Edit tour

Windows Analysis Report
http://veygo.com

Overview

General Information

Sample URL:	http://veygo.com
Analysis ID:	1520473
Infos:

Detection

Score:	23
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Performs DNS queries to domains with low reputation

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5596 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2216,i,4458420318381850172,13968764616555195040,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 1308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://veygo.com" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: POST /api/v1/log HTTP/1.1Host: log.cookieyes.comConnection: keep-aliveContent-Length: 556sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryB3ZeDO27ZeSutOuNAccept: */*Origin: https://www.veygo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-56ZXV6D
Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-56ZXV6D
Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-56ZXV6D
Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-56ZXV6D
Source: https://www.cookieyes.com/product/cookie-consent/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PL4TPCV
Source: https://www.cookieyes.com/product/cookie-consent/	HTTP Parser: Iframe src: https://www.youtube.com/embed/v24ckHzEQLk/?autoplay=1&showinfo=0&rel=0&modestbranding=1&muted=1
Source: https://www.cookieyes.com/product/cookie-consent/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PL4TPCV
Source: https://www.cookieyes.com/product/cookie-consent/	HTTP Parser: Iframe src: https://www.youtube.com/embed/v24ckHzEQLk/?autoplay=1&showinfo=0&rel=0&modestbranding=1&muted=1
Source: https://www.cookieyes.com/product/cookie-consent/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-6NMS6DRVBM&gacid=1959235332.1727429182&gtm=45je49p0v869306959za200zb839301876&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101686684~101747727&z=1870274017
Source: https://www.cookieyes.com/pricing/?ref=CYTR	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PL4TPCV
Source: https://www.cookieyes.com/pricing/?ref=CYTR	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/722054727?random=1727429201437&cv=11&fst=1727429201437&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9102529682z8839301876za201zb839301876&gcd=13r3r3r3r5l1&dma=0&tag_exp=101529665~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.cookieyes.com%2Fpricing%2F%3Fref%3DCYTR&ref=https%3A%2F%2Fwww.cookieyes.com%2Fproduct%2Fcookie-consent%2F&hn=www.googleadservices.com&frm=0&tiba=Pricing%20%26%20Plans%20-%20CookieYes&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=657825770.1727429191&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Source: https://www.cookieyes.com/pricing/?ref=CYTR	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PL4TPCV
Source: https://www.cookieyes.com/pricing/?ref=CYTR	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/722054727?random=1727429201437&cv=11&fst=1727429201437&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9102529682z8839301876za201zb839301876&gcd=13r3r3r3r5l1&dma=0&tag_exp=101529665~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.cookieyes.com%2Fpricing%2F%3Fref%3DCYTR&ref=https%3A%2F%2Fwww.cookieyes.com%2Fproduct%2Fcookie-consent%2F&hn=www.googleadservices.com&frm=0&tiba=Pricing%20%26%20Plans%20-%20CookieYes&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=657825770.1727429191&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse

Source: https://www.veygo.com/	HTTP Parser: No favicon
Source: https://www.veygo.com/	HTTP Parser: No favicon
Source: https://www.cookieyes.com/pricing/?ref=CYTR	HTTP Parser: No favicon

Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: No <meta name="author".. found
Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: No <meta name="author".. found
Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: No <meta name="author".. found
Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: No <meta name="author".. found
Source: https://www.cookieyes.com/product/cookie-consent/	HTTP Parser: No <meta name="author".. found
Source: https://www.cookieyes.com/product/cookie-consent/	HTTP Parser: No <meta name="author".. found
Source: https://www.cookieyes.com/pricing/?ref=CYTR	HTTP Parser: No <meta name="author".. found
Source: https://www.cookieyes.com/pricing/?ref=CYTR	HTTP Parser: No <meta name="author".. found

Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: No <meta name="copyright".. found
Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: No <meta name="copyright".. found
Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: No <meta name="copyright".. found
Source: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cookieyes.com/product/cookie-consent/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cookieyes.com/product/cookie-consent/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cookieyes.com/pricing/?ref=CYTR	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cookieyes.com/pricing/?ref=CYTR	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49727 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: domclickext.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: domclickext.xyz

Source: global traffic	TCP traffic: 192.168.2.11:49747 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.11:50359 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42

Source: chromecache_231.2.dr	String found in binary or memory: <li><a href="https://twitter.com/cookieyeshq" target="_blank" rel="noopener noreferrer" aria-label="Twitter"><img src="https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/twitter.svg" height="20" width="20" alt="Twitter"></a></li> equals www.twitter.com (Twitter)
Source: chromecache_231.2.dr	String found in binary or memory: <li><a href="https://www.facebook.com/cookieyeshq" target="_blank" rel="noopener noreferrer" aria-label="Facebook"><img src="https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/facebook.svg" height="20" width="20" alt="Facebook"></a></li> equals www.facebook.com (Facebook)
Source: chromecache_231.2.dr	String found in binary or memory: <li><a href="https://www.linkedin.com/company/cookieyeshq/" target="_blank" rel="noopener noreferrer" aria-label="LinkedIn"><img src="https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/linkedin.svg" height="20" width="20" alt="Linkedin"></a></li> equals www.linkedin.com (Linkedin)
Source: chromecache_231.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/cookieyes?sub_confirmation=1" target="_blank" rel="noopener noreferrer" aria-label="Youtube"><img src="https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/youtube.svg" height="20" width="20" alt="Youtube"></a></li> equals www.youtube.com (Youtube)
Source: chromecache_231.2.dr	String found in binary or memory: <div class="modal-body responsive-iframe text-center test"><iframe loading="lazy" src="about:blank" width="560" height="350" frameborder="0" data-rocket-lazyload="fitvidscompatible" data-lazy-src="https://www.youtube.com/embed/v24ckHzEQLk/?autoplay=1&showinfo=0&rel=0&modestbranding=1&muted=1"></iframe><noscript><iframe src="https://www.youtube.com/embed/v24ckHzEQLk/?autoplay=1&showinfo=0&rel=0&modestbranding=1&muted=1" width="560" height="350" frameborder="0"></iframe></noscript></div> equals www.youtube.com (Youtube)
Source: chromecache_231.2.dr	String found in binary or memory: <a class="play_video_icon" href="https://www.youtube.com/embed/v24ckHzEQLk/?autoplay=1&showinfo=0&rel=0&modestbranding=1&muted=1" data-toggle="modal" data-target="#demoVideoModal" aria-label="Play Cookie Consent Solution Video Demo in popup"><img width="105" height="105" decoding="async" src="/wp-content/themes/cookieyes-new/assets/images/play_button.svg" alt="" /> equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: }</style></defs> <path class="cls-1" d="M519.79,50c20.79,0,41.59,0,62.38,0,2.5.55,4.98,1.41,7.5,1.6,77.7,5.82,150.44,28.17,216.72,69.05,128.82,79.46,208.16,193.76,235.96,343.19,3.38,18.15,5.14,36.6,7.66,54.91v62.5c-.8,6.41-1.69,12.81-2.39,19.23-10.68,98.9-46.45,187.61-109.45,264.53-78.34,95.65-178.56,155.05-300.28,177.24-18.43,3.36-37.14,5.2-55.72,7.74h-62.38c-2.5-.55-4.97-1.41-7.49-1.61-108.97-8.88-205.75-48.1-287.52-120.74-127.99-113.68-184.92-257.3-170.06-427.83,9.47-108.66,52.86-203.93,126.04-284.72,76.95-84.95,172.09-137.9,285.2-157.56,17.84-3.1,35.88-5.06,53.83-7.54ZM262.91,550.27c1.8,47.5,1.87,95.43,5.83,143.03,6.05,72.76,56.73,127.31,128.57,137.56,36.14,5.15,73.13,5.81,109.74,5.8,62,0,124.17.28,185.95-4.09,57.3-4.06,100.9-33.48,126.11-86.75,11-23.25,15.92-48.25,16.31-73.78,1.02-67.36,1.6-134.73,1.64-202.09.01-21.11-1.45-42.3-3.6-63.31-7.44-72.93-56.71-127.01-128.86-137.48-35.8-5.19-72.48-5.79-108.76-5.78-62.33.01-124.82-.29-186.93,3.98-77.48,5.33-133.81,62.65-140.26,140.2-3.93,47.28-3.95,94.88-5.74,142.73Z"></path> <path class="cls-1" d="M551.12,313.74c43.04,1.23,86.59,1.4,130,3.98,60.06,3.57,99.74,41.49,101.33,101.45,2.3,86.77,2.38,173.7.06,260.47-1.64,61.29-40.99,100.68-102.25,102.35-86.27,2.35-172.7,2.3-258.97-.02-60.69-1.63-100.2-41.07-101.82-101.69-2.32-86.77-2.33-173.7,0-260.47,1.63-60.68,41.13-98.49,101.71-102.12,43.08-2.58,86.3-2.71,129.95-3.95ZM698.01,549.92c-.07-81.39-65.32-146.91-146.63-147.24-81.46-.32-147.52,65.7-147.46,147.38.06,81.32,65.38,146.91,146.64,147.26,81.41.34,147.51-65.74,147.45-147.4ZM738.18,397.66c.4-18.97-14.2-34.64-32.84-35.22-19.46-.61-35.24,14.17-35.61,33.36-.37,19.08,14.12,34.64,32.78,35.2,19.46.58,35.26-14.19,35.67-33.34Z"></path> <path class="cls-1" d="M551.21,645.67c-52.51.11-95.52-42.68-95.72-95.21-.2-53.05,42.84-96.27,95.75-96.15,52.52.12,95.23,43.04,95.22,95.69,0,52.64-42.74,95.56-95.25,95.66Z"></path> </svg> <span class="sr-only">Veygo Instagram</span> </a></li><li> <a href="https://www.youtube.com/channel/UCvuws7xIFKzWHP6YabGiMZA" class="w-8 flex fill-charcoal" rel="noopener noreferrer" target="_blank"> <svg xmlns="http://www.w3.org/2000/svg" id="Layer_4" data-name="Layer 4" viewbox="0 0 1100 1100"> <defs><style>.cls-1 { equals www.youtube.com (Youtube)
Source: chromecache_484.2.dr	String found in binary or memory: }</style></defs> <path class="cls-1" d="M519.79,50c20.79,0,41.59,0,62.38,0,2.5.55,4.98,1.41,7.5,1.6,77.7,5.82,150.44,28.17,216.72,69.05,128.82,79.46,208.16,193.76,235.96,343.19,3.38,18.15,5.14,36.6,7.66,54.91v62.5c-.8,6.41-1.69,12.81-2.39,19.23-10.68,98.9-46.45,187.61-109.45,264.53-78.34,95.65-178.56,155.05-300.28,177.24-18.43,3.36-37.14,5.2-55.72,7.74h-62.38c-2.5-.55-4.97-1.41-7.49-1.61-108.97-8.88-205.75-48.1-287.52-120.74-127.99-113.68-184.92-257.3-170.06-427.83,9.47-108.66,52.86-203.93,126.04-284.72,76.95-84.95,172.09-137.9,285.2-157.56,17.84-3.1,35.88-5.06,53.83-7.54ZM262.91,550.27c1.8,47.5,1.87,95.43,5.83,143.03,6.05,72.76,56.73,127.31,128.57,137.56,36.14,5.15,73.13,5.81,109.74,5.8,62,0,124.17.28,185.95-4.09,57.3-4.06,100.9-33.48,126.11-86.75,11-23.25,15.92-48.25,16.31-73.78,1.02-67.36,1.6-134.73,1.64-202.09.01-21.11-1.45-42.3-3.6-63.31-7.44-72.93-56.71-127.01-128.86-137.48-35.8-5.19-72.48-5.79-108.76-5.78-62.33.01-124.82-.29-186.93,3.98-77.48,5.33-133.81,62.65-140.26,140.2-3.93,47.28-3.95,94.88-5.74,142.73Z"></path> <path class="cls-1" d="M551.12,313.74c43.04,1.23,86.59,1.4,130,3.98,60.06,3.57,99.74,41.49,101.33,101.45,2.3,86.77,2.38,173.7.06,260.47-1.64,61.29-40.99,100.68-102.25,102.35-86.27,2.35-172.7,2.3-258.97-.02-60.69-1.63-100.2-41.07-101.82-101.69-2.32-86.77-2.33-173.7,0-260.47,1.63-60.68,41.13-98.49,101.71-102.12,43.08-2.58,86.3-2.71,129.95-3.95ZM698.01,549.92c-.07-81.39-65.32-146.91-146.63-147.24-81.46-.32-147.52,65.7-147.46,147.38.06,81.32,65.38,146.91,146.64,147.26,81.41.34,147.51-65.74,147.45-147.4ZM738.18,397.66c.4-18.97-14.2-34.64-32.84-35.22-19.46-.61-35.24,14.17-35.61,33.36-.37,19.08,14.12,34.64,32.78,35.2,19.46.58,35.26-14.19,35.67-33.34Z"></path> <path class="cls-1" d="M551.21,645.67c-52.51.11-95.52-42.68-95.72-95.21-.2-53.05,42.84-96.27,95.75-96.15,52.52.12,95.23,43.04,95.22,95.69,0,52.64-42.74,95.56-95.25,95.66Z"></path> </svg> <span class="sr-only">Veygo Instagram</span> </a></li><li> <a href="https://www.youtube.com/channel/UCvuws7xIFKzWHP6YabGiMZA" equals www.youtube.com (Youtube)
Source: chromecache_594.2.dr, chromecache_643.2.dr, chromecache_371.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_643.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=lA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},oA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_594.2.dr, chromecache_643.2.dr, chromecache_371.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_487.2.dr, chromecache_463.2.dr, chromecache_507.2.dr, chromecache_424.2.dr, chromecache_459.2.dr, chromecache_466.2.dr, chromecache_525.2.dr, chromecache_555.2.dr, chromecache_389.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_643.2.dr	String found in binary or memory: var SB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var k=Oz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!wy(k,yy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: veygo.com
Source: global traffic	DNS traffic detected: DNS query: www.veygo.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: widget.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: skynet.reevoo.com
Source: global traffic	DNS traffic detected: DNS query: www.google.ie
Source: global traffic	DNS traffic detected: DNS query: d5jmkjjpb7yfg.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: d2oh4tlt9mrke9.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: s.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: dev.visualwebsiteoptimizer.com
Source: global traffic	DNS traffic detected: DNS query: cdn-badges.reevoo.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: dntcl.qualaroo.com
Source: global traffic	DNS traffic detected: DNS query: ws.sessioncam.com
Source: global traffic	DNS traffic detected: DNS query: ekr.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: domclickext.xyz
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: admiralgroup.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: images.reevoo.com
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: secure.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: cdn-cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: log.cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: login.veygo.com
Source: global traffic	DNS traffic detected: DNS query: wbb-chat-plugin.intelagent.ai
Source: global traffic	DNS traffic detected: DNS query: bam.eu01.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: backend.logicdialog.ai
Source: global traffic	DNS traffic detected: DNS query: a17941920996.cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: web-plugin.logicdialog.ai
Source: global traffic	DNS traffic detected: DNS query: www.cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: socket-server-input.logicdialog.ai
Source: global traffic	DNS traffic detected: DNS query: script.tapfiliate.com
Source: global traffic	DNS traffic detected: DNS query: cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: directory.cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: frstre.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 27 Sep 2024 09:25:48 GMTContent-Type: text/html; charset=utf-8Content-Length: 51Connection: closeContent-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requestsCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-XSS-Protection: 0ETag: W/"33-bpOby1mk6XBtTHai/bbHPM1CCPM"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 27 Sep 2024 09:26:01 GMTContent-Type: text/html; charset=utf-8Content-Length: 37Connection: closeContent-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requestsCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-XSS-Protection: 0ETag: W/"25-rXZC1eRCW574CgdCL3+guUaosx4"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 27 Sep 2024 09:26:06 GMTContent-Type: text/html; charset=utf-8Content-Length: 37Connection: closeContent-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requestsCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-XSS-Protection: 0ETag: W/"25-rXZC1eRCW574CgdCL3+guUaosx4"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 27 Sep 2024 09:26:11 GMTContent-Type: text/html; charset=utf-8Content-Length: 37Connection: closeContent-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requestsCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-XSS-Protection: 0ETag: W/"25-rXZC1eRCW574CgdCL3+guUaosx4"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 09:26:39 GMTContent-Type: application/jsonContent-Length: 107Connection: closeServer: nginxVary: Accept-EncodingVary: AcceptCache-Control: private, must-revalidateAccess-Control-Allow-Origin: *Pragma: no-cacheExpires: -1

