_fields" : 1, "pg_deal
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 64 6d 69 6e 5f 74 65 6d 70 6c 61 74 65 5f 63 73 73 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 61 64 6d 69 6e 5f 74 65 6d 70 6c 61 74 65 5f 63 73 73 5f 62 61 63 6b 75 70 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 70 75 62 6c 69 63 5f 74 65 6d 70 6c 61 74 65 5f 68 74 6d 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 70 75 62 6c 69 63 5f 74 65 6d 70 6c 61 74 65 5f 63 73 73 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 66 61 76 69 63 6f 6e 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 7a 65 6e 64 65 73 6b 5f 77 69 64 67 65 74 5f 65 6e 61 62 6c 65 64 22 20 3a 20 30 20 7d 3b 0d 0a 76 61 72 20 61 63 5f 6a 73 5f 73 69 74 65 20 3d 20 7b 20 22 69 64 22 20 3a 20 31 2c 20 22 6c 61 6e 67 22 20 3a 20 22 65 6e 67 6c 69 73 68 22 2c 20 22 61 Data Ascii: dmin_template_css" : null, "brand_admin_template_css_backup" : null, "brand_public_template_htm" : null, "brand_public_template_css" : null, "brand_favicon" : null, "brand_zendesk_widget_enabled" : 0 };var ac_js_site = { "id" : 1, "lang" : "english", "a
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 6d 61 69 6c 5f 74 65 73 74 5f 6d 69 6e 5f 63 6f 75 6e 74 22 20 3a 20 31 2c 20 22 73 65 6e 74 5f 65 6d 61 69 6c 5f 74 65 73 74 5f 6d 69 6e 5f 64 61 74 65 22 20 3a 20 22 32 30 32 34 2d 31 32 2d 33 31 20 30 37 3a 35 38 3a 34 31 22 2c 20 22 73 65 6e 74 5f 65 6d 61 69 6c 5f 74 65 73 74 5f 68 72 5f 63 6f 75 6e 74 22 20 3a 20 32 2c 20 22 73 65 6e 74 5f 65 6d 61 69 6c 5f 74 65 73 74 5f 68 72 5f 64 61 74 65 22 20 3a 20 22 32 30 32 34 2d 31 32 2d 33 31 20 30 37 3a 35 34 3a 34 35 22 2c 20 22 64 6b 69 6d 5f 69 64 22 20 3a 20 22 61 63 64 6b 69 6d 31 22 2c 20 22 67 6f 6f 67 6c 65 5f 61 6e 61 6c 79 74 69 63 73 5f 65 6e 61 62 6c 65 64 22 20 3a 20 30 2c 20 22 69 73 5f 74 72 69 61 6c 22 20 3a 20 66 61 6c 73 65 2c 20 22 69 73 5f 66 72 65 65 22 20 3a 20 66 61 6c 73 65 2c 20 Data Ascii: mail_test_min_count" : 1, "sent_email_test_min_date" : "2024-12-31 07:58:41", "sent_email_test_hr_count" : 2, "sent_email_test_hr_date" : "2024-12-31 07:54:45", "dkim_id" : "acdkim1", "google_analytics_enabled" : 0, "is_trial" : false, "is_free" : false,
2025-01-14 15:20:51 UTC	645	IN	Data Raw: 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 68 65 61 64 65 72 5f 74 65 78 74 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 68 65 61 64 65 72 5f 68 74 6d 6c 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 68 65 61 64 65 72 5f 68 74 6d 6c 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 74 65 78 74 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 74 65 78 74 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 22 20 3a 20 30 2c 20 22 62 72 61 6e 64 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 5f 76 61 6c 75 65 22 20 3a 20 6e 75 6c 6c 2c 20 22 62 72 61 6e 64 5f 6c 69 6e 6b 73 22 20 3a 20 31 2c 20 22 62 72 61 6e 64 5f 61 64 6d 69 6e 5f 74 65 6d 70 6c Data Ascii: " : 0, "brand_header_text_value" : null, "brand_header_html" : 0, "brand_header_html_value" : null, "brand_footer_text" : 0, "brand_footer_text_value" : null, "brand_footer_html" : 0, "brand_footer_html_value" : null, "brand_links" : 1, "brand_admin_templ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.8	49898	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:51 UTC	1192	OUT	GET /admin/js/jq/csrf_protection.js HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "1132611470" If-Modified-Since: Mon, 13 Jan 2025 21:19:34 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:51 UTC	307	IN	HTTP/1.1 304 Not Modified Date: Tue, 14 Jan 2025 15:20:51 GMT Connection: close etag: "1132611470" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: HIT Age: 1476 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc7ae333b7b-BOS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.8	49900	104.17.202.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:51 UTC	923	OUT	GET /ac_global/js/ac.js.php?inc=ajax,dom,b64,str,array,utf,editor,ui,loader HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yourexcellency.activehosted.com/admin/index.php?error_mesg=invalidlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:51 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:51 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc9482d80d6-EWR
