Edit tour

Windows Analysis Report
http://vtaurl.com

Overview

General Information

Sample URL:	http://vtaurl.com
Analysis ID:	875451
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Antivirus detection for URL or domain

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6012 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 5972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1936 --field-trial-handle=1712,i,7830534653827184502,17353749138157758399,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 6376 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://vtaurl.com MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

Joe Sandbox Signatures

• AV Detection
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://vtaurl.com

Avira URL Cloud: detection malicious, Label: malware

Multi AV Scanner detection for domain / URL

Source: https://vtaurl.com/

Virustotal: Detection: 10%

Perma Link

Multi AV Scanner detection for submitted file

Source: http://vtaurl.com

Virustotal: Detection: 10%

Perma Link

Antivirus detection for URL or domain

Source: https://vtaurl.com/static/frontend/libs/svg-injector/dist/svg-injector.min.js	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/cookieconsent.min.css	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/reddit.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/404.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/adroll.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/shortcuts.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/snapchat.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/quora.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/bing.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/frontend/libs/jquery/dist/jquery.min.js	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/pinterest.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/filters.png	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/favicon.ico	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/frontend/libs/select2/dist/css/select2.min.css	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/profiles.png	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/frontend/js/app.min.js	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/ga.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/frontend/libs/feather-icons/dist/feather.min.js	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/flags/us.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/facebook.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/frontend/css/style.css	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/frontend/libs/clipboard/dist/clipboard.min.js	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/zapier.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/linkedin.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/flags/gb.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/slack.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/content/auto_site_logo.png	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/wp.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/bundle.pack.js	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/landing.png	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/frontend/css/style.min.css	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/flags/fr.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/gtm.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/twitter.svg	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/server.min.js	Avira URL Cloud: Label: malware
Source: https://vtaurl.com/static/images/qrcodes.png	Avira URL Cloud: Label: malware

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 25 May 2023 12:46:53 GMTContent-Type: text/css; charset=utf-8Content-Length: 12657Connection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000Content-Encoding: gzipETag: "613fa20b-3171"Last-Modified: Mon, 13 Sep 2021 19:10:03 GMTcf-cdnjs-via: cfworker/kvCross-Origin-Resource-Policy: cross-originTiming-Allow-Origin: *X-Content-Type-Options: nosniffVary: Accept-EncodingCF-Cache-Status: HITAge: 506209Expires: Tue, 14 May 2024 12:46:53 GMTAccept-Ranges: bytesReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ArWmzjElaCvJcLcrdkQxVI%2BgFFVG1qQ9f7aRbBIsRsVzyd9TIO%2FxVgq58hYE02VAXpMgXs%2FM8IJU258E%2F%2F1rI%2BkvfQR3A46CSBa%2Bs1jaALlMuUljQ4ppPRoNTPmbfS8GaBUKq5fd"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ccde23dec3635ea-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 02 ff cc bd 5b af e4 38 76 ef f9 ee 4f b1 a7 1a 06 aa 8c 52 96 ae 71 c9 c4 cc b4 ed 41 03 0d d8 98 87 e3 07 1b 38 2f 94 b4 14 62 86 24 aa 48 6a c7 8e 4c d4 77 3f 90 22 16 a5 d8 fb bf a2 aa 7d fa e1 d8 40 f6 2e e9 17 12 c5 eb e2 ba f1 97 7f fa bf fe e1 e5 9f 5e fe 62 06 ff f2 cf 17 72 a6 a7 97 bf 58 a2 97 e2 53 52 7c ca 5f ca eb cb 9f 1b 33 78 75 bf 17 bd b4 de 8f ee f3 2f bf 6c ae 7e aa 4c 3f 3f e5 df 74 45 83 7b 02 fd d2 dd 88 5f 9a f9 15 3f fe b5 32 83 fb fc f2 af ff fa f2 2f ff f5 92 7f 8a 7f 5e ca e1 3e bf fc 8f bf fe db cb ff ff 97 7f 7b 49 3e 25 3f bf fc ab a9 e9 f3 cb bf ff f5 3f f8 f9 3f fd c3 cb 3f fd f2 0f 9f 1a f5 f3 a7 46 95 f3 3f f5 fc 4f 37 ff 63 e7 7f dc f7 a8 37 df 22 e3 de a2 b9 00 91 eb 8d f1 ad 1e 4e 9f 4f 56 5d 5d a5 3a fa 12 5d a8 3c 6b ff 1e 50 83 d7 aa d3 ca 51 fd a5 d6 6e ec d4 f5 b3 1e 3a 3d 50 54 76 a6 Data Ascii: [8vORqA8/b$HjLw?"}@.^brXSR|_3xu/l~L??tE{_?2/^>{I>%????F?O7c7"NOV]]:]<kPQn:=PTv

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/select2/dist/css/select2.min.css HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/cookieconsent.min.css HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/css/style.min.css HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/bundle.pack.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/clipboard/dist/clipboard.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/js/app.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/server.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/auto_site_logo.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/landing.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/profiles.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/filters.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/qrcodes.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/flags/us.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/flags/fr.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/flags/gb.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/wp.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/slack.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/shortcuts.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/gtm.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/facebook.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/zapier.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/bing.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/twitter.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/snapchat.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/reddit.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/ga.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/linkedin.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/pinterest.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/quora.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/adroll.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/quora.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga_833P6YR6PG=GS1.1.1685051215.1.0.1685051215.0.0.0; _ga=GA1.1.1078727265.1685051215
Source: global traffic	HTTP traffic detected: GET /static/images/pinterest.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga_833P6YR6PG=GS1.1.1685051215.1.0.1685051215.0.0.0; _ga=GA1.1.1078727265.1685051215
Source: global traffic	HTTP traffic detected: GET /static/images/adroll.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga_833P6YR6PG=GS1.1.1685051215.1.0.1685051215.0.0.0; _ga=GA1.1.1078727265.1685051215
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/auto_site_logo.png HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/landing.png HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/profiles.png HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/filters.png HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/qrcodes.png HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/flags/us.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/flags/fr.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/flags/gb.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/wp.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/slack.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/shortcuts.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/gtm.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/facebook.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/zapier.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/bing.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/twitter.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/snapchat.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/reddit.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/ga.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/linkedin.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/select2/dist/css/select2.min.css HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/cookieconsent.min.css HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/frontend/css/style.min.css HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/bundle.pack.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/clipboard/dist/clipboard.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/frontend/js/app.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/server.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /content/auto_site_logo.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/landing.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/profiles.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/filters.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/qrcodes.png HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/flags/us.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/flags/fr.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/flags/gb.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/wp.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/slack.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/shortcuts.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/gtm.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/facebook.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/zapier.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/bing.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://vtaurl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/twitter.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://vtaurl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/snapchat.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/reddit.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/ga.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/linkedin.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/pinterest.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/quora.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/adroll.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051216.0.0.0
Source: global traffic	HTTP traffic detected: GET /pricinghttps://vtaurl.com/developershttps://vtaurl.com/faqhttps://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/register HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/frontend/css/style.css HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://vtaurl.com/pricinghttps://vtaurl.com/developershttps://vtaurl.com/faqhttps://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/registerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/jquery/dist/jquery.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vtaurl.com/pricinghttps://vtaurl.com/developershttps://vtaurl.com/faqhttps://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/registerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/svg-injector/dist/svg-injector.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vtaurl.com/pricinghttps://vtaurl.com/developershttps://vtaurl.com/faqhttps://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/registerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/feather-icons/dist/feather.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://vtaurl.com/pricinghttps://vtaurl.com/developershttps://vtaurl.com/faqhttps://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/registerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/404.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://vtaurl.com/pricinghttps://vtaurl.com/developershttps://vtaurl.com/faqhttps://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/registerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/images/404.svg HTTP/1.1Host: vtaurl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
Source: global traffic	HTTP traffic detected: GET /static/frontend/css/style.css HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/jquery/dist/jquery.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/svg-injector/dist/svg-injector.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/frontend/libs/feather-icons/dist/feather.min.js HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/404.svg HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtaurl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contacthttps://vtaurl.com/report HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
Source: global traffic	HTTP traffic detected: GET /pricing HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
Source: global traffic	HTTP traffic detected: GET /developershttps://vtaurl.com/faq HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051253.0.0.0
Source: global traffic	HTTP traffic detected: GET /qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/register HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051253.0.0.0
Source: global traffic	HTTP traffic detected: GET /ivantanhttps://vtaurl.com/contacthttps://vtaurl.com/report HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051253.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051253.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: vtaurl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051268.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: vtaurl.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://vtaurl.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: http://vtaurl.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Referer: http://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: http://vtaurl.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Referer: http://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: vtaurl.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://vtaurl.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga_833P6YR6PG=GS1.1.1685051215.1.0.1685051215.0.0.0; _ga=GA1.1.1078727265.1685051215
Source: global traffic	HTTP traffic detected: GET /ivantan HTTP/1.1Host: vtaurl.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0

Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: b,"vert.pix");break;case "PERCENT":Sz(d.verticalThresholds,b,"vert.pct")}Rw("sdl","init",!1)?Rw("sdl","pending",!1)\|\|I(function(){return Tz()}):(Pw("sdl","init",!0),Pw("sdl","pending",!0),I(function(){Tz();if(Uz()){var e=Vz();sc(z,"scroll",e);sc(z,"resize",e)}else Pw("sdl","init",!1)}));return b}Zz.K="internal.enableAutoEventOnScroll";var cc=ca(["data-gtm-yt-inspected-"]),$z=["www.youtube.com","www.youtube-nocookie.com"],aA,bA=!1; equals www.youtube.com (Youtube)
Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: m=!!a.get("fixMissingApi");if(!(d\|\|e\|\|f\|\|g.length\|\|h.length))return;var n={fh:d,bh:e,eh:f,Lh:g,Mh:h,ve:m,rb:b},p=z.YT,q=function(){hA(n)};if(p)return p.ready&&p.ready(q),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(kA(w,"iframe_api")\|\|kA(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!bA&&iA(x[A],n.ve))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.22.0Date: Thu, 25 May 2023 12:47:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.22.0Date: Thu, 25 May 2023 12:47:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.22.0Date: Thu, 25 May 2023 12:47:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.22.0Date: Thu, 25 May 2023 12:47:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.22.0Date: Thu, 25 May 2023 12:47:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.22.0Date: Thu, 25 May 2023 12:47:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout=60Vary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffContent-Encoding: gzipData Raw: 34 61 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 57 db 6e e3 36 10 7d 6e 80 fd 87 a9 1e 9a 16 30 ad dc 36 2d 02 2b 68 b2 4d 8b 05 52 34 e8 26 45 fb 14 50 e2 d8 62 42 91 5a 92 b2 a3 16 fd f7 0e 25 3b 96 2f 72 36 6d 5f d6 80 25 8a 9a 39 33 73 e6 42 7b f4 e5 0f bf bc bb fd e3 e6 0a 72 5f a8 f3 37 7b a3 70 07 c5 f5 24 89 50 47 b4 f3 66 0f e8 33 ca 91 8b f3 76 dd 3c 17 e8 39 64 39 b7 0e 7d 12 55 7e cc be 8b 36 de e7 de 97 0c 3f 56 72 9a 44 bf b3 bb 0b f6 ce 14 25 f7 32 55 18 41 66 b4 47 4d ca ef af 12 14 13 dc 54 d7 bc c0 24 9a 4a 9c 95 c6 fa 8e c6 4c 0a 9f 27 02 a7 32 43 d6 3c 0c 40 6a e9 25 57 cc 65 5c 61 72 38 00 97 5b a9 1f 99 37 6c 2c 7d a2 cd 32 98 c6 82 97 5e e1 f9 95 b5 c6 02 83 df 6e 2f e0 ce 2a f8 90 93 25 d4 68 47 71 2b b0 f7 45 d7 17 81 2e b3 b2 f4 d2 e8 8e 3b d7 64 07 7e e6 9a 4f b0 a0 0d b8 51 dc 8f 8d 2d 20 ad a4 f2 40 4b b8 22 51 5b 5a e9 10 ae 71 8a 6a 08 97 e8 3c fc 68 11 e1 ee d7 eb a5 dd 01 5c 5a ae 05 0a 10 a6 e0 52 c3 57 70 71 f3 7e 08 37 68 9d d1 5c c9 3f e9 d5 94 53 b0 35 45 48 4a a0 c8 ba 23 31 2e 68 3b a3 b7 de f2 ec 51 ea 49 b4 e6 fc 23 d6 33 63 85 eb 78 0e 69 f0 a2 a2 c0 dd d2 01 51 93 bc cc 1a 60 d0 26 04 50 69 31 80 71 70 76 45 d6 0d 56 9f 61 69 b2 b4 a6 44 eb eb 24 32 93 33 65 42 52 3a 76 51 df df 7d 88 20 de 2e ee eb b2 2b 3c c3 d4 49 8f bd e2 e4 42 47 3a d4 9c 3b 8b e3 a9 e7 f4 62 98 99 22 96 44 8c e7 ba df 5e c8 74 07 a2 b7 28 7a 11 3e af ba e8 8b 22 b0 7c 1f 6a e5 b5 5c b4 f5 e5 67 d2 53 34 67 19 b7 a2 83 e0 aa a2 e0 b6 be 57 dc 4e f0 5e 16 3c b4 fa 76 cd 36 cd cf 9a df 2f 12 d7 23 fe e9 79 eb 01 f8 bc d2 d6 47 b7 45 ee 8d 7d 05 6f ad 2b 3b 7b a6 51 6d 06 80 45 95 44 32 0b 0c 85 be a4 75 c8 60 fc c4 da bd dc e2 78 6b d3 8d f9 34 48 0c e9 12 81 a3 38 5d 12 1d 1f 3d 1d 1f cd 0b 67 09 9e 71 6d b4 a4 09 b1 03 6d 19 51 18 de 9d 31 be 84 71 be 56 e8 72 44 bf 03 c7 79 3a 7e b2 78 6c 9b d0 45 9c 39 17 37 8a 43 5a 45 20 c5 0a ce fc 44 1a c5 f3 d3 6f fe 98 1a 51 77 0f 2b de 6b 8f 38 56 dc 51 e4 a9 d7 40 5f a6 b1 a2 7c aa 66 1d e8 61 46 ab 1a 6c 18 b0 28 58 26 6d a6 10 4a 43 8d 40 35 c9 78 ea 8c aa 3c 82 c2 b1 67 27 e0 4d 49 57 c1 88 2f a4 9b 9a 30 a9 89 00 64 63 85 4f 94 9f d0 0f 49 f4 93 81 94 4a a6 7b 9e 36 6e ba 92 eb 8e 3f a4 4b 05 ca da 3c ae c9 36 f2 12 04 f7 9c 8d a9 bc 72 b4 49 c4 a9 bd 66 2c b8 12 9d 8f 62 b9 0e 1f 07 fc 2e 2d 31 ef 3e 39 cc 42 4c eb 5a 42 4e 17 3e 85 72 a4 ba a4 63 44 34 01 41 b8 b0 8c 18 28 b6 3b d8 d1 25 cf 80 ba 69 42 51 79 2c 1c cb 30 74 28 3c 54 ce cb 71 cd e6 95 ce 52 f4 33 44 0d 85 d4 6c 9a b3 c3 83 83 6d c0 9b 8e 29 76 78 04 e1 56 08 76 da 2c 9e 14 fb 16 e8 34 25 06 69

Source: chromecache_264.1.dr, chromecache_181.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_249.1.dr, chromecache_183.1.dr	String found in binary or memory: https://clipboardjs.com/
Source: chromecache_156.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_156.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_197.1.dr, chromecache_219.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Nunito
Source: chromecache_169.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8u
Source: chromecache_169.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v15/pe1kMImSLYBIv1o4X1M8cce4OdVisMz5nZRqy6cmmmU3t2FQWEAEOvV9w
Source: chromecache_216.1.dr, chromecache_239.1.dr	String found in binary or memory: https://github.com/iconic/SVGInjector
Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_214.1.dr, chromecache_263.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+904; SOCS=CAISHAgCEhJnd3NfMjAyMjA4MDgtMF9SQzEaAmVuIAEaBgiAvOuXBg