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2216,i,4458420318381850172,13968764616555195040,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://veygo.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2216,i,4458420318381850172,13968764616555195040,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
socket-server-input.logicdialog.ai	34.142.26.254	true	false	unknown
secure.gravatar.com	192.0.73.2	true	false	unknown
static.cloudflareinsights.com	104.16.80.73	true	false	unknown
web-plugin.logicdialog.ai	34.142.26.254	true	false	unknown
www.google.ie	142.250.184.227	true	false	unknown
dev.visualwebsiteoptimizer.com	34.96.102.137	true	false	unknown
event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	54.229.33.45	true	false	unknown
cdn-cookieyes.com	104.22.59.91	true	false	unknown
wbb-chat-plugin.intelagent.ai	216.239.32.21	true	false	unknown
veygo.com	18.66.112.28	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	unknown
stats.g.doubleclick.net	74.125.206.157	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
d15g0tp20zxils.cloudfront.net	18.245.46.90	true	false	unknown
d2oh4tlt9mrke9.cloudfront.net	13.32.23.104	true	false	unknown
s3.amazonaws.com	52.217.232.144	true	false	unknown
backend.logicdialog.ai	34.142.26.254	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.cookieyes.com	167.71.46.236	true	false	unknown
frstre.com	52.208.165.171	true	false	unknown
ekr.zdassets.com	104.18.72.113	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
a17941920996.cdn.optimizely.com	104.18.66.57	true	false	unknown
cookieyes.com	167.71.46.236	true	false	unknown
admiralgroup.zendesk.com	162.159.128.7	true	false	unknown
d5jmkjjpb7yfg.cloudfront.net	52.222.250.179	true	false	unknown
s.ytimg.com	216.58.212.142	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
logx.optimizely.com	34.49.241.189	true	false	unknown
domclickext.xyz	13.248.169.48	true	true	unknown
js-agent.newrelic.com	162.247.243.39	true	false	unknown
fastly-tls12-bam.eu01.nr-data.net	185.221.87.23	true	false	unknown
script.tapfiliate.com	13.32.121.127	true	false	unknown
www.veygo.com	18.66.122.112	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
cdn.optimizely.com	104.18.66.57	true	false	unknown
analytics-alv.google.com	216.239.34.181	true	false	unknown
qualdnt.b-cdn.net	169.150.247.39	true	false	unknown
googleads.g.doubleclick.net	142.250.186.162	true	false	unknown
td.doubleclick.net	142.250.186.162	true	false	unknown
log.cookieyes.com	54.229.33.45	true	false	unknown
widget.trustpilot.com	52.222.236.94	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
login.veygo.com	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown
cdn-badges.reevoo.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	unknown
ws.sessioncam.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
dntcl.qualaroo.com	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
directory.cookieyes.com	unknown	unknown	false	unknown
skynet.reevoo.com	unknown	unknown	false	unknown
bam.eu01.nr-data.net	unknown	unknown	false	unknown
images.reevoo.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/gdpr-adlp/tab5-active.svg	false	unknown
https://bam.eu01.nr-data.net/jserrors/1/NRJS-3b8b588bc5319fd0856?a=538632032&sa=1&v=1.265.1&t=Unnamed%20Transaction&rst=26164&ck=0&s=d8ff03b4853e5fa4&ref=https://login.veygo.com/&ptid=d26c3432eaced893	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/clients/5.svg	false	unknown
https://bam.eu01.nr-data.net/jserrors/1/NRJS-3b8b588bc5319fd0856?a=538632032&sa=1&v=1.265.1&t=Unnamed%20Transaction&rst=17989&ck=0&s=d8ff03b4853e5fa4&ref=https://login.veygo.com/&ptid=d26c3432eaced893	false	unknown
https://www.veygo.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/twitter.svg	false	unknown
https://www.cookieyes.com/wp-content/cache/min/1/wp-content/plugins/mailin/css/mailin-front.css?ver=1727156991	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/bootstrap/css/bootstrap.min.css?ver=9cdd562fe5305fab60c9c6e247d3cf38	false	unknown
https://bam.eu01.nr-data.net/browser/blobs?browser_monitoring_key=NRJS-3b8b588bc5319fd0856&type=SessionReplay&app_id=538632032&protocol_version=0&timestamp=1727429159074&attributes=content_encoding%3Dgzip%26entityGuid%3DNDY3MjMxNXxCUk9XU0VSfEFQUExJQ0FUSU9OfDUzODYzMjAzMg%26harvestId%3Dd8ff03b4853e5fa4_d26c3432eaced893_16%26replay.firstTimestamp%3D1727429159074%26replay.lastTimestamp%3D1727429159932%26replay.nodes%3D4%26session.durationMs%3D15095%26agentVersion%3D1.265.1%26session%3Dd8ff03b4853e5fa4%26rst%3D22983%26hasMeta%3Dfalse%26hasSnapshot%3Dfalse%26hasError%3Dfalse%26isFirstChunk%3Dfalse%26decompressedBytes%3D2742%26invalidStylesheetsDetected%3Dtrue%26inlinedAllStylesheets%3Dtrue%26rrweb.version%3D2.0.0-alpha.12%26payload.type%3Dstandard	false	unknown
https://bam.eu01.nr-data.net/browser/blobs?browser_monitoring_key=NRJS-3b8b588bc5319fd0856&type=SessionReplay&app_id=538632032&protocol_version=0&timestamp=1727429163118&attributes=content_encoding%3Dgzip%26entityGuid%3DNDY3MjMxNXxCUk9XU0VSfEFQUExJQ0FUSU9OfDUzODYzMjAzMg%26harvestId%3Dd8ff03b4853e5fa4_d26c3432eaced893_21%26replay.firstTimestamp%3D1727429163118%26replay.lastTimestamp%3D1727429163157%26replay.nodes%3D2%26session.durationMs%3D18277%26agentVersion%3D1.265.1%26session%3Dd8ff03b4853e5fa4%26rst%3D26216%26hasMeta%3Dtrue%26hasSnapshot%3Dtrue%26hasError%3Dfalse%26isFirstChunk%3Dfalse%26decompressedBytes%3D442596%26invalidStylesheetsDetected%3Dtrue%26inlinedAllStylesheets%3Dtrue%26rrweb.version%3D2.0.0-alpha.12%26payload.type%3Dstandard	false	unknown
https://cdn-cookieyes.com/client_data/e5ee5d26e0341217ffb7eccd/translations/OjXasCqa.json	false	unknown
https://bam.eu01.nr-data.net/jserrors/1/NRJS-3b8b588bc5319fd0856?a=507980408&v=1.267.0&to=MhBSZQoZC0dSW0cLVgtacVIMEQpaHFRSDF0MG1ccCBkCUR4KA1AN&rst=23282&ck=0&s=6aff06a2860a49ce&ref=https://www.veygo.com/&ptid=9faaa8fea03353a6	false	unknown
https://widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=5a0186560000ff0005afc567&locale=en-GB	false	unknown
https://www.cookieyes.com/wp-includes/images/spinner.gif	false	unknown
https://www.veygo.com/wp-content/uploads/2024/09/Veygo_Phone_alt-c.png	false	unknown
https://www.cookieyes.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1	false	unknown
https://www.cookieyes.com/?wordfence_lh=1&hid=F7ED18008725B91FBF382CE504873426&r=0.30076584228674896	false	unknown
https://bam.eu01.nr-data.net/jserrors/1/NRJS-3b8b588bc5319fd0856?a=538632032&sa=1&v=1.265.1&t=Unnamed%20Transaction&rst=20375&ck=0&s=d8ff03b4853e5fa4&ref=https://login.veygo.com/&ptid=d26c3432eaced893	false	unknown
https://js-agent.newrelic.com/nr-spa-1.267.0.min.js	false	unknown
https://bam.eu01.nr-data.net/jserrors/1/NRJS-3b8b588bc5319fd0856?a=538632032&sa=1&v=1.265.1&t=Unnamed%20Transaction&rst=20185&ck=0&s=d8ff03b4853e5fa4&ref=https://login.veygo.com/&ptid=d26c3432eaced893	false	unknown
https://www.cookieyes.com/wp-content/cache/min/1/wp-content/themes/cookieyes-new/assets/css/guideline/cy-colors.css?ver=1727156996	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/js/popper.min.js	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/g2.svg	false	unknown
https://veygo.com/	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/select2/3.4.8/select2.js?ver=1.0	false	unknown
https://frstre.com/event/?acc=20349-2cac3a&ref=https%3A%2F%2Fwww.cookieyes.com%2Fproduct%2Fcookie-consent%2F&cup=https%3A%2F%2Fwww.cookieyes.com%2Fpricing%2F%3Fref%3DCYTR&refc=CYTR&int=wordpress&sv=tap-v3	false	unknown
https://bam.eu01.nr-data.net/browser/blobs?browser_monitoring_key=NRJS-3b8b588bc5319fd0856&type=SessionReplay&app_id=538632032&protocol_version=0&timestamp=1727429159954&attributes=content_encoding%3Dgzip%26entityGuid%3DNDY3MjMxNXxCUk9XU0VSfEFQUExJQ0FUSU9OfDUzODYzMjAzMg%26harvestId%3Dd8ff03b4853e5fa4_d26c3432eaced893_18%26replay.firstTimestamp%3D1727429159954%26replay.lastTimestamp%3D1727429159973%26replay.nodes%3D2%26session.durationMs%3D15113%26agentVersion%3D1.265.1%26session%3Dd8ff03b4853e5fa4%26rst%3D23032%26hasMeta%3Dtrue%26hasSnapshot%3Dtrue%26hasError%3Dfalse%26isFirstChunk%3Dfalse%26decompressedBytes%3D436994%26invalidStylesheetsDetected%3Dtrue%26inlinedAllStylesheets%3Dtrue%26rrweb.version%3D2.0.0-alpha.12%26payload.type%3Dstandard	false	unknown
https://www.veygo.com/wp-content/uploads/2024/02/home-square_1.jpg	false	unknown
https://bam.eu01.nr-data.net/jserrors/1/NRJS-3b8b588bc5319fd0856?a=538632032&sa=1&v=1.265.1&t=Unnamed%20Transaction&rst=17990&ck=0&s=d8ff03b4853e5fa4&ref=https://login.veygo.com/&ptid=d26c3432eaced893	false	unknown
https://www.cookieyes.com/wp-content/cache/min/1/wp-content/themes/cookieyes-new/assets/css/guideline/cy-typography.css?ver=1727156996	false	unknown
https://cdn-cookieyes.com/assets/images/revisit.svg	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick-theme.min.css	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/clients/4.svg	false	unknown
https://cdn-cookieyes.com/client_data/e5ee5d26e0341217ffb7eccd/audit-table/BZycExy2.json	false	unknown
https://www.cookieyes.com/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.js	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/pricing/css/admin-style.css?ver=1.0	false	unknown
https://bam.eu01.nr-data.net/browser/blobs?browser_monitoring_key=NRJS-3b8b588bc5319fd0856&type=SessionReplay&app_id=538632032&protocol_version=0&timestamp=1727429160011&attributes=content_encoding%3Dgzip%26entityGuid%3DNDY3MjMxNXxCUk9XU0VSfEFQUExJQ0FUSU9OfDUzODYzMjAzMg%26harvestId%3Dd8ff03b4853e5fa4_d26c3432eaced893_19%26replay.firstTimestamp%3D1727429160011%26replay.lastTimestamp%3D1727429163109%26replay.nodes%3D11%26session.durationMs%3D18273%26agentVersion%3D1.265.1%26session%3Dd8ff03b4853e5fa4%26rst%3D26161%26hasMeta%3Dfalse%26hasSnapshot%3Dfalse%26hasError%3Dfalse%26isFirstChunk%3Dfalse%26decompressedBytes%3D8718%26invalidStylesheetsDetected%3Dtrue%26inlinedAllStylesheets%3Dtrue%26rrweb.version%3D2.0.0-alpha.12%26payload.type%3Dstandard	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/inc/rangeslider/js/vendor.bundle.base.js	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/pricing/check-icon.svg	false	unknown
https://bam.eu01.nr-data.net/jserrors/1/NRJS-3b8b588bc5319fd0856?a=507980408&v=1.267.0&to=MhBSZQoZC0dSW0cLVgtacVIMEQpaHFRSDF0MG1ccCBkCUR4KA1AN&rst=35577&ck=0&s=6aff06a2860a49ce&ref=https://www.veygo.com/&ptid=9faaa8fea03353a6	false	unknown
https://login.veygo.com/static/media/logo.57544409ce0b85764b6be10d86c3c6bf.svg	false	unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/assets/images/cookieyes-logo.svg	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://preview.veygo.com/wp-content/uploads/2024/02/temp-page_square_3.png	chromecache_484.2.dr	false		unknown
http://aws.amazon.com/asl/	chromecache_538.2.dr, chromecache_598.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.toreversed	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://www.cookieyes.com/wp-content/cache/min/1/wp-content/themes/cookieyes-new/assets/js/custom-ow	chromecache_231.2.dr	false		unknown
https://x.com/VeygoUK	chromecache_484.2.dr, chromecache_499.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_497.2.dr, chromecache_409.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.push	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://github.com/tc39/proposal-promise-with-resolvers	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://bugs.chromium.org/p/v8/issues/detail?id=12681	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_366.2.dr, chromecache_358.2.dr	false	URL Reputation: safe	unknown
https://www.cookieyes.com/product/cookie-consent/#breadcrumb	chromecache_231.2.dr	false		unknown
https://webidl.spec.whatwg.org/#es-DOMException-specialness	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_505.2.dr, chromecache_513.2.dr, chromecache_237.2.dr	false		unknown
https://preview.veygo.com/wp-content/uploads/2023/07/What-is-a-Cover-Note-350x163.png	chromecache_484.2.dr	false		unknown
https://www.veygo.com/privacy-policy/	chromecache_330.2.dr, chromecache_310.2.dr	false		unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_358.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_291.2.dr, chromecache_298.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/proposal-change-array-by-copy/#sec-%typedarray%.prototype.with	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://tc39.es/ecma262/#sec-newpromisecapability	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.tosorted	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://www.veygo.com/cookie-policy/	chromecache_595.2.dr, chromecache_558.2.dr	false		unknown
https://github.com/es-shims/es5-shim/issues/150	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://www.cookieyes.com/wp-content/themes/cookieyes-new/inc/rangeslider/css/ion.rangeSlider.css?ve	chromecache_280.2.dr	false		unknown
https://app.cookieyes.com/trial?plan=pro-monthly&ref=CYPROHero	chromecache_231.2.dr	false		unknown
https://cookieyes.com/wp-content/themes/cookieyes-new/assets/images/gdpr-adlp/tab3-img.svg	chromecache_231.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_298.2.dr	false	URL Reputation: safe	unknown
https://www.cookieyes.com/wp-content/cache/min/1/wp-content/themes/cookieyes-new/assets/css/guidelin	chromecache_231.2.dr	false		unknown
https://tc39.es/ecma262/#sec-getmethod	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://www.cookieyes.com/de/product/cookie-einwilligung/	chromecache_231.2.dr	false		unknown
http://bugs.jquery.com/ticket/11820	chromecache_426.2.dr, chromecache_431.2.dr	false		unknown
https://app.cookieyes.com/signup?plan=pro-monthly&ref=CYPPPCal	chromecache_236.2.dr, chromecache_230.2.dr	false		unknown
https://html.spec.whatwg.org/#nonce-attributes	chromecache_366.2.dr, chromecache_358.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1265	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
http://jsperf.com/diacritics/18	chromecache_632.2.dr, chromecache_416.2.dr	false		unknown
https://tc39.es/proposal-change-array-by-copy/#sec-array.prototype.toReversed	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://www.cookieyes.com/fr/pricing/	chromecache_280.2.dr	false		unknown
https://app.cookieyes.com/trial?plan=pro-monthly&ref=CYPROPCP	chromecache_231.2.dr	false		unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_366.2.dr, chromecache_358.2.dr	false	URL Reputation: safe	unknown
https://preview.veygo.com/wp-content/uploads/2023/07/What-is-a-Cover-Note.png	chromecache_484.2.dr	false		unknown
https://preview.veygo.com/wp-content/uploads/2024/08/win-a-car-veygo-transparent-325x180px.png	chromecache_484.2.dr	false		unknown
https://bugs.chromium.org/p/v8/issues/detail?id=12542	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://www.cookieyes.com/wp-json/wp/v2/pages/14290	chromecache_231.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1130	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://www.awin1.com/sread.img?tt=ns&tv=2&	chromecache_525.2.dr, chromecache_389.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://www.cookieyes.com/wp-content/cache/min/1/wp-content/themes/cookieyes-new/style.css?ver=17271	chromecache_231.2.dr	false		unknown
https://www.cookieyes.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cook	chromecache_280.2.dr	false		unknown
https://sc-static.net/scevent.min.js	chromecache_525.2.dr, chromecache_389.2.dr	false		unknown
https://account.veygo.com/	chromecache_596.2.dr, chromecache_440.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1128	chromecache_451.2.dr, chromecache_479.2.dr	false		unknown
https://www.linkedin.com/company/cookieyeshq/	chromecache_280.2.dr, chromecache_231.2.dr	false		unknown
https://www.clarity.ms/tag/	chromecache_463.2.dr, chromecache_424.2.dr	false		unknown
https://preview.veygo.com/guides/what-is-a-cover-note/	chromecache_484.2.dr	false		unknown
https://preview.veygo.com/wp-content/uploads/2023/07/Driving-Without-Insurance-300x140.png	chromecache_484.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_291.2.dr, chromecache_298.2.dr	false	URL Reputation: safe	unknown
https://login.veygo.com/	chromecache_370.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
52.222.250.179	d5jmkjjpb7yfg.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.212.142	s.ytimg.com	United States	15169	GOOGLEUS	false
13.32.121.127	script.tapfiliate.com	United States	16509	AMAZON-02US	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
162.159.128.7	admiralgroup.zendesk.com	United States	13335	CLOUDFLARENETUS	false
52.217.232.144	s3.amazonaws.com	United States	16509	AMAZON-02US	false
52.208.165.171	frstre.com	United States	16509	AMAZON-02US	false
169.150.247.39	qualdnt.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
34.49.241.189	logx.optimizely.com	United States	2686	ATGS-MMD-ASUS	false
172.67.20.8	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.72.113	ekr.zdassets.com	United States	13335	CLOUDFLARENETUS	false
54.77.7.148	unknown	United States	16509	AMAZON-02US	false
13.32.23.104	d2oh4tlt9mrke9.cloudfront.net	United States	7018	ATT-INTERNET4US	false
13.248.169.48	domclickext.xyz	United States	16509	AMAZON-02US	true
104.18.65.57	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
192.0.73.2	secure.gravatar.com	United States	2635	AUTOMATTICUS	false
13.32.121.84	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.222.236.94	widget.trustpilot.com	United States	16509	AMAZON-02US	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
185.221.87.23	fastly-tls12-bam.eu01.nr-data.net	Germany	206998	NEW-2DE	false
104.18.66.57	a17941920996.cdn.optimizely.com	United States	13335	CLOUDFLARENETUS	false
104.22.59.91	cdn-cookieyes.com	United States	13335	CLOUDFLARENETUS	false
34.142.26.254	socket-server-input.logicdialog.ai	United States	2686	ATGS-MMD-ASUS	false
18.66.122.123	unknown	United States	3	MIT-GATEWAYSUS	false
64.233.184.155	unknown	United States	15169	GOOGLEUS	false
74.125.206.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
167.71.46.236	www.cookieyes.com	United States	14061	DIGITALOCEAN-ASNUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
104.16.79.73	unknown	United States	13335	CLOUDFLARENETUS	false
34.96.102.137	dev.visualwebsiteoptimizer.com	United States	15169	GOOGLEUS	false
54.229.33.45	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.112.28	veygo.com	United States	3	MIT-GATEWAYSUS	false
216.239.32.21	wbb-chat-plugin.intelagent.ai	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
18.66.122.112	www.veygo.com	United States	3	MIT-GATEWAYSUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
18.245.46.93	unknown	United States	16509	AMAZON-02US	false
18.245.46.90	d15g0tp20zxils.cloudfront.net	United States	16509	AMAZON-02US	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520473
Start date and time:	2024-09-27 11:24:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://veygo.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus23.troj.win@26/656@176/47
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.veygo.com/ Browse: https://www.cookieyes.com/product/cookie-consent