2025-01-14 15:20:51 UTC	1072	IN	Data Raw: 33 32 65 66 0d 0a 2f 2f 20 61 63 2e 6a 73 0a 2f 2f 20 4c 6f 61 64 69 6e 67 2e 2e 2e 0a 0a 2f 2f 20 61 6a 61 78 2e 6a 73 0a 0a 76 61 72 20 61 63 5f 61 6a 61 78 5f 64 65 62 75 67 20 3d 20 74 72 75 65 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 72 65 71 75 65 73 74 5f 6f 62 6a 65 63 74 28 29 20 7b 0a 20 20 20 20 76 61 72 20 68 72 65 71 3b 0a 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 68 72 65 71 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 09 09 68 72 65 71 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 68 72 65 71 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 63 61 6c 6c 5f 75 72 6c 28 75 72 Data Ascii: 32ef// ac.js// Loading...// ajax.jsvar ac_ajax_debug = true;function ac_ajax_request_object() { var hreq; try { hreq = new XMLHttpRequest(); } catch (e) {hreq = null; } return hreq;}function ac_ajax_call_url(ur
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 20 28 20 70 6f 73 74 54 79 70 65 20 21 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 0a 09 09 20 20 20 20 20 20 20 20 20 20 20 20 09 70 6f 73 74 41 72 72 2e 70 75 73 68 28 69 20 2b 20 27 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 6f 73 74 5b 69 5d 29 29 3b 0a 09 09 09 09 20 20 20 20 7d 0a 09 09 09 20 20 20 20 7d 0a 09 09 09 20 20 20 20 70 6f 73 74 20 3d 20 70 6f 73 74 41 72 72 2e 6a 6f 69 6e 28 27 26 27 29 3b 0a 09 09 20 20 20 20 7d 0a 09 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 68 72 65 71 2e 6f 70 65 6e 28 6d 65 74 68 6f 64 2c 20 75 72 6c 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 68 72 65 71 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 58 2d 58 53 52 46 2d 54 4f 4b 45 4e 22 2c 20 67 65 74 43 53 52 Data Ascii: ( postType != 'function' ) { postArr.push(i + '=' + encodeURIComponent(post[i])); } } post = postArr.join('&'); } } hreq.open(method, url, true); hreq.setRequestHeader("X-XSRF-TOKEN", getCSR
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 61 63 5f 61 6a 61 78 5f 63 61 6c 6c 5f 63 62 28 75 72 6c 2c 20 66 75 6e 63 2c 20 63 62 29 20 7b 0a 20 20 20 20 69 66 20 28 66 75 6e 63 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 72 6c 2e 6d 61 74 63 68 28 2f 5c 3f 2f 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 20 2b 20 22 26 66 3d 22 20 2b 20 66 75 6e 63 3b 0a 20 20 20 20 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 20 2b 20 22 3f 66 3d 22 20 2b 20 66 75 6e 63 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 75 72 6c 20 2b 3d 20 22 26 72 61 6e 64 3d 22 20 2b 20 61 63 5f 62 36 34 5f 65 6e 63 6f 64 65 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 0a 0a 20 20 20 20 69 66 20 28 61 72 Data Ascii: nction ac_ajax_call_cb(url, func, cb) { if (func) { if (url.match(/\?/)) url = url + "&f=" + func; else url = url + "?f=" + func; } url += "&rand=" + ac_b64_encode(Math.random().toString()); if (ar
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 6c 65 5f 74 65 78 74 28 68 72 65 71 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 2f 2a 0a 09 09 09 09 09 76 61 72 20 72 6f 6f 74 4e 6f 64 65 20 3d 20 28 20 78 6d 6c 20 21 3d 3d 20 6e 75 6c 6c 20 3f 20 78 6d 6c 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 3a 20 6e 75 6c 6c 20 29 3b 0a 09 09 09 09 09 69 66 20 28 63 62 20 3d 3d 3d 20 6e 75 6c 6c 20 26 26 20 72 6f 6f 74 4e 6f 64 65 29 20 7b 0a 09 09 09 09 09 09 63 62 20 3d 20 65 76 61 6c 28 22 63 62 5f 22 20 2b 20 72 6f 6f 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 69 66 20 28 74 79 70 65 6f 66 20 63 62 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 0a 09 09 09 09 09 09 63 62 28 72 6f 6f 74 4e 6f 64 Data Ascii: le_text(hreq.responseText);}}/*var rootNode = ( xml !== null ? xml.documentElement : null );if (cb === null && rootNode) {cb = eval("cb_" + rootNode.nodeName);}if (typeof cb == "function")cb(rootNod
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 64 4e 6f 64 65 73 5b 69 5d 3b 0a 0a 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 63 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 33 3a 20 20 20 20 20 2f 2f 20 54 45 58 54 5f 4e 4f 44 45 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 79 5b 22 5f 5f 74 65 78 74 22 5d 20 3d 20 63 6e 6f 64 65 2e 6e 6f 64 65 56 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 34 3a 20 20 20 20 20 2f 2f 20 43 44 41 54 41 5f 53 45 43 54 49 4f 4e 5f 4e 4f 44 45 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 79 5b 22 5f 5f 63 64 61 74 61 22 5d 20 3d 20 63 6e 6f 64 65 2e 6e 6f 64 65 56 61 6c 75 65 3b 0a 20 20 20 20 Data Ascii: dNodes[i]; switch (cnode.nodeType) { case 3: // TEXT_NODE ary["__text"] = cnode.nodeValue; break; case 4: // CDATA_SECTION_NODE ary["__cdata"] = cnode.nodeValue;