Source: classification engine

Classification label: mal72.win@34/112@5/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1936 --field-trial-handle=1712,i,7830534653827184502,17353749138157758399,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://vtaurl.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1936 --field-trial-handle=1712,i,7830534653827184502,17353749138157758399,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	5 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	6 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	4 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://vtaurl.com	100%	Avira URL Cloud	malware
http://vtaurl.com	10%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
https://vtaurl.com/static/frontend/libs/svg-injector/dist/svg-injector.min.js	100%	Avira URL Cloud	malware
https://vtaurl.com/static/cookieconsent.min.css	100%	Avira URL Cloud	malware
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog/mc/collect	0%	URL Reputation	safe
https://vtaurl.com/static/images/reddit.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/404.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/	10%	Virustotal		Browse
https://vtaurl.com/static/images/adroll.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/shortcuts.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/snapchat.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/quora.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/bing.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/frontend/libs/jquery/dist/jquery.min.js	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/pinterest.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/filters.png	100%	Avira URL Cloud	malware
https://vtaurl.com/favicon.ico	100%	Avira URL Cloud	malware
https://vtaurl.com/static/frontend/libs/select2/dist/css/select2.min.css	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/profiles.png	100%	Avira URL Cloud	malware
https://vtaurl.com/static/frontend/js/app.min.js	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/ga.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/frontend/libs/feather-icons/dist/feather.min.js	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/flags/us.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/facebook.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/frontend/css/style.css	100%	Avira URL Cloud	malware
https://vtaurl.com/static/frontend/libs/clipboard/dist/clipboard.min.js	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/zapier.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/linkedin.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/flags/gb.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/slack.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/content/auto_site_logo.png	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/wp.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/bundle.pack.js	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/landing.png	100%	Avira URL Cloud	malware
https://vtaurl.com/static/frontend/css/style.min.css	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/flags/fr.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/gtm.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/twitter.svg	100%	Avira URL Cloud	malware
https://vtaurl.com/static/server.min.js	100%	Avira URL Cloud	malware
https://vtaurl.com/static/images/qrcodes.png	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
accounts.google.com	172.217.168.45	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
vtaurl.com	5.189.139.221	true	false	unknown
clients.l.google.com	216.58.215.238	true	false	high
clients2.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://vtaurl.com/	false	10%, Virustotal, Browse	unknown
https://vtaurl.com/static/frontend/libs/svg-injector/dist/svg-injector.min.js	true	Avira URL Cloud: malware	unknown
https://vtaurl.com/pricing	false		unknown
https://vtaurl.com/	false	10%, Virustotal, Browse	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css	false		high
http://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2	false		high
https://vtaurl.com/pricinghttps://vtaurl.com/developershttps://vtaurl.com/faqhttps://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/register	false		unknown
http://vtaurl.com/	true		unknown
http://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css	false		high
https://vtaurl.com/static/cookieconsent.min.css	true	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/reddit.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/404.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/adroll.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/shortcuts.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/bing.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/developershttps://vtaurl.com/faq	false		unknown
https://vtaurl.com/static/images/snapchat.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/quora.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/frontend/libs/jquery/dist/jquery.min.js	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/pinterest.svg	false	Avira URL Cloud: malware	unknown
http://vtaurl.com/	true		unknown
https://vtaurl.com/static/images/filters.png	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/contacthttps://vtaurl.com/report	false		unknown
https://vtaurl.com/static/frontend/libs/select2/dist/css/select2.min.css	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/profiles.png	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/frontend/js/app.min.js	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/ga.svg	false	Avira URL Cloud: malware	unknown
http://vtaurl.com/ivantan	true		unknown
https://vtaurl.com/static/frontend/libs/feather-icons/dist/feather.min.js	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/contacthttps://vtaurl.com/report	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2	false		high
https://vtaurl.com/static/images/flags/us.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/pricing	false		unknown
https://vtaurl.com/ivantanhttps://vtaurl.com/contacthttps://vtaurl.com/report	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2	false		high
https://vtaurl.com/static/frontend/css/style.css	false	Avira URL Cloud: malware	unknown
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://vtaurl.com/static/images/facebook.svg	false	Avira URL Cloud: malware	unknown
http://vtaurl.com/ivantan	true		unknown
https://vtaurl.com/static/frontend/libs/clipboard/dist/clipboard.min.js	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/zapier.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/linkedin.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/flags/gb.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/slack.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/content/auto_site_logo.png	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/wp.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/bundle.pack.js	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/register	false		unknown
https://vtaurl.com/pricinghttps://vtaurl.com/developershttps://vtaurl.com/faqhttps://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/register	false		unknown
https://vtaurl.com/static/images/landing.png	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/frontend/css/style.min.css	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/developershttps://vtaurl.com/faq	false		unknown
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://vtaurl.com/static/images/flags/fr.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/gtm.svg	false	Avira URL Cloud: malware	unknown
http://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2	false		high
https://vtaurl.com/qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/register	false		unknown
https://vtaurl.com/ivantanhttps://vtaurl.com/contacthttps://vtaurl.com/report	false		unknown
https://vtaurl.com/static/images/twitter.svg	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/server.min.js	false	Avira URL Cloud: malware	unknown
https://vtaurl.com/static/images/qrcodes.png	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_214.1.dr, chromecache_263.1.dr	false		high
https://clipboardjs.com/	chromecache_249.1.dr, chromecache_183.1.dr	false		high
https://fontawesome.com/license/free	chromecache_156.1.dr	false		high
https://fontawesome.com	chromecache_156.1.dr	false		high
https://www.youtube.com/iframe_api	chromecache_214.1.dr, chromecache_263.1.dr	false		high
http://jedwatson.github.io/classnames	chromecache_264.1.dr, chromecache_181.1.dr	false	URL Reputation: safe	unknown
https://cct.google/taggy/agent.js	chromecache_214.1.dr, chromecache_263.1.dr	false	URL Reputation: safe	unknown
https://www.merchant-center-analytics.goog/mc/collect	chromecache_214.1.dr, chromecache_263.1.dr	false	URL Reputation: safe	unknown
https://td.doubleclick.net	chromecache_214.1.dr, chromecache_263.1.dr	false		high
https://github.com/iconic/SVGInjector	chromecache_216.1.dr, chromecache_239.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_214.1.dr, chromecache_263.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
5.189.139.221	vtaurl.com	Germany	51167	CONTABODE	false
216.58.215.238	clients.l.google.com	United States	15169	GOOGLEUS	false
172.217.168.45	accounts.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	37.1.0 Beryl
Analysis ID:	875451
Start date and time:	2023-05-25 14:45:57 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://vtaurl.com
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.win@34/112@5/6
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://vtaurl.com/ Browse: https://vtaurl.com/pricing Browse: https://vtaurl.com/developers Browse: https://vtaurl.com/faq Browse: https://vtaurl.com/qr-codes Browse: https://vtaurl.com/bio-profiles Browse: https://vtaurl.com/user/login Browse: https://vtaurl.com/user/register Browse: http://vtaurl.com/ivantan Browse: https://vtaurl.com/contact Browse: https://vtaurl.com/report Browse: https://vtaurl.com/pricing Browse: https://vtaurl.com/developers Browse: https://vtaurl.com/faq Browse: https://vtaurl.com/qr-codes Browse: https://vtaurl.com/bio-profiles Browse: https://vtaurl.com/user/login Browse: https://vtaurl.com/user/register Browse: https://vtaurl.com/ivantan Browse: https://vtaurl.com/contact Browse: https://vtaurl.com/report Browse: https://vtaurl.com/ Browse: https://vtaurl.com/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 172.217.168.3, 34.104.35.123, 172.217.168.74, 172.217.168.67, 142.250.203.104, 172.217.168.10, 142.250.203.106, 216.239.34.36, 216.239.32.36
Excluded domains from analysis (whitelisted): fonts.googleapis.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, fonts.gstatic.com, www.googletagmanager.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, region1.google-analytics.com
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	21104
Entropy (8bit):	4.500664010986377
Encrypted:	false
SSDEEP:	384:WMdGGofjJjtx6P/PFtsYf3skMx8F0mmtuCsnxJCuHZJ2ZXrXckB:Ri7htxmFtBEk3FmtuCsxJCuwXrXV
MD5:	A6A905C4C9D0D5810BC29330A90AA4B9
SHA1:	041A18DBF8BCB8D932BE883C971230D0B07D0269
SHA-256:	C422320961BEDA694D3872F3B8F0A80914CE21907094BC0E3290DBD86EA837B5
SHA-512:	97E17093B06B0CB0275E098CFCAF897ED169914BAFBD8A68D9DB90BF4D9635CFF019D93A4D5659181085FA384178F78CE41AB8AB80D6DEC2C029805AED1E9CCA
Malicious:	false
Reputation:	low
Preview:	<svg id="fd59ce54-f850-4dfc-bc34-dd7d379d600e" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="1074.392" height="584.231" viewBox="0 0 1074.392 584.231"><title>page not found</title><ellipse cx="540.64346" cy="549.3094" rx="527.5" ry="34.9216" fill="#f2f2f2"/><path d="M583.47969,324.89424c-85.94407,0-147.651,55.13938-147.651,183.79791,0,145.813,61.70691,184.41057,147.651,184.41057s151.327-42.27352,151.327-184.41057C734.80664,356.75255,669.42376,324.89424,583.47969,324.89424Zm.56495,319.80837c-59.52686,0-90.62592-34.92288-90.62592-135.9163,0-89.11185,32.37209-136.10461,91.899-136.10461s91.899,30.86774,91.899,136.10461C677.21663,607.23367,643.5715,644.70261,584.04464,644.70261Z" transform="translate(-63.054 -157.8845)" fill="#2f2e41"/><path d="M384.36531,591.40121H348.831V486.76183A20.95585,20.95585,0,0,0,327.87517,465.806h-8.32638a20.95585,20.95585,0,0,0-20.95586,20.95585V591.40121H198.36285a11.96327,11.96327,0,0,1-10.57763-17.552l106.0824-200.78034A20.95585,20.95585,0,0,0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 25, 2023 14:46:51.229413986 CEST	56924	53	192.168.2.3	8.8.8.8
May 25, 2023 14:46:51.231559992 CEST	60625	53	192.168.2.3	8.8.8.8
May 25, 2023 14:46:51.254823923 CEST	53	60625	8.8.8.8	192.168.2.3
May 25, 2023 14:46:51.257811069 CEST	53	56924	8.8.8.8	192.168.2.3
May 25, 2023 14:46:52.382015944 CEST	51139	53	192.168.2.3	8.8.8.8
May 25, 2023 14:46:52.438759089 CEST	53	51139	8.8.8.8	192.168.2.3
May 25, 2023 14:46:53.043919086 CEST	60582	53	192.168.2.3	8.8.8.8
May 25, 2023 14:46:53.077642918 CEST	53	60582	8.8.8.8	192.168.2.3
May 25, 2023 14:47:57.142558098 CEST	64967	53	192.168.2.3	8.8.8.8
May 25, 2023 14:47:57.187529087 CEST	53	64967	8.8.8.8	192.168.2.3