Input	Output
URL: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20 Model: jbxai	{ "brand":["Veygo"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Continue", "text_input_field_labels":["Email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20 Model: jbxai	{ "error":"local variable 'brand_input' referenced before assignment"}

URL: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20 Model: jbxai	{ "brand":["veggo"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"accept all", "text_input_field_labels":["email", "password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20 Model: jbxai	{ "error":"local variable 'brand_input' referenced before assignment"}

URL: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20 Model: jbxai	{ "brand":["veggo"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"accept all", "text_input_field_labels":["email", "password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.veygo.com/?redirect=https://www.veygo.com/?loggedin=true%20 Model: jbxai	{ "error":"local variable 'brand_input' referenced before assignment"}

URL: https://www.cookieyes.com/product/cookie-consent/ Model: jbxai	{ "brand":["Globi"], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"Sign in with Google", "text_input_field_labels":["Sign in with Google", "Sign in with Apple", "Phone", "email", "username"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.cookieyes.com/product/cookie-consent/ Model: jbxai	{ "brand":["CookieYes"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get started for free", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.cookieyes.com/product/cookie-consent/ Model: jbxai	{ "brand":["cookieyes"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"view plans", "text_input_field_labels":["username", "password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.cookieyes.com/product/cookie-consent/ Model: jbxai	{ "error":"local variable 'brand_input' referenced before assignment"}

URL: https://www.cookieyes.com/pricing/?ref=CYTR Model: jbxai	{ "brand":["CookieYes"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"view plans", "text_input_field_labels":["username", "password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.cookieyes.com/pricing/?ref=CYTR Model: jbxai	{ "error":"local variable 'brand_input' referenced before assignment"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 08:25:19 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9822897432408007
Encrypted:	false
SSDEEP:	48:8m5doTU9tPH3idAKZdA1nehwiZUklqehZy+3:8mkgXOy
MD5:	841BAB19B9C78676A8494399B454B8EC
SHA1:	E82D116ECA66E8BF05D56A6495E0CA2215CB4D4A
SHA-256:	49E29E69DB6A63C6CEBBCF536EC6A177DC71F3ACEE8980CF4EEE24E1F7A13ECD
SHA-512:	3D672A8517503FE4853D864CB560F1382C51EA12E7432CB25DDDEDAA4A45B025BF3A9C479394C72696804D539241F1278D9E5581ED3068F7BC3C58B07B884D58
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....d.+........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I;Y(K....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y(K....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V;Y(K....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V;Y(K..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V;YK............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............f$=.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 11:25:22.595416069 CEST	424	OUT	GET / HTTP/1.1 Host: veygo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 11:25:22.907460928 CEST	559	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 27 Sep 2024 09:25:22 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://veygo.com/ X-Cache: Redirect from cloudfront Via: 1.1 eb6e5773d654b9aeadbed8169564506c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: ZMWyP1KxeEPpZzJI_SdoEHrIQA-R8MwpndsDzLZl8UssqdDAB0ZGNg== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>
Sep 27, 2024 11:25:22.988565922 CEST	559	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 27 Sep 2024 09:25:22 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://veygo.com/ X-Cache: Redirect from cloudfront Via: 1.1 eb6e5773d654b9aeadbed8169564506c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: ZMWyP1KxeEPpZzJI_SdoEHrIQA-R8MwpndsDzLZl8UssqdDAB0ZGNg== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>
Sep 27, 2024 11:26:07.912059069 CEST	6	OUT	Data Raw: 00 Data Ascii:
Sep 27, 2024 11:26:52.928196907 CEST	6	OUT	Data Raw: 00 Data Ascii:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://veygo.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Windows Analysis Report
http://veygo.com

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:20 UTC	652	OUT	GET / HTTP/1.1 Host: veygo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 09:25:20 UTC	369	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Thu, 26 Sep 2024 20:31:55 GMT Location: https://www.veygo.com/ Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 342054511f9732c450e11bade76323dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: uqKVESBL_wt30awEu4OKBi62BBdGCStJw5rQ7ybKSVE4LOBLt8cS1A== Age: 46406