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 5d 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0a 09 09 09 09 09 09 09 76 61 72 20 74 6d 70 20 3d 20 61 72 79 5b 69 64 78 5d 3b 0a 09 09 09 09 09 09 09 61 72 79 5b 69 64 78 5d 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0a 09 09 09 09 09 09 09 61 72 79 5b 69 64 78 5d 2e 70 75 73 68 28 74 6d 70 29 3b 0a 09 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 61 72 72 61 79 22 20 26 26 20 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 20 21 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 09 09 09 09 09 09 09 61 6c 65 72 74 28 74 79 70 65 6f 66 28 61 72 79 5b 69 64 78 5d 29 29 3b 0a 09 09 09 09 09 09 09 2f 2f 63 6f 6e 74 69 6e 75 65 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 61 72 79 5b 69 64 78 Data Ascii: ]) == "string") {var tmp = ary[idx];ary[idx] = new Array();ary[idx].push(tmp);} else if (typeof(ary[idx]) != "array" && typeof(ary[idx]) != "object") {alert(typeof(ary[idx]));//continue;}ary[idx
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 20 20 20 20 6e 6f 64 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 28 6e 6f 64 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 20 76 61 6c 29 20 3f 20 22 6e 6f 6e 65 22 20 3a 20 76 61 6c 3b 0a 7d 0a 2a 2f 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 64 69 73 70 6c 61 79 5f 62 6c 6f 63 6b 28 69 64 29 20 7b 0a 09 24 28 69 64 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 64 69 73 70 6c 61 79 5f 69 6e 6c 69 6e 65 62 6c 6f 63 6b 28 69 64 29 20 7b 0a 09 24 28 69 64 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 64 69 73 70 6c 61 79 5f 6e 6f 6e Data Ascii: node.style.display = (node.style.display == val) ? "none" : val;}*/function ac_dom_display_block(id) {$(id).style.display = "block";}function ac_dom_display_inlineblock(id) {$(id).style.display = "inline-block";}function ac_dom_display_non
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 31 29 20 7b 0a 09 09 2f 2f 20 74 68 65 79 20 70 61 73 73 65 64 20 61 20 66 69 6c 74 65 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 69 6c 74 65 72 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 0a 09 7d 0a 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 69 20 3e 3d 20 30 3b 20 69 2d 2d 29 20 7b 0a 09 09 69 66 20 28 74 79 70 65 6f 66 20 66 69 6c 74 65 72 20 21 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 0a 09 09 09 6e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 29 3b 0a 09 09 65 6c 73 65 20 69 66 20 28 66 69 6c 74 65 72 28 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 29 29 0a 09 09 09 6e 6f 64 65 2e 72 65 6d Data Ascii: 1) {// they passed a filter functionfilter = arguments[1];} for (var i = node.childNodes.length - 1; i >= 0; i--) {if (typeof filter != "function")node.removeChild(node.childNodes[i]);else if (filter(node.childNodes[i]))node.rem
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 63 6c 69 63 6b 5f 68 6f 6f 6b 28 66 75 6e 63 29 20 7b 0a 09 76 61 72 20 6f 6c 64 6f 6e 63 6c 69 63 6b 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 3b 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 20 21 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 3b 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 09 6f 6c 64 6f 6e 63 6c 69 63 6b 28 65 29 3b 0a 09 09 09 66 75 6e 63 28 65 29 3b 0a 09 09 7d 0a 09 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 63 5f 64 6f 6d 5f 68 6f 6f 6b 28 66 75 6e 63 31 2c 20 66 75 6e 63 32 29 20 7b 0a 09 2f 2f Data Ascii: click_hook(func) {var oldonclick = document.onclick;if ( typeof document.onclick != 'function' ) {document.onclick = func;} else {document.onclick = function(e) {oldonclick(e);func(e);}}}function ac_dom_hook(func1, func2) {//
2025-01-14 15:20:51 UTC	1023	IN	Data Raw: 69 6e 61 6c 20 3d 20 6e 6f 64 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 6c 65 6d 29 5b 65 6c 65 6d 65 6e 74 49 6e 64 65 78 5d 3b 0a 20 20 20 20 76 61 72 20 6e 65 77 5f 6e 6f 64 65 20 3d 20 6f 72 69 67 69 6e 61 6c 2e 63 6c 6f 6e 65 4e 6f 64 65 28 74 72 75 65 29 3b 0a 20 20 20 20 69 66 20 28 20 63 6c 65 61 72 49 6e 70 75 74 73 20 29 20 7b 0a 09 20 20 20 20 76 61 72 20 6e 65 77 69 6e 70 75 74 20 3d 20 6e 65 77 5f 6e 6f 64 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 69 6e 70 75 74 27 29 3b 0a 09 20 20 20 20 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6e 65 77 69 6e 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 20 20 20 20 20 20 20 20 69 66 20 28 6e 65 77 69 6e 70 75 Data Ascii: inal = node.getElementsByTagName(elem)[elementIndex]; var new_node = original.cloneNode(true); if ( clearInputs ) { var newinput = new_node.getElementsByTagName('input'); for ( var i = 0; i < newinput.length; i++ ) { if (newinpu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.8	49901	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:51 UTC	892	OUT	GET /admin/js/functions.js?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:51 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:51 GMT Content-Type: application/javascript Content-Length: 47585 Connection: close etag: "1483297891" last-modified: Mon, 13 Jan 2025 21:19:34 GMT CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc96ecf81f3-IAD