Timestamp	kBytes transferred	Direction	Data
May 25, 2023 14:46:52.651721001 CEST	358	OUT	GET / HTTP/1.1 Host: vtaurl.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 25, 2023 14:46:52.872488022 CEST	359	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; path=/ X-Cache: HIT from Backend X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Encoding: gzip Data Raw: 63 63 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 5b eb 93 db b6 11 ff dc cc f4 7f 40 95 99 e4 8b 21 de 9d 7d 6e e2 9c ae f5 23 6d 3c e3 4e 5c 3f da e6 93 07 22 21 12 39 90 a0 01 50 8f fc f5 dd 05 48 09 94 48 8a 3a 9f 9d 38 13 cd dc 09 04 01 ec 62 b1 8f df 02 d0 d5 5f 9e fd f8 f4 cd 4f 2f bf 27 99 cd e5 f5 9f bf b8 c2 6f 22 59 91 ce 26 bc 98 40 0d 81 cf 55 c6 59 52 97 dd 73 ce 2d 23 71 c6 b4 e1 76 36 a9 ec 82 7e 33 39 78 9f 59 5b 52 fe be 12 cb d9 e4 7f f4 ed 63 fa 54 e5 25 b3 62 2e f9 84 c4 aa b0 bc 80 ce cf bf 9f f1 24 e5 87 dd 0b 96 f3 d9 64 29 f8 aa 54 da 06 3d 56 22 b1 d9 2c e1 4b 11 73 ea 1e ee 11 51 08 2b 98 a4 26 66 92 cf ce ef 11 93 69 51 dc 50 ab e8 42 d8 59 a1 70 fc 80 82 15 56 f2 eb ff bc 79 4c de 6a 49 5e 67 40 81 17 5c 5f 45 fe c5 17 7f 0a 79 48 b8 89 b5 28 ad 50 45 c0 c6 0b 18 9f fc 8b 15 2c e5 39 54 90 97 92 d9 85 d2 39 99 57 42 5a 02 45 f2 3d 34 d5 a5 16 86 93 17 7c c9 e5 94 3c e1 c6 92 7f 68 ce c9 db 57 2f 76 74 ef 91 27 9a 15 09 4f 48 a2 72 26 0a f2 15 79 fc f2 f9 94 bc e4 da a8 82 49 f1 0b bc 5a 32 98 e4 06 66 06 9d 88 04 ea 06 9a b1 04 aa 63 78 6b 35 8b 6f 44 91 4e f6 98 bf e1 9b 95 d2 89 09 38 27 73 e4 a2 82 89 9b 1d 03 c9 06 da 8b d8 0d 4c 0a 85 13 a8 8a e4 1e 59 20 b3 ad b6 e6 5e fb 99 ec 48 96 5a 95 5c db cd 6c a2 d2 47 52 e1 62 04 74 79 f1 ee ed eb 09 89 ba 9b db 4d 19 36 5e f1 b9 11 96 f7 36 07 16 82 d6 a8 6b e6 51 14 2d 2d 83 17 d3 58 e5 fd 74 70 85 83 ae 07 4a d0 db f3 f3 d2 83 be 59 a0 54 df a1 6e 8c 95 81 d7 23 bb 12 16 66 f1 28 66 3a 09 7a 9a 2a cf 99 de bc 93 4c a7 fc 9d c8 19 9a 72 77 4f bf 9c db 9e 7f 17 c0 b1 65 45 5f f3 e3 eb d4 d3 f1 f3 5a a6 3e 31 6b ce ac d2 27 c8 cb b3 32 6c 13 d8 d5 19 b8 e6 72 36 11 31 4a 08 ed 0e ca b8 72 d1 9a fa ba 4c f3 45 d7 00 d1 82 2d b1 c5 14 fe 4d 88 81 79 9a d9 e4 fe c5 fa fe 45 ad 30 bb c1 63 56 a8 42 80 07 e8 1f 0d d8 09 5c f2 ae ab b1 1b c9 4d c6 b9 6d fa 46 51 9c 14 3f 9b 69 2c 55 95 2c 40 d7 b8 e3 86 fd cc d6 91 14 73 13 2d 60 d2 94 ad b8 51 39 8f 2e a7 e7 97 d3 07 51 6c 4c c4 a4 9c e6 a2 98 42 b9 15 61 ba 89 79 51 58 be b6 d8 79 40 0c c6 42 1c 8b a3 85 76 b2 4e 3c 0f 86 4b 1e db 8b 28 11 c6 f5 6f 2a 3e 22 03 b1 52 37 82 c3 82 18 58 f1 13 e8 8c 9e 98 9b 06 76 dc 0e 4e 44 d2 1a 2b 20 16 7e 02 16 bc 35 ee b5 5b 32 4d 58 59 62 20 99 91 af 3b 38 f9 fa bb 60 88 a8 73 8c dd eb 00 9f 5c cd 55 b2 b9 ee 60 03 db 40 b0 8a 25 33 a0 b4 fe 89 82 19 16 Data Ascii: cc6[@!}n#m<N\?"!9PHH:8b_O/'o"Y&@UYRs-#qv6~39xY[RcT%b.$d)T=V",KsQ+&fiQPBYpVyLjI^g@\_EyH(PE,9T9WBZE=4\|<hW/vt'OHr&yIZ2fcxk5oDN8'sLY ^HZ\lGRbtyM6^6kQ--XtpJYTn#f(f:zLrwOeE_Z>1k'2lr61JrLE-MyE0cVB\MmFQ?i,U,@s-`Q9.QlLBayQXy@BvN<K(o>"R7XvND+ ~5[2MXYb ;8`s\U`@%3
May 25, 2023 14:46:52.872529030 CEST	360	IN	Data Raw: a6 04 7d 2a ac 9f 59 5d ef 4c e9 3a 24 72 6c 9a 8e 46 c1 96 0d 01 28 ce 61 8e fe cb 8d d7 94 f9 ba 04 e7 41 65 da 54 24 4c df 90 79 ea be 3d 17 41 af 2e 01 5f 25 62 4b 07 cd 1d 9a a1 3b ec 91 0e 6b b3 44 e7 e8 bb 06 ac 92 38 cf db e9 70 bb 29 1c Data Ascii: }Y]L:$rlF(aAeT$Ly=A._%bK;kD8p)\<%LvNMX%U%F@DXy_WV{BM%MYV7"A_Kwmqmds478H`zOfKu;{jd~.
May 25, 2023 14:46:52.872545004 CEST	362	IN	Data Raw: 0a 4a b7 68 3a b1 c4 78 f8 d0 23 42 37 dd 06 25 5a 50 09 80 4f 36 53 89 3b 82 b3 13 c2 9c d2 77 5f 4d f0 53 6f 4e 1a b4 48 53 dc 38 a9 ab 29 8e 3c 98 55 06 ab 27 8a b2 6a 92 bb a0 8c 47 f2 a0 58 bd 81 6b 3b 94 eb 13 5c d6 d8 3a 38 64 a2 39 ae 9b Data Ascii: Jh:x#B7%ZPO6S;w_MSoNHS8)<U'jGXk;\:8d9gNag\!aD*"kbL}n8jB{zc#4jny. =rGshgMUBsS"IxTDJwD=RcR=nCpy\H 9=
May 25, 2023 14:46:52.873220921 CEST	363	IN	Data Raw: 66 31 33 0d 0a ec 5d eb 73 db c6 11 ff ec ce f4 7f b8 ea 43 64 4f 45 ca 92 6c 29 b5 13 75 fc 6e 26 4a c2 ca 52 33 69 dd e9 1c 89 23 09 1b 2f e3 40 2a 8c e3 ff bd bb 7b 77 20 08 e2 71 20 69 8a 54 a8 19 cb 22 78 00 0e 8b dd bd 7d fe ae fc 9c 35 09 Data Ascii: f13]sCdOEl)un&JR3i#/@*{w q iT"x}5?6]_7u #$kX<vz+(X\[h$TD7n2Dq\|@.v-a6U!LDTZusYko.s6?g=h4S0$=
May 25, 2023 14:46:52.873244047 CEST	364	IN	Data Raw: 55 3d 11 b0 be 31 65 2d c1 47 fc b1 08 40 aa 29 57 43 12 36 8d 7d af 26 af 42 6d f6 93 d6 e3 b9 70 9f 8e 02 d6 01 35 14 18 22 4c b7 e1 1d 95 83 3e 57 48 d7 0f 88 e2 83 9d 66 a3 58 50 f6 21 d0 f8 db c0 24 65 58 0f 8b 3e b7 82 17 b0 82 15 80 81 8f Data Ascii: U=1e-G@)WC6}&Bmp5"L>WHfXP!$eX>R-7mMJDp'sr_w5!m^ (hs<4fZv(_ygy0_T8D1C?L7Xb9;-*C:^0Nf@:3
May 25, 2023 14:46:52.873264074 CEST	366	IN	Data Raw: 38 ac 3b b9 6d 06 3b 7a 78 b6 bd dc f5 0f 1e 45 13 f6 c2 34 43 ae 8c cd f2 47 17 a9 7d 68 56 ef 50 64 9f fc f9 4f 99 f1 fd 30 44 4b d4 98 29 79 1b 63 8f b9 0e 1a 81 38 a8 85 25 5f 86 2b b2 8c a3 af a1 b6 70 3e 63 7a 34 d9 88 19 7b 47 61 93 55 11 Data Ascii: 8;m;zxE4CG}hVPdO0DK)yc8%_+p>cz4{GaUY=gvci4?(Y}/H-F7CEE<eum93`bXmhI>zMutW4{_v[iUc?9zJ<tlj{'H?q(\m)6
May 25, 2023 14:46:52.873279095 CEST	366	IN	Data Raw: 7f 00 00 00 ff ff 0d 0a Data Ascii:
May 25, 2023 14:46:52.890775919 CEST	366	IN	Data Raw: 61 0d 0a 03 00 63 10 4c ae 80 c1 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: acL0
May 25, 2023 14:46:55.055198908 CEST	2183	OUT	GET / HTTP/1.1 Host: vtaurl.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga_833P6YR6PG=GS1.1.1685051215.1.0.1685051215.0.0.0; _ga=GA1.1.1078727265.1685051215
May 25, 2023 14:46:55.221406937 CEST	2198	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Cache: HIT from Backend X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Encoding: gzip Data Raw: 63 63 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 5b eb 93 db b6 11 ff dc cc f4 7f 40 95 99 e4 8b 21 de 9d 7d 6e e2 9c ae b5 9d b4 f1 8c 3b b9 fa d1 36 9f 3c 10 09 91 c8 81 04 0d 80 7a e4 af ef 2e 40 4a a0 44 52 d4 f9 ec 3c 26 9a b9 13 08 02 d8 c5 62 1f bf 05 a0 ab bf 7c fb c3 f3 37 3f de 7c 47 32 9b cb eb 3f 7f 76 85 df 44 b2 22 9d 4d 78 31 81 1a 02 9f ab 8c b3 a4 2e bb e7 9c 5b 46 e2 8c 69 c3 ed 6c 52 d9 05 fd 6a 72 f0 3e b3 b6 a4 fc 7d 25 96 b3 c9 ff e8 db a7 f4 b9 ca 4b 66 c5 5c f2 09 89 55 61 79 01 9d 5f 7c 37 e3 49 ca 0f bb 17 2c e7 b3 c9 52 f0 55 a9 b4 0d 7a ac 44 62 b3 59 c2 97 22 e6 d4 3d 3c 20 a2 10 56 30 49 4d cc 24 9f 9d 3f 20 26 d3 a2 b8 a5 56 d1 85 b0 b3 42 e1 f8 01 05 2b ac e4 d7 ff 79 f3 94 bc d5 92 bc ce 80 02 2f b8 be 8a fc 8b cf fe 14 f2 90 70 13 6b 51 5a a1 8a 80 8d 97 30 3e f9 17 2b 58 ca 73 a8 20 37 92 d9 85 d2 39 99 57 42 5a 02 45 f2 1d 34 d5 a5 16 86 93 97 7c c9 e5 94 3c e3 c6 92 7f 68 ce c9 db 57 2f 77 74 1f 90 67 9a 15 09 4f 48 a2 72 26 0a f2 05 79 7a f3 62 4a 6e b8 36 aa 60 52 fc 0c af 96 0c 26 b9 81 99 41 27 22 81 ba 81 66 2c 81 ea 18 de 5a cd e2 5b 51 a4 93 3d e6 6f f9 66 a5 74 62 02 ce c9 1c b9 a8 60 e2 66 c7 40 b2 81 f6 22 76 03 93 42 e1 04 aa 22 79 40 16 c8 6c ab ad 79 d0 7e 26 3b 92 a5 56 25 d7 76 33 9b a8 f4 89 54 b8 18 01 5d 5e bc 7b fb 7a 42 a2 ee e6 76 53 86 8d 57 7c 6e 84 e5 bd cd 81 85 a0 35 ea 9a 79 12 45 4b cb e0 c5 34 56 79 3f 1d 5c e1 a0 eb 81 12 f4 f6 fc 6d e9 41 df 2c 50 aa ef 50 37 c6 ca c0 eb 91 5d 09 0b b3 78 12 33 9d 04 3d 4d 95 e7 4c 6f de 49 a6 53 fe 4e e4 0c 4d b9 bb a7 5f ce 6d cf bf 0b e0 d8 b2 a2 af f9 f1 75 ea e9 f8 db 5a a6 3e 31 6b ce ac d2 27 c8 cb b3 32 6c 13 d8 d5 19 b8 e6 72 36 11 31 4a 08 ed 0e ca b8 72 d1 9a fa ba 4c f3 45 d7 00 d1 82 2d b1 c5 14 fe 4d 88 81 79 9a d9 e4 e1 c5 fa e1 45 ad 30 bb c1 63 56 a8 42 80 07 e8 1f 0d d8 09 5c f2 ae ab b1 1b c9 4d c6 b9 6d fa 46 51 9c 14 3f 99 69 2c 55 95 2c 40 d7 b8 e3 86 fd c4 d6 91 14 73 13 2d 60 d2 94 ad b8 51 39 8f 2e a7 e7 97 d3 47 51 6c 4c c4 a4 9c e6 a2 98 42 b9 15 61 ba 89 79 51 58 be b6 d8 79 40 0c c6 42 1c 8b a3 85 76 b2 4e 3c 0f 86 4b 1e db 8b 28 11 c6 f5 6f 2a 3e 22 03 b1 52 b7 82 c3 82 18 58 f1 13 e8 8c 9e 98 9b 06 76 dc 0e 4e 44 d2 1a 2b 20 16 7e 02 16 bc 35 ee b5 5b 32 4d 58 59 62 20 99 91 2f 3b 38 f9 f2 9b 60 88 a8 73 8c dd eb 00 9f 5c cd 55 b2 b9 ee 60 03 db 40 b0 8a 25 33 a0 b4 fe 89 82 19 16 a6 04 7d 2a ac 9f 59 5d ef 4c e9 3a 24 72 6c 9a 8e 46 c1 96 0d 01 28 ce 61 8e fe cb 8d d7 94 f9 ba 04 e7 41 65 da 54 24 4c df 92 79 ea be 3d 17 41 af 2e 01 5f 25 62 4b 07 cd Data Ascii: cc6[@!}n;6<z.@JDR<&b\|7?\|G2?vD"Mx1.[FilRjr>}%Kf\Uay_\|7I,RUzDbY"=< V0IM$? &VB+y/pkQZ0>+Xs 79WBZE4\|<hW/wtgOHr&yzbJn6`R&A'"f,Z[Q=oftb`f@"vB"y@ly~&;V%v3T]^{zBvSW\|n5yEK4Vy?\mA,PP7]x3=MLoISNM_muZ>1k'2lr61JrLE-MyE0cVB\MmFQ?i,U,@s-`Q9.GQlLBayQXy@BvN<K(o>"RXvND+ ~5[2MXYb /;8`s\U`@%3}Y]L:$rlF(aAeT$Ly=A._%bK
May 25, 2023 14:46:55.221494913 CEST	2199	IN	Data Raw: 1d 9a a1 3b ec 91 0e 6b b3 44 e7 e8 bb 06 ac 92 38 cf db e9 70 bb 29 1c fb 5c 89 3c 25 4c 76 c7 19 a3 e3 4e 4d ac dd 58 c4 2a ab de b9 98 25 55 aa a6 25 46 b6 40 44 58 79 2a 5f 57 11 bb ee aa ef 91 df bc b2 56 15 7b 42 b4 2a 4d 25 f2 ef 4d d6 b7 Data Ascii: ;kD8p)\<%LvNMX%U%F@DXy_WV{B*M%MYV7"AKwmqmds478H`zOfKu;{jd~.9)h-1=+v$q=Q14:1 y,\
May 25, 2023 14:46:55.221543074 CEST	2200	IN	Data Raw: 5d 50 c6 23 79 50 ac de c0 b5 1d ca f5 09 2e 6b 6c 1d 1c 32 d1 1c d7 4d 08 68 72 cc 33 a7 b0 b3 c9 0d 03 57 48 18 91 0a 24 ee 2e af f9 eb 3b ae 88 e7 9a 58 38 c1 3d 87 7c b3 b2 e4 45 32 2a 13 68 9f 5b 36 0e 79 c5 74 81 9a e0 81 d0 de f9 25 a0 de Data Ascii: ]P#yP.kl2Mhr3WH$.;X8=\|E2h[6yt%r3X#4jF5eSTr>;k!x:QX9{t\8`u7y?IyAj-)7Js731\|(
May 25, 2023 14:46:55.222508907 CEST	2202	IN	Data Raw: 66 31 30 0d 0a ec 5d eb 73 db c6 11 ff ec ce f4 7f b8 ea 43 64 4f 45 ca 92 6c 29 b5 13 75 fc 6e 26 4a c2 ca 52 33 69 dd e9 1c 89 23 09 1b 2f e3 40 2a 8c e3 ff bd bb 7b 77 20 08 e2 71 20 69 8a 54 a8 19 cb 22 78 00 0e 8b dd bd 7d fe 6e 45 c2 8f a1 Data Ascii: f10]sCdOEl)un&JR3i#/@*{w q iT"x}nEmM`\|+I1p$^rj@: 1r0/#!>F:Fw\)K]K\|uM{U%c%9# vr{Zs-Ad:ghFb6IrO`'
May 25, 2023 14:47:19.071962118 CEST	5718	OUT	GET /ivantan HTTP/1.1 Host: vtaurl.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
May 25, 2023 14:47:19.218687057 CEST	5720	IN	HTTP/1.1 404 Not Found Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Encoding: gzip Data Raw: 34 61 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 57 db 6e e3 36 10 7d 6e 80 fd 87 a9 1e 9a 16 30 ad dc 36 2d 02 2b 68 b2 4d 8b 05 52 34 e8 26 45 fb 14 50 e2 d8 62 42 91 5a 92 b2 a3 16 fd f7 0e 25 3b 96 2f 72 36 6d 5f d6 80 25 8a 9a 39 33 73 e6 42 7b f4 e5 0f bf bc bb fd e3 e6 0a 72 5f a8 f3 37 7b a3 70 07 c5 f5 24 89 50 47 b4 f3 66 0f e8 33 ca 91 8b f3 76 dd 3c 17 e8 39 64 39 b7 0e 7d 12 55 7e cc be 8b 36 de e7 de 97 0c 3f 56 72 9a 44 bf b3 bb 0b f6 ce 14 25 f7 32 55 18 41 66 b4 47 4d ca ef af 12 14 13 dc 54 d7 bc c0 24 9a 4a 9c 95 c6 fa 8e c6 4c 0a 9f 27 02 a7 32 43 d6 3c 0c 40 6a e9 25 57 cc 65 5c 61 72 38 00 97 5b a9 1f 99 37 6c 2c 7d a2 cd 32 98 c6 82 97 5e e1 f9 95 b5 c6 02 83 df 6e 2f e0 ce 2a f8 90 93 25 d4 68 47 71 2b b0 f7 45 d7 17 81 2e b3 b2 f4 d2 e8 8e 3b d7 64 07 7e e6 9a 4f b0 a0 0d b8 51 dc 8f 8d 2d 20 ad a4 f2 40 4b b8 22 51 5b 5a e9 10 ae 71 8a 6a 08 97 e8 3c fc 68 11 e1 ee d7 eb a5 dd 01 5c 5a ae 05 0a 10 a6 e0 52 c3 57 70 71 f3 7e 08 37 68 9d d1 5c c9 3f e9 d5 94 53 b0 35 45 48 4a a0 c8 ba 23 31 2e 68 3b a3 b7 de f2 ec 51 ea 49 b4 e6 fc 23 d6 33 63 85 eb 78 0e 69 f0 a2 a2 c0 dd d2 01 51 93 bc cc 1a 60 d0 26 04 50 69 31 80 71 70 76 45 d6 0d 56 9f 61 69 b2 b4 a6 44 eb eb 24 32 93 33 65 42 52 3a 76 51 df df 7d 88 20 de 2e ee eb b2 2b 3c c3 d4 49 8f bd e2 e4 42 47 3a d4 9c 3b 8b e3 a9 e7 f4 62 98 99 22 96 44 8c e7 ba df 5e c8 74 07 a2 b7 28 7a 11 3e af ba e8 8b 22 b0 7c 1f 6a e5 b5 5c b4 f5 e5 67 d2 53 34 67 19 b7 a2 83 e0 aa a2 e0 b6 be 57 dc 4e f0 5e 16 3c b4 fa 76 cd 36 cd cf 9a df 2f 12 d7 23 fe e9 79 eb 01 f8 bc d2 d6 47 b7 45 ee 8d 7d 05 6f ad 2b 3b 7b a6 51 6d 06 80 45 95 44 32 0b 0c 85 be a4 75 c8 60 fc c4 da bd dc e2 78 6b d3 8d f9 34 48 0c e9 12 81 a3 38 5d 12 1d 1f 3d 1d 1f cd 0b 67 09 9e 71 6d b4 a4 09 b1 03 6d 19 51 18 de 9d 31 be 84 71 be 56 e8 72 44 bf 03 c7 79 3a 7e b2 78 6c 9b d0 45 9c 39 17 37 8a 43 5a 45 20 c5 0a ce fc 44 1a c5 f3 d3 6f fe 98 1a 51 77 0f 2b de 6b 8f 38 56 dc 51 e4 a9 d7 40 5f a6 b1 a2 7c aa 66 1d e8 61 46 ab 1a 6c 18 b0 28 58 26 6d a6 10 4a 43 8d 40 35 c9 78 ea 8c aa 3c 82 c2 b1 67 27 e0 4d 49 57 c1 88 2f a4 9b 9a 30 a9 89 00 64 63 85 4f 94 9f d0 0f 49 f4 93 81 94 4a a6 7b 9e 36 6e ba 92 eb 8e 3f a4 4b 05 ca da 3c ae c9 36 f2 12 04 f7 9c 8d a9 bc 72 b4 49 c4 a9 bd 66 2c b8 12 9d 8f 62 b9 0e 1f 07 fc 2e 2d 31 ef 3e 39 cc 42 4c eb 5a 42 4e 17 3e 85 72 a4 ba a4 63 44 34 01 41 b8 b0 8c 18 28 b6 3b d8 d1 25 cf 80 ba 69 42 51 79 2c 1c cb 30 74 28 3c 54 ce cb 71 cd e6 95 ce 52 f4 33 44 0d 85 d4 6c 9a b3 c3 83 83 6d c0 9b 8e 29 76 78 04 e1 56 08 76 da 2c 9e 14 fb 16 e8 34 25 06 69 ef a8 0f a6 25 b2 Data Ascii: 4a3Wn6}n06-+hMR4&EPbBZ%;/r6m_%93sB{r_7{p$PGf3v<9d9}U~6?VrD%2UAfGMT$JL'2C<@j%We\ar8[7l,}2^n/*%hGq+E.;d~OQ- @K"Q[Zqj<h\ZRWpq~7h\?S5EHJ#1.h;QI#3cxiQ`&Pi1qpvEVaiD$23eBR:vQ} .+<IBG:;b"D^t(z>"\|j\gS4gWN^<v6/#yGE}o+;{QmED2u`xk4H8]=gqmmQ1qVrDy:~xlE97CZE DoQw+k8VQ@_\|faFl(X&mJC@5x<g'MIW/0dcOIJ{6n?K<6rIf,b.-1>9BLZBN>rcD4A(;%iBQy,0t(<TqR3Dlm)vxVv,4%i%
May 25, 2023 14:48:04.255893946 CEST	7567	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 25, 2023 14:46:53.104934931 CEST	369	OUT	GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 25, 2023 14:46:53.126967907 CEST	371	IN	HTTP/1.1 200 OK Date: Thu, 25 May 2023 12:46:53 GMT Content-Type: text/css; charset=utf-8 Content-Length: 12657 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 Content-Encoding: gzip ETag: "613fa20b-3171" Last-Modified: Mon, 13 Sep 2021 19:10:03 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff Vary: Accept-Encoding CF-Cache-Status: HIT Age: 506209 Expires: Tue, 14 May 2024 12:46:53 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ArWmzjElaCvJcLcrdkQxVI%2BgFFVG1qQ9f7aRbBIsRsVzyd9TIO%2FxVgq58hYE02VAXpMgXs%2FM8IJU258E%2F%2F1rI%2BkvfQR3A46CSBa%2Bs1jaALlMuUljQ4ppPRoNTPmbfS8GaBUKq5fd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ccde23dec3635ea-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 1f 8b 08 00 00 00 00 00 02 ff cc bd 5b af e4 38 76 ef f9 ee 4f b1 a7 1a 06 aa 8c 52 96 ae 71 c9 c4 cc b4 ed 41 03 0d d8 98 87 e3 07 1b 38 2f 94 b4 14 62 86 24 aa 48 6a c7 8e 4c d4 77 3f 90 22 16 a5 d8 fb bf a2 aa 7d fa e1 d8 40 f6 2e e9 17 12 c5 eb e2 ba f1 97 7f fa bf fe e1 e5 9f 5e fe 62 06 ff f2 cf 17 72 a6 a7 97 bf 58 a2 97 e2 53 52 7c ca 5f ca eb cb 9f 1b 33 78 75 bf 17 bd b4 de 8f ee f3 2f bf 6c ae 7e aa 4c 3f 3f e5 df 74 45 83 7b 02 fd d2 dd 88 5f 9a f9 15 3f fe b5 32 83 fb fc f2 af ff fa f2 2f ff f5 92 7f 8a 7f 5e ca e1 3e bf fc 8f bf fe db cb ff ff 97 7f 7b 49 3e 25 3f bf fc ab a9 e9 f3 cb bf ff f5 3f f8 f9 3f fd c3 cb 3f fd f2 0f 9f 1a f5 f3 a7 46 95 f3 3f f5 fc 4f 37 ff 63 e7 7f dc f7 a8 37 df 22 e3 de a2 b9 00 91 eb 8d f1 ad 1e 4e 9f 4f 56 5d 5d a5 3a fa 12 5d a8 3c 6b ff 1e 50 83 d7 aa d3 ca 51 fd a5 d6 6e ec d4 f5 b3 1e 3a 3d 50 54 76 a6 Data Ascii: [8vORqA8/b$HjLw?"}@.^brXSR\|_3xu/l~L??tE{_?2/^>{I>%????F?O7c7"NOV]]:]<kPQn:=PTv
May 25, 2023 14:46:53.127032995 CEST	372	IN	Data Raw: 3a 7f b9 f1 fe da d1 e7 c1 d8 5e 75 b7 2b af ca 6a 35 78 be e6 e9 cd 47 96 86 9a ec f2 d4 c9 9b 2f cb 43 5a d2 a7 d6 7f 4e 7e fb d4 a8 a8 3b 7d bf 3d 4e 7f a3 cf c9 a7 6c fe 3f ea 1f c0 4f fb 82 fa 2f af 64 bd ae 54 17 a9 4e 9f 86 cf d1 a7 78 b7 Data Ascii: :^u+j5xG/CZN~;}=Nl?O/dTNxS<meo/mt{1_\|{1_,E~{x_<n/C}[T4x_.Svu[p/'=D5siQNKOiR~[3oQ3
May 25, 2023 14:46:53.127080917 CEST	373	IN	Data Raw: 26 db 03 6a bf e7 2a 73 4e bb 79 c2 88 e6 99 9c 06 3d 9c 22 77 75 9e 7a 07 97 18 2e ac f3 64 b5 3b c3 cf e6 86 73 d7 be 27 6f f5 19 0e 6d 7e 12 9c 18 1b 2e 9e ef 94 83 03 ed b0 01 9c 56 f8 23 b9 77 7a d3 c3 89 81 cb 30 d5 b3 b4 0a 8b 99 ad 88 89 Data Ascii: &jsNy="wuz.d;s'om~.V#wz0jrP'R',j5\|o"{E).xOx,[NFE'+;-"Ws"wf!*EXm+j(M.ER Zd$NhExPGk9A3SSiJe+SC4
May 25, 2023 14:46:53.127127886 CEST	374	IN	Data Raw: 0e 8f c2 eb 7e 1c 57 1b e0 6e 40 81 6a c4 c3 96 bb 99 48 51 35 ec b6 2f 7c a2 0f 62 c1 aa 6a 89 1c 16 de 9b 40 38 b8 ae b1 27 c0 02 44 a5 76 ad 19 21 a7 1e 38 a1 6b e4 59 b5 c5 04 9d 4f 9e 35 0f d4 20 4c d2 79 9e 6c b9 51 c1 e9 32 cf b3 2d f5 eb Data Ascii: ~Wn@jHQ5/\|bj@8'Dv!8kYO5 LylQ2-Dx[vHcK65OWyNmr\|^d#}v/Hw-1-PR&$ID4T\f;=6&,aw8'3IUgDY\|}z
May 25, 2023 14:46:53.127176046 CEST	376	IN	Data Raw: 44 dd 08 a7 89 82 dd 57 66 d0 79 5d 9d a5 ed dc ae 0e a5 9a 04 0b 1d c7 b4 d4 53 5f 0a fb d9 9c 6d 82 f5 d4 8f 92 f5 34 4c 0f 77 26 6a 34 ac a8 7d 18 a0 d3 70 22 a1 09 b9 4c 57 85 7d 26 b3 e3 9d 20 65 bb 6b a9 2d 74 81 c9 8e f7 7a a2 12 9b 57 59 Data Ascii: DWfy]S_m4Lw&j4}p"LW}& ek-tzWYD~IUW(8_W}s]zF4`G]L;wI$S?^8@?iNK<AC>-C7^5@:XfKV9lgpwgd9{.LK
May 25, 2023 14:46:53.127224922 CEST	377	IN	Data Raw: 1d ef 9e 17 bb 93 69 84 d4 6d 6a cf 44 d7 88 4b 21 ab 45 4e c6 d4 96 70 44 6c c6 c9 be 02 04 eb 34 63 8b c8 c9 18 ac 30 4c 54 bc 25 e6 4d 0a ce 6e c7 49 c0 ee 1c 0c f2 a2 78 7f 7c a4 3a 68 ac c8 38 af 59 c0 70 b8 1b bb a6 6c 30 f8 99 31 db c9 b6 Data Ascii: imjDK!ENpDl4c0LT%MnIx\|:h8Ypl01<>v2dU=~UtW$OVy!gfrXu<D,)O6-6nj}HsKq,l`})l,\N0was,P[Gmg_>=![
May 25, 2023 14:46:53.127271891 CEST	379	IN	Data Raw: ac 9f 95 2a b1 f2 a4 64 e0 84 f5 fb 05 c7 31 61 db 4e cc da d1 33 5d 85 f8 c8 9c 33 2d cc 88 e0 e1 91 f0 b4 75 a6 6b 05 8f e2 ca 38 ca e6 3c 6f 19 f1 b7 dc 27 80 b3 ae ce cb b2 2d 08 b0 e5 07 2c 82 47 60 94 5c 26 8d c3 6f d8 3e 37 df 17 f5 d1 ec Data Ascii: d1aN3]3-uk8<o'-,G`\&o>7@=Gg}Qq5,6zsCwj,gW\23J!-!m-vzxHR&`lX)Z_uxrOP[JV-'Rd5PUWlGjq6P5+fq^pYz/[
May 25, 2023 14:46:53.127320051 CEST	380	IN	Data Raw: 47 1e c7 67 f1 c1 0f a3 ea 1a 38 57 65 6c 15 1d 25 4f fc 9c bb fc 32 4f 45 63 87 0f 7e 4a d6 07 8d 64 ab 0e 8a a0 31 ef 5c 46 65 55 d5 4e 9e a4 a3 fd 58 a6 98 41 29 71 5d 52 af 90 e0 dc 53 70 76 f7 51 39 27 ee 3f 42 eb 3b af 1a 65 b5 1a b4 c3 63 Data Ascii: Gg8Wel%O2OEc~Jd1\FeUNXA)q]RSpvQ9'?B;ecgCTCII2NJ5,yDBa_.~MwuUS#ZdQFm5W]p6;e'ixQkl"_KBk.XGwx+xGx\|Hzh:/c`{V6c
May 25, 2023 14:46:53.127362967 CEST	381	IN	Data Raw: 49 12 9a 2e 1f 88 27 79 e0 58 6c bf 83 ec cb 09 d1 e3 03 2a fa 46 b0 2d e9 ce 49 1b df f0 9d 0b 46 c3 49 63 99 9b 3b 13 51 2d 9d b9 56 87 8f e8 3a 69 db cb aa c6 99 c1 19 e8 d9 56 e6 c8 be 0a 76 a7 0d a1 2b 72 5e 41 53 7e c6 e1 c1 ae 55 23 4e ce Data Ascii: I.'yXlF-IFIc;Q-V:iVv+r^AS~U#NMJGb9wA7[3Gg))E:Z(5TvCb\|nz4MBWgFx-h 9!1y6uoxQTrf\b]B9HL+6<IYC
May 25, 2023 14:46:53.127409935 CEST	383	IN	Data Raw: a0 05 90 52 51 ec d8 73 ca 53 47 82 93 53 ca 9a 33 66 44 57 c9 ac 09 ef ec 47 b2 8b 82 72 c9 50 8a 46 e9 ee f8 91 15 b4 00 ec 18 e5 69 98 85 c0 e8 42 ba 84 99 e3 d8 01 c4 13 ee d8 7b b6 e9 7a b2 bd c6 3a d6 24 e5 8e 44 6f 3e 6a 49 4a 1d cd 59 ec Data Ascii: RQsSGS3fDWGrPFiB{z:$Do>jIJYk1S3#$Jaoiq6)8oo3Bqo^:h(-6(M>`#VGXSl/Rl!pRqZ"\'y/[=ylC`dK'7LPTH0,.B<d
May 25, 2023 14:46:53.127450943 CEST	383	IN	Data Raw: 8b de 8d 88 5a 35 9c 24 5b 65 1d c8 37 38 a5 26 ac df bf b4 ca 3b 35 e2 7c 13 e9 23 23 d7 4f ce 31 4d 97 96 a8 ab 5a a5 e1 e6 9a e7 ce 4b db 57 b0 1f b1 d2 f3 a2 1b 68 f0 e1 c0 90 8b 3e eb 91 6a ad 22 68 54 e7 63 0e 2e 7a c0 fd 99 d6 fb e6 32 4b Data Ascii: Z5$[e78&;5\|##O1MZKWh>j"hTc.z2Kw7&CJFdbp,k.tW!+%:zL\C8lFz&UuJ$u'Ofzx;@0YYN]Ke\|vk.ccpTfm\8bC
May 25, 2023 14:47:38.141987085 CEST	6897	OUT	Data Raw: 00 Data Ascii:
May 25, 2023 14:48:23.164485931 CEST	9678	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 25, 2023 14:46:54.178009033 CEST	1330	OUT	GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: http://vtaurl.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Referer: http://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 25, 2023 14:46:54.209752083 CEST	1355	IN	HTTP/1.1 200 OK Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 78268 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "613fa20b-131bc" Last-Modified: Mon, 13 Sep 2021 19:10:03 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff Vary: Accept-Encoding CF-Cache-Status: HIT Age: 2970340 Expires: Tue, 14 May 2024 12:46:54 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4CMJKgUKEM8TVyMjNo5IdMqEhG1hYYJwK8wk5TOHIFUY1qIZ7ZMIf3HNH%2F1ppH2hRCw861kRG5dsSdgdnD446vGI3%2Fq2ne6Bz7PzmVpJwlD1ATzYISlfMqAgLhw0xWe2BFN72ZdR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ccde2449b51bc03-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 77 4f 46 32 00 01 00 00 00 01 31 bc 00 0d 00 00 00 03 17 f4 00 01 31 62 01 4b 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 99 4e 11 08 0a 8a e6 68 88 c3 42 01 36 02 24 03 9f 30 0b 9f 34 00 04 20 05 8a 2b 07 e2 2e 5b b4 75 92 80 30 af b3 40 70 db 00 aa 4a 9e c3 f8 1f 50 30 8e 4d a1 37 ab 7e 33 48 f8 ef 6a c6 b6 0c 9a dd 0e 10 39 f2 f5 8c ec ff ff ff ff 65 c9 42 c6 f6 7f 83 7b 06 1b 1b 13 41 31 43 a9 ac cc aa 14 85 9a d8 74 43 60 be ed 54 88 7d ca 83 94 d2 c9 50 08 02 68 7a b5 53 c4 63 42 66 ce a4 d3 1e 50 a6 20 cd 3c 1e 1c 22 3c d6 69 09 12 42 0a 95 9c c4 fb de 2b 0f 9e d4 02 a8 08 a8 08 a8 ec 1c 42 dc cf 30 a8 67 78 90 12 63 29 aa ab 68 55 04 54 17 75 6d 2b d8 ea 34 87 97 94 3a 9f 60 90 e9 a2 a3 99 21 13 33 43 66 86 cc 4c 93 66 06 36 d3 a6 1b 31 31 19 1b 87 b1 c2 57 d6 a6 e7 30 0c fe 22 bb da 5d 8f eb 9b 34 ba 09 c8 df 1c e9 f4 8e 98 f1 ba 42 af Data Ascii: wOF211bK$?FFTM`NhB6$04 +.[u0@pJP0M7~3Hj9eB{A1CtC`T}PhzScBfP <"<iB+B0gxc)hUTum+4:`!3CfLf611W0"]4B
May 25, 2023 14:46:54.209826946 CEST	1357	IN	Data Raw: 6f 9a 78 c1 14 a2 33 a0 8a d5 2d f2 a1 7a a7 24 86 3e 85 b5 99 65 52 77 39 0b c3 32 2d b2 38 74 98 30 13 9b fb 97 74 45 df 4f 39 b7 39 e7 de e1 e1 ce ea be a5 03 e5 27 25 9f 52 92 88 03 64 0d 1e d2 82 7e 4b 29 b5 6b 8a 0e 01 b3 46 bf 78 23 fa 93 Data Ascii: ox3-z$>eRw92-8t0tEO99'%Rd~K)kFx#5qLtOB}YpN1:vql O>ouO[p`skXomk.%ZGH<],J&WL}7)4dhCiyX[{HV`VBJxQ
May 25, 2023 14:46:54.209882021 CEST	1358	IN	Data Raw: 41 59 17 ee 58 e7 0e 1d 64 ce 9e 7f 71 de e8 b8 56 31 50 59 53 c1 31 61 07 32 20 a0 ed 1f 77 03 1a e6 f5 8b b7 93 3e ef ed f2 37 58 03 51 ea b2 7f 44 b2 a7 48 b0 df 4e 58 82 5e 30 81 fe 9c f0 52 24 34 c3 da 05 3f e1 e1 df 19 4f f8 ef 07 4e 6d 1c Data Ascii: AYXdqV1PYS1a2 w>7XQDHNX^0R$4?ONm0?o5qxSbcWrMk{sIH.,il>n;owZ3,'d{]HJI\|i'P\\mIcIz
May 25, 2023 14:46:54.209928989 CEST	1359	IN	Data Raw: 02 e8 a9 68 90 0a 77 76 8f 58 01 df b0 4c a3 c8 26 c2 12 43 ee 97 fc 71 a1 2f 5c 33 14 49 55 57 06 fd 27 66 4e e5 11 dd 7e a0 46 02 53 64 5f 5d 27 88 4b 2d 07 19 04 52 d6 04 c9 f6 30 d2 22 26 39 dd 0c 1e bf 82 a2 4e 27 66 8e 5e 9c c9 47 09 0d 66 Data Ascii: hwvXL&Cq/\3IUW'fN~FSd_]'K-R0"&9N'f^GfPJMcN -kQnSnKc")OESVh4t9ZSdp3/JFn#^8p"SzI6}"W3n$<j!6f(jjt,(q`~
May 25, 2023 14:46:54.209978104 CEST	1361	IN	Data Raw: 2e 04 66 97 5a 1b ec 10 be f4 1c 39 8e 91 03 51 54 b9 38 90 88 3d cf a9 61 ec 11 d9 3c 22 37 ea a3 d1 68 3a 95 b3 81 f7 5a 3f a0 26 7d 51 f9 70 ff d8 b5 c5 51 7e 6f 8b 11 8b 88 91 17 d5 b8 8f 04 6d 86 a4 d4 b2 f5 fd 69 4a 28 85 32 cf 7d ff 7c 6d Data Ascii: .fZ9QT8=a<"7h:Z?&}QpQ~omiJ(2}\|m$bw`@4O99v]J),Q~Qx,s=IXX@Eo~jKLZW:{RQ=ILT<Z%%A{wY^vYv4 N7
May 25, 2023 14:46:54.210026979 CEST	1362	IN	Data Raw: b6 64 66 bd 54 5a bc e9 a0 b0 e1 40 03 37 59 63 1d 38 a2 7e 5c 4d 70 4d 15 1a fd 7f 5b a6 9f 61 56 3c 4c 06 0c 94 28 3c 24 88 2a f9 7b ea 0f 39 1e 9a 3b f7 de c4 49 84 9a 68 b6 c3 cb 21 44 6c 3d ed b1 6f d8 23 50 c1 1a 6a 1b 95 24 96 49 4e 95 fb Data Ascii: dfTZ@7Yc8~\MpM[aV<L(<$*{9;Ih!Dl=o#Pj$INKK4N+Wiz'>?["%7@Sq1H4G7i~s:cB5zl>!EifEO<6~jtFwo$Zo1.82 .stn
May 25, 2023 14:46:54.210074902 CEST	1363	IN	Data Raw: bc 20 d7 83 9c e7 c1 bc b8 e3 7b 61 b8 51 c3 53 23 4b e7 16 ab d2 a9 46 46 c3 19 ce 83 d4 97 d0 b1 a4 07 8e bd aa 44 58 57 22 82 7b 0f b5 de 0a b5 69 bd 08 e6 55 65 ed cb ed ab f6 72 4d af 49 5c af a8 8b 23 2f af 52 16 ef 83 9e c2 bd af 92 72 e0 Data Ascii: {aQS#KFFDXW"{iUerMI\#/RraQKgXpudLxmRPIbdRI%[Y$#&_l:A1Y"$.]INpj^xw}u_xXI2_,w_?ced1U@cWzf9gM
May 25, 2023 14:46:54.210128069 CEST	1365	IN	Data Raw: 5e a6 e5 0b 49 7e 08 e1 70 1e 66 fb 41 9a 60 13 98 ba ce 3b 89 7d a0 78 1d 8e 58 0a a6 4b bd 5e b0 19 5a a0 fd f4 c9 49 17 ca 3e 98 0d 15 6b e3 0c f3 50 93 f4 3b 74 1e a2 8f d9 88 4f 17 69 66 02 2a ec a8 b3 49 f5 fe aa b5 f0 0b 8e 41 a0 21 f6 0a Data Ascii: ^I~pfA`;}xXK^ZI>kP;tOif*IA!k,"6m[NXc>rJaP<'dg=~m)ammB$eKZ\$LSM'~+'M\|9n4HBI?z2)
May 25, 2023 14:46:54.210176945 CEST	1366	IN	Data Raw: b3 49 d1 4e 4e 63 07 00 13 82 90 f7 f5 4d a7 8d 52 0c c9 21 e1 fd 71 06 87 a5 a3 06 73 94 30 ea 64 3e ad 5c da 50 15 88 fe 02 3d 88 58 c8 35 34 43 8f 01 f1 45 bb b4 20 a3 ca 38 02 77 4d 72 38 d1 13 0e 7c a8 12 0e 94 22 01 5b 3d 71 1d 7a 3d f5 cf Data Ascii: INNcMR!qs0d>\P=X54CE 8wMr8\|"[=qz=c`^.<c<xdJb)\<#2i!R.YZg`1K*l3V/l\pW;n>l4IvLD]x< "w>U~ ^KcZ&of)-J=UO/
May 25, 2023 14:46:54.210227966 CEST	1367	IN	Data Raw: 7f 58 79 49 57 5f 6e 7f 6f 9f 3f aa 0e 7f a2 bc 78 58 5d fa 91 f2 5a 5e 79 e9 88 d2 fe 58 7d e1 98 f2 d2 49 75 ed b0 ba aa 3f 08 ee 25 ed 0d 72 9b e9 bb 77 09 31 2a d9 75 b8 f8 b3 8a 13 6d 98 49 16 85 1e 55 00 e3 9c c7 c4 81 50 d3 00 6e 36 6a 57 Data Ascii: XyIW_no?xX]Z^yX}Iu?%rw1*umIUPn6jWE?pY(2R_n,{(S#]/20/H{#7.rCYWW6&23ft0/R4Nhld9/]]6\|"#pugG2t\v!
May 25, 2023 14:46:54.210383892 CEST	1369	IN	Data Raw: 0d 57 60 40 e4 0e 94 46 88 40 10 ad 38 a4 5a 87 c7 8e 5e 07 52 82 76 f8 4b 40 ac 6a a2 1c 34 96 cc 0d f9 f0 3d e8 7e 24 32 89 f4 4b af d2 39 1f a2 47 23 77 c2 dc 9f bd fa 9c 80 fe 24 c3 ee da df 54 48 62 bc 65 f0 d1 24 ae ce 48 48 1e ee a5 b6 41 Data Ascii: W`@F@8Z^RvK@j4=~$2K9G#w$THbe$HHA%Nb!&F&L-D%e8\9A;U\|knv7<\\|YOYflkKW\|&o'Y~d+a33{wlApW'yA
May 25, 2023 14:46:54.452378988 CEST	1893	OUT	GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: http://vtaurl.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Referer: http://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 25, 2023 14:46:54.479669094 CEST	1936	IN	HTTP/1.1 200 OK Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 76736 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "613fa20b-12bc0" Last-Modified: Mon, 13 Sep 2021 19:10:03 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff Vary: Accept-Encoding CF-Cache-Status: HIT Age: 230235 Expires: Tue, 14 May 2024 12:46:54 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i8BHtZ3hhSf%2BSqWJAyuS71MRAIXP%2BkHaxS5T3Nqtj867S1X%2BGMaP%2BDRLyBKadxi7hsfHweFklkt%2F3RgPw4CArqBlFTLCzjRrt645FX5FK%2BkM55tn1M9sbDnifKq13YAmHGWf9HYR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7ccde2465da4bc03-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 77 4f 46 32 00 01 00 00 00 01 2b c0 00 0d 00 00 00 02 0b 60 00 01 2b 66 01 4b 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 8b 7a 11 08 0a 87 bb 3c 85 ed 22 01 36 02 24 03 8e 2c 0b 87 18 00 04 20 05 8b 05 07 aa 5d 5b c5 9f 71 a6 ea 22 ec 7a 24 cc ad 6e 22 02 fc fb 5a 55 63 62 cb fd cc 46 d4 6e 07 94 fa 67 31 5e 70 5c f7 38 10 89 5b 3d fb ff ff ff b7 24 f8 8f 21 ce fb 47 7c 07 10 42 d2 a4 55 55 6b ab 3a b7 19 38 91 dd 52 9b cc 55 7a ef dd 16 61 ac ab 8e b2 1a 6d d9 ea e0 e4 cc cb 44 fb 61 78 b8 e0 06 72 1e 76 b6 2c f3 e9 bc 07 13 6c 12 16 97 47 79 72 48 c2 41 70 10 86 8d 52 dc dd 7a ca 73 b3 de 5e a4 48 8f 7c 58 49 78 d5 37 89 d0 55 22 f6 65 a4 e4 f5 74 58 4c 5b 99 6e 4f cf da 6b b3 2c 6f ef fb b0 22 17 a9 16 36 16 a7 e8 55 8b 7d 78 ad ee ce 4d ef 8a 7e ea 57 c0 b7 a2 68 e8 40 f2 cf 64 ad 09 9a a3 19 da 1a 96 75 a9 01 9a fd 59 Data Ascii: wOF2+`+fK$?FFTM`z<"6$, ][q"z$n"ZUcbFng1^p\8[=$!G\|BUUk:8RUzamDaxrv,lGyrHApRzs^H\|XIx7U"etXL[nOk,o"6U}xM~Wh@duY
May 25, 2023 14:47:39.502672911 CEST	6908	OUT	Data Raw: 00 Data Ascii:
May 25, 2023 14:48:24.537782907 CEST	9678	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:51 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-104.0.5112.81 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:51 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-bwEHWpIHfxFxv-sUXkJA1w' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 May 2023 12:46:51 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5988 X-Daystart: 20811 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-05-25 12:46:51 UTC	1	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 39 38 38 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 30 38 31 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5988" elapsed_seconds="20811"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-05-25 12:46:51 UTC	2	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-05-25 12:46:51 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:51 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+904; SOCS=CAISHAgCEhJnd3NfMjAyMjA4MDgtMF9SQzEaAmVuIAEaBgiAvOuXBg
2023-05-25 12:46:51 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-05-25 12:46:51 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 May 2023 12:46:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-5EUCwpFZw2Ue2VzNMywPUg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-05-25 12:46:51 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-05-25 12:46:51 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	831	OUT	GET /static/images/landing.png HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	891	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/png Content-Length: 49325 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 19 Jul 2021 08:28:46 GMT ETag: "c0ad-5c775b9ceeb80" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	892	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 30 00 00 02 c6 08 06 00 00 00 5b 3a ab 6b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDR0[:ktEXtSoftwareAdobe ImageReadyqe<kiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57
2023-05-25 12:46:54 UTC	907	IN	Data Raw: 00 00 80 80 29 90 8b 3c c5 05 93 cd ce 5e 3e 0f b0 4c 00 00 50 09 1a 72 71 90 ad 72 ce e9 38 c9 53 bd 83 88 da 99 35 71 0b 14 89 04 cb 04 00 00 5e a4 b9 0e fe c6 7b 75 fc 46 9d 3d af 99 ec ec 6d 36 05 3b 7b 00 00 a8 6a ea 21 03 33 a6 e3 39 1d ed 35 f4 37 b9 ed ec 53 05 ca 55 85 9d 3d 00 00 20 60 6a 82 ff a2 e3 7f 54 c9 ef ba a0 76 6e eb a4 b6 18 63 67 0f 00 00 08 98 3a 40 26 29 fe ad 8e ef af f0 ef 61 ed ec d3 65 4d ac 50 c1 ce 1e 00 00 00 01 b3 45 ab 8e 0f e9 f8 d1 32 3e 46 40 65 ce 9a 58 cf 13 ec ec 01 00 00 10 30 79 73 a7 8e df d7 91 af 75 eb 92 ca 9c 35 b1 02 65 85 97 14 00 00 00 02 a6 5c c8 58 e9 ef d5 f1 06 1d 67 74 0c a8 64 d1 ab 4f 6d cf 9a 5c 56 d7 ba 79 66 79 b9 00 00 00 20 60 00 00 00 00 0a a2 91 25 00 00 00 00 04 0c 00 00 00 00 02 06 00 00 00 Data Ascii: )<^>LPrqr8S5q^{uF=m6;{j!3957SU= `jTvncg:@&)aeMPE2>F@eX0ysu5e\XgtdOm\Vyfy `%
2023-05-25 12:46:54 UTC	972	IN	Data Raw: 89 06 8a 53 d9 4e 7c 40 3a 9d 95 8b 5c 79 3d 2e c5 fb 58 5e 59 85 c3 6e 53 2c 60 c8 f2 72 f5 9b 3f 28 a7 7a 7e f3 bf 3f 27 5f 0f ca ce a2 b4 cf 68 34 8e 58 2c 85 44 22 85 53 27 97 e5 9f a9 b1 55 24 59 9f 28 2b ca 62 36 e1 c2 8b 0e e0 95 af 7a 2e bc 5e d7 f0 3f fc 85 e5 fe 3e 3e 95 1a 4d 49 8f f1 e5 bf 41 23 e4 42 52 73 11 d4 2d 65 bd 03 29 26 24 9b c9 e3 f7 1e 7d c9 50 df 52 2a d6 37 39 1d 90 dd 3c bb 41 b1 50 64 0b 9d 28 e6 e6 67 8f f4 43 1b 01 2e 60 38 23 cd e9 d3 2b fb a6 a7 c7 07 de 2f 4e 02 66 6c 1b 15 46 29 7e a6 d3 5d 56 f9 c4 4d c2 40 a7 d5 c2 6c 35 2b de 47 78 2d b6 2d 11 45 96 a8 df de 7a 10 5f bd fe 33 08 06 3b 01 cd 67 ab 79 53 ab d5 e4 aa ac 71 76 cc b1 68 a2 b3 c5 92 f8 af ff fa 01 7e f3 9b 3b f1 e5 2f 7f 1c 66 8b 69 78 1f fc 76 03 ed d2 2a Data Ascii: SN\|@:\y=.X^YnS,`r?(z~?'_h4X,D"S'U$Y(+b6z.^?>>MIA#BRs-e)&$}PR79<APd(gC.`8#+/NflF)~]VM@l5+Gx--Ez_3;gySqvh~;/fixv
2023-05-25 12:46:54 UTC	983	IN	Data Raw: 21 b0 4d e5 7f fc c6 0b 90 45 eb c8 21 1c 38 ff 5b f8 af eb bf 8d ff f7 a5 af a2 d9 6c ca 8a 55 a4 e7 55 54 33 31 4f 82 55 c3 c4 4b 8d bd 17 09 b9 b8 9c 9f 3d 87 14 cf 72 fc d8 22 c6 02 3e 8c 4f f8 60 35 9b 10 9a 9f 96 df b1 8b 2f be a0 13 88 cb 9e 31 8b c5 34 12 d7 37 95 48 43 25 8a 75 ca e4 e2 02 86 c3 e9 21 b4 0a 23 17 d2 f4 cc c4 50 9f a7 56 ab c5 c4 c4 98 bc 9d 0d ca 26 a0 55 a8 92 0e d6 9b 50 5c cd 38 5b 85 9e 62 2b d4 d5 7a 15 93 6a 5d c7 8d 74 a6 2b 69 f3 df 67 71 31 65 1a 75 54 99 98 da 4e 17 6a 0a 64 b6 eb ab 30 e8 9b 6c 05 dd 7d 0f 24 32 1c 25 4a 46 4c 2c f0 0c a4 e1 79 01 ec 98 bf f0 51 f8 d8 27 0e 20 9b 2b 30 71 52 66 5b 0d ed 56 4b ce dc a3 c2 87 54 41 ba 51 6f b0 f7 40 c3 04 b4 1f 46 a3 8e 4d d0 55 59 d8 50 86 a2 dd 61 93 dd af e4 a2 a4 9f Data Ascii: !ME!8[lUUT31OUK=r">O`5/147HC%u!#PV&UP\8[b+zj]t+igq1euTNjd0l}$2%JFL,yQ' +0qRf[VKTAQo@FMUYPa