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:21 UTC	656	OUT	GET / HTTP/1.1 Host: www.veygo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 09:25:22 UTC	1295	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 194473 Connection: close Date: Thu, 26 Sep 2024 09:05:27 GMT Last-Modified: Thu, 26 Sep 2024 08:55:25 GMT ETag: "253edaf8c19e942d36dc48c28fec59a5" x-amz-server-side-encryption: AES256 x-amz-version-id: kRO5s55cBnLmTzjojDlnGWnQ20LZq2Pd Accept-Ranges: bytes Server: Content-Security-Policy: frame-ancestors https://.veygo.com https://.preprod-veygo.com Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Expect-CT: max-age=86400 Permissions-Policy: accelerometer=(), camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: same-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=63072000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5ddb18e15e6b0ed6114111e515bddc66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: MH4zrWetd5qGf33vd3mxnISgLKDoO0wPpPRMi15hvWC_jfFQDtnYEw== Age: 87595
2024-09-27 09:25:22 UTC	15089	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 70 72 69 76 61 63 79 3a 7b 63 6f 6f 6b 69 65 73 5f 65 6e 61 62 6c 65 64 3a 74 72 75 65 7d 2c 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 2c 64 69 73 74 72 69 62 75 74 65 64 5f 74 72 61 63 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 74 72 75 65 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:true},ajax:{deny_list:["bam.eu01.nr-data.net"]},distributed_tracing:{enabled:true}};(window.NREUM\|\|(NREUM=
2024-09-27 09:25:22 UTC	16384	IN	Data Raw: 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 69 28 29 29 72 65 74 75 72 6e 20 65 28 29 3b 28 30 2c 6e 2e 73 70 29 28 22 6c 6f 61 64 22 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 69 28 29 29 72 65 74 75 72 6e 20 65 28 29 3b 28 30 2c 6e 2e 44 44 29 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 29 7d 7d 2c 33 38 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 4e 54 3a 28 29 3d 3e 6f 2c 55 53 3a 28 29 3d 3e 64 2c 5a 6d 3a 28 29 3d 3e 61 2c 62 51 3a 28 29 3d 3e 63 2c 64 56 3a 28 29 3d 3e 73 2c 6e 59 3a 28 29 3d 3e 75 2c 70 56 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 Data Ascii: complete"===document.readyState}function o(e,t){if(i())return e();(0,n.sp)("load",e,t)}function a(e){if(i())return e();(0,n.DD)("DOMContentLoaded",e)}},384:(e,t,r)=>{"use strict";r.d(t,{NT:()=>o,US:()=>d,Zm:()=>a,bQ:()=>c,dV:()=>s,nY:()=>u,pV:()=>l});var
2024-09-27 09:25:22 UTC	16384	IN	Data Raw: 72 48 61 6e 64 6c 65 72 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 22 73 65 74 45 72 72 6f 72 48 61 6e 64 6c 65 72 22 2c 65 29 7d 66 69 6e 69 73 68 65 64 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 22 66 69 6e 69 73 68 65 64 22 2c 65 29 7d 61 64 64 52 65 6c 65 61 73 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 22 61 64 64 52 65 6c 65 61 73 65 22 2c 65 2c 74 29 7d 73 74 61 72 74 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 22 73 74 61 72 74 22 2c 65 29 7d 72 65 63 6f 72 64 52 65 70 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 74 2e 47 34 2e 52 45 43 4f 52 44 29 7d 70 61 75 73 65 52 65 70 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 74 2e 47 34 2e 50 41 55 53 45 Data Ascii: rHandler(e){return this.#e("setErrorHandler",e)}finished(e){return this.#e("finished",e)}addRelease(e,t){return this.#e("addRelease",e,t)}start(e){return this.#e("start",e)}recordReplay(){return this.#e(t.G4.RECORD)}pauseReplay(){return this.#e(t.G4.PAUSE
2024-09-27 09:25:22 UTC	16384	IN	Data Raw: 73 74 6e 61 6d 65 2c 6e 2e 70 6f 72 74 3d 72 2e 70 6f 72 74 2c 6e 2e 70 72 6f 74 6f 63 6f 6c 3d 72 2e 70 72 6f 74 6f 63 6f 6c 2c 6e 2e 68 6f 73 74 3d 72 2e 68 6f 73 74 6e 61 6d 65 2b 22 3a 22 2b 72 2e 70 6f 72 74 2c 6e 2e 70 61 74 68 6e 61 6d 65 3d 72 2e 70 61 74 68 6e 61 6d 65 2c 65 2e 70 61 72 73 65 64 4f 72 69 67 69 6e 3d 72 2c 65 2e 73 61 6d 65 4f 72 69 67 69 6e 3d 72 2e 73 61 6d 65 4f 72 69 67 69 6e 7d 63 6f 6e 73 74 20 62 65 3d 7b 7d 2c 79 65 3d 5b 22 70 75 73 68 53 74 61 74 65 22 2c 22 72 65 70 6c 61 63 65 53 74 61 74 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 7c 7c 71 2e 65 65 29 2e 67 65 74 28 22 68 69 73 74 6f 72 79 22 29 7d 28 65 29 3b 72 65 74 75 Data Ascii: stname,n.port=r.port,n.protocol=r.protocol,n.host=r.hostname+":"+r.port,n.pathname=r.pathname,e.parsedOrigin=r,e.sameOrigin=r.sameOrigin}const be={},ye=["pushState","replaceState"];function we(e){const t=function(e){return(e\|\|q.ee).get("history")}(e);retu
2024-09-27 09:25:22 UTC	16384	IN	Data Raw: 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 6e 74 63 6c 2e 71 75 61 6c 61 72 6f 6f 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2d 61 67 65 6e 74 2e 6e 65 77 72 65 6c 69 63 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 62 61 64 67 65 73 2e 72 65 65 76 6f 6f 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 Data Ascii: connect"><link href="https://dntcl.qualaroo.com" rel="preconnect"><link href="https://s3.amazonaws.com" rel="preconnect"><link href="https://js-agent.newrelic.com" rel="preconnect"><link href="https://cdn-badges.reevoo.com" rel="preconnect"><link href="ht
2024-09-27 09:25:22 UTC	16384	IN	Data Raw: 70 78 5f 72 67 62 61 28 31 36 2c 32 34 2c 34 30 2c 30 2e 31 30 29 2c 5f 30 5f 32 30 70 78 5f 32 35 70 78 5f 2d 35 70 78 5f 72 67 62 61 28 31 36 2c 32 34 2c 34 30 2c 30 2e 31 30 29 5d 20 6c 67 3a 68 69 64 64 65 6e 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 20 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 3d 22 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 77 2d 34 20 68 2d 30 2e 35 20 62 67 2d 63 68 61 72 63 6f 61 6c 20 72 6f 75 6e 64 65 64 2d 73 6d 20 6f 72 69 67 69 6e 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 72 61 6e 73 66 6f 72 6d 22 3e 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 77 2d Data Ascii: px_rgba(16,24,40,0.10),_0_20px_25px_-5px_rgba(16,24,40,0.10)] lg:hidden" type="button" aria-expanded="false" aria-controls="mobile-navigation"> <span class="w-4 h-0.5 bg-charcoal rounded-sm origin-bottom-right transition-transform"></span> <span class="w-
2024-09-27 09:25:22 UTC	16384	IN	Data Raw: 61 74 61 2d 73 74 79 6c 65 2d 77 69 64 74 68 3d 22 31 30 30 25 22 20 64 61 74 61 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 72 65 76 69 65 77 2d 6c 61 6e 67 75 61 67 65 73 3d 22 65 6e 22 20 64 61 74 61 2d 6e 6f 2d 72 65 76 69 65 77 73 3d 22 68 69 64 65 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 74 65 78 74 2d 63 65 6e 74 65 72 20 67 61 70 2d 33 2e 35 20 67 72 6f 77 20 73 68 72 69 6e 6b 2d 30 20 72 6f 75 6e 64 65 64 2d 32 78 6c 20 62 6f 72 64 65 72 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 5b 23 46 35 46 35 46 35 5d 20 70 2d 35 22 3e 20 3c 73 Data Ascii: ata-style-width="100%" data-theme="light" data-review-languages="en" data-no-reviews="hide"></div></div></div><div class="flex flex-col items-center justify-center text-center gap-3.5 grow shrink-0 rounded-2xl border border-solid border-[#F5F5F5] p-5"> <s
2024-09-27 09:25:22 UTC	16384	IN	Data Raw: 32 2e 30 31 2e 30 31 2e 32 2d 2e 31 2e 34 32 2d 2e 32 36 2c 33 2e 32 39 2d 32 2e 34 32 2c 37 2e 33 37 2d 34 2e 30 39 2c 31 31 2e 34 33 2d 34 2e 36 37 2c 31 2e 35 32 2d 2e 32 32 2c 32 2e 30 32 2d 2e 32 35 2c 34 2e 34 35 2d 2e 32 35 73 32 2e 39 34 2e 30 33 2c 34 2e 34 35 2e 32 35 63 34 2e 30 37 2e 35 39 2c 38 2e 31 35 2c 32 2e 32 35 2c 31 31 2e 34 33 2c 34 2e 36 37 2e 32 32 2e 31 36 2e 34 2e 32 38 2e 34 32 2e 32 36 2e 30 31 2d 2e 30 31 2d 2e 34 33 2d 32 2e 39 32 2d 2e 39 39 2d 36 2e 34 36 2d 31 2e 31 31 2d 37 2e 30 31 2d 31 2e 30 35 2d 36 2e 37 32 2d 31 2e 34 38 2d 37 2e 31 33 2d 2e 31 31 2d 2e 31 31 2d 2e 33 31 2d 2e 32 35 2d 2e 34 34 2d 2e 33 31 2d 2e 32 34 2d 2e 31 31 2d 2e 32 38 2d 2e 31 31 2d 31 33 2e 33 39 2d 2e 31 31 68 2d 31 33 2e 31 35 73 2d 2e 32 Data Ascii: 2.01.01.2-.1.42-.26,3.29-2.42,7.37-4.09,11.43-4.67,1.52-.22,2.02-.25,4.45-.25s2.94.03,4.45.25c4.07.59,8.15,2.25,11.43,4.67.22.16.4.28.42.26.01-.01-.43-2.92-.99-6.46-1.11-7.01-1.05-6.72-1.48-7.13-.11-.11-.31-.25-.44-.31-.24-.11-.28-.11-13.39-.11h-13.15s-.2
2024-09-27 09:25:22 UTC	16384	IN	Data Raw: 3e 20 3c 67 3e 20 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 33 30 32 32 37 2c 32 37 2e 31 33 39 36 35 68 2d 34 2e 37 33 33 34 6c 2d 31 2e 31 33 36 37 32 2c 33 2e 33 35 36 34 35 48 33 34 2e 34 32 37 32 37 6c 34 2e 34 38 33 34 2d 31 32 2e 34 31 38 68 32 2e 30 38 33 6c 34 2e 34 38 33 34 2c 31 32 2e 34 31 38 48 34 33 2e 34 33 38 5a 4d 33 38 2e 30 35 39 31 2c 32 35 2e 35 39 30 38 32 68 33 2e 37 35 32 6c 2d 31 2e 38 34 39 36 31 2d 35 2e 34 34 37 32 37 68 2d 2e 30 35 31 37 36 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 66 66 66 22 3e 3c 2f 70 61 74 68 3e 20 3c 70 61 74 68 20 64 3d 22 4d 35 35 2e 31 35 39 36 39 2c 32 35 2e 39 36 39 37 33 63 30 2c 32 2e 38 31 33 34 38 2d 31 2e 35 30 35 38 36 2c 34 2e 36 32 31 30 39 2d 33 2e 37 37 38 33 32 2c 34 2e 36 32 31 30 Data Ascii: > <g> <path d="M42.30227,27.13965h-4.7334l-1.13672,3.35645H34.42727l4.4834-12.418h2.083l4.4834,12.418H43.438ZM38.0591,25.59082h3.752l-1.84961-5.44727h-.05176Z" style="fill: #fff"></path> <path d="M55.15969,25.96973c0,2.81348-1.50586,4.62109-3.77832,4.6210
2024-09-27 09:25:22 UTC	16384	IN	Data Raw: 20 66 6c 65 78 2d 63 6f 6c 20 6d 61 78 2d 77 2d 5b 32 35 72 65 6d 5d 20 77 2d 66 75 6c 6c 20 62 6f 72 64 65 72 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 5b 23 46 35 46 35 46 35 5d 20 72 6f 75 6e 64 65 64 2d 78 6c 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 20 6c 67 3a 6d 61 78 2d 77 2d 6e 6f 6e 65 22 3e 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 65 79 67 6f 2e 63 6f 6d 2f 6c 69 66 65 73 74 79 6c 65 2f 63 6f 6d 6d 75 74 65 72 2d 63 6f 6e 66 75 73 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 20 68 2d 66 75 6c 6c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 2d 66 75 6c 6c 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 22 3e 20 3c 69 6d 67 20 77 69 64 74 68 3d 22 39 30 30 22 Data Ascii: flex-col max-w-[25rem] w-full border border-solid border-[#F5F5F5] rounded-xl overflow-hidden lg:max-w-none"> <a href="https://www.veygo.com/lifestyle/commuter-confusion/" class="flex flex-col h-full"><div class="w-full overflow-hidden"> <img width="900"

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:23 UTC	656	OUT	GET / HTTP/1.1 Host: www.veygo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 09:25:24 UTC	1295	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 194473 Connection: close Date: Thu, 26 Sep 2024 09:05:27 GMT Last-Modified: Thu, 26 Sep 2024 08:55:25 GMT ETag: "253edaf8c19e942d36dc48c28fec59a5" x-amz-server-side-encryption: AES256 x-amz-version-id: kRO5s55cBnLmTzjojDlnGWnQ20LZq2Pd Accept-Ranges: bytes Server: Content-Security-Policy: frame-ancestors https://.veygo.com https://.preprod-veygo.com Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Expect-CT: max-age=86400 Permissions-Policy: accelerometer=(), camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: same-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=63072000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d20f19c14113bb86116d01e6cb4e2844.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: hwuJhVTrfcMu_xhKifcpohlPpwVKE27a6U6cxoy-0K0KdW_XWet8Cw== Age: 87598
2024-09-27 09:25:24 UTC	15089	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 70 72 69 76 61 63 79 3a 7b 63 6f 6f 6b 69 65 73 5f 65 6e 61 62 6c 65 64 3a 74 72 75 65 7d 2c 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 2c 64 69 73 74 72 69 62 75 74 65 64 5f 74 72 61 63 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 74 72 75 65 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:true},ajax:{deny_list:["bam.eu01.nr-data.net"]},distributed_tracing:{enabled:true}};(window.NREUM\|\|(NREUM=
2024-09-27 09:25:24 UTC	16384	IN	Data Raw: 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 69 28 29 29 72 65 74 75 72 6e 20 65 28 29 3b 28 30 2c 6e 2e 73 70 29 28 22 6c 6f 61 64 22 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 69 28 29 29 72 65 74 75 72 6e 20 65 28 29 3b 28 30 2c 6e 2e 44 44 29 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 29 7d 7d 2c 33 38 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 4e 54 3a 28 29 3d 3e 6f 2c 55 53 3a 28 29 3d 3e 64 2c 5a 6d 3a 28 29 3d 3e 61 2c 62 51 3a 28 29 3d 3e 63 2c 64 56 3a 28 29 3d 3e 73 2c 6e 59 3a 28 29 3d 3e 75 2c 70 56 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 Data Ascii: complete"===document.readyState}function o(e,t){if(i())return e();(0,n.sp)("load",e,t)}function a(e){if(i())return e();(0,n.DD)("DOMContentLoaded",e)}},384:(e,t,r)=>{"use strict";r.d(t,{NT:()=>o,US:()=>d,Zm:()=>a,bQ:()=>c,dV:()=>s,nY:()=>u,pV:()=>l});var
2024-09-27 09:25:24 UTC	16384	IN	Data Raw: 72 48 61 6e 64 6c 65 72 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 22 73 65 74 45 72 72 6f 72 48 61 6e 64 6c 65 72 22 2c 65 29 7d 66 69 6e 69 73 68 65 64 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 22 66 69 6e 69 73 68 65 64 22 2c 65 29 7d 61 64 64 52 65 6c 65 61 73 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 22 61 64 64 52 65 6c 65 61 73 65 22 2c 65 2c 74 29 7d 73 74 61 72 74 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 22 73 74 61 72 74 22 2c 65 29 7d 72 65 63 6f 72 64 52 65 70 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 74 2e 47 34 2e 52 45 43 4f 52 44 29 7d 70 61 75 73 65 52 65 70 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 74 2e 47 34 2e 50 41 55 53 45 Data Ascii: rHandler(e){return this.#e("setErrorHandler",e)}finished(e){return this.#e("finished",e)}addRelease(e,t){return this.#e("addRelease",e,t)}start(e){return this.#e("start",e)}recordReplay(){return this.#e(t.G4.RECORD)}pauseReplay(){return this.#e(t.G4.PAUSE
2024-09-27 09:25:24 UTC	16384	IN	Data Raw: 73 74 6e 61 6d 65 2c 6e 2e 70 6f 72 74 3d 72 2e 70 6f 72 74 2c 6e 2e 70 72 6f 74 6f 63 6f 6c 3d 72 2e 70 72 6f 74 6f 63 6f 6c 2c 6e 2e 68 6f 73 74 3d 72 2e 68 6f 73 74 6e 61 6d 65 2b 22 3a 22 2b 72 2e 70 6f 72 74 2c 6e 2e 70 61 74 68 6e 61 6d 65 3d 72 2e 70 61 74 68 6e 61 6d 65 2c 65 2e 70 61 72 73 65 64 4f 72 69 67 69 6e 3d 72 2c 65 2e 73 61 6d 65 4f 72 69 67 69 6e 3d 72 2e 73 61 6d 65 4f 72 69 67 69 6e 7d 63 6f 6e 73 74 20 62 65 3d 7b 7d 2c 79 65 3d 5b 22 70 75 73 68 53 74 61 74 65 22 2c 22 72 65 70 6c 61 63 65 53 74 61 74 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 7c 7c 71 2e 65 65 29 2e 67 65 74 28 22 68 69 73 74 6f 72 79 22 29 7d 28 65 29 3b 72 65 74 75 Data Ascii: stname,n.port=r.port,n.protocol=r.protocol,n.host=r.hostname+":"+r.port,n.pathname=r.pathname,e.parsedOrigin=r,e.sameOrigin=r.sameOrigin}const be={},ye=["pushState","replaceState"];function we(e){const t=function(e){return(e\|\|q.ee).get("history")}(e);retu
2024-09-27 09:25:24 UTC	16384	IN	Data Raw: 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 6e 74 63 6c 2e 71 75 61 6c 61 72 6f 6f 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2d 61 67 65 6e 74 2e 6e 65 77 72 65 6c 69 63 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 62 61 64 67 65 73 2e 72 65 65 76 6f 6f 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 Data Ascii: connect"><link href="https://dntcl.qualaroo.com" rel="preconnect"><link href="https://s3.amazonaws.com" rel="preconnect"><link href="https://js-agent.newrelic.com" rel="preconnect"><link href="https://cdn-badges.reevoo.com" rel="preconnect"><link href="ht
2024-09-27 09:25:24 UTC	16384	IN	Data Raw: 70 78 5f 72 67 62 61 28 31 36 2c 32 34 2c 34 30 2c 30 2e 31 30 29 2c 5f 30 5f 32 30 70 78 5f 32 35 70 78 5f 2d 35 70 78 5f 72 67 62 61 28 31 36 2c 32 34 2c 34 30 2c 30 2e 31 30 29 5d 20 6c 67 3a 68 69 64 64 65 6e 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 20 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 3d 22 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 77 2d 34 20 68 2d 30 2e 35 20 62 67 2d 63 68 61 72 63 6f 61 6c 20 72 6f 75 6e 64 65 64 2d 73 6d 20 6f 72 69 67 69 6e 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 72 61 6e 73 66 6f 72 6d 22 3e 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 77 2d Data Ascii: px_rgba(16,24,40,0.10),_0_20px_25px_-5px_rgba(16,24,40,0.10)] lg:hidden" type="button" aria-expanded="false" aria-controls="mobile-navigation"> <span class="w-4 h-0.5 bg-charcoal rounded-sm origin-bottom-right transition-transform"></span> <span class="w-
2024-09-27 09:25:24 UTC	16384	IN	Data Raw: 61 74 61 2d 73 74 79 6c 65 2d 77 69 64 74 68 3d 22 31 30 30 25 22 20 64 61 74 61 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 72 65 76 69 65 77 2d 6c 61 6e 67 75 61 67 65 73 3d 22 65 6e 22 20 64 61 74 61 2d 6e 6f 2d 72 65 76 69 65 77 73 3d 22 68 69 64 65 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 74 65 78 74 2d 63 65 6e 74 65 72 20 67 61 70 2d 33 2e 35 20 67 72 6f 77 20 73 68 72 69 6e 6b 2d 30 20 72 6f 75 6e 64 65 64 2d 32 78 6c 20 62 6f 72 64 65 72 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 5b 23 46 35 46 35 46 35 5d 20 70 2d 35 22 3e 20 3c 73 Data Ascii: ata-style-width="100%" data-theme="light" data-review-languages="en" data-no-reviews="hide"></div></div></div><div class="flex flex-col items-center justify-center text-center gap-3.5 grow shrink-0 rounded-2xl border border-solid border-[#F5F5F5] p-5"> <s
2024-09-27 09:25:24 UTC	16384	IN	Data Raw: 32 2e 30 31 2e 30 31 2e 32 2d 2e 31 2e 34 32 2d 2e 32 36 2c 33 2e 32 39 2d 32 2e 34 32 2c 37 2e 33 37 2d 34 2e 30 39 2c 31 31 2e 34 33 2d 34 2e 36 37 2c 31 2e 35 32 2d 2e 32 32 2c 32 2e 30 32 2d 2e 32 35 2c 34 2e 34 35 2d 2e 32 35 73 32 2e 39 34 2e 30 33 2c 34 2e 34 35 2e 32 35 63 34 2e 30 37 2e 35 39 2c 38 2e 31 35 2c 32 2e 32 35 2c 31 31 2e 34 33 2c 34 2e 36 37 2e 32 32 2e 31 36 2e 34 2e 32 38 2e 34 32 2e 32 36 2e 30 31 2d 2e 30 31 2d 2e 34 33 2d 32 2e 39 32 2d 2e 39 39 2d 36 2e 34 36 2d 31 2e 31 31 2d 37 2e 30 31 2d 31 2e 30 35 2d 36 2e 37 32 2d 31 2e 34 38 2d 37 2e 31 33 2d 2e 31 31 2d 2e 31 31 2d 2e 33 31 2d 2e 32 35 2d 2e 34 34 2d 2e 33 31 2d 2e 32 34 2d 2e 31 31 2d 2e 32 38 2d 2e 31 31 2d 31 33 2e 33 39 2d 2e 31 31 68 2d 31 33 2e 31 35 73 2d 2e 32 Data Ascii: 2.01.01.2-.1.42-.26,3.29-2.42,7.37-4.09,11.43-4.67,1.52-.22,2.02-.25,4.45-.25s2.94.03,4.45.25c4.07.59,8.15,2.25,11.43,4.67.22.16.4.28.42.26.01-.01-.43-2.92-.99-6.46-1.11-7.01-1.05-6.72-1.48-7.13-.11-.11-.31-.25-.44-.31-.24-.11-.28-.11-13.39-.11h-13.15s-.2
2024-09-27 09:25:24 UTC	16384	IN	Data Raw: 3e 20 3c 67 3e 20 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 33 30 32 32 37 2c 32 37 2e 31 33 39 36 35 68 2d 34 2e 37 33 33 34 6c 2d 31 2e 31 33 36 37 32 2c 33 2e 33 35 36 34 35 48 33 34 2e 34 32 37 32 37 6c 34 2e 34 38 33 34 2d 31 32 2e 34 31 38 68 32 2e 30 38 33 6c 34 2e 34 38 33 34 2c 31 32 2e 34 31 38 48 34 33 2e 34 33 38 5a 4d 33 38 2e 30 35 39 31 2c 32 35 2e 35 39 30 38 32 68 33 2e 37 35 32 6c 2d 31 2e 38 34 39 36 31 2d 35 2e 34 34 37 32 37 68 2d 2e 30 35 31 37 36 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 66 66 66 22 3e 3c 2f 70 61 74 68 3e 20 3c 70 61 74 68 20 64 3d 22 4d 35 35 2e 31 35 39 36 39 2c 32 35 2e 39 36 39 37 33 63 30 2c 32 2e 38 31 33 34 38 2d 31 2e 35 30 35 38 36 2c 34 2e 36 32 31 30 39 2d 33 2e 37 37 38 33 32 2c 34 2e 36 32 31 30 Data Ascii: > <g> <path d="M42.30227,27.13965h-4.7334l-1.13672,3.35645H34.42727l4.4834-12.418h2.083l4.4834,12.418H43.438ZM38.0591,25.59082h3.752l-1.84961-5.44727h-.05176Z" style="fill: #fff"></path> <path d="M55.15969,25.96973c0,2.81348-1.50586,4.62109-3.77832,4.6210
2024-09-27 09:25:24 UTC	16384	IN	Data Raw: 20 66 6c 65 78 2d 63 6f 6c 20 6d 61 78 2d 77 2d 5b 32 35 72 65 6d 5d 20 77 2d 66 75 6c 6c 20 62 6f 72 64 65 72 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 5b 23 46 35 46 35 46 35 5d 20 72 6f 75 6e 64 65 64 2d 78 6c 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 20 6c 67 3a 6d 61 78 2d 77 2d 6e 6f 6e 65 22 3e 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 65 79 67 6f 2e 63 6f 6d 2f 6c 69 66 65 73 74 79 6c 65 2f 63 6f 6d 6d 75 74 65 72 2d 63 6f 6e 66 75 73 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 20 68 2d 66 75 6c 6c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 2d 66 75 6c 6c 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 22 3e 20 3c 69 6d 67 20 77 69 64 74 68 3d 22 39 30 30 22 Data Ascii: flex-col max-w-[25rem] w-full border border-solid border-[#F5F5F5] rounded-xl overflow-hidden lg:max-w-none"> <a href="https://www.veygo.com/lifestyle/commuter-confusion/" class="flex flex-col h-full"><div class="w-full overflow-hidden"> <img width="900"