2025-01-14 15:20:51 UTC	992	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 6f 6c 65 5f 6c 6f 67 28 29 20 7b 0a 09 2f 2f 20 61 74 74 65 6d 70 74 20 74 6f 20 73 65 6e 64 20 61 20 6d 65 73 73 61 67 65 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 0a 09 74 72 79 20 7b 0a 09 09 66 6f 72 28 76 61 72 20 69 20 3d 30 3b 20 69 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 0a 09 09 7d 0a 09 7d 20 63 61 74 63 68 28 65 29 20 7b 7d 20 2f 2f 20 66 61 69 6c 20 67 72 61 63 65 66 75 6c 6c 79 20 69 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 0a 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 62 72 61 6e 64 69 6e 67 5f 64 65 6c 65 74 65 28 70 6c 61 6e 2c 20 72 73 69 64 Data Ascii: function console_log() {// attempt to send a message to the consoletry {for(var i =0; i < arguments.length; i++) {console.log(arguments[i]);}} catch(e) {} // fail gracefully if it does not exist}function form_branding_delete(plan, rsid
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 6e 64 65 78 20 3d 20 2d 31 3b 0a 09 7d 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 5f 61 72 65 61 73 28 6e 6f 64 65 29 20 7b 0a 09 24 4a 28 27 74 65 78 74 61 72 65 61 27 2c 20 6e 6f 64 65 29 2e 68 74 6d 6c 28 27 27 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 5f 65 6c 65 6d 65 6e 74 28 6e 6f 64 65 29 20 7b 0a 09 76 61 72 20 6d 65 20 3d 20 24 4a 28 6e 6f 64 65 29 3b 0a 09 76 61 72 20 64 61 64 20 3d 20 6d 65 2e 70 61 72 65 6e 74 28 29 3b 0a 09 69 66 20 28 20 24 4a 28 22 3e 20 64 69 76 22 2c 20 64 61 64 29 2e 6c 65 6e 67 74 68 20 3e 20 31 20 29 20 7b 0a 09 09 6d 65 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 63 6c 65 61 72 5f 69 6e 70 75 74 73 28 6e 6f 64 65 29 3b 0a 09 09 63 6c 65 61 72 5f 73 65 6c Data Ascii: ndex = -1;});}function clear_areas(node) {$J('textarea', node).html('');}function remove_element(node) {var me = $J(node);var dad = me.parent();if ( $J("> div", dad).length > 1 ) {me.remove();} else {clear_inputs(node);clear_sel
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 31 20 3a 20 30 20 29 5d 29 3b 0a 0a 09 24 4a 28 27 23 27 20 2b 20 69 64 20 2b 20 27 45 64 69 74 6f 72 4c 69 6e 6b 44 65 66 61 75 6c 74 27 29 2e 74 6f 67 67 6c 65 28 29 3b 0a 09 61 63 5f 6a 73 5f 61 64 6d 69 6e 2e 68 74 6d 6c 65 64 69 74 6f 72 20 3d 20 28 20 69 73 45 64 69 74 6f 72 20 3f 20 31 20 3a 20 30 20 29 3b 0a 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f 70 75 73 68 28 6e 6f 64 65 73 2c 20 69 64 29 20 7b 0a 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0a 09 09 24 4a 28 27 23 27 20 2b 20 69 64 29 2e 61 70 70 65 6e 64 28 6e 6f 64 65 73 5b 69 5d 29 3b 0a Data Ascii: 1 : 0 )]);$J('#' + id + 'EditorLinkDefault').toggle();ac_js_admin.htmleditor = ( isEditor ? 1 : 0 );return false;}function form_editor_personalization_push(nodes, id) {for (var i = 0; i < nodes.length; i++)$J('#' + id).append(nodes[i]);
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 23 27 20 2b 20 70 72 66 78 20 2b 20 27 66 6f 72 6d 61 74 46 69 65 6c 64 27 29 2e 76 61 6c 28 29 29 3b 0a 7d 0a 0a 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 65 78 70 6f 72 74 5f 6c 69 6e 6b 5f 62 75 69 6c 64 28 63 6f 6e 74 65 78 74 2c 20 61 72 79 29 20 7b 0a 09 76 61 72 20 6c 69 6e 6b 20 3d 20 27 65 78 70 6f 72 74 2e 70 68 70 3f 61 63 74 69 6f 6e 3d 27 20 2b 20 63 6f 6e 74 65 78 74 3b 0a 09 66 6f 72 20 28 20 76 61 72 20 69 20 69 6e 20 61 72 79 20 29 20 7b 0a 09 09 6c 69 6e 6b 20 2b 3d 20 27 26 27 20 2b 20 69 20 2b 20 27 3d 27 20 2b 20 61 72 79 5b 69 5d 3b 0a 09 7d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 28 6f 75 72 66 6c 61 67 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 70 72 6f 6d 70 74 28 27 47 6f 20 74 6f 20 74 68 69 73 20 65 78 70 6f 72 74 Data Ascii: #' + prfx + 'formatField').val());}function export_link_build(context, ary) {var link = 'export.php?action=' + context;for ( var i in ary ) {link += '&' + i + '=' + ary[i];}if ( typeof(ourflag) == 'undefined' \|\| prompt('Go to this export