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:19 UTC	3753	OUT	GET /static/frontend/libs/svg-injector/dist/svg-injector.min.js HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:47:19 UTC	3754	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:19 GMT Content-Type: application/javascript Content-Length: 4579 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 23 Jun 2015 14:47:58 GMT ETag: "11e3-5193079e92380" Accept-Ranges: bytes
2023-05-25 12:47:19 UTC	3754	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 56 47 49 6e 6a 65 63 74 6f 72 20 76 31 2e 31 2e 33 20 2d 20 46 61 73 74 2c 20 63 61 63 68 69 6e 67 2c 20 64 79 6e 61 6d 69 63 20 69 6e 6c 69 6e 65 20 53 56 47 20 44 4f 4d 20 69 6e 6a 65 63 74 69 6f 6e 20 6c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 63 6f 6e 69 63 2f 53 56 47 49 6e 6a 65 63 74 6f 72 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 2d 32 30 31 35 20 57 61 79 62 75 72 79 20 3c 68 65 6c 6c 6f 40 77 61 79 62 75 72 79 2e 63 6f 6d 3e 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 74 3d 74 2e 73 70 6c 69 74 28 Data Ascii: /** * SVGInjector v1.1.3 - Fast, caching, dynamic inline SVG DOM injection library * https://github.com/iconic/SVGInjector * * Copyright (c) 2014-2015 Waybury <hello@waybury.com> * @license MIT */!function(t,e){"use strict";function r(t){t=t.split(