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 09:25:24 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=26450 Date: Fri, 27 Sep 2024 09:25:24 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 09:25:25 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=26395 Date: Fri, 27 Sep 2024 09:25:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 09:25:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:25 UTC	565	OUT	GET /wp-content/themes/veygo/dist/css/app.css HTTP/1.1 Host: www.veygo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.veygo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 09:25:25 UTC	1294	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 141068 Connection: close Date: Thu, 26 Sep 2024 19:32:35 GMT Last-Modified: Wed, 18 Sep 2024 08:49:00 GMT ETag: "f4d0cc7233028657354513730208548d" x-amz-server-side-encryption: AES256 x-amz-version-id: q.CVq8Rt3Gm9IfJ3qjn_5enWetVJdboq Accept-Ranges: bytes Server: Content-Security-Policy: frame-ancestors https://.veygo.com https://.preprod-veygo.com Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Expect-CT: max-age=86400 Permissions-Policy: accelerometer=(), camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: same-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=63072000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 db1cc9ceb7681bf2a56c0f22acac3a36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: nuZXpNnNIcx80bDJyTlXVerL-CjtvsumTKtwtP4ClApN1MSu_hDRpg== Age: 49971
2024-09-27 09:25:25 UTC	15090	IN	Data Raw: 2e 68 65 72 6f 7b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 20 32 35 35 20 32 35 35 2f 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 29 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 2e 34 33 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 68 65 72 6f 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 2e 38 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 72 65 6d 3b 74 65 78 74 2d 61 6c Data Ascii: .hero{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity));margin-bottom:1.25rem;padding-bottom:3.4375rem;padding-top:8rem;text-align:center}@media (min-width:768px){.hero{margin-bottom:2.25rem;padding-bottom:4.875rem;padding-top:7rem;text-al
2024-09-27 09:25:25 UTC	1294	IN	Data Raw: 62 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 37 22 7d 2e 66 61 2d 62 6f 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 63 22 7d 2e 66 61 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 64 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 64 65 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 62 37 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 65 36 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 38 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 72 65 61 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 61 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 Data Ascii: bone:before{content:"\f5d7"}.fa-bong:before{content:"\f55c"}.fa-book:before{content:"\f02d"}.fa-book-dead:before{content:"\f6b7"}.fa-book-medical:before{content:"\f7e6"}.fa-book-open:before{content:"\f518"}.fa-book-reader:before{content:"\f5da"}.fa-bookma
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: 34 61 22 7d 2e 66 61 2d 62 75 79 2d 6e 2d 6c 61 72 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 61 36 22 7d 2e 66 61 2d 62 75 79 73 65 6c 6c 61 64 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 64 22 7d 2e 66 61 2d 63 61 6c 63 75 6c 61 74 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 63 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 33 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 34 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 64 61 79 3a 62 Data Ascii: 4a"}.fa-buy-n-large:before{content:"\f8a6"}.fa-buysellads:before{content:"\f20d"}.fa-calculator:before{content:"\f1ec"}.fa-calendar:before{content:"\f133"}.fa-calendar-alt:before{content:"\f073"}.fa-calendar-check:before{content:"\f274"}.fa-calendar-day:b
2024-09-27 09:25:25 UTC	3028	IN	Data Raw: 61 2d 67 72 69 70 2d 6c 69 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 61 34 22 7d 2e 66 61 2d 67 72 69 70 2d 6c 69 6e 65 73 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 61 35 22 7d 2e 66 61 2d 67 72 69 70 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 65 22 7d 2e 66 61 2d 67 72 69 70 66 69 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 61 63 22 7d 2e 66 61 2d 67 72 75 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 61 64 22 7d 2e 66 61 2d 67 75 69 6c 64 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 65 22 7d 2e 66 61 2d 67 75 69 74 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: a-grip-lines:before{content:"\f7a4"}.fa-grip-lines-vertical:before{content:"\f7a5"}.fa-grip-vertical:before{content:"\f58e"}.fa-gripfire:before{content:"\f3ac"}.fa-grunt:before{content:"\f3ad"}.fa-guilded:before{content:"\e07e"}.fa-guitar:before{content:"
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 66 35 39 34 22 7d 2e 66 61 2d 68 6f 74 6a 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 31 22 7d 2e 66 61 2d 68 6f 75 72 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 34 22 7d 2e 66 61 2d 68 6f 75 72 67 6c 61 73 73 2d 65 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 33 22 7d 2e 66 61 2d 68 6f 75 72 67 6c 61 73 73 2d 68 61 6c 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 32 22 7d 2e 66 61 2d 68 6f 75 72 67 6c 61 73 73 2d 73 74 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 31 22 7d 2e 66 61 2d 68 6f 75 73 65 2d 64 61 6d 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 66 31 22 7d 2e 66 61 2d 68 6f 75 Data Ascii: nt:"\f594"}.fa-hotjar:before{content:"\f3b1"}.fa-hourglass:before{content:"\f254"}.fa-hourglass-end:before{content:"\f253"}.fa-hourglass-half:before{content:"\f252"}.fa-hourglass-start:before{content:"\f251"}.fa-house-damage:before{content:"\f6f1"}.fa-hou
2024-09-27 09:25:25 UTC	8949	IN	Data Raw: 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 38 22 7d 2e 66 61 2d 73 6d 69 6c 65 2d 62 65 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 62 38 22 7d 2e 66 61 2d 73 6d 69 6c 65 2d 77 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 64 61 22 7d 2e 66 61 2d 73 6d 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 35 66 22 7d 2e 66 61 2d 73 6d 6f 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 38 64 22 7d 2e 66 61 2d 73 6d 6f 6b 69 6e 67 2d 62 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 64 22 7d 2e 66 61 2d 73 6d 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 63 64 22 7d 2e 66 61 2d 73 6e 61 70 63 68 61 74 3a 62 65 66 Data Ascii: le:before{content:"\f118"}.fa-smile-beam:before{content:"\f5b8"}.fa-smile-wink:before{content:"\f4da"}.fa-smog:before{content:"\f75f"}.fa-smoking:before{content:"\f48d"}.fa-smoking-ban:before{content:"\f54d"}.fa-sms:before{content:"\f7cd"}.fa-snapchat:bef
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: 3a 22 5c 66 30 63 30 22 7d 2e 66 61 2d 75 73 65 72 73 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 30 39 22 7d 2e 66 61 2d 75 73 65 72 73 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 33 22 7d 2e 66 61 2d 75 73 70 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 65 31 22 7d 2e 66 61 2d 75 73 73 75 6e 6e 61 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 37 22 7d 2e 66 61 2d 75 74 65 6e 73 69 6c 2d 73 70 6f 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 65 35 22 7d 2e 66 61 2d 75 74 65 6e 73 69 6c 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 65 37 22 7d 2e 66 61 2d 76 61 61 64 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: :"\f0c0"}.fa-users-cog:before{content:"\f509"}.fa-users-slash:before{content:"\e073"}.fa-usps:before{content:"\f7e1"}.fa-ussunnah:before{content:"\f407"}.fa-utensil-spoon:before{content:"\f2e5"}.fa-utensils:before{content:"\f2e7"}.fa-vaadin:before{content
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: 65 6e 64 61 72 2e 61 6e 69 6d 61 74 65 2e 6f 70 65 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 70 46 61 64 65 49 6e 44 6f 77 6e 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 32 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 70 46 61 64 65 49 6e 44 6f 77 6e 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 32 2c 31 29 7d 2e 66 6c 61 74 70 69 63 6b 72 2d 63 61 6c 65 6e 64 61 72 2e 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 32 70 78 7d 2e 66 6c 61 74 70 69 63 6b 72 2d 63 61 6c 65 6e 64 61 72 2e 73 74 61 74 69 63 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 63 61 6c 63 28 31 Data Ascii: endar.animate.open{-webkit-animation:fpFadeInDown .3s cubic-bezier(.23,1,.32,1);animation:fpFadeInDown .3s cubic-bezier(.23,1,.32,1)}.flatpickr-calendar.inline{display:block;position:relative;top:2px}.flatpickr-calendar.static{position:absolute;top:calc(1
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: 6e 74 28 33 31 35 64 65 67 2c 23 62 64 37 62 62 30 2c 23 33 36 63 65 63 65 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 67 72 61 64 69 65 6e 74 2d 62 6c 75 65 3a 62 65 66 6f 72 65 2c 2e 67 72 61 64 69 65 6e 74 2d 70 69 6e 6b 3a 62 65 66 6f 72 65 2c 2e 67 72 61 64 69 65 6e 74 2d 70 75 72 70 6c 65 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 61 74 74 61 63 68 6d 65 6e 74 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 73 76 67 73 2f 6c 69 6e 65 73 2e 73 76 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b Data Ascii: nt(315deg,#bd7bb0,#36cece);position:relative}.gradient-blue:before,.gradient-pink:before,.gradient-purple:before{background-attachment:fixed;background-image:url(../svgs/lines.svg);background-position:50%;background-repeat:no-repeat;background-size:cover;
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: 62 67 2d 6f 70 61 63 69 74 79 29 29 7d 2e 62 67 2d 70 69 6e 6b 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 34 35 20 31 37 37 20 32 32 38 2f 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 7d 2e 62 67 2d 5c 5b 5c 23 46 42 46 42 46 43 5c 5d 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 31 20 32 35 31 20 32 35 32 2f 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 7d 2e 62 67 2d 77 68 69 74 65 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 20 32 35 35 20 32 35 35 2f 76 61 72 28 2d 2d 74 77 2d Data Ascii: bg-opacity))}.bg-pink{--tw-bg-opacity:1;background-color:rgb(245 177 228/var(--tw-bg-opacity))}.bg-\[\#FBFBFC\]{--tw-bg-opacity:1;background-color:rgb(251 251 252/var(--tw-bg-opacity))}.bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:25 UTC	613	OUT	GET /wp-content/uploads/aggregated/css/aggregated_single_b6577cf154655ca8855f1263f6d1e3e6.css HTTP/1.1 Host: www.veygo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.veygo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 09:25:25 UTC	1292	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 8315 Connection: close Date: Thu, 26 Sep 2024 19:31:26 GMT Last-Modified: Wed, 18 Sep 2024 08:55:11 GMT ETag: "df2ae4c11f65d51df9b28488cf29d6ad" x-amz-server-side-encryption: AES256 x-amz-version-id: zlIJ_5_e0YVYxc5J4I.pSYk4L1ZSDCJq Accept-Ranges: bytes Server: Content-Security-Policy: frame-ancestors https://.veygo.com https://.preprod-veygo.com Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Expect-CT: max-age=86400 Permissions-Policy: accelerometer=(), camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: same-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=63072000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 16aa5c15345b1c0756b83a5ae8ee765e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: ncoQChWztiSf_ti8oA_JUXPSq0EJQIRNhaGzXhk9l3FwVLZX7uDeaw== Age: 50039
2024-09-27 09:25:25 UTC	8315	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 70 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 70 2e 63 73 73 3f 73 3d 31 26 6b 3d 78 6a 6f 36 79 71 75 26 68 74 3d 74 6b 26 66 3d 33 32 38 39 37 2e 33 32 38 39 38 2e 33 32 38 39 39 2e 33 32 39 30 32 2e 33 32 39 30 33 2e 33 32 39 30 34 2e 33 37 33 36 33 2e 33 37 33 36 34 2e 33 37 33 36 35 2e 33 37 33 36 36 2e 33 37 33 36 37 2e 33 37 33 36 38 2e 33 37 33 36 39 2e 33 37 33 37 30 2e 33 37 33 37 31 2e 33 37 33 37 32 26 61 3d 37 39 39 31 35 33 38 26 61 70 70 3d 74 79 70 65 6b 69 74 26 65 3d 63 73 73 22 29 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 70 72 6f 78 69 6d 61 2d 73 6f 66 74 22 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 Data Ascii: @import url("https://p.typekit.net/p.css?s=1&k=xjo6yqu&ht=tk&f=32897.32898.32899.32902.32903.32904.37363.37364.37365.37366.37367.37368.37369.37370.37371.37372&a=7991538&app=typekit&e=css");@font-face{font-family:"proxima-soft";src:url("https://use.typekit