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 65 64 20 6f 6e 20 63 6f 6e 74 65 78 74 0a 09 09 76 61 72 20 66 75 6e 63 20 3d 20 6e 75 6c 6c 3b 0a 09 09 74 72 79 20 7b 0a 09 09 09 76 61 72 20 66 75 6e 63 20 3d 20 65 76 61 6c 28 61 63 5f 61 63 74 69 6f 6e 20 2b 20 22 5f 6c 69 73 74 5f 73 65 61 72 63 68 22 29 3b 0a 09 09 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 09 09 09 2f 2f 20 64 6f 20 6e 6f 74 68 69 6e 67 2c 20 6e 6f 6e 65 20 66 6f 75 6e 64 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 66 75 6e 63 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 29 20 7b 0a 09 09 09 66 75 6e 63 28 29 3b 0a 09 09 7d 0a 09 7d 0a 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 70 61 72 65 6e 74 73 5f 6c 69 73 74 5f 73 65 6c 65 63 74 28 61 6c 6c 2c 20 66 69 72 73 74 49 73 41 6c 6c 29 20 7b 0a 09 69 66 20 28 20 61 6c 6c 20 Data Ascii: ed on contextvar func = null;try {var func = eval(ac_action + "_list_search");} catch (e) {// do nothing, none found}if ( typeof func == "function" ) {func();}}}function parents_list_select(all, firstIsAll) {if ( all
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 6c 28 22 68 69 64 65 22 29 3b 0a 09 2f 2f 20 6f 70 65 6e 20 6d 6f 64 61 6c 0a 09 24 4a 28 27 23 6d 65 73 73 61 67 65 5f 61 63 74 69 76 65 72 73 73 27 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 61 63 74 69 76 65 72 73 73 5f 69 6e 73 65 72 74 28 29 20 7b 0a 09 2f 2f 20 62 75 69 6c 64 20 74 68 65 20 63 6f 64 65 0a 09 76 61 72 20 63 6f 64 65 20 3d 20 66 6f 72 6d 5f 65 64 69 74 6f 72 5f 61 63 74 69 76 65 72 73 73 5f 62 75 69 6c 64 28 29 3b 0a 09 69 66 20 28 20 63 6f 64 65 20 3d 3d 20 27 27 20 29 20 72 65 74 75 72 6e 3b 0a 0a 09 2f 2f 20 70 75 73 68 20 69 74 20 69 6e 74 6f 20 6e 65 65 64 65 64 20 65 64 69 74 6f 72 0a 09 61 63 5f 65 64 69 74 6f 72 5f 69 6e 73 65 72 74 28 24 4a 28 27 Data Ascii: l("hide");// open modal$J('#message_activerss').modal("show");}function form_editor_activerss_insert() {// build the codevar code = form_editor_activerss_build();if ( code == '' ) return;// push it into needed editorac_editor_insert($J('
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 20 73 68 6f 77 20 2b 20 27 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 73 74 61 72 74 20 66 65 65 64 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 43 48 41 4e 4e 45 4c 3a 54 49 54 4c 45 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 70 72 69 6e 74 20 6f 75 74 20 74 69 74 6c 65 0a 09 09 27 25 52 53 53 2d 4c 4f 4f 50 7c 4c 49 4d 49 54 3a 27 20 2b 20 6c 6f 6f 70 20 2b 20 27 25 5c 6e 5c 6e 27 20 2b 20 2f 2f 20 73 74 61 72 74 20 69 74 65 6d 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 44 41 54 45 25 5c 6e 27 20 2b 20 2f 2f 20 77 69 74 68 69 6e 20 61 20 73 65 63 74 69 6f 6e 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 54 49 54 4c 45 25 5c 6e 27 20 2b 0a 09 09 27 25 52 53 53 3a 49 54 45 4d 3a 53 55 4d 4d 41 52 59 25 5c 6e 27 20 2b 0a 09 09 27 25 52 53 53 3a Data Ascii: show + '%\n\n' + // start feed section'%RSS:CHANNEL:TITLE%\n\n' + // print out title'%RSS-LOOP\|LIMIT:' + loop + '%\n\n' + // start item section'%RSS:ITEM:DATE%\n' + // within a section'%RSS:ITEM:TITLE%\n' +'%RSS:ITEM:SUMMARY%\n' +'%RSS:
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 74 6f 6e 6c 79 29 3b 0a 0a 09 2f 2f 20 63 6c 65 61 72 20 61 6e 79 20 73 65 74 54 69 6d 65 6f 75 74 73 20 72 75 6e 6e 69 6e 67 2e 20 28 6f 6e 65 20 69 73 20 75 73 65 64 20 66 6f 72 20 53 75 72 76 65 79 4d 6f 6e 6b 65 79 20 69 6e 74 65 67 72 61 74 69 6f 6e 29 0a 09 61 63 2e 73 74 6f 70 28 22 63 61 6d 70 61 69 67 6e 5f 73 65 72 76 69 63 65 5f 67 65 74 22 29 3b 0a 0a 09 69 66 20 28 75 73 65 5f 64 65 73 69 67 6e 65 72 29 20 7b 0a 09 09 69 66 20 28 61 63 2e 62 72 6f 77 73 65 72 2e 69 73 49 45 28 29 29 20 7b 0a 09 09 09 2f 2f 22 69 6e 73 65 72 74 48 54 4d 4c 22 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 49 45 20 28 67 72 72 72 29 2e 20 53 6f 20 77 65 20 68 61 76 65 20 74 6f 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 64 Data Ascii: tonly);// clear any setTimeouts running. (one is used for SurveyMonkey integration)ac.stop("campaign_service_get");if (use_designer) {if (ac.browser.isIE()) {//"insertHTML" command is not supported by IE (grrr). So we have to do something d