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:19 UTC	4457	OUT	GET /static/frontend/libs/feather-icons/dist/feather.min.js HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:47:19 UTC	4458	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:19 GMT Content-Type: application/javascript Content-Length: 75779 Connection: close Vary: Accept-Encoding Last-Modified: Sat, 26 Oct 1985 01:15:00 GMT ETag: "12803-1c5f67575ed00" Accept-Ranges: bytes
2023-05-25 12:47:19 UTC	4458	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 66 65 61 74 68 65 72 3d 6e 28 29 3a 65 2e 66 65 61 74 68 65 72 3d 6e 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: !function(e,n){"object"==typeof exports&&"object"==typeof module?module.exports=n():"function"==typeof define&&define.amd?define([],n):"object"==typeof exports?exports.feather=n():e.feather=n()}("undefined"!=typeof self?self:this,function(){return functio
2023-05-25 12:47:19 UTC	4474	IN	Data Raw: 22 73 77 69 74 63 68 22 5d 2c 74 6f 6f 6c 3a 5b 22 73 65 74 74 69 6e 67 73 22 2c 22 73 70 61 6e 6e 65 72 22 5d 2c 74 72 61 73 68 3a 5b 22 67 61 72 62 61 67 65 22 2c 22 64 65 6c 65 74 65 22 2c 22 72 65 6d 6f 76 65 22 2c 22 62 69 6e 22 5d 2c 22 74 72 61 73 68 2d 32 22 3a 5b 22 67 61 72 62 61 67 65 22 2c 22 64 65 6c 65 74 65 22 2c 22 72 65 6d 6f 76 65 22 2c 22 62 69 6e 22 5d 2c 74 72 69 61 6e 67 6c 65 3a 5b 22 64 65 6c 74 61 22 5d 2c 74 72 75 63 6b 3a 5b 22 64 65 6c 69 76 65 72 79 22 2c 22 76 61 6e 22 2c 22 73 68 69 70 70 69 6e 67 22 2c 22 74 72 61 6e 73 70 6f 72 74 22 2c 22 6c 6f 72 72 79 22 5d 2c 74 76 3a 5b 22 74 65 6c 65 76 69 73 69 6f 6e 22 2c 22 73 74 72 65 61 6d 22 5d 2c 74 77 69 74 63 68 3a 5b 22 6c 6f 67 6f 22 5d 2c 74 77 69 74 74 65 72 3a 5b 22 6c Data Ascii: "switch"],tool:["settings","spanner"],trash:["garbage","delete","remove","bin"],"trash-2":["garbage","delete","remove","bin"],triangle:["delta"],truck:["delivery","van","shipping","transport","lorry"],tv:["television","stream"],twitch:["logo"],twitter:["l
2023-05-25 12:47:19 UTC	4500	IN	Data Raw: 6c 69 6e 65 20 78 31 3d 22 31 38 22 20 79 31 3d 22 32 30 22 20 78 32 3d 22 31 38 22 20 79 32 3d 22 34 22 3e 3c 2f 6c 69 6e 65 3e 3c 6c 69 6e 65 20 78 31 3d 22 36 22 20 79 31 3d 22 32 30 22 20 78 32 3d 22 36 22 20 79 32 3d 22 31 36 22 3e 3c 2f 6c 69 6e 65 3e 27 2c 22 62 61 74 74 65 72 79 2d 63 68 61 72 67 69 6e 67 22 3a 27 3c 70 61 74 68 20 64 3d 22 4d 35 20 31 38 48 33 61 32 20 32 20 30 20 30 20 31 2d 32 2d 32 56 38 61 32 20 32 20 30 20 30 20 31 20 32 2d 32 68 33 2e 31 39 4d 31 35 20 36 68 32 61 32 20 32 20 30 20 30 20 31 20 32 20 32 76 38 61 32 20 32 20 30 20 30 20 31 2d 32 20 32 68 2d 33 2e 31 39 22 3e 3c 2f 70 61 74 68 3e 3c 6c 69 6e 65 20 78 31 3d 22 32 33 22 20 79 31 3d 22 31 33 22 20 78 32 3d 22 32 33 22 20 79 32 3d 22 31 31 22 3e 3c 2f 6c 69 6e 65 Data Ascii: line x1="18" y1="20" x2="18" y2="4"></line><line x1="6" y1="20" x2="6" y2="16"></line>',"battery-charging":'<path d="M5 18H3a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h3.19M15 6h2a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2h-3.19"></path><line x1="23" y1="13" x2="23" y2="11"></line
2023-05-25 12:47:19 UTC	4516	IN	Data Raw: 22 39 22 20 78 32 3d 22 32 30 22 20 79 32 3d 22 39 22 3e 3c 2f 6c 69 6e 65 3e 3c 6c 69 6e 65 20 78 31 3d 22 34 22 20 79 31 3d 22 31 35 22 20 78 32 3d 22 32 30 22 20 79 32 3d 22 31 35 22 3e 3c 2f 6c 69 6e 65 3e 3c 6c 69 6e 65 20 78 31 3d 22 31 30 22 20 79 31 3d 22 33 22 20 78 32 3d 22 38 22 20 79 32 3d 22 32 31 22 3e 3c 2f 6c 69 6e 65 3e 3c 6c 69 6e 65 20 78 31 3d 22 31 36 22 20 79 31 3d 22 33 22 20 78 32 3d 22 31 34 22 20 79 32 3d 22 32 31 22 3e 3c 2f 6c 69 6e 65 3e 27 2c 68 65 61 64 70 68 6f 6e 65 73 3a 27 3c 70 61 74 68 20 64 3d 22 4d 33 20 31 38 76 2d 36 61 39 20 39 20 30 20 30 20 31 20 31 38 20 30 76 36 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 32 31 20 31 39 61 32 20 32 20 30 20 30 20 31 2d 32 20 32 68 2d 31 61 32 20 32 20 30 20 30 20 Data Ascii: "9" x2="20" y2="9"></line><line x1="4" y1="15" x2="20" y2="15"></line><line x1="10" y1="3" x2="8" y2="21"></line><line x1="16" y1="3" x2="14" y2="21"></line>',headphones:'<path d="M3 18v-6a9 9 0 0 1 18 0v6"></path><path d="M21 19a2 2 0 0 1-2 2h-1a2 2 0 0
2023-05-25 12:47:19 UTC	4532	IN	Data Raw: 4c 33 20 36 76 31 34 61 32 20 32 20 30 20 30 20 30 20 32 20 32 68 31 34 61 32 20 32 20 30 20 30 20 30 20 32 2d 32 56 36 6c 2d 33 2d 34 7a 22 3e 3c 2f 70 61 74 68 3e 3c 6c 69 6e 65 20 78 31 3d 22 33 22 20 79 31 3d 22 36 22 20 78 32 3d 22 32 31 22 20 79 32 3d 22 36 22 3e 3c 2f 6c 69 6e 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 31 30 61 34 20 34 20 30 20 30 20 31 2d 38 20 30 22 3e 3c 2f 70 61 74 68 3e 27 2c 22 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 22 3a 27 3c 63 69 72 63 6c 65 20 63 78 3d 22 39 22 20 63 79 3d 22 32 31 22 20 72 3d 22 31 22 3e 3c 2f 63 69 72 63 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 30 22 20 63 79 3d 22 32 31 22 20 72 3d 22 31 22 3e 3c 2f 63 69 72 63 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 68 34 6c 32 2e 36 38 20 31 33 2e Data Ascii: L3 6v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2V6l-3-4z"></path><line x1="3" y1="6" x2="21" y2="6"></line><path d="M16 10a4 4 0 0 1-8 0"></path>',"shopping-cart":'<circle cx="9" cy="21" r="1"></circle><circle cx="20" cy="21" r="1"></circle><path d="M1 1h4l2.68 13.
2023-05-25 12:47:19 UTC	4548	IN	Data Raw: 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 22 5f 5f 70 72 6f 74 6f 5f 5f 22 69 6e 7b 7d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 3d 21 31 2c 69 3d 7b 7d 3b 74 72 79 7b 28 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 29 2e 73 65 74 29 2e 63 61 6c 6c 28 69 2c 5b 5d 29 2c 6e 3d 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6c 29 7b 72 65 74 75 72 6e 20 74 28 69 2c 6c 29 2c 6e 3f 65 2e 63 61 6c 6c 28 69 2c 6c 29 3a 69 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6c 2c 69 7d 7d 28 29 3a 76 6f 69 64 20 30 29 Data Ascii: ct.setPrototypeOf\|\|("__proto__"in{}?function(){var e,n=!1,i={};try{(e=Object.getOwnPropertyDescriptor(Object.prototype,"__proto__").set).call(i,[]),n=i instanceof Array}catch(e){}return function(i,l){return t(i,l),n?e.call(i,l):i.__proto__=l,i}}():void 0)