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:25 UTC	618	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: www.veygo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.veygo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.veygo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 09:25:25 UTC	1275	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 76764 Connection: close Date: Fri, 27 Sep 2024 09:25:26 GMT Last-Modified: Wed, 18 Sep 2024 08:48:47 GMT ETag: "f7307680c7fe85959f3ecf122493ea7d" x-amz-server-side-encryption: AES256 x-amz-version-id: o8BY8CgTxCtv9uw.pGXO75NYy_CIIDbK Accept-Ranges: bytes Server: Content-Security-Policy: frame-ancestors https://.veygo.com https://.preprod-veygo.com Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Expect-CT: max-age=86400 Permissions-Policy: accelerometer=(), camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: same-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=63072000 X-Cache: Miss from cloudfront Via: 1.1 d20f19c14113bb86116d01e6cb4e2844.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: NjiNtQbhUMqJeazdu0X9aRGY7_n3c2HJZ07E56ntKSCZmZefoswO-g==
2024-09-27 09:25:25 UTC	15109	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2b dc 00 0d 00 00 00 02 0b 94 00 01 2b 80 01 4b 85 e3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 8b 72 11 08 0a 87 bb 64 85 ed 1c 01 36 02 24 03 8e 30 0b 87 1a 00 04 20 05 8b 05 07 aa 6b 5b c9 9f 71 45 61 f7 01 2a 76 93 aa aa 6d 1e 70 47 bd 91 91 08 dd 0e 22 92 94 39 7a c2 1d f6 38 80 98 9b 3e fb ff ff ff 35 c9 42 c6 76 f7 c3 fb 8d 31 06 00 a8 aa 9a a5 95 05 c9 f0 98 8c 36 c7 cc 1d 15 47 5f 52 41 a2 8e ea 50 d3 38 d5 61 ec 32 72 9b 67 b4 95 93 1a 58 ac 75 f3 64 8a f7 34 3b fb 4c 4e c3 b0 1d 3c 05 e4 20 47 56 a4 a3 71 22 19 22 19 22 19 a2 92 ce 98 bd 81 0d 17 8c a7 74 a5 9b 21 12 5f 9d aa 21 8a c8 e4 34 bb 90 ed 3d 6a c8 3d 62 3f 71 a4 6c 68 67 da 75 80 07 1c 49 e1 45 cd f5 e1 Data Ascii: wOF2++K?FFTM`rd6$0 k[qEa*vmpG"9z8>5Bv16G_RAP8a2rgXud4;LN< GVq"""t!_!4=j=b?qlhguIE
2024-09-27 09:25:25 UTC	702	IN	Data Raw: fb c6 ce b0 c3 19 4c b9 e1 34 54 2f 40 93 77 4c e1 d4 66 57 9e de f0 22 e9 66 1e 4f 9c 8a 76 e5 4b 6a 91 43 ee 6a 55 e1 ef db 0c 64 7d 6f 69 de 42 cd 60 91 ff 92 83 69 a4 c8 73 1c e0 12 21 23 ac 9a a4 7f d8 1a 25 01 7e ba 4c 73 d3 c5 61 ec a8 b6 5a c3 9e b3 47 b7 47 ab 8d db 28 15 e8 d3 2d 52 58 18 70 e6 bd c1 c1 b9 b0 89 2e 34 51 10 42 0e 8e 05 cd df f1 6a f3 68 36 93 fc 57 1f bf f1 35 b1 f1 34 1c fd 5b 53 59 5e fc 55 3b b4 07 bc f5 80 dd 83 49 cc 6e 7e 38 e6 d9 77 b9 f5 13 63 de be 79 f1 e4 e8 07 92 fd 66 6f 1e cd 87 bc ff 7b fe 00 22 80 55 8e 33 a3 73 67 df 5d 75 6f 95 d6 47 87 13 14 ba 15 fe c1 8f d3 ff 14 82 63 3d cb be 17 81 77 14 97 3e 08 a8 99 75 48 4b b7 20 89 25 9c ce 1d e1 16 a1 70 ae be b4 3d 10 ae 5a 5d dd 8a 6f 8d 89 c0 c2 4f 6e 50 dd 8b 94 Data Ascii: L4T/@wLfW"fOvKjCjUd}oiB`is!#%~LsaZGG(-RXp.4QBjh6W54[SY^U;In~8wcyfo{"U3sg]uoGc=w>uHK %p=Z]oOnP
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: 3b 2a 56 ac dd 4a 6f 9e d3 13 b1 01 4f ef 4f 47 5b a7 a7 a5 de 5d e6 9b f0 b6 07 90 b2 ba b6 9e 58 fc c5 91 22 31 63 a6 4f d1 f2 2c 53 24 6b 40 42 cd f4 9f 94 4e 8f d9 75 bd 0d 37 33 ad 03 ac b4 ee 1c 50 23 e4 34 9e 26 20 ac c8 f2 56 01 54 d1 d0 e6 a8 9e 22 ce f4 86 2c 50 21 c6 20 48 4e 2a 2c de f6 e4 7d 7c a1 24 75 c0 58 b7 8a 82 e2 92 39 e7 a3 f7 be 85 b8 62 46 e1 0f 10 cf 21 c7 66 fb cb 2e ac f3 a3 bb cf a5 75 68 b4 1f ee 2d 3c 5b 61 7f 28 a1 83 67 e9 4e 8b dd aa 63 f0 ee 8f f1 d1 29 c9 25 6e 7c 25 13 4f e4 85 61 4e 22 6f d3 4e 62 d7 fd b1 a4 a0 57 d7 06 53 d7 d6 67 b0 04 ec fa 42 3d a8 6d 19 2b 26 f3 17 da 82 4c 01 e4 a6 3d b3 bf 37 0d 55 31 9d 55 97 06 7a 49 3a 8b b4 b4 9b 46 cf bf 74 be e0 99 b9 21 55 a8 7f 72 4d d9 34 e6 1b 73 37 54 b7 be 8b 8b f8 Data Ascii: ;VJoOOG[]X"1cO,S$k@BNu73P#4& VT",P! HN,}\|$uX9bF!f.uh-<[a(gNc)%n\|%OaN"oNbWSgB=m+&L=7U1UzI:Ft!UrM4s7T
2024-09-27 09:25:25 UTC	1024	IN	Data Raw: d8 96 6b 43 c4 cf a6 4a af 7d bc 05 b9 ae 16 5e fd 64 67 33 42 bc b1 6d f7 03 82 52 82 dc ec de c8 a4 0b d8 37 3f 18 57 e9 f4 75 71 13 86 ed e2 79 8a 7d 02 22 22 23 e6 f7 85 cc 1e fc 35 42 d4 b2 06 d0 27 45 77 25 74 c3 70 93 fc 59 54 2c 2c 16 25 0b 23 b0 4b 4c f0 91 12 f8 42 a8 b4 dc 34 94 73 fe 67 11 7e 37 38 13 e6 14 cd a3 cf db c8 a1 c9 01 c6 dc 4c 93 29 33 d3 18 10 96 4c de 8e 83 1c ca f2 e9 76 5c fe 2a 50 0c a7 3e ce 22 fc e7 dc 44 51 cf d8 cc 64 7e ec 9c 6f 2d ed 6a 50 7b aa 15 6b fa ac f3 1a 20 91 f8 8f 25 6a ca 3a 86 53 26 94 12 fb e5 22 50 c3 0e 38 86 a1 08 b2 c7 e9 22 3f e9 98 02 4c 14 48 d3 94 93 a9 54 0a 59 9d 2a a1 50 ec 1b 83 3f e0 c1 10 32 28 e0 8c 2b 5c ec ee 5d 1a 99 5c af 31 a7 46 fa 2c 73 8a 5c 21 8d 5c 3a 80 65 5f 09 f8 5b 0e 9b 56 f5 Data Ascii: kCJ}^dg3BmR7?Wuqy}""#5B'Ew%tpYT,,%#KLB4sg~78L)3Lv\P>"DQd~o-jP{k %j:S&"P8"?LHTYP?2(+\]\1F,s\!\:e_[V
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: a6 4a ef a0 7e 8f c4 04 e2 7e c1 0b bf 64 9a 06 21 5e 37 68 47 91 55 05 3b a8 ba e6 48 8c 1e cb 17 e8 9a 00 7a 42 ad a3 d3 0e 23 a6 60 af c4 b0 bf fd 71 75 2a 4b 37 90 f4 4e 3d ea d6 f4 dd 7b e9 fc f6 19 e3 d7 7e d9 6d 47 4c 99 d7 34 f2 43 0b a4 f2 75 3b ed f6 21 a1 c5 6d 59 c9 32 b7 16 b0 55 99 ab d7 77 3a ed 13 c2 47 a1 15 f7 97 33 3f 30 7f 8b 7f 31 33 34 b8 f5 f4 6e 36 fd 91 e5 1d cb 8f ea 75 7c 6e 07 cf 13 c0 73 cb 3a 96 85 49 bd 17 df 35 90 ca 74 43 a6 8b a9 81 ae 87 de d4 75 8a 19 ee 30 ec 23 16 77 d6 bd 39 44 8f 00 f8 3a f1 e2 bd f1 c4 fb 78 de 56 bc d3 e4 ac 31 c2 d4 31 19 9e 15 fc 90 68 f3 3a 02 6b 2e 6e 4f 58 33 eb 15 3d fc 30 88 ce b4 75 34 20 1a b9 06 e1 23 c4 72 c0 de cc 77 aa a0 f6 11 f6 e5 30 48 36 78 b8 b3 87 96 f0 86 80 46 78 50 2f f6 b8 Data Ascii: J~~d!^7hGU;HzB#`qu*K7N={~mGL4Cu;!mY2Uw:G3?0134n6u\|ns:I5tCu0#w9D:xV11h:k.nOX3=0u4 #rw0H6xFxP/
2024-09-27 09:25:25 UTC	3824	IN	Data Raw: 2b 15 00 42 40 65 58 52 ee 61 d4 da 45 ee 39 10 22 07 c3 08 71 7c 6c 8c 0b b6 c0 64 2c 82 fe 15 57 3e 9f 4b de e8 8a ca 42 10 68 d0 9a cb 8b 83 65 f6 87 d2 3d 67 7d 8f 8f 08 f1 38 7b 16 86 c6 78 81 68 d0 5b c4 36 47 02 a3 98 70 78 4e af a7 c1 08 b7 a8 c5 89 75 c1 5a 58 b1 98 eb a8 2a 39 0c 6c 5d 2b b9 2b 56 70 dd 99 fe 89 33 fc 45 8b 6d 33 16 39 6d 24 60 bc 71 ef 3e 6b 99 75 33 f8 4d 62 ba f4 00 fb d0 cd 3b e8 77 b7 6b 23 2c ae 52 fe eb de 28 a8 1e 42 ca c4 e9 f4 49 94 2d 10 4f 77 e4 da 1f 04 37 1c c7 e1 ee 71 01 ba 96 28 96 e8 c1 b6 ad d7 39 48 6a 14 f3 18 3c cc 72 fc bc 53 0a 33 6e 33 89 01 76 2f e0 3f dc ae 15 50 29 b3 88 1d fb 21 64 c2 18 2c e5 0d fc 22 b0 56 ba 57 0f 17 43 02 08 85 09 89 83 ac 77 a3 4b 69 3a 2b e6 0c 96 1b 15 a4 86 6c 2a 1a 5c 6f a8 Data Ascii: +B@eXRaE9"q\|ld,W>KBhe=g}8{xh[6GpxNuZX9l]++Vp3Em39m$`q>ku3Mb;wk#,R(BI-Ow7q(9Hj<rS3n3v/?P)!d,"VWCwKi:+l\o
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: b2 b8 e8 f7 05 a2 ac 51 e3 10 ac 5f 0c 40 9e e4 16 b8 a5 3c 31 e5 5a 6e c3 62 00 f0 ba 13 0a 6e d7 8f 2f 35 dd ef 7a 81 58 6c e9 fc db c7 fe a7 0e 5e 05 ad 16 b9 60 e7 65 95 fe 50 c6 4d a5 03 66 5d 34 aa 9c 4b 01 60 61 b3 b6 d1 b0 80 aa ec d2 26 82 6b 7d 00 3a 47 93 9f 04 a0 e7 a9 ae b3 c1 98 22 b1 40 4e 10 1c 63 0e c9 cf 3f 1f e9 3f 57 73 cc 73 a8 f7 4d a1 24 30 b6 c0 88 3e 61 b6 52 5e 38 a6 0b e9 75 9b 89 99 03 f9 23 69 31 ec 55 6f 82 02 ce a4 57 fc 84 d1 cb 96 77 74 76 fb f8 e7 4a 62 d7 c2 fc 37 97 15 09 4e 60 5f 02 38 74 f0 af 97 92 c4 49 d2 84 d2 0c ef e3 cb 49 dd 2e 27 d7 5c 1e 38 e8 bc 8d 44 0a cc 0c ff 25 5f 72 5f fc 64 fa 99 ea 73 0e 8f 9b 7c dc 46 85 25 f8 a1 49 1d 65 98 8c 6b 60 ef 8f f7 ef a6 97 31 97 39 0d f3 75 49 c8 8e cf 71 29 66 fe 16 57 Data Ascii: Q_@<1Znbn/5zXl^`ePMf]4K`a&k}:G"@Nc??WssM$0>aR^8u#i1UoWwtvJb7N`_8tII.'\8D%_r_ds\|F%Iek`19uIq)fW
2024-09-27 09:25:25 UTC	6953	IN	Data Raw: 9e e7 17 4f 54 ae d6 0a 2e 88 48 02 33 f2 07 c5 69 56 b3 f3 3b 05 a0 fd cf 0d 89 5e b9 40 83 10 e0 9e 62 26 82 0c 7a 74 45 01 5d 94 ea 9a e1 72 71 de 14 f5 f1 05 09 07 17 e7 a7 7a 7e 50 7d e3 ab 73 b3 80 11 3e 84 3a 26 c8 d4 16 49 28 cb 10 60 31 5e da 74 d2 10 b1 76 70 89 0e 0a 9b 97 00 4b 0e 12 0b 70 09 51 37 cf e2 04 06 8b e9 1d a7 a4 b9 c6 8f e4 40 97 28 b1 52 a9 22 c3 b2 7b 4a 46 cb 0d 68 81 ce 6e f6 8f a8 38 5b f8 98 12 b9 d6 12 eb b7 52 bd a0 14 9d 03 d6 94 db c8 6d 2e fe cf cf 34 71 eb cb 67 40 b0 ee 6a 5c 0c 4e 0f 90 84 64 f5 32 2a c1 97 f9 c7 54 76 5d a7 e7 bc c5 27 1e 17 e8 7c 7e bb 45 47 84 56 a5 3f eb b4 93 45 03 9d 17 63 b6 cb 28 75 c3 f9 0d af 74 e0 83 a6 de 48 be 39 29 68 01 dd 77 4e 6d 21 6f 5b 18 7c e7 df e0 51 74 5c c3 41 df 07 27 07 9d Data Ascii: OT.H3iV;^@b&ztE]rqz~P}s>:&I(`1^tvpKpQ7@(R"{JFhn8[Rm.4qg@j\Nd2*Tv]'\|~EGV?Ec(utH9)hwNm!o[\|Qt\A'