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 45 6e 74 65 72 54 65 78 74 2c 20 74 65 78 74 29 20 7c 7c 20 27 27 3b 20 2f 2f 20 43 6f 65 72 63 65 20 6e 75 6c 6c 20 74 6f 20 62 6c 61 6e 6b 20 73 74 72 69 6e 67 20 69 66 20 75 73 65 72 20 63 61 6e 63 65 6c 73 0a 09 09 69 66 20 28 20 65 6e 74 65 72 65 64 2e 74 72 69 6d 28 29 20 3d 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 65 6e 74 65 72 65 64 20 3d 20 74 65 78 74 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 65 78 74 6f 6e 6c 79 20 29 20 7b 0a 09 09 09 76 61 6c 20 3d 20 65 6e 74 65 72 65 64 20 2b 20 27 20 28 27 20 2b 20 73 74 72 53 75 72 76 65 79 54 65 78 74 32 20 2b 20 27 3a 20 27 20 2b 20 73 70 6c 69 74 5f 76 61 6c 75 65 5b 32 5d 20 2b 20 27 20 2d 2d 20 27 20 2b 20 6c 69 6e 6b 5f 68 72 65 66 20 2b 20 27 29 27 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 76 Data Ascii: EnterText, text) \|\| ''; // Coerce null to blank string if user cancelsif ( entered.trim() === '' ) {entered = text;}if ( textonly ) {val = entered + ' (' + strSurveyText2 + ': ' + split_value[2] + ' -- ' + link_href + ')';} else {v
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 61 6e 63 65 6c 73 0a 09 09 69 66 20 28 20 65 6e 74 65 72 65 64 2e 74 72 69 6d 28 29 20 3d 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 65 6e 74 65 72 65 64 20 3d 20 74 65 78 74 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 65 78 74 6f 6e 6c 79 20 29 20 7b 0a 09 09 09 76 61 6c 20 3d 20 65 6e 74 65 72 65 64 20 2b 20 27 20 3c 27 20 2b 20 76 61 6c 20 2b 20 27 3e 27 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 76 61 6c 20 3d 20 27 3c 61 20 68 72 65 66 3d 22 27 20 2b 20 76 61 6c 20 2b 20 27 22 3e 27 20 2b 20 65 6e 74 65 72 65 64 20 2b 20 27 3c 2f 61 3e 27 3b 0a 09 09 7d 0a 09 7d 0a 09 72 65 74 75 72 6e 20 76 61 6c 3b 0a 7d 0a 0a 0a 2f 2f 20 43 61 6d 70 61 69 67 6e 20 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 0a 66 75 6e 63 74 69 6f 6e 20 63 61 6d 70 61 69 67 6e 5f Data Ascii: ancelsif ( entered.trim() === '' ) {entered = text;}if ( textonly ) {val = entered + ' <' + val + '>';} else {val = '<a href="' + val + '">' + entered + '</a>';}}return val;}// Campaign Personalizationfunction campaign_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.8	49903	104.17.205.31	443	2844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 15:20:51 UTC	886	OUT	GET /admin/jsc/ac.js?v=v102712424104756 HTTP/1.1 Host: yourexcellency.activehosted.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gbu9uvfhph6a0mdatwbzomssrlboczvs=%7B%22v%22%3A%226.0.6%22%2C%22a%22%3A3007061535%2C%22b%22%3A%22567496f8ac1d996ff34d56f438a4d6f4%22%2C%22c%22%3A1736868033500%2C%22d%22%3A%2270168e5389006966b94c223824750734%22%2C%22e%22%3Anull%7D; PHPSESSID=b2ec18cffa4134f368c91539efa48407; __cf_bm=5WC6Aw_CGAEdGLG2kwpt8pL9ElySO.iUur5OeyUM_Fw-1736868029-1.0.1.1-PKNxqYZlXIEHYcN9DQS4YXh6Dy9c6HPj7w.ohqJrMTv8QXeMn9wfCTXucoyUlsmCVsKF0S11am.1UFVFN7wxeQ; XSRF-TOKEN=XfvDRClTMEFC3gZFxjZE8y815g8rA-VsSb2HwgY8gdY
2025-01-14 15:20:51 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 15:20:51 GMT Content-Type: application/javascript Content-Length: 54805 Connection: close etag: "2958274410" last-modified: Mon, 13 Jan 2025 21:19:56 GMT CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 901e9cc9bb8c8272-IAD
2025-01-14 15:20:51 UTC	992	IN	Data Raw: 76 61 72 20 61 63 3d 7b 72 61 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 63 2e 73 74 72 2e 63 61 73 74 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 2c 72 61 6e 64 48 65 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 63 2e 72 61 6e 64 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 73 70 72 69 6e 74 66 28 22 25 78 22 2c 61 5b 31 5d 29 7d 2c 68 69 64 64 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 6e 6f 6e 65 22 3d 3d 24 4a 28 61 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 5b 63 5d 29 72 65 74 75 72 6e 21 31 Data Ascii: var ac={rand:function(){return ac.str.cast(Math.random())},randHex:function(){var a=ac.rand().split(".");return sprintf("%x",a[1])},hidden:function(a){return"none"==$J(a).css("display")},empty:function(a){for(var c in a)if("function"!=typeof a[c])return!1
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 68 29 7b 76 61 72 20 64 3d 24 4a 28 74 68 69 73 29 3b 0a 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 64 2e 62 6c 75 72 28 29 3b 63 28 64 29 7d 7d 29 3b 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 65 61 63 68 28 24 4a 28 22 2e 63 6c 69 63 6b 2d 74 6f 2d 65 64 69 74 2e 22 2b 65 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 24 4a 28 61 29 3b 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6c 69 63 6b 2d 74 6f 2d 65 64 69 74 20 22 2b 65 29 3b 63 28 61 29 7d 29 7d 29 7d 2c 64 65 63 6f 64 65 42 61 73 65 36 34 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 61 74 6f 62 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 Data Ascii: h){var d=$J(this);a.preventDefault();d.blur();c(d)}});$J(document).on("click",function(a){_.each($J(".click-to-edit."+e),function(a){a=$J(a);a.removeClass("click-to-edit "+e);c(a)})})},decodeBase64:function(a){return window.atob?decodeURIComponent(window