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:19 UTC	4458	OUT	GET /static/images/404.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:47:19 UTC	4480	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:19 GMT Content-Type: image/svg+xml Content-Length: 21104 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 08 Jun 2021 09:55:54 GMT ETag: "5270-5c43e29ed7e80" Accept-Ranges: bytes
2023-05-25 12:47:19 UTC	4480	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 66 64 35 39 63 65 35 34 2d 66 38 35 30 2d 34 64 66 63 2d 62 63 33 34 2d 64 64 37 64 33 37 39 64 36 30 30 65 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 37 34 2e 33 39 32 22 20 68 65 69 67 68 74 3d 22 35 38 34 2e 32 33 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 37 34 2e 33 39 32 20 35 38 34 2e 32 33 31 22 3e 3c 74 69 74 6c 65 3e 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 65 6c 6c 69 70 73 65 20 63 78 3d 22 35 34 30 2e 36 34 33 34 36 22 20 63 79 3d 22 35 34 39 2e 33 30 39 34 22 20 72 78 3d 22 35 32 37 2e 35 22 20 72 79 3d 22 33 34 2e 39 32 31 Data Ascii: <svg id="fd59ce54-f850-4dfc-bc34-dd7d379d600e" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="1074.392" height="584.231" viewBox="0 0 1074.392 584.231"><title>page not found</title><ellipse cx="540.64346" cy="549.3094" rx="527.5" ry="34.921
2023-05-25 12:47:19 UTC	4496	IN	Data Raw: 2e 34 37 32 36 36 61 32 30 2e 37 38 38 31 39 2c 32 30 2e 37 38 38 31 39 2c 30 2c 30 2c 31 2c 31 34 2e 39 37 39 39 33 2d 31 33 2e 31 39 37 36 34 6c 31 2e 37 31 33 36 31 2c 31 30 2e 31 38 33 37 38 2c 33 2e 31 37 37 2d 31 30 2e 36 39 35 36 36 61 32 30 2e 38 31 2c 32 30 2e 38 31 2c 30 2c 31 2c 31 2d 31 39 2e 38 37 30 35 37 2c 31 33 2e 37 30 39 35 32 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 33 2e 30 35 34 20 2d 31 35 37 2e 38 38 34 35 29 22 20 66 69 6c 6c 3d 22 23 35 37 62 38 39 34 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 39 33 2e 35 39 34 31 38 2c 35 31 31 2e 37 39 35 34 61 32 30 2e 37 38 38 32 2c 32 30 2e 37 38 38 32 2c 30 2c 30 2c 31 2c 31 34 2e 39 37 39 39 33 2d 31 33 2e 31 39 37 36 33 6c 31 2e 37 31 33 36 31 2c 31 Data Ascii: .47266a20.78819,20.78819,0,0,1,14.97993-13.19764l1.71361,10.18378,3.177-10.69566a20.81,20.81,0,1,1-19.87057,13.70952Z" transform="translate(-63.054 -157.8845)" fill="#57b894"/><path d="M1093.59418,511.7954a20.7882,20.7882,0,0,1,14.97993-13.19763l1.71361,1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59119)
Category:	downloaded
Size (bytes):	59305
Entropy (8bit):	4.716988765402807
Encrypted:	false
SSDEEP:	768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB
MD5:	ECD507B3125EDC4D2A03AA6AE5D07DA9
SHA1:	A57EE68D11601B0FD8E5037FC241FF65A754473C
SHA-256:	99464CEB71BC9BBDCC72275FAEFE44F98EB5CBB6B5D8EE665B87B35376F1A96E
SHA-512:	D72727E8871A410E34FCC2815B65B84618ACFC36C82D4EF80B5BD2ACB2710AAE7BA3DE35626D354B036C38CAAF10116572051AEB12E23D8FCD4B947E13ACED25
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	404
Entropy (8bit):	4.869146512835212
Encrypted:	false
SSDEEP:	6:tI9mc4slzblf97/vdkr1bYr3BYQDRLSiYizPqxBQt9UtdVLv1iGDqxBulXi:t4dlfZu1kr3BvRGiYizaA9qdF9iGWwdi
MD5:	3F1F6EC96B6133D762D456B8A99448AC
SHA1:	BE7DAECC11805FF593B0CD15F206C4F78F7D7B53
SHA-256:	D0AFA34695933663B97D3FF2846D107957E82F9AB49423D784512B4ABBF542DA
SHA-512:	072AA0B8E34C19AE8549563EEC6C8953AA2056D8C846373283DD67B1B3A22949C85AECCF8EE3133DF7A8472997A8F65CB3E6550DEAE296BED35A9A2FA445F6AE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="64" height="64"><g transform="matrix(.363638 0 0 .363636 -3.272763 -2.909091)"><path d="M130 29v132c0 14.77 10.2 23 21 23 10 0 21-7 21-23V30c0-13.54-10-22-21-22s-21 9.33-21 21z" fill="#f9ab00"/><g fill="#e37400"><path d="M75 96v65c0 14.77 10.2 23 21 23 10 0 21-7 21-23V97c0-13.54-10-22-21-22s-21 9.33-21 21z"/><circle cx="41" cy="163" r="21"/></g></g></svg>

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://vtaurl.com/static/frontend/libs/jquery/dist/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14700, version 1.0
Category:	downloaded
Size (bytes):	14700
Entropy (8bit):	7.985720709481153
Encrypted:	false
SSDEEP:	384:fOuXxd0BDhi+5Qa5gQg5kVK2Abbgp1fOs/eHDd8/2Iw49Wz3OnBH7D:ffBihiZAgZ5YKBKfOs6DdY+r8B/
MD5:	2E466E64FF320C575D968035F57F3A86
SHA1:	3794067C8B134EC70B06DBCE69241913E12D96B5
SHA-256:	6FF186039CA7266CA3DEC4A366A910ED6559BD8C11D27722F9EB5D1D5639AF8B
SHA-512:	03DD65322D6257B68F242FA88A4C53C552E3B896209232DDB69A39137F45822FDAB4B8FAF536FE1D1A21666E1F046BD74E0AB8CE409C275338AF564273C03EA2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunitosans/v15/pe1kMImSLYBIv1o4X1M8cce4OdVisMz5nZRqy6cmmmU3t2FQWEAEOvV9wNvrwlNstMKW3Y6K5WMwXeVy3GboJ0kTHmqP92UnK_I.woff2
Preview:	wOF2......9l.......,..9...........................D..t....`?STAT....2.....h.;..N..6.$.... ..,../....s%c....;...ji.#.6R..G...........NN.p`..V...a.e.........[`.w..K5#....a.....PR.,"x..D.g..)rg.y`W.H.....^c...%...o.....&'4..):ES.B`..e....=...".....g...B`..W...@".($E.......o..0H.8..#.DD..o.Z11v.i2.s..qlD.Fm.:.Q!".b._F........_...~.~...?..o.}....0.F5.................xT....V.Z.AE..n...~.x.e...2C. M......U.....=....X....P.....J.R.:^.NE...9.Z....)....p.....K8.....w....ZC.-......Kp...E).#...+..Bgr..IP.....x.6..g...6M.'.;5v.B....<o."B...75m...3..w..:..9.Y......9..E....??.0..-!08..8.A%......bI..b.BH.A.RpL..\.(].t.u..\.]...}n..._.....t1..dm.R...M8.......4I..$.6.;...:.\|....-...e!B(...\|.p........Da.i.*E..Hp.D..."..~.;L/jT.v.-.X.......>..f.L.-...!..F...@...9,..P..bhK.P. ... ...G.3.T.B..3b......@..#.....d...mWh........EtS.>..Y.n..~0........o...........r....g.....y.:.S,..,^P..4..!.. }...~\#.......:.'.j...?b......JRU .O........~{...'.......^.o.1.RI.....rT<$...L