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:25 UTC	593	OUT	GET /wp-content/themes/veygo/css/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: www.veygo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.veygo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.veygo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 09:25:25 UTC	1275	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 77452 Connection: close Date: Fri, 27 Sep 2024 09:25:26 GMT Last-Modified: Wed, 18 Sep 2024 08:48:59 GMT ETag: "ffb23988351909f888077ad3ec003185" x-amz-server-side-encryption: AES256 x-amz-version-id: 8W_I_Tixz0RYjUC1ag95InrikOx5ENsf Accept-Ranges: bytes Server: Content-Security-Policy: frame-ancestors https://.veygo.com https://.preprod-veygo.com Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Expect-CT: max-age=86400 Permissions-Policy: accelerometer=(), camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: same-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=63072000 X-Cache: Miss from cloudfront Via: 1.1 da6955a1993e1118f32bcb48c6630c20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: 6SlDXviH668z9x4JypjvoTaZtr7X8VPxSAb8glKn8r3MtklD7q1vUA==
2024-09-27 09:25:25 UTC	15109	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2e 8c 00 0d 00 00 00 02 0d ac 00 01 2e 33 01 4b 02 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 8b 72 11 08 0a 87 c1 24 85 f1 62 01 36 02 24 03 8e 0a 0b 87 08 00 04 20 05 8b 05 07 a9 7b 5b 79 a1 71 84 e9 60 1a 58 ec e9 36 04 e0 74 9f aa 6d 33 b8 bb c9 74 9b bc c0 79 40 21 d1 9c d7 17 1c d7 3d 0e 60 c2 57 cf fe ff ff 5f 90 e0 7b 44 ce bb 5f 7d 3f a9 a4 2d 18 9b c1 18 91 69 94 1a 32 d9 56 cd 6a eb 9a 97 55 cb e4 b5 cf c5 fa 6e ab ba a5 06 ec ad 09 23 ac 9a b5 3b 1c 4f b3 be 82 34 02 8c 00 23 40 e7 76 d2 85 75 c0 61 c8 4a 49 be ed 67 74 75 33 55 08 84 68 42 29 b0 29 33 95 57 95 a4 d4 3c 0f ca f0 34 7e 82 46 74 45 4d 58 b3 a2 b4 1a e0 bf 4e 3c 97 1a f4 5b 25 1d 3f 78 f1 bb 17 25 Data Ascii: wOF2..3KM?FFTM`r$b6$ {[yq`X6tm3ty@!=`W_{D_}?-i2VjUn#;O4#@vuaJIgtu3UhB))3W<4~FtEMXN<[%?x%
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: c7 b5 d2 3c 40 d0 5c d4 b6 24 b6 c3 de 48 42 07 cf b2 ed 76 c8 5b 4e c0 f3 57 93 c3 13 92 4b dc f8 82 4c 32 56 14 06 39 89 bc 4d db 89 3d 1d f4 8b 65 dd 5c ee 4f dc 5e 9c c3 12 b0 e7 0b 71 d7 3d b9 d9 b1 2f cb 7c 9f cd c0 af 47 b2 c8 4d 9e af 2e 90 c1 d5 29 69 5a b5 69 0c 97 54 cb d4 da 4a 13 97 5e 3b 5f f0 fc e2 b0 19 aa 4b cd 46 b6 b1 d4 58 5c 8b c3 c6 33 b8 80 ef b9 fa b0 3e a4 b1 2c 8e 89 a0 69 40 50 94 1a e0 36 09 26 01 1e be 78 f3 21 80 61 af 5b bb c7 b5 6f 39 02 6c 80 bc 07 a5 81 6b c2 ca 4c c2 26 26 80 cb 83 3d 98 0b 78 ad a4 ce 9c d8 f0 02 b6 b4 ef 0b 99 e0 d8 97 41 07 de c7 4c 0c da 35 53 0e 88 54 6e 08 35 2a ad cc 51 0a 16 95 9d 33 68 48 85 a7 79 c5 12 02 2a 54 33 10 90 e4 2a 55 fc b9 95 29 2d 6e 8c 34 22 0d 9b 0b 49 5a 8d 52 b9 d5 6a 8c ad 8c Data Ascii: <@\$HBv[NWKL2V9M=e\O^q=/\|GM.)iZiTJ^;_KFX\3>,i@P6&x!a[o9lkL&&=xAL5STn5Q3hHyT3*U)-n4"IZRj
2024-09-27 09:25:25 UTC	10942	IN	Data Raw: 77 5a 6e 1c d9 96 bc 36 9e 62 03 a1 93 b1 54 94 d3 65 76 d7 c3 4d 7a 23 97 68 d5 9b b0 a9 2b e0 74 70 ea 30 fa 81 77 f1 04 12 35 3a c0 a9 54 df f8 76 62 b2 3e 41 fa d7 45 fd 05 72 ce 55 47 2e 24 19 64 5e 97 ef df 94 85 25 74 f0 90 eb 1f 0f 82 7f a0 c2 bd ed 7f a6 df 3d 3f 09 47 dc 10 ed 0c bd 79 03 81 c6 e8 6e a4 11 99 8c dc ed ba 31 86 a2 0c b1 c3 63 cb 92 f2 51 03 c2 40 e3 a4 6d d6 1b df 2a 18 63 01 2f e7 d9 e6 59 c1 86 b7 c0 de da 8a d3 d3 a2 84 a6 a9 ee 31 8a 54 94 9e 55 41 24 2d fa 2f 77 bd 22 0a 65 60 55 e4 6d 84 be 8f 9c e9 12 59 81 33 d0 a2 36 3f 66 86 18 13 37 22 91 f6 57 14 c6 0b a9 a1 3f f7 49 a6 6b 11 8c 3b 22 ee 08 74 5c d9 2e 9a be 39 0a e3 8d 08 a5 eb 9b 00 3d b1 2b b1 d3 41 8f 95 78 47 a5 0a df 26 9e 62 c7 e3 54 03 65 5f cf 09 97 a6 bf 3c Data Ascii: wZn6bTevMz#h+tp0w5:Tvb>AErUG.$d^%t=?Gyn1cQ@m*c/Y1TUA$-/w"e`UmY36?f7"W?Ik;"t\.9=+AxG&bTe_<
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: 49 be d9 cf 43 07 28 55 29 80 f0 f0 66 17 bb 17 b5 16 d8 02 be 3e c1 3e ed 71 75 28 f3 0f 2b 9c f0 f9 54 16 fd c3 b5 fa 6b c1 5e cf e1 49 66 99 c8 84 da 06 c5 83 6f 23 3d 3e c1 ba 19 78 75 b7 ad 8a ad 7b 8c 25 fa 68 dd 7d d5 e3 14 c8 07 5a 5b 01 62 ed fd 5e 04 1e b6 1b 8a 55 97 ba 2f 35 d0 ff f5 a5 a6 01 52 87 aa 1f 0d 4d 44 3c 04 51 b3 8b 8a 62 ec 45 c5 1b 5d 6c 8f 01 e9 0d c7 8a 0f 78 6e f5 fc 66 d8 d8 5f c0 ae 70 69 ae 72 5a 97 fd e7 6f 55 f8 56 b6 cb 6c df 7f 1a 5d 32 30 a7 e8 db b7 6a ec 1b 29 60 ad 74 8f 91 99 e4 a3 f5 ab bf ef d3 de 5d 26 3c 2c 09 06 45 67 c0 b5 71 d4 6a 72 01 41 6b 6c c6 89 8a 6e 39 3f 05 81 73 03 97 41 39 63 eb 05 82 ec e9 91 f4 4c 8b b5 3d 14 c6 93 35 8c 7e 6f e5 c0 b3 67 7f 06 85 bf 48 be 3e c9 4b d4 29 34 48 a8 71 59 99 20 09 Data Ascii: IC(U)f>>qu(+Tk^Ifo#=>xu{%h}Z[b^U/5RMD<QbE]lxnf_pirZoUVl]20j)`t]&<,EgqjrAkln9?sA9cL=5~ogH>K)4HqY
2024-09-27 09:25:25 UTC	16384	IN	Data Raw: 9b 9f 81 7c ae 5f 67 ce 68 2e 60 10 b3 a4 ea 05 85 c7 6d 34 2b 9b a6 41 20 6f 4c ca 95 43 b0 6c e1 bc 8b 42 da 62 75 28 6d 8e 2f 53 b7 e2 ad cc d0 28 d0 94 5b 54 94 9b 3b 80 ea 8d f6 31 5e 0a 78 8b 7d 0e 33 be 6c 1a d9 74 cb f5 fd 10 06 27 9f 98 50 a5 a3 ca 7f d1 8f 33 06 14 33 ea ea 66 28 86 b0 12 38 ba 3e 50 7a 6d a5 41 84 49 0b 44 64 22 4d f2 e9 98 04 8e 0d c2 4d 80 ba 23 2e 08 f5 f7 01 44 3d f1 8c 22 4c 57 30 ac 21 b2 05 8f 03 f3 27 4d 5d 36 64 2c f3 74 0e e7 7b 92 a5 1b 55 b5 e7 6b a2 ad 12 ac 33 db c2 f3 f5 59 fb b2 9a d6 7d 4c 82 b3 2a 07 64 d0 17 ef 7f ff 19 18 5a 83 7d 4a 42 cc 85 be 4b e9 28 8b 72 d8 61 43 e8 4c 36 8d 1e ef ef 37 27 e2 0d f8 67 4b b5 99 df 8b e4 b3 d7 0f ce 02 f8 10 f4 fa db 1c b8 79 d1 24 f4 e4 66 9b ec a9 07 b0 b3 f4 da b4 3b Data Ascii: \|_gh.`m4+A oLClBbu(m/S([T;1^x}3lt'P33f(8>PzmAIDd"MM#.D="LW0!'M]6d,t{Uk3Y}L*dZ}JBK(raCL67'gKy$f;
2024-09-27 09:25:25 UTC	2249	IN	Data Raw: fa f7 b7 1c f5 9f 5f d3 0c dd a3 87 1d 33 9a 0f ce cb b4 93 95 7a 71 74 29 b3 bc ee 31 29 6c 5e 9f d0 47 92 8f 81 47 e0 dd 17 a5 dd 95 ce 61 d3 0b 60 1e 12 db 7c 84 0d e6 e6 da e7 a4 b7 83 44 d3 fb 70 8e f2 51 3b e0 3e 15 8e 6d e7 7c bc 7a 74 9e 75 7d 42 1b f7 59 30 16 3d 14 f6 f5 dc 74 a4 24 7d 75 32 2e 74 7e d9 77 7b 88 67 71 4e f9 df 0d 83 c1 82 c4 19 b5 64 4f a0 57 58 29 2f b8 6e de 21 05 36 43 6b a3 c7 67 0d 47 35 16 45 ad 4e 0d 99 70 c7 03 ab 88 eb ac 15 ce 29 46 b6 db a1 dc ba 2c 2a fe f1 e3 28 92 7d 66 0d 09 53 f0 1f 79 40 4a 1c 58 8e da 20 2f cb cd 18 d1 1b 17 a8 b7 72 f7 a1 ee 7e 8e e8 47 a1 e4 2e 95 3d 51 97 68 a5 1c 70 3f 8e 97 b2 3d 41 fb 75 5f ee ac 7d 84 89 f1 e3 1c 91 9e 4c d9 48 6d 0c 3d 72 0c 89 3b 12 9b cd 19 5d d6 88 82 dc 5f f1 e0 18 Data Ascii: _3zqt)1)l^GGa`\|DpQ;>m\|ztu}BY0=t$}u2.t~w{gqNdOWX)/n!6CkgG5ENp)F,*(}fSy@JX /r~G.=Qhp?=Au_}LHm=r;]_