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 7c 7c 28 61 2e 6f 6b 6c 61 62 65 6c 3d 73 74 72 4f 4b 29 3b 61 2e 6f 6b 63 6c 61 73 73 7c 7c 28 61 2e 6f 6b 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 29 3b 61 2e 63 6c 6f 73 65 6c 61 62 65 6c 7c 7c 28 61 2e 63 6c 6f 73 65 6c 61 62 65 6c 3d 61 2e 68 69 64 65 6f 6b 3f 73 74 72 43 6c 6f 73 65 3a 73 74 72 43 61 6e 63 65 6c 29 3b 61 2e 63 6c 61 73 73 65 73 7c 7c 28 61 2e 63 6c 61 73 73 65 73 3d 22 22 29 3b 61 2e 64 6f 6e 74 5f 62 6c 75 72 7c 7c 24 4a 28 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 2e 62 6c 75 72 28 29 3b 63 3d 63 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 0a 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 22 29 2e 72 65 6d 6f 76 65 28 29 3b 76 61 72 20 64 3d 22 22 2b 28 27 3c 64 69 76 20 69 64 3d 22 61 Data Ascii: label\|\|(a.oklabel=strOK);a.okclass\|\|(a.okclass="green");a.closelabel\|\|(a.closelabel=a.hideok?strClose:strCancel);a.classes\|\|(a.classes="");a.dont_blur\|\|$J(document.activeElement).blur();c=c\|\|function(){};$J("#ac_automodal").remove();var d=""+('<div id="a
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 5b 65 5d 2e 76 61 6c 75 65 3d 3d 66 2e 64 65 66 61 75 6c 74 3f 22 73 65 6c 65 63 74 65 64 22 3a 22 22 2c 66 2e 6f 70 74 69 6f 6e 73 5b 65 5d 2e 76 61 6c 75 65 2c 66 2e 6f 70 74 69 6f 6e 73 5b 65 5d 2e 6c 61 62 65 6c 29 3b 64 2b 3d 22 3c 2f 73 65 6c 65 63 74 3e 22 3b 64 2b 3d 22 3c 2f 66 69 65 6c 64 73 65 74 3e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 74 65 78 74 61 72 65 61 22 3a 66 2e 72 6f 77 73 3d 66 2e 72 6f 77 73 7c 7c 38 3b 66 2e 63 6f 6c 73 3d 66 2e 63 6f 6c 73 7c 7c 34 30 3b 64 2b 3d 73 70 72 69 6e 74 66 28 27 3c 66 69 65 6c 64 73 65 74 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 25 73 22 3e 27 2c 66 2e 63 6c 61 73 73 4e 61 6d 65 29 3b 64 2b 3d 73 70 72 69 6e 74 66 28 22 3c 6c 61 62 65 6c 3e 25 73 3c 2f 6c 61 62 65 6c 3e 22 2c 66 Data Ascii: ptions[e].value==f.default?"selected":"",f.options[e].value,f.options[e].label);d+="</select>";d+="</fieldset>";break;case "textarea":f.rows=f.rows\|\|8;f.cols=f.cols\|\|40;d+=sprintf('<fieldset class="input %s">',f.className);d+=sprintf("<label>%s</label>",f
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 63 29 7b 69 66 28 61 2e 6f 6b 29 7b 76 61 72 20 64 3d 0a 7b 7d 3b 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 69 6e 70 75 74 2c 20 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 74 65 78 74 61 72 65 61 2c 20 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 66 69 65 6c 64 73 65 74 20 73 65 6c 65 63 74 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 64 5b 63 2e 6e 61 6d 65 5d 3d 63 2e 76 61 6c 75 65 7d 29 3b 24 4a 28 22 23 61 63 5f 61 75 74 6f 6d 6f 64 61 6c 20 64 69 76 2e 6f 70 74 69 6f 6e 2d 75 69 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 5b 5b 24 4a 28 74 68 69 73 29 2e 64 61 74 61 28 22 6e 61 6d 65 22 29 5d 5d 3d 24 4a 28 22 2e 73 65 6c 65 63 74 65 64 Data Ascii: tion(c){if(a.ok){var d={};$J("#ac_automodal fieldset input, #ac_automodal fieldset textarea, #ac_automodal fieldset select").each(function(a,c){d[c.name]=c.value});$J("#ac_automodal div.option-ui").each(function(){d[[$J(this).data("name")]]=$J(".selected
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 4a 28 22 2e 61 63 2e 6c 6f 61 64 65 72 22 29 2e 6c 65 6e 67 74 68 26 26 24 4a 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 20 6c 6f 61 64 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 69 6e 67 5f 62 61 72 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 3a 20 30 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 61 6d 70 61 69 67 6e 2f 73 74 72 69 70 6f 2f 69 63 6f 6e 73 2f 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 2e 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 6f 76 65 72 6c 61 79 22 20 73 74 79 6c 65 3d 22 62 61 Data Ascii: J(".ac.loader").length&&$J("body").append('<div class="ac loader"><div class="loading_bar" style="display: flex;justify-content: center;border: 0;"><img src="/campaign/stripo/icons/loading-indicator.svg" width="32"></div><div class="loadoverlay" style="ba