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:23 UTC	4553	OUT	GET /contacthttps://vtaurl.com/report HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
2023-05-25 12:47:23 UTC	4554	IN	HTTP/1.1 404 Not Found Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2023-05-25 12:47:23 UTC	4554	IN	Data Raw: 65 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: e9e<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
2023-05-25 12:47:23 UTC	4558	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:31 UTC	4558	OUT	GET /pricing HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051231.0.0.0
2023-05-25 12:47:32 UTC	4559	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2023-05-25 12:47:32 UTC	4559	IN	Data Raw: 35 64 30 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c Data Ascii: 5d0e<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <
2023-05-25 12:47:32 UTC	4575	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 62 6f 64 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 20 6d 62 2d 34 20 74 65 78 74 2d 6c 65 66 74 20 74 65 78 74 2d 73 6d 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 3c 73 70 61 6e 20 64 61 74 61 2d 66 65 61 74 68 65 72 3d 22 63 68 65 63 6b 2d 63 69 72 63 6c 65 22 20 63 6c 61 73 73 3d 22 6d 72 2d 31 20 74 65 78 74 2d 73 75 63 63 65 73 Data Ascii: </div> <div class="card-body"> <ul class="list-unstyled mb-4 text-left text-sm"><li><span data-feather="check-circle" class="mr-1 text-succes
2023-05-25 12:47:32 UTC	4583	IN	Data Raw: 36 37 35 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 62 6f 64 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 20 6d 62 2d 34 20 74 65 78 74 2d 6c 65 66 74 20 74 65 78 74 2d 73 6d 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 3c 73 70 61 6e 20 64 61 74 61 2d 66 Data Ascii: 6751 </div> <div class="card-body"> <ul class="list-unstyled mb-4 text-left text-sm"><li><span data-f
2023-05-25 12:47:32 UTC	4599	IN	Data Raw: 6e 20 61 63 63 6f 72 64 69 6f 6e 2d 73 70 61 63 65 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 68 65 61 64 65 72 20 70 79 2d 34 22 20 69 64 3d 22 63 61 6e 2d 69 2d 75 70 67 72 61 64 65 2d 6d 79 2d 61 63 63 6f 75 6e 74 2d 61 74 2d 61 6e 79 2d 74 69 6d 65 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 66 61 71 2d 38 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 20 61 72 69 61 2d 63 6f 6e 74 Data Ascii: n accordion-spaced"> <div class="card"> <div class="card-header py-4" id="can-i-upgrade-my-account-at-any-time" data-toggle="collapse" role="button" data-target="#faq-8" aria-expanded="false" aria-cont
2023-05-25 12:47:32 UTC	4608	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:35 UTC	4608	OUT	GET /developershttps://vtaurl.com/faq HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051253.0.0.0
2023-05-25 12:47:35 UTC	4609	IN	HTTP/1.1 404 Not Found Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2023-05-25 12:47:35 UTC	4610	IN	Data Raw: 65 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: e9e<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
2023-05-25 12:47:35 UTC	4613	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:37 UTC	4613	OUT	GET /qr-codeshttps://vtaurl.com/bio-profileshttps://vtaurl.com/user/loginhttps://vtaurl.com/user/register HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051253.0.0.0
2023-05-25 12:47:37 UTC	4614	IN	HTTP/1.1 404 Not Found Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2023-05-25 12:47:37 UTC	4614	IN	Data Raw: 65 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: e9e<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
2023-05-25 12:47:37 UTC	4618	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:39 UTC	4618	OUT	GET /ivantanhttps://vtaurl.com/contacthttps://vtaurl.com/report HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051253.0.0.0
2023-05-25 12:47:39 UTC	4619	IN	HTTP/1.1 404 Not Found Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2023-05-25 12:47:39 UTC	4619	IN	Data Raw: 65 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: e9e<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
2023-05-25 12:47:39 UTC	4623	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:47 UTC	4623	OUT	GET / HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051253.0.0.0
2023-05-25 12:47:47 UTC	4624	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2023-05-25 12:47:47 UTC	4624	IN	Data Raw: 35 64 30 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c Data Ascii: 5d0e<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <
2023-05-25 12:47:47 UTC	4640	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 74 2d 32 20 70 62 2d 33 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 35 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 77 68 69 74 65 22 3e 44 69 67 69 74 61 6c 20 45 78 70 65 72 69 65 6e 63 65 3c 2f 68 35 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 77 68 69 74 65 20 6f 70 61 63 69 74 79 2d 38 20 6d 62 2d 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: > </div> <div class="pt-2 pb-3"> <h5 class="text-white">Digital Experience</h5> <p class="text-white opacity-8 mb-0">
2023-05-25 12:47:47 UTC	4647	IN	Data Raw: 36 34 37 32 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6c 65 61 64 20 6d 79 2d 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 61 73 79 20 74 6f 20 75 73 65 2c 20 64 79 6e 61 6d 69 63 20 61 6e 64 20 63 75 73 74 6f 6d 69 7a 61 62 6c 65 20 51 52 20 63 6f 64 65 73 20 66 6f 72 20 79 6f 75 72 20 6d 61 72 6b 65 74 69 6e 67 20 63 61 6d 70 61 69 67 6e 73 2e 20 41 6e 61 6c 79 7a 65 20 73 74 61 74 69 73 74 69 63 73 20 61 6e 64 20 6f 70 74 69 6d 69 7a 65 20 79 6f 75 72 20 6d 61 72 6b 65 74 69 6e 67 20 73 74 72 61 74 65 67 79 20 61 6e 64 20 69 6e 63 72 65 61 73 65 20 65 6e 67 61 67 65 6d 65 6e 74 2e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: 6472 <p class="lead my-4"> Easy to use, dynamic and customizable QR codes for your marketing campaigns. Analyze statistics and optimize your marketing strategy and increase engagement. <
2023-05-25 12:47:47 UTC	4663	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 61 6c 74 3d 22 4c 69 6e 6b 65 64 49 6e 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 76 74 61 75 72 6c 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 6c 69 6e 6b 65 64 69 6e 2e 73 76 67 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 35 30 70 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 77 65 69 67 68 74 2d 62 6f 6c 64 20 74 65 78 74 2d 64 61 72 6b 20 6d 79 2d 33 22 3e 4c 69 6e 6b 65 64 49 6e 3c 2f 70 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: > <img alt="LinkedIn" src="https://vtaurl.com/static/images/linkedin.svg" style="height:50px"> <p class="font-weight-bold text-dark my-3">LinkedIn</p>
2023-05-25 12:47:47 UTC	4673	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:47:59 UTC	4673	OUT	GET / HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=me9flr4shej1fdpoauce01g73s; _ga=GA1.1.1078727265.1685051215; _ga_833P6YR6PG=GS1.1.1685051215.1.1.1685051268.0.0.0
2023-05-25 12:47:59 UTC	4673	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:47:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2023-05-25 12:47:59 UTC	4674	IN	Data Raw: 37 63 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c Data Ascii: 7c4e<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <
2023-05-25 12:47:59 UTC	4689	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 74 2d 32 20 70 62 2d 33 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 35 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 77 68 69 74 65 22 3e 44 69 67 69 74 61 6c 20 45 78 70 65 72 69 65 6e 63 65 3c 2f 68 35 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 77 68 69 74 65 20 6f 70 61 63 69 74 79 2d 38 20 6d 62 2d 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: > </div> <div class="pt-2 pb-3"> <h5 class="text-white">Digital Experience</h5> <p class="text-white opacity-8 mb-0">
2023-05-25 12:47:59 UTC	4705	IN	Data Raw: 34 35 33 32 0d 0a 6d 64 2d 36 20 70 78 2d 6c 67 2d 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 2d 33 20 64 2d 66 6c 65 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 20 69 63 6f 6e 2d 73 68 61 70 65 20 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 20 62 67 2d 64 61 6e 67 65 72 20 74 65 78 74 2d 77 68 69 74 65 20 6d 72 2d 34 22 3e 0d 0a 20 20 20 20 Data Ascii: 4532md-6 px-lg-4"> <div class="card"> <div class="p-3 d-flex"> <div> <div class="icon icon-shape rounded-circle bg-danger text-white mr-4">
2023-05-25 12:47:59 UTC	4721	IN	Data Raw: 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 76 74 61 75 72 6c 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 66 72 6f 6e 74 65 6e 64 2f 6c 69 62 73 2f 63 6c 69 70 62 6f 61 72 64 2f 64 69 73 74 2f 63 6c 69 70 62 6f 61 72 64 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 61 6e 67 20 3d 20 7b 22 65 72 72 6f 72 22 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 55 52 4c 2e 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 54 68 69 73 20 77 65 62 73 69 74 Data Ascii: ></script> <script src="https://vtaurl.com/static/frontend/libs/clipboard/dist/clipboard.min.js"></script> <script type="text/javascript"> var lang = {"error":"Please enter a valid URL.","cookie":"This websit
2023-05-25 12:47:59 UTC	4722	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	890	OUT	GET /static/images/profiles.png HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	940	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/png Content-Length: 63985 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 20 Oct 2020 13:07:32 GMT ETag: "f9f1-5b219e9eb6d00" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	941	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 8d 00 00 01 90 08 02 00 00 00 44 6f cd c2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDRDotEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57
2023-05-25 12:46:54 UTC	956	IN	Data Raw: 68 3a eb 40 37 79 b2 4b 5b 73 b9 a7 be 9b d5 06 94 ef 55 a3 d7 ab ee c9 2a 3a 20 af ba 1f ad 0e 67 79 d5 c8 9d 54 c8 9a 2b 13 59 6e 27 dc dc fd e2 55 07 7f 7a af 83 de bb 93 63 de b6 90 e5 96 8e 23 f4 75 77 cb ab 46 e5 0b 6e c9 ab d6 c8 99 ef 55 a7 7d d2 e9 d9 d1 a5 95 b4 96 1b 02 69 ae 51 f5 49 5b 55 bb 39 02 1b 80 a8 3c 2b 12 79 07 56 64 8e 64 9e 51 e6 a4 69 9d b7 ea 0e 02 11 a2 45 cb 2b 52 c1 05 dd c2 8b 54 fb 19 52 9d c4 08 aa f3 eb d3 0f 1d 7d e2 6f 3d f7 e8 7f f2 9e 89 7b 0f 2d bc 76 eb ec 0f 3e 71 f4 d9 53 2f fc 4f 9f 9b 79 e2 f8 d3 ff f9 07 c6 4e 4c be fe 1b df 3e f4 d8 f1 93 1f b8 bf be 5c 6b 61 f6 cd 6f 5c 6d 7d fb 81 1f 7a a2 72 78 74 ee bb b7 2a 47 c6 0e 3f 75 a2 b1 51 9f bc 7f fa f0 53 c7 ef ff c4 c3 a5 a9 4a 75 b1 ba 72 75 e9 de 0f 9f 3d fd Data Ascii: h:@7yK[sU: gyT+Yn'Uzc#uwFnU}iQI[U9<+yVddQiE+RTR}o={-v>qS/OyNL>\kao\m}zrxtG?uQSJuru=
2023-05-25 12:46:54 UTC	989	IN	Data Raw: 95 01 8a 3a c0 1b f4 4f a8 f1 73 d5 01 ee 96 97 86 36 f5 02 8a b5 a0 60 d5 44 3d a2 9a 97 0e 12 29 de e9 3a c0 55 eb b5 d1 45 29 9f 57 9d ef 59 07 78 6b 67 38 85 e7 a2 13 df 48 76 1a 78 59 0e ba 0e 13 aa 75 c0 3b 2e 54 cb ce 62 23 4f 36 7a e9 a1 df 31 d6 3d 54 95 24 f5 41 a1 5a 40 a7 6e 87 45 d9 38 c0 41 b5 9c 01 21 be 11 45 d5 24 f2 d1 e0 d0 52 c9 2e 6a 6a ed 43 20 6a 21 e8 94 0b b8 f9 c4 d5 a5 0b 2b af fe 8b 6f fd d6 6f 7e 79 f7 2f 95 fa 74 2d a0 06 cb 5f 11 da 91 51 a0 0c c3 f3 d1 88 62 7b 86 d9 a1 1a 82 f4 78 52 2d 16 8b 30 c3 30 60 c2 01 38 15 b5 1c 59 5d 52 94 93 c6 bd 80 84 96 5a 47 94 69 44 01 e2 21 1f a6 cc f6 70 7d c7 40 3c b0 7e 9c 26 53 e2 2f 8d 12 11 75 87 d3 68 28 4f dc ba ba f5 d6 bf f0 aa 33 77 2c 5d 79 e2 66 6f 01 2e 59 c5 1e 4d 39 aa 49 Data Ascii: :Os6`D=):UE)WYxkg8HvxYu;.Tb#O6z1=T$AZ@nE8A!E$R.jjC j!+oo~y/t-_Qb{xR-00`8Y]RZGiD!p}@<~&S/uh(O3w,]yfo.YM9I
2023-05-25 12:46:54 UTC	1005	IN	Data Raw: 4c 1f 73 83 3e 76 ec 24 86 cc 49 2c 2c 01 b0 e0 a0 47 9d 77 ee 29 03 d7 8f 29 e0 66 1e 91 7b 24 42 9e b4 b6 6e 66 e4 52 be 85 91 68 28 86 d3 f6 9a ac 07 db c5 01 93 04 f5 b8 b9 03 dc 0c 60 34 b0 ba 19 db 42 75 d2 77 6d 9a f9 0b 59 2b 68 c6 36 be 93 42 3d a0 a2 15 94 8b 1e b5 29 80 b5 be 0a a1 e2 3c a8 93 56 20 ae 3f 9c e3 f4 b1 43 35 c6 81 ea f0 93 43 86 ea c6 83 d3 e1 40 b5 5c 66 bb 41 b5 3e 7a 04 d5 88 bd f3 a8 11 3c d5 c6 c1 5b e7 05 8b 5d f5 f6 d5 a3 ab 5f bd 54 c3 4a ab a3 c0 14 32 59 e7 7e 01 b9 6f 52 8b 72 42 90 ab a5 53 2c 26 39 8b c9 ba 7f 1d a6 81 ab 50 dd d8 03 92 b2 b2 18 8d 76 fb d6 f6 f2 5d 6b 6f fa d0 2b 9e fa d4 63 f7 ff a5 bb ce 5d e8 3f f4 6b 5f 5a bc fb 9e 77 bf eb e2 0b 0f 5e 39 ff f6 fb bf e3 3f 3a ff 07 bf f0 f9 95 97 5f 5c de 5a 7f Data Ascii: Ls>v$I,,Gw))f{$BnfRh(`4BuwmY+h6B=)<V ?C5C@\fA>z<[]_TJ2Y~oRrBS,&9Pv]ko+c]?k_Zw^9?:_\Z

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	891	OUT	GET /static/images/filters.png HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	923	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/png Content-Length: 17186 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 29 Oct 2021 17:18:14 GMT ETag: "4322-5cf8103246180" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	924	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 8d 00 00 00 fa 08 02 00 00 01 3c 70 da dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 71 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 31 34 20 37 39 2e 31 35 31 34 38 31 2c 20 32 30 31 33 2f 30 33 2f 31 33 2d 31 32 3a 30 39 3a 31 35 20 20 Data Ascii: PNGIHDR<ptEXtSoftwareAdobe ImageReadyqe<qiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15
2023-05-25 12:46:54 UTC	939	IN	Data Raw: 42 9d ee 8a ec d5 d4 74 0e 42 7d 0f 5f 5e c7 75 da 90 c3 ea 59 6a af 69 a5 6e c1 96 38 9f 65 78 da d2 e1 2f 5d 78 25 a9 37 db 4b 2a bc 5f 16 35 54 8f 4f 4c b2 0f 88 60 67 34 42 9d 0e cb 1c d6 14 30 3f b0 e1 9a 99 cf b6 35 4b 0d cc 61 4d bd bd 77 74 50 5b 0a b4 1c da 52 58 d9 92 61 42 50 35 c7 27 fd 6c d2 a7 b0 f5 88 8c 40 3e bc 13 f4 3f cf 8c b5 83 d9 eb 75 f7 f7 b2 bb a6 2d f5 20 5b 42 32 ba 24 ab 39 3e 6b 6a 7d fd 1d 66 c8 36 96 c9 09 36 be 08 42 7f 9a 10 42 c2 0b 36 63 13 ea 34 21 84 f4 0c d4 37 dc 4c 6c c6 26 d4 69 42 08 09 43 a0 d3 97 2a bd 71 d1 16 dd d5 9e 3e ce 61 e1 90 6c d2 f3 61 d3 0e 21 a4 e7 67 64 56 93 88 b4 22 26 ca 3f 28 4c 69 f6 88 21 d6 84 58 8e c8 26 d4 69 42 08 e9 6e 82 36 57 7b 3c 26 af cf b4 af be f7 f8 c8 1b ad 43 63 a8 d9 a4 c7 c0 Data Ascii: BtB}_^uYjin8ex/]x%7K_5TOL`g4B0?5KaMwtP[RXaBP5'l@>?u- [B2$9>kj}f66BB6c4!7Ll&iBCq>ala!gdV"&?(Li!X&iBn6W{<&Cc