Timestamp	Bytes transferred	Direction	Data
2024-09-27 09:25:26 UTC	627	OUT	GET /wp-content/uploads/2024/02/desktop_hero_1_75-scaled.webp HTTP/1.1 Host: www.veygo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.veygo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 09:25:26 UTC	1273	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 245162 Connection: close Date: Thu, 26 Sep 2024 13:55:00 GMT Last-Modified: Wed, 18 Sep 2024 08:54:55 GMT ETag: "0a1e56a2920a8a640045b35ce7eea226" x-amz-server-side-encryption: AES256 x-amz-version-id: t0xaKEDP_MIdKYvSsnYSS8lyoD5H0smH Accept-Ranges: bytes Server: Content-Security-Policy: frame-ancestors https://.veygo.com https://.preprod-veygo.com Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Expect-CT: max-age=86400 Permissions-Policy: accelerometer=(), camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: same-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=63072000 X-Cache: Hit from cloudfront Via: 1.1 7b314c2b827b3a655861e27775634208.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: ug6hg6XYas83YHGk1a3HXY53xRz8696pWod-9-Rr4E00TUb32YE--Q== Age: 70226
2024-09-27 09:25:26 UTC	16384	IN	Data Raw: 52 49 46 46 a2 bd 03 00 57 45 42 50 56 50 38 20 96 bd 03 00 d0 e7 1a 9d 01 2a 00 0a 35 05 3e 49 22 8d 44 a4 23 21 94 e9 b5 2c 40 04 84 b3 a5 a8 e5 8f 3f bd 52 be 88 41 e2 c3 57 d3 75 19 6d 2c cf 12 05 de 4b df 47 f5 f7 de ec 2e 47 3c ed f7 9e 27 5e b3 fe cf d1 af d1 ff fd cf 0a be eb ff 7b a8 cf 3b ff ea b9 f3 fa 41 fe b5 cf 7b 8e c6 26 b6 a8 f0 5b 8b f3 bc e0 38 ef d2 0f d7 69 65 9f 1f 51 e7 ff ec 7d e5 3f f8 7b 32 f1 9a f5 2d b6 53 eb 5f 1d 72 e0 67 fe ef ff 7f 48 df 2f fe c3 ff 8f 87 7f 9b 7d c3 ee 47 f2 f7 e5 ff f9 6c e5 fb f7 fa fe 6a ff 59 f9 e7 fe df d4 7f 16 7e 84 ff f1 ea 8f ef 6f fc 7e a3 5f d9 ff ff ca d8 15 7f 05 ff 1b ff e7 fc ff 50 7f ef fd e0 f7 5b f7 2f fc 9f ff bf ec 7c 21 7f 6b ff 89 fb 8f ef d7 9b 6f fc fd 53 7f eb 7f f7 f5 5a ff ab ff Data Ascii: RIFFWEBPVP8 *5>I"D#!,@?RAWum,KG.G<'^{;A{&[8ieQ}?{2-S_rgH/}GljY~o~_P[/\|!koSZ
2024-09-27 09:25:27 UTC	16384	IN	Data Raw: aa fe 7d fe 09 a3 f9 c7 b4 00 db b5 99 f5 08 21 ad b0 1f 33 2e 92 a4 0d 32 b3 94 6c 77 37 c1 e7 00 e4 f8 f3 41 0b 4b 10 6e 5b f5 75 ac e1 64 44 ae 33 31 4b 79 45 ee 59 0d ae 5f a7 63 af 8d 12 04 b7 41 d0 58 0d 78 5d 4b c1 a4 b9 6e 33 7d 02 74 2a dc 52 72 ac 5d 20 8c 28 70 3f ff 0f ef d1 66 6c 33 76 32 10 59 27 9f f2 af 69 bf 89 62 86 7d cb 79 71 1e ed e7 4c 59 16 19 8b b0 c3 66 b4 84 d8 f2 20 07 8f 0b b1 9d d6 2f 74 b7 71 e8 0b 2d c9 c7 c1 78 68 2c ab 45 c9 18 e3 3b a2 ea 61 38 0f e7 8b e8 7d e3 95 0c ee 0b e2 f0 01 7d 61 b0 e2 0d b3 85 11 20 91 69 09 db 68 1a 1b 88 47 4e 8b 8c 39 e8 65 94 ef ea 47 a0 26 80 ba 15 ef 4c 43 26 d4 e5 28 52 1e 9b c3 13 9c 53 5f 12 5e 54 14 c4 a7 75 33 07 24 50 42 3a 9d b5 76 46 c2 db 5b 8e ac 4f d4 63 fe 0a 86 0c 3d a2 7f 37 Data Ascii: }!3.2lw7AKn[udD31KyEY_cAXx]Kn3}t*Rr] (p?fl3v2Y'ib}yqLYf /tq-xh,E;a8}}a ihGN9eG&LC&(RS_^Tu3$PB:vF[Oc=7
2024-09-27 09:25:27 UTC	16384	IN	Data Raw: 77 6b 45 6e ad e0 c7 67 11 37 16 37 93 a0 e5 a1 4b 9f 71 ca c3 4a 15 77 23 ed ae 98 6c 19 7c a5 76 5a 9c 60 dd 8c 73 d4 eb 49 7d b5 e0 85 a7 7a 6b b1 28 b0 ba c9 77 10 27 a6 c2 2e 33 7b f9 d0 fd 72 3b 65 cf 8f 17 64 2c 07 58 fa 51 0e 9a 11 c7 10 8f d0 97 f2 44 3f 94 f0 ea e1 a0 4b 0c 38 eb 08 05 7b e1 a0 f2 7c c6 4a d9 bf a1 4f 69 3b 9a db 7a 29 1c ec 14 b0 72 fa 28 c7 61 99 e5 75 ec 84 09 e7 ae ee be 7f f7 16 41 b6 fe 2b ef 54 73 b0 40 f4 4e 21 52 73 c2 6a 71 36 e4 22 7c 6c c0 c7 8e 1d 86 88 29 5f 2e 19 d2 1b f9 c5 80 63 70 59 f3 6c ef 17 4e 2b 77 6b 67 1f b0 16 11 5f 49 7d 1c 5a c2 ee cf 3b e1 2c d2 eb e4 bd 38 c3 07 a7 7f 97 96 08 03 e7 8f ee 99 a7 34 1a 5c 9d 91 1b 0d 93 46 02 a3 04 bf cf 9b 3a 1d 30 b4 4a 88 b0 97 48 7e 54 c0 e7 4f 54 f5 f6 48 90 9d Data Ascii: wkEng77KqJw#l\|vZ`sI}zk(w'.3{r;ed,XQD?K8{\|JOi;z)r(auA+Ts@N!Rsjq6"\|l)_.cpYlN+wkg_I}Z;,84\F:0JH~TOTH
2024-09-27 09:25:27 UTC	16384	IN	Data Raw: 09 0a 2a be 11 a0 48 18 92 94 7e 6a b7 45 96 09 9c c9 e3 2a 4f c1 89 f2 25 28 d0 29 8d 28 b0 e2 16 02 37 3d 11 6a 56 6a ca 69 6b 53 f9 65 1e 5c 27 36 4e 9f 38 b4 0d 6b eb 4f 03 05 0a f8 75 e3 39 45 cc 6b e6 0b 10 12 df 60 e6 d5 b3 fb ec 84 56 d9 52 b9 3d 9e 3c 63 98 2e 79 36 5e 93 6f c1 8f 87 6f b5 15 a1 56 b9 1f 42 04 71 83 3d 34 43 dd 83 71 af fc a8 1b 97 a8 65 b9 0c a4 d2 a5 67 17 60 8d 1c 33 90 99 c2 4b 2c 7b a2 e4 12 26 be 56 5a 64 90 d4 55 eb a1 c9 e3 c2 5a 8d 6c 6d 12 4c 8f 07 d3 97 11 f6 6e f9 fa ae 7a 61 ba a6 0a 2a 41 22 6f eb 84 2c e4 52 fa fd 13 1c 7f 34 6e 3e e7 15 5f 9c b9 fa 7e 78 0d 3f 16 06 33 75 78 6d 73 ed 2f 4c 02 85 e0 df b6 78 eb a6 74 4b 1c e8 c7 8a 79 fb 83 27 16 7c 7c a6 27 98 da c6 e1 40 ad e2 6b 40 7c b9 0c f9 4d 60 6f 17 03 18 Data Ascii: H~jEO%()(7=jVjikSe\'6N8kOu9Ek`VR=<c.y6^ooVBq=4Cqeg`3K,{&VZdUZlmLnza*A"o,R4n>_~x?3uxms/LxtKy'\|\|'@k@\|M`o
2024-09-27 09:25:27 UTC	16384	IN	Data Raw: 77 d5 98 d9 d6 11 48 c7 ea 68 3d 54 82 5e 1d 0c a9 a0 7f 71 aa e3 70 3f 0d 81 c9 50 06 fe 5c 56 6f 7a c3 c0 b1 e5 a9 2c c7 d4 93 99 45 9e eb 7e a5 0a 64 d3 74 47 85 f7 c9 80 c4 fe 32 58 f2 d1 0d c0 d7 be f5 27 15 34 21 4b df eb 2d 28 e9 bc b7 c2 f2 d9 04 94 34 1a d2 aa c8 f5 95 b7 e9 ff da 52 bb 11 a2 2f 18 5d 58 ca 5f f1 f0 1d 5a 14 04 5d 66 6b 81 44 92 0a 2f fd 66 7b 42 1c b6 a5 8f 7b a4 a9 20 6f 1c 45 cf 00 1c 4d 97 5c fa 44 89 88 97 b6 22 67 e7 e5 6a 02 4a 95 72 30 2e 54 87 41 eb 70 74 84 44 c0 bd 5c 2d 2f 67 2d 10 ec f4 8c 29 8e 94 73 a7 4e 99 28 eb da 2a 42 98 b6 4d 20 c5 15 71 9a 3f 99 b1 4d ff 43 b8 e7 c9 b2 8d a3 a1 54 a1 d8 03 3d 6b cf 53 3b f2 54 e5 a0 d8 c8 50 eb 0c c1 7c 20 37 98 66 69 9f 7a e6 11 d3 94 c5 4d 8c 23 de 8a 9a 48 df 4d c1 12 66 Data Ascii: wHh=T^qp?P\Voz,E~dtG2X'4!K-(4R/]X_Z]fkD/f{B{ oEM\D"gjJr0.TAptD\-/g-)sN(*BM q?MCT=kS;TP\| 7fizM#HMf
2024-09-27 09:25:27 UTC	16384	IN	Data Raw: e8 3d dd 91 d9 31 78 44 69 3e e5 6b 54 93 c2 e0 60 44 88 71 3b 33 d3 1f 1c 80 ef 80 bc 0d 63 d7 a7 29 a2 8e 74 ed 48 07 d4 41 97 fa 33 7d 53 c2 bd 0b 8a 9d 20 7c c6 e6 ba 85 54 fd 8a aa 59 f6 38 87 43 e0 49 7f 03 32 5d 4d 69 a5 7d c7 ed db 12 ba a2 78 65 63 e2 6d f8 0a 49 6a 2d 19 7c 62 86 f5 13 28 aa c9 3b d9 9a 0b 4c 70 6d d5 3d d5 a4 e7 46 81 26 e0 c5 30 86 d5 43 c8 d1 f4 66 74 9a 66 55 bf 11 9b 03 2c d6 7a 3a 51 3c 77 6b ce 38 bd 86 fb 56 08 31 38 4d c1 bf b8 77 0c 1b 86 eb 53 eb 39 57 6e 9e d2 ed be 79 7c 01 c2 30 d3 2c dd e5 05 89 e3 28 12 33 41 9f 7d 33 4d 6d f2 fc bd 64 58 bb 7b 51 91 ea 29 6b 29 22 e1 53 74 9e 94 9c 22 d7 0a b4 8e 7e 9c 46 a4 21 4c 6d b5 a2 17 0a 49 9d 68 b2 c7 94 10 cd 34 e5 23 a3 1c 22 bc ff bb 78 45 0d ee ca 45 4c 53 07 59 5a Data Ascii: =1xDi>kT`Dq;3c)tHA3}S \|TY8CI2]Mi}xecmIj-\|b(;Lpm=F&0CftfU,z:Q<wk8V18MwS9Wny\|0,(3A}3MmdX{Q)k)"St"~F!LmIh4#"xEELSYZ
2024-09-27 09:25:27 UTC	16384	IN	Data Raw: 33 19 1c 20 f4 2a 3d 63 8e b5 53 3d 5e fc a1 42 9a f6 69 ca 51 20 09 c7 e6 57 dd 4a d9 96 59 db 9b 7e bb 11 6a 67 76 e6 c6 a4 5a aa 0e 08 82 3d 80 83 f2 9d b9 42 06 8f 30 d5 a1 42 51 79 95 85 2c ae 6e 1e d1 09 e2 cb 49 e6 61 0f 56 d7 88 75 a6 9d 89 57 5e 69 e8 db a0 2e cb 6c ea ee 29 72 cb 01 9c 7f 85 e5 47 3b 89 c6 69 cd b7 ad df 6c d0 6f f2 a5 21 d4 be a4 98 2d c3 48 7b a9 9c 96 ac dd ae d7 0b 52 3a 19 ef 70 bb db e2 8f fb 98 df 03 a1 ca c2 35 7a 19 28 9e 8f e7 2f 57 7a bb 54 50 d0 6c a9 d2 ce 47 fa f6 a6 a2 bf 26 fb 32 63 f9 4d 36 4d ab 7d 37 8e c8 e8 8a 45 f2 e4 ce 85 5d 00 62 df 51 51 2a 8d 43 3c 4e 71 d6 e2 b7 6c 0c 9c ac 72 3e 0d 9d c8 b4 02 28 eb 22 24 66 84 48 29 7e 13 ca 90 1d 15 98 67 3e 63 dd c6 30 da b7 e4 72 42 b2 0b b8 89 ee 73 9e b3 13 01 Data Ascii: 3 =cS=^BiQ WJY~jgvZ=B0BQy,nIaVuW^i.l)rG;ilo!-H{R:p5z(/WzTPlG&2cM6M}7E]bQQC<Nqlr>("$fH)~g>c0rBs
2024-09-27 09:25:27 UTC	14506	IN	Data Raw: 01 81 ad fd 5c e1 8b 6e d5 62 8c 12 87 56 23 ed 8f 05 57 b5 cc 01 29 94 9f 4f 24 0f 30 2b f3 3e 58 7c a0 b1 19 a7 93 fe 41 ad 3c 71 5b 93 97 33 a1 59 7c b9 a8 cf 17 ad 2b 5e 9c 4c 99 c2 c1 4a c2 ff 8f df 86 13 1d 4e fa 6d c8 39 e5 15 f6 15 ca 0f 66 cb 0a 35 1e a3 70 c5 62 8b bd ef a4 39 f8 bf cf 4e 0b ea 97 8b 14 10 58 fc 8d ec 90 cb df 37 02 57 ae 28 1a f3 2b 07 87 bb 63 14 bf e7 d6 fb 21 17 b1 e5 2b 03 49 cc 0a b9 6a 12 6e bf 80 25 cb 7c 60 26 70 d4 ae 1c ac d8 44 8b 6a a1 6e 85 96 5d 75 62 9b 89 61 18 97 3f 97 96 18 ae e2 72 9e 69 11 9e 1f 84 b7 2f b1 e1 e9 18 de 20 38 a9 fe 8f b2 27 01 5d 76 6d 3b 45 bc 2d 9f e4 da 8d 7c b7 51 01 a3 14 2f 76 7f f0 68 0c 6d fe 52 ec 68 e5 3c 6a da dd 00 e3 38 c0 09 d9 f1 34 b6 da c2 c1 9b 39 0d 8a 62 8d b1 76 26 21 c4 Data Ascii: \nbV#W)O$0+>X\|A<q[3Y\|+^LJNm9f5pb9NX7W(+c!+Ijn%\|`&pDjn]uba?ri/ 8']vm;E-\|Q/vhmRh<j849bv&!
2024-09-27 09:25:27 UTC	16384	IN	Data Raw: b6 fb 4e f4 69 4e 1d 75 67 0d d9 9d 41 11 d3 a5 28 6b c0 4f 44 67 7a 6d 6b a4 df 49 f1 86 e4 27 6c 58 48 2a c2 11 98 8b 0e 23 26 d5 53 28 cb 82 11 f6 d3 87 bd e5 04 4e 81 10 d9 04 3f 64 a7 3e a2 df 85 46 3c cc 4c 24 ea c7 8f cf 41 c5 4c 86 8a 28 14 23 26 bc ce 81 55 f9 20 73 e3 18 c6 03 b4 3c 25 aa 5a e7 ab c6 dc aa bd 2a 25 e3 b9 21 13 bb a4 f6 f8 d2 f6 80 d5 ab a8 d6 34 92 af 17 67 62 c7 6c 73 16 81 df f4 a9 b8 1a fd 27 8f 54 95 bd 8b 0a 78 34 82 18 24 c5 85 86 2c 13 b1 85 2d 01 af d3 5c c9 71 aa 3a 9b 81 8a bc 3c 0b d9 e3 43 2e 89 1a 1e 84 b9 02 9a de 49 ed c5 e6 82 c6 4a 3a aa 88 c0 80 ce ee 1c e1 09 31 7a 05 07 db 6f ec 63 49 e8 d6 0b 67 8d d7 20 4a dc af 4e 14 98 4d 06 68 5f 4a cd a8 9f 66 e5 83 0b 1f 39 cc 1d 5c 3e 5c 67 d4 02 1f be ab 8c 04 ea fe Data Ascii: NiNugA(kODgzmkI'lXH#&S(N?d>F<L$AL(#&U s<%Z%!4gbls'Tx4$,-\q:<C.IJ:1zocIg JNMh_Jf9\>\g
2024-09-27 09:25:27 UTC	16384	IN	Data Raw: 33 b5 fb 9e bd 23 02 5a 4e 29 d9 61 d4 0c 1d 61 73 44 03 aa eb 54 68 f1 ec 47 5b b9 59 6c 45 be 4b 86 b8 33 f4 ed d6 d1 07 c9 54 9d 9e c7 cc 09 26 72 03 05 63 19 51 ae 41 5d d9 c6 41 c7 5f 05 2f d0 1f da f6 4c 00 c1 c1 4d 76 b4 2d 38 f1 45 c4 4f 85 0d 21 9c 91 a7 04 e3 25 60 92 ee 39 c4 fe ae a7 21 27 d8 ec df 9a ef 52 9c 72 a2 93 09 4f 97 fe 0a 86 9a 46 80 65 ef b5 3b 41 a8 cb 5e 3b 14 7d 18 27 ea 61 b7 04 91 b2 47 f7 e5 83 f6 9e b4 4d 5e 43 7f aa 29 b9 f3 5f 7b ef d2 00 65 b7 f8 dd 49 df 93 4c 9a 8d 4b 1a 75 c0 86 e1 e5 b9 74 dc 3e ed 58 d4 b7 d0 ea 79 65 b0 5f 11 43 46 be 11 7c 17 4c fc 41 38 ed 44 4d 35 13 dc 25 95 c7 35 66 2a 53 b4 8e 8b 17 4f 84 78 72 79 45 61 a0 f1 19 1f d3 45 da cc 33 95 67 93 29 d8 33 b0 b7 83 10 e5 75 3e fc e0 bb c6 82 f0 e7 5f Data Ascii: 3#ZN)aasDThG[YlEK3T&rcQA]A_/LMv-8EO!%`9!'RrOFe;A^;}'aGM^C)_{eILKut>Xye_CF\|LA8DM5%5f*SOxryEaE3g)3u>_