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 74 3a 61 2c 66 75 6e 63 3a 63 2c 64 61 74 61 3a 66 7d 29 7d 3b 61 63 2e 61 70 69 2e 63 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 26 26 63 2e 65 72 72 6f 72 3f 63 6f 6e 73 6f 6c 65 5f 6c 6f 67 28 63 2e 65 72 72 6f 72 29 3a 61 28 63 29 7d 7d 3b 61 63 2e 61 70 69 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 76 61 72 20 64 3d 21 31 2c 67 3d 21 31 3b 63 7c 7c 28 63 3d 7b 65 72 72 6f 72 3a 22 45 72 72 6f 72 3a 20 55 6e 72 65 63 6f 67 6e 69 7a 65 64 20 72 65 73 70 6f 6e 73 65 20 72 65 63 65 69 76 65 64 2e 22 7d 29 3b 21 63 2e 6d 65 73 73 61 67 65 26 26 63 2e 65 72 72 6f 72 26 26 28 63 2e 6d 65 73 73 61 67 65 3d 0a 63 2e 65 72 72 6f 72 2c 64 3d 21 30 29 3b 69 66 28 63 Data Ascii: t:a,func:c,data:f})};ac.api.callback=function(a){return function(c){c&&c.error?console_log(c.error):a(c)}};ac.api.error=function(c,e){var d=!1,g=!1;c\|\|(c={error:"Error: Unrecognized response received."});!c.message&&c.error&&(c.message=c.error,d=!0);if(c
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 20 64 3b 31 3d 3d 63 2e 6c 65 6e 67 74 68 26 26 22 46 4f 52 4d 22 21 3d 63 5b 30 5d 2e 74 61 67 4e 61 6d 65 26 26 28 63 3d 61 28 22 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 22 29 2e 68 74 6d 6c 28 63 2e 68 74 6d 6c 28 29 29 29 3b 61 2e 65 61 63 68 28 63 2e 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 2e 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5c 5b 5d 24 2f 29 3f 28 66 5b 63 2e 6e 61 6d 65 5d 7c 7c 28 66 5b 63 2e 6e 61 6d 65 5d 3d 30 29 2c 64 5b 63 2e 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 5d 24 2f 2c 73 70 72 69 6e 74 66 28 22 5b 25 64 5d 22 2c 66 5b 63 2e 6e 61 6d 65 5d 29 29 5d 3d 63 2e 76 61 6c 75 65 2c 66 5b 63 2e 6e 61 6d 65 5d 2b 2b 29 3a 64 5b 63 2e 6e 61 6d 65 5d 3d 63 2e Data Ascii: )return d;1==c.length&&"FORM"!=c[0].tagName&&(c=a("<form></form>").html(c.html()));a.each(c.serializeArray(),function(a,c){c.name.match(/\[]$/)?(f[c.name]\|\|(f[c.name]=0),d[c.name.replace(/\[]$/,sprintf("[%d]",f[c.name]))]=c.value,f[c.name]++):d[c.name]=c.
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 3d 7b 30 3a 22 41 22 2c 31 3a 22 42 22 2c 32 3a 22 43 22 2c 33 3a 22 44 22 2c 34 3a 22 45 22 2c 35 3a 22 46 22 2c 36 3a 22 47 22 2c 37 3a 22 48 22 2c 38 3a 22 49 22 2c 39 3a 22 4a 22 2c 31 30 3a 22 4b 22 2c 31 31 3a 22 4c 22 2c 31 32 3a 22 4d 22 2c 31 33 3a 22 4e 22 2c 31 34 3a 22 4f 22 2c 31 35 3a 22 50 22 2c 31 36 3a 22 51 22 2c 31 37 3a 22 52 22 2c 31 38 3a 22 53 22 2c 31 39 3a 22 54 22 2c 32 30 3a 22 55 22 2c 32 31 3a 22 56 22 2c 32 32 3a 22 57 22 2c 32 33 3a 22 58 22 2c 32 34 3a 22 59 22 2c 32 35 3a 22 5a 22 2c 32 36 3a 22 61 22 2c 32 37 3a 22 62 22 2c 32 38 3a 22 63 22 2c 32 39 3a 22 64 22 2c 33 30 3a 22 65 22 2c 33 31 3a 22 66 22 2c 33 32 3a 22 67 22 2c 33 33 3a 22 68 22 2c 33 34 3a 22 69 22 2c 33 35 3a 22 6a 22 2c 33 36 3a 22 6b 22 2c 33 37 3a 22 Data Ascii: ={0:"A",1:"B",2:"C",3:"D",4:"E",5:"F",6:"G",7:"H",8:"I",9:"J",10:"K",11:"L",12:"M",13:"N",14:"O",15:"P",16:"Q",17:"R",18:"S",19:"T",20:"U",21:"V",22:"W",23:"X",24:"Y",25:"Z",26:"a",27:"b",28:"c",29:"d",30:"e",31:"f",32:"g",33:"h",34:"i",35:"j",36:"k",37:"
2025-01-14 15:20:51 UTC	1369	IN	Data Raw: 2e 63 68 61 72 41 74 28 66 2b 32 29 2c 32 29 29 3b 69 66 28 22 5f 22 3d 3d 64 2e 63 68 61 72 41 74 28 66 2b 33 29 29 62 72 65 61 6b 3b 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 28 64 2e 63 68 61 72 41 74 28 66 2b 0a 32 29 2c 36 29 7c 63 28 64 2e 63 68 61 72 41 74 28 66 2b 33 29 2c 30 29 29 7d 72 65 74 75 72 6e 20 65 7d 7d 29 28 29 3b 61 63 2e 62 72 6f 77 73 65 72 3d 7b 7d 3b 0a 76 61 72 20 42 72 6f 77 73 65 72 44 65 74 65 63 74 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 62 72 6f 77 73 65 72 3d 74 68 69 73 2e 73 65 61 72 63 68 53 74 72 69 6e 67 28 74 68 69 73 2e 64 61 74 61 42 72 6f 77 73 65 72 29 7c 7c 22 41 6e 20 75 6e 6b 6e 6f 77 6e 20 62 72 6f 77 73 65 72 22 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e Data Ascii: .charAt(f+2),2));if("_"==d.charAt(f+3))break;e+=String.fromCharCode(a(d.charAt(f+2),6)\|c(d.charAt(f+3),0))}return e}})();ac.browser={};var BrowserDetect={init:function(){this.browser=this.searchString(this.dataBrowser)\|\|"An unknown browser";this.version

Target ID:	0
Start time:	10:20:17
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:20:20
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1996,i,306823133635020388,6881046364661103510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:20:27
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://yourexcellency.activehosted.com"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://yourexcellency.activehosted.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Windows Analysis Report
http://yourexcellency.activehosted.com