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1005	OUT	GET /static/images/qrcodes.png HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1026	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/png Content-Length: 85833 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 14 Dec 2021 09:57:08 GMT ETag: "14f49-5d31836588500" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 8d 00 00 01 90 08 06 00 00 00 cb 0d 5a 95 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 73 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDRZtEXtSoftwareAdobe ImageReadyqe<siTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57
2023-05-25 12:46:54 UTC	1042	IN	Data Raw: 66 53 f6 db 50 d0 b7 9e c4 c4 44 2d d2 68 8c e3 72 53 45 9d 29 08 a7 e9 25 05 69 64 ee c8 25 96 a8 35 8d 3d 94 9f b5 09 0c 75 b8 9d 61 a0 cc 18 6e f4 42 88 a0 d8 9e a1 cc cc ac 85 6a 99 da 02 34 44 64 26 83 f4 5b a6 a5 90 d2 9f 00 ea 4b 18 21 34 9e 84 3d a4 27 26 6b 91 c6 f4 e4 14 2d 23 15 40 dc 28 46 ae 67 38 38 7d 90 c9 ea e6 7e 1a f5 45 7c 52 12 7a 4f fa 1a 21 67 ce d3 b7 5d 04 5d bb 89 73 7f fc 0a 17 07 7b 7c b9 78 19 96 ff b1 9e 19 46 ec 38 15 8c 53 2b 16 a2 51 b5 2a 58 bd f7 20 46 7c fb 03 cb bf e5 e0 11 16 31 e8 e3 ee 5d 0c bf e7 92 63 cc 6f ab b1 7e db 6e 66 78 b1 eb c2 15 9c 9d 3f 1d b5 fd cb 32 c2 38 66 de 52 ba 99 17 5b 82 82 61 49 fe 0e 69 db 5c b4 ac a8 f8 04 bc f5 e3 52 3c b8 ff 88 7d 3f 4f ad c4 bf fe 82 2d 23 8b e1 97 83 c7 f1 e5 ca 0d cc Data Ascii: fSPD-hrSE)%id%5=uanBj4Dd&[K!4='&k-#@(Fg88}~E\|RzO!g]]s{\|xF8S+Q*X F\|1]co~nfx?28fR[aIi\R<}?O-#
2023-05-25 12:46:54 UTC	1059	IN	Data Raw: 92 d9 b8 69 5e 70 09 59 33 dd 5e bd 1f 62 5f f3 1c d3 f5 07 b2 90 9d f6 7f 66 3e 8d f4 ff 41 d8 ee 76 b9 a7 69 36 97 ca 9a 3a 44 85 06 db 7d 0f 2a 54 54 32 cd 60 80 b7 b7 7d 8a 0d f2 52 ae a8 ab 47 d7 d0 10 ab df 4a aa aa 11 15 1c d4 2e 60 a0 a4 b6 1e c1 3e de 90 4b ec d3 e8 d5 92 f5 5e d3 a8 41 97 40 fb 49 3b 17 6b ea 11 ee e7 cd 00 aa 5d cf 0a 8d 96 99 c1 23 7c 2f 3f b3 57 59 83 9a b4 2b 6e d1 16 5e 86 5c ac 6f 44 94 af 0c 52 3b 5f fe aa c9 8b b6 96 bc ac 85 cb a5 57 7d ee 69 b7 03 8d ae 12 9d 4e c7 00 5a 45 45 c5 55 81 fe 47 8e 1c 89 bd 7b ad 33 18 ac 5a b5 0a f7 de 7b 2f ef 31 d9 d9 d9 0c 38 da 2b 42 a0 b1 23 8e 5b 48 3a 03 68 9c c5 40 a3 28 ce 14 80 50 0d e2 2d f3 1f c5 dc 25 0b db ec 5c e8 c9 9a 79 31 6a 38 6a 2a 4a 2d 48 35 22 06 d2 74 50 9b 01 18 Data Ascii: i^pY3^b_f>Avi6:D}TT2`}RGJ.`>K^A@I;k]#\|/?WY+n^\oDR;_W}iNZEEUG{3Z{/18+B#[H:h@(P-%\y1j8jJ-H5"tP
2023-05-25 12:46:54 UTC	1070	IN	Data Raw: 78 0f 4f 83 58 22 37 37 9b d7 aa a0 3b 91 67 52 e6 31 4f d3 7c d2 81 81 81 82 91 26 ec 15 1a 61 82 de bb 5d 29 8b 26 0f 47 52 64 28 ce 2a 6a 70 cf c0 78 f4 08 f6 6f f7 f9 1a 10 12 80 5d 37 a6 e1 87 73 c5 18 40 80 e2 ad bd b8 eb 38 50 ea 85 2d 53 07 e1 8b 9c 22 04 90 cf f3 e2 63 21 69 25 56 f0 03 71 91 88 f2 96 e2 70 79 1d a6 75 0b c5 f0 10 bf 76 1f 5f 94 4c 8c 3f 53 c2 f0 55 89 0a 31 72 31 ee 8b e4 5e 30 25 64 28 2b fb 04 60 7c a0 0c 75 04 38 3e ef 01 8d 1e b9 d2 42 c3 33 f0 31 95 69 6e 53 3e d0 48 53 58 2d 5b b6 ac 4d fb 44 db e5 6b fb 8b 2f be c0 03 0f 3c c0 7b 0c 4d b7 e5 08 68 14 1a b7 90 f8 f9 f9 a1 a4 a4 84 fd 35 95 a3 47 8f 62 c8 90 21 9e 0b e9 2a 00 8c ae f2 f3 2b 58 f5 2b 2e 65 ed 63 e4 95 26 80 a7 83 0a d1 c9 a3 78 41 63 cd b1 1c e4 2e fb 82 40 Data Ascii: xOX"77;gR1O\|&a])&GRd(jpxo]7s@8P-S"c!i%Vqpyuv_L?SU1r1^0%d(+`\|u8>B31inS>HSX-[MDk/<{Mh5Gb!+X+.ec&xAc.@
2023-05-25 12:46:54 UTC	1086	IN	Data Raw: 02 43 0e 8c 5c ea 51 b8 a5 91 4b dc 85 f2 25 93 27 33 e5 4f 56 5b ad c8 ab 57 0f 46 8c e0 85 b6 5d bf 7e bd b4 ce 4e ed 11 4c 53 d0 6b d7 ae 95 a6 51 8b 8b 8b 6b 01 93 3e 9f 79 e6 99 c8 c9 c9 89 1b 5c 95 97 97 87 80 20 79 08 d3 fa 41 bd 35 93 e4 cc 32 64 c8 10 c9 8b 59 7d 9e f4 b7 d6 a3 b9 21 83 8b 53 db d0 94 bd fa 3c a8 5f a8 4e 5a a7 15 7a a7 ed 56 ac 58 81 5e bd 7a 99 3e de f0 e1 c3 f1 cd 37 df d4 e6 e1 8d e6 fc 44 0e 40 d4 2e dc 01 c6 a2 24 77 93 41 c0 5b 25 43 9f da 23 58 fa 1c c1 c2 08 0d 6c 7a ca f5 8f 51 53 26 4f d5 7a ab 83 fb 28 9e ce 69 5d ac 03 a3 51 3d e8 18 3e 6f 10 a4 e8 33 81 69 a6 81 87 72 56 0f d9 13 da ae 99 22 96 c2 f7 d8 2c 00 23 8c 03 85 9b de 5e 08 8d e3 a8 78 5b d7 96 61 93 d7 2c ea 01 a3 a7 46 7e 25 58 e8 f7 9c ce c0 ca a5 ac ff Data Ascii: C\QK%'3OV[WF]~NLSkQk>y\ yA52dY}!S<_NZzVX^z>7D@.$wA[%C#XlzQS&Oz(i]Q=>o3irV",#^x[a,F~%X
2023-05-25 12:46:54 UTC	1102	IN	Data Raw: 3d 5a 1d 45 4e 41 1e ba 3f fa 2b e4 1f 6a 77 24 e0 3a bd 87 1e 7a 08 ff f8 c7 3f 6c f9 ad bd e0 8b 39 a2 e7 cc 99 e3 fa 7b 5a 07 3b 74 e8 60 e4 94 b6 fe fe cb 2f bf c4 9f fe f4 27 7c f4 d1 47 46 f9 b4 a4 f1 43 cf f3 1b 6f bc d1 48 15 b8 6a d5 2a c3 ca c6 32 7a f7 ee 6d a4 1d 7c e1 85 17 30 6b d6 ac b8 83 4e 45 45 85 01 b7 7e 5e d0 61 80 91 b9 bb 27 4e 9c 88 79 f3 e6 19 e7 a0 c5 b5 4d 9b 36 86 43 8b ce 15 1d 04 20 59 1f a6 75 64 fa 43 67 0a c7 30 5e da bc 26 bc 56 05 d9 1a 20 1b b0 98 41 a8 21 81 33 5f a4 5c ad cd 83 ce 55 1d e0 3d d5 20 ed d0 03 ef 14 7b 54 7e 91 f9 89 87 ed b1 c0 23 a7 81 f7 97 db 2d 88 04 c0 6f 16 9b 9f 23 3a e8 1b c9 cc aa 32 e0 14 a0 73 6f 60 d9 02 7b 1a c1 1e c7 02 fd be 63 96 47 47 16 7d 9d 57 2f 57 6f 2d ab cc 75 8a 81 02 77 07 a0 Data Ascii: =ZENA?+jw$:z?l9{Z;t`/'\|GFCoHj*2zm\|0kNEE~^a'NyM6C YudCg0^&V A!3_\U= {T~#-o#:2so`{cGG}W/Wo-uw

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://vtaurl.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Windows Analysis Report
http://vtaurl.com

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1020	OUT	GET /static/images/flags/us.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1021	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/svg+xml Content-Length: 4551 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 25 Jul 2019 01:31:34 GMT ETag: "11c7-58e7762d60980" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1021	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 34 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 30 20 34 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 69 64 3d 22 66 6c 61 67 2d 69 63 6f 6e 2d 63 73 73 2d 75 73 22 3e 0a 20 20 3c 67 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 3c 67 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 70 74 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 62 64 33 64 34 34 22 20 64 3d 22 4d Data Ascii: <svg width="640px" height="480px" viewBox="0 0 640 480" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" id="flag-icon-css-us"> <g fill-rule="evenodd"> <g stroke-width="1pt"> <path fill="#bd3d44" d="M

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1021	OUT	GET /static/images/flags/fr.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1119	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/svg+xml Content-Length: 321 Connection: close Last-Modified: Thu, 25 Jul 2019 01:34:48 GMT ETag: "141-58e776e663e00" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1119	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 69 64 3d 22 66 6c 61 67 2d 69 63 6f 6e 2d 63 73 73 2d 66 72 22 20 77 69 64 74 68 3d 22 36 34 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 30 20 34 38 30 22 3e 0a 20 20 3c 67 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 70 74 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 36 34 30 76 34 38 30 48 30 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 32 36 37 66 22 20 64 3d 22 4d 30 20 30 68 32 31 33 2e 33 76 34 38 30 48 30 7a 22 2f 3e 0a 20 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" id="flag-icon-css-fr" width="640px" height="480px" viewBox="0 0 640 480"> <g fill-rule="evenodd" stroke-width="1pt"> <path fill="#fff" d="M0 0h640v480H0z"/> <path fill="#00267f" d="M0 0h213.3v480H0z"/>

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1058	OUT	GET /static/images/flags/gb.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1119	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/svg+xml Content-Length: 860 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 25 Jul 2019 01:34:48 GMT ETag: "35c-58e776e663e00" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1120	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 69 64 3d 22 66 6c 61 67 2d 69 63 6f 6e 2d 63 73 73 2d 67 62 22 20 77 69 64 74 68 3d 22 36 34 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 30 20 34 38 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 37 22 20 64 3d 22 4d 2d 38 35 2e 33 20 30 68 36 38 32 2e 36 76 35 31 32 48 2d 38 35 2e 33 7a 22 2f 3e 0a 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 61 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" id="flag-icon-css-gb" width="640px" height="480px" viewBox="0 0 640 480"> <defs> <clipPath id="a"> <path fill-opacity=".7" d="M-85.3 0h682.6v512H-85.3z"/> </clipPath> </defs> <g clip-path="url(#a

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1059	OUT	GET /static/images/wp.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1112	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/svg+xml Content-Length: 1487 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 29 Mar 2022 11:27:00 GMT ETag: "5cf-5db59b5124900" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1112	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 32 2e 35 32 20 31 32 32 2e 35 32 33 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 34 36 34 33 34 32 22 3e 3c 70 61 74 68 20 64 3d 22 6d 38 2e 37 30 38 20 36 31 2e 32 36 63 30 20 32 30 2e 38 30 32 20 31 32 2e 30 38 39 20 33 38 2e 37 37 39 20 32 39 2e 36 31 39 20 34 37 2e 32 39 38 6c 2d 32 35 2e 30 36 39 2d 36 38 2e 36 38 36 63 2d 32 2e 39 31 36 20 36 2e 35 33 36 2d 34 2e 35 35 20 31 33 2e 37 36 39 2d 34 2e 35 35 20 32 31 2e 33 38 38 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 39 36 2e 37 34 20 35 38 2e 36 30 38 63 30 2d 36 2e 34 39 35 2d 32 2e 33 33 33 2d 31 30 2e 39 39 33 2d 34 2e 33 33 34 2d 31 34 2e 34 Data Ascii: <svg viewBox="0 0 122.52 122.523" xmlns="http://www.w3.org/2000/svg"><g fill="#464342"><path d="m8.708 61.26c0 20.802 12.089 38.779 29.619 47.298l-25.069-68.686c-2.916 6.536-4.55 13.769-4.55 21.388z"/><path d="m96.74 58.608c0-6.495-2.333-10.993-4.334-14.4

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1111	OUT	GET /static/images/slack.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1113	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/svg+xml Content-Length: 1394 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 19 Jul 2021 07:55:44 GMT ETag: "572-5c77543ac0000" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1114	IN	Data Raw: 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 32 34 34 37 2e 36 20 32 34 35 32 2e 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 34 37 2e 36 20 32 34 35 32 2e 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 6d 38 39 37 2e 34 20 30 63 2d 31 33 35 2e 33 2e 31 2d 32 34 34 2e 38 20 31 30 39 2e 39 2d 32 34 34 2e 37 20 32 34 35 2e 32 2d 2e 31 20 31 33 35 2e 33 20 31 30 39 2e 35 20 32 34 35 2e 31 20 32 34 34 2e 38 20 32 34 35 2e 32 68 32 34 34 2e 38 76 2d 32 34 35 2e 31 63 2e 31 2d 31 33 Data Ascii: <svg enable-background="new 0 0 2447.6 2452.5" viewBox="0 0 2447.6 2452.5" xmlns="http://www.w3.org/2000/svg"><g clip-rule="evenodd" fill-rule="evenodd"><path d="m897.4 0c-135.3.1-244.8 109.9-244.7 245.2-.1 135.3 109.5 245.1 244.8 245.2h244.8v-245.1c.1-13

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1115	OUT	GET /static/images/shortcuts.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1116	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/svg+xml Content-Length: 2435 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 29 Mar 2022 11:34:30 GMT ETag: "983-5db59cfe4bd80" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1116	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 77 69 64 74 68 3d 22 32 34 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 30 70 78 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 35 34 30 37 63 22 20 64 3d 22 4d 33 34 2c 34 32 48 31 34 63 2d 34 2e 34 31 31 2c 30 2d 38 2d 33 2e 35 38 39 2d 38 2d 38 56 31 34 63 30 2d 34 2e 34 31 31 2c 33 2e 35 38 39 2d 38 2c 38 2d 38 68 32 30 63 34 2e 34 31 31 2c 30 2c 38 2c 33 2e 35 38 39 2c 38 2c 38 76 32 30 20 43 34 32 2c 33 38 2e 34 31 31 2c 33 38 2e 34 31 31 2c 34 32 2c 33 34 2c 34 32 7a 22 2f 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 73 68 6f 72 74 63 75 74 73 31 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48" width="240px" height="240px"><path fill="#15407c" d="M34,42H14c-4.411,0-8-3.589-8-8V14c0-4.411,3.589-8,8-8h20c4.411,0,8,3.589,8,8v20 C42,38.411,38.411,42,34,42z"/><radialGradient id="shortcuts1"

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:53 UTC	4	OUT	GET /static/frontend/libs/select2/dist/css/select2.min.css HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:53 UTC	10	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:53 GMT Content-Type: text/css Content-Length: 14966 Connection: close Vary: Accept-Encoding Last-Modified: Sat, 26 Oct 1985 01:15:00 GMT ETag: "3a76-1c5f67575ed00" Accept-Ranges: bytes
2023-05-25 12:46:53 UTC	10	IN	Data Raw: 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 Data Ascii: .select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user-selec

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1116	OUT	GET /static/images/gtm.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1122	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/svg+xml Content-Length: 1019 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 19 Jul 2021 07:54:44 GMT ETag: "3fb-5c77540187900" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1122	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1121	OUT	GET /static/images/facebook.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1123	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/svg+xml Content-Length: 450 Connection: close Last-Modified: Mon, 19 Jul 2021 07:54:18 GMT ETag: "1c2-5c7753e8bbe80" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1123	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 35 30 30 22 20 68 65 69 67 68 74 3d 22 32 35 30 30 22 20 76 69 65 77 42 6f 78 3d 22 31 32 36 2e 34 34 35 20 32 2e 32 38 31 20 35 38 39 20 35 38 39 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 34 32 30 2e 39 34 35 22 20 63 79 3d 22 32 39 36 2e 37 38 31 22 20 72 3d 22 32 39 34 2e 35 22 20 66 69 6c 6c 3d 22 23 33 63 35 61 39 61 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 31 36 2e 37 30 34 20 39 32 2e 36 37 37 68 2d 36 35 2e 32 33 39 63 2d 33 38 2e 37 31 35 20 30 2d 38 31 2e 37 37 37 20 31 36 2e 32 38 33 2d 38 31 2e 37 37 37 20 37 32 2e 34 30 32 2e 31 38 39 20 31 39 2e 35 35 34 20 30 20 33 38 2e 32 38 31 20 30 20 35 39 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="2500" height="2500" viewBox="126.445 2.281 589 589"><circle cx="420.945" cy="296.781" r="294.5" fill="#3c5a9a"/><path d="M516.704 92.677h-65.239c-38.715 0-81.777 16.283-81.777 72.402.189 19.554 0 38.281 0 59.

Timestamp	kBytes transferred	Direction	Data
2023-05-25 12:46:54 UTC	1121	OUT	GET /static/images/zapier.svg HTTP/1.1 Host: vtaurl.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtaurl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-25 12:46:54 UTC	1124	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 25 May 2023 12:46:54 GMT Content-Type: image/svg+xml Content-Length: 1160 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 19 Jul 2021 07:55:12 GMT ETag: "488-5c77541c3b800" Accept-Ranges: bytes
2023-05-25 12:46:54 UTC	1124	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 30 30 22 20 68 65 69 67 68 74 3d 22 32 35 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 36 20 32 35 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 39 2e 39 39 39 20 31 32 38 2e 30 35 36 61 37 36 2e 35 35 20 37 36 2e 35 35 20 30 20 30 20 31 2d 34 2e 39 31 35 20 32 37 2e 30 32 34 20 37 36 2e 37 34 35 20 37 36 2e 37 34 35 20 30 20 30 20 31 2d 32 37 2e 30 33 32 20 34 2e 39 32 33 68 2d 2e 31 30 38 63 2d 39 2e 35 30 38 2d 2e 30 31 32 2d 31 38 2e 36 31 38 2d 31 2e 37 35 2d 32 37 2e 30 32 34 2d 34 2e 39 31 39 41 37 36 Data Ascii: <svg width="2500" height="2500" viewBox="0 0 256 256" xmlns="http://www.w3.org/2000/svg" preserveAspectRatio="xMidYMid"><path d="M159.999 128.056a76.55 76.55 0 0 1-4.915 27.024 76.745 76.745 0 0 1-27.032 4.923h-.108c-9.508-.012-18.618-1.75-27.024-4.919